last executing test programs: 6.330419709s ago: executing program 0 (id=11287): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) 6.18862724s ago: executing program 0 (id=11290): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket(0x1e, 0x805, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x1, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r4, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) 5.612470264s ago: executing program 4 (id=11296): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 5.509819934s ago: executing program 0 (id=11298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 5.225635423s ago: executing program 4 (id=11300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd6, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) 5.016271502s ago: executing program 1 (id=11301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffffff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000002400)="800000800000210ee7decd7a0000", 0xe, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x3}, 0x14) 4.582123674s ago: executing program 0 (id=11303): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) 4.468535961s ago: executing program 4 (id=11305): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2400c8d0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.17799575s ago: executing program 4 (id=11308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x9, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) 4.17712195s ago: executing program 1 (id=11309): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="05031400d3fc1c0000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.176130711s ago: executing program 3 (id=11310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.598099721s ago: executing program 1 (id=11312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, &(0x7f0000000180)}}], 0x1, 0x20080058) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) 3.593844731s ago: executing program 4 (id=11313): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x3) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 3.407846804s ago: executing program 1 (id=11314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 3.293670807s ago: executing program 3 (id=11315): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) 3.06775377s ago: executing program 4 (id=11316): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 2.932139883s ago: executing program 1 (id=11318): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) 2.684720408s ago: executing program 1 (id=11319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 2.681814864s ago: executing program 0 (id=11320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r1, 0x111, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x4, @private2, 0x7}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="e51e0599f5974e9fd35dc0d49703102de1eac64dfd3bea4fa77eb765426029", 0x1f}, {0x0}], 0x2, &(0x7f00000002c0)}}], 0x1, 0x800) 2.536654821s ago: executing program 0 (id=11321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 2.325421085s ago: executing program 3 (id=11322): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000011c0)="d1", 0x1}], 0x1}, 0x404c0c4) recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) 2.183672987s ago: executing program 3 (id=11323): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(0x4) 2.079451564s ago: executing program 3 (id=11324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 670.110554ms ago: executing program 3 (id=11326): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) 520.560505ms ago: executing program 2 (id=11327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 455.77799ms ago: executing program 2 (id=11328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={r3, r2, 0x25, 0x2, @val=@uprobe_multi={&(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x100000000, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000840)=r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0x0, 0x0}, 0x10) 308.452786ms ago: executing program 2 (id=11329): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x26, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0xd6, 0x0, &(0x7f0000000200)=""/214, 0x40, 0x0, 0x13, 0x4f, &(0x7f0000000140)="bd5eaa2edd2d2781ba6b2ad4c9e8876956cc7b", &(0x7f0000000300)="bf30d685f67e9c05d82bfc823f94734dd05c598b6bc542a8f16e5787e73f8df443db040e2226f576c9b05386d4153abf4022380f61e1c3653ec00b684b2e4aa8ccef437189ea0e678ec343f937670c", 0x2, 0x0, 0xc}, 0x50) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 285.022373ms ago: executing program 2 (id=11330): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 143.081316ms ago: executing program 2 (id=11331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 0s ago: executing program 2 (id=11332): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) kernel console output (not intermixed with test programs): pe 2 has an invalid length. [ 332.465130][T19119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6305'. [ 333.251716][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6320'. [ 333.412519][T19158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6323'. [ 333.575774][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6327'. [ 334.115253][T19202] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6343'. [ 334.623582][T19237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.007924][T19263] netlink: 'syz.0.6372': attribute type 11 has an invalid length. [ 335.020053][T19263] netlink: 'syz.0.6372': attribute type 4 has an invalid length. [ 336.371402][T19341] __nla_validate_parse: 4 callbacks suppressed [ 336.371425][T19341] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6410'. [ 336.534742][T19353] netlink: 'syz.3.6415': attribute type 2 has an invalid length. [ 336.563326][T19353] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6415'. [ 336.668350][T19361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6420'. [ 336.761066][T19365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6422'. [ 336.803451][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6423'. [ 336.975652][T19381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6430'. [ 337.474934][T19413] netlink: 'syz.1.6446': attribute type 3 has an invalid length. [ 337.523424][T19413] netlink: 'syz.1.6446': attribute type 1 has an invalid length. [ 337.562567][T19413] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6446'. [ 337.589268][T19419] netlink: 'syz.4.6449': attribute type 2 has an invalid length. [ 337.891777][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6457'. [ 337.920331][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6457'. [ 338.252400][T19463] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6471'. [ 339.157187][T19522] netlink: 'syz.0.6500': attribute type 1 has an invalid length. [ 339.173300][T19522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.590885][T19551] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 340.229269][T19582] vlan2: entered allmulticast mode [ 340.234463][T19582] gretap0: entered allmulticast mode [ 340.293827][T19587] pimreg3: entered allmulticast mode [ 340.721487][T19610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.507571][T19660] netlink: 'syz.4.6566': attribute type 2 has an invalid length. [ 341.827484][T19682] __nla_validate_parse: 1 callbacks suppressed [ 341.827508][T19682] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6578'. [ 342.328929][T19705] xt_HMARK: proto mask must be zero with L3 mode [ 342.373872][T19710] netlink: 272 bytes leftover after parsing attributes in process `syz.2.6592'. [ 342.887328][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.101777][T19755] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6613'. [ 343.173047][T19755] xt_policy: neither incoming nor outgoing policy selected [ 343.328738][T19772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6622'. [ 343.429655][T19774] veth3: entered allmulticast mode [ 343.481849][T19782] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6626'. [ 343.536764][T19784] netlink: 'syz.2.6627': attribute type 11 has an invalid length. [ 343.557762][T19784] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.6627'. [ 343.627765][T19790] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6628'. [ 343.759841][T19798] netlink: 'syz.0.6635': attribute type 13 has an invalid length. [ 343.773484][T19798] veth0_macvtap: left promiscuous mode [ 343.797763][T19798] macvtap0: entered allmulticast mode [ 343.818157][T19798] macvtap0: refused to change device tx_queue_len [ 343.905696][T19807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6638'. [ 343.989060][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6640'. [ 343.998784][T19811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6640'. [ 344.713212][T19847] netlink: 'syz.1.6658': attribute type 3 has an invalid length. [ 345.372771][T19880] tipc: Enabling of bearer rejected, failed to enable media [ 345.892536][T19910] netlink: 'syz.2.6689': attribute type 1 has an invalid length. [ 345.923929][T19910] netlink: 'syz.2.6689': attribute type 2 has an invalid length. [ 345.945994][T19910] netlink: 'syz.2.6689': attribute type 1 has an invalid length. [ 346.176361][T19924] IPVS: length: 8 != 1152 [ 346.711309][T19962] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 347.284113][T19994] xt_l2tp: v2 tid > 0xffff: 1114244 [ 347.293476][T19995] xt_l2tp: invalid flags combination: 0 [ 347.655910][T20019] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 348.337117][T20060] __nla_validate_parse: 4 callbacks suppressed [ 348.337138][T20060] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6763'. [ 348.590480][T20072] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.646532][T20072] team0: Device macvlan2 is already an upper device of the team interface [ 348.661148][T20076] netlink: 'syz.2.6772': attribute type 1 has an invalid length. [ 348.670622][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6772'. [ 348.704095][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6772'. [ 348.734922][T20076] netlink: 'syz.2.6772': attribute type 2 has an invalid length. [ 348.756826][T20076] netlink: 'syz.2.6772': attribute type 2 has an invalid length. [ 348.767275][T20076] netlink: 'syz.2.6772': attribute type 2 has an invalid length. [ 349.102592][T20102] lo: entered allmulticast mode [ 349.112090][T20104] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6785'. [ 349.126522][T20102] lo: left allmulticast mode [ 349.287416][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6790'. [ 350.313575][T20169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6816'. [ 350.648065][T20189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.974122][T20201] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 350.981557][T20201] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 351.432241][T20224] netlink: 'syz.3.6839': attribute type 29 has an invalid length. [ 351.888794][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6853'. [ 352.046485][T20263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6860'. [ 352.133411][T20270] netlink: 'syz.3.6864': attribute type 1 has an invalid length. [ 352.152247][T20270] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6864'. [ 352.208420][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6865'. [ 353.222805][T20329] wireguard0: entered promiscuous mode [ 353.239659][T20329] wireguard0: entered allmulticast mode [ 353.308345][T20329] team0: Port device wireguard0 added [ 353.632611][T20356] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 353.760714][T20367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.852186][T20372] __nla_validate_parse: 3 callbacks suppressed [ 353.852209][T20372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6913'. [ 353.946428][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6915'. [ 354.204225][T20394] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6924'. [ 354.225400][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6924'. [ 354.421481][T20409] netlink: 'syz.4.6931': attribute type 12 has an invalid length. [ 354.482827][T20409] bond2: option primary_reselect: invalid value (255) [ 354.492497][T20409] bond2 (unregistering): Released all slaves [ 354.883441][T20439] netlink: 'syz.2.6944': attribute type 4 has an invalid length. [ 354.896586][T20439] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6944'. [ 355.565884][T20482] netlink: 'syz.2.6962': attribute type 62 has an invalid length. [ 355.905481][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6973'. [ 356.009782][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 356.082028][T20513] netlink: 'syz.4.6977': attribute type 3 has an invalid length. [ 356.556382][T20531] "syz.3.6987" (20531) uses obsolete ecb(arc4) skcipher [ 357.228107][T20593] xt_policy: too many policy elements [ 358.043650][T20627] vlan1: entered allmulticast mode [ 358.060496][T20627] veth0_vlan: entered allmulticast mode [ 358.765428][T20648] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7038'. [ 358.917377][T20657] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7044'. [ 359.040739][T20664] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7047'. [ 359.063618][T20664] netlink: 'syz.4.7047': attribute type 9 has an invalid length. [ 359.197332][T20676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7052'. [ 359.220210][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7052'. [ 359.231392][T20676] netlink: 'syz.4.7052': attribute type 14 has an invalid length. [ 359.243166][T20676] netlink: 'syz.4.7052': attribute type 13 has an invalid length. [ 359.794005][T20708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7064'. [ 359.811219][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7067'. [ 359.821555][T20710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7067'. [ 360.132611][T20725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7074'. [ 360.209947][T20727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7075'. [ 360.220105][T20727] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7075'. [ 360.231267][T20727] netlink: 'syz.4.7075': attribute type 6 has an invalid length. [ 360.239957][T20727] netlink: 'syz.4.7075': attribute type 5 has an invalid length. [ 360.257858][T20707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 360.322187][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.341262][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.368940][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.390140][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.669785][T20747] sctp: [Deprecated]: syz.4.7085 (pid 20747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.669785][T20747] Use struct sctp_sack_info instead [ 361.566604][T20802] sctp: [Deprecated]: syz.2.7113 (pid 20802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.566604][T20802] Use struct sctp_sack_info instead [ 361.932673][T20827] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 362.352707][T20856] netlink: 'syz.1.7138': attribute type 51 has an invalid length. [ 362.749469][T20874] netlink: 'syz.1.7145': attribute type 10 has an invalid length. [ 362.801591][T20874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.843111][T20874] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 363.420388][T20908] netlink: 'syz.2.7162': attribute type 14 has an invalid length. [ 363.602827][T20917] netlink: 'syz.2.7166': attribute type 2 has an invalid length. [ 364.235601][T20950] __nla_validate_parse: 5 callbacks suppressed [ 364.235624][T20950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7182'. [ 364.701261][T20976] netlink: 'syz.0.7195': attribute type 83 has an invalid length. [ 364.982310][T20994] netlink: 'syz.0.7204': attribute type 1 has an invalid length. [ 365.006477][T20994] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7204'. [ 365.020568][T20997] netem: change failed [ 365.029580][T20994] netlink: 'syz.0.7204': attribute type 1 has an invalid length. [ 365.038164][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7204'. [ 365.125716][T21003] netlink: 'syz.0.7209': attribute type 4 has an invalid length. [ 365.209456][T21010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7210'. [ 365.222004][T21008] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7211'. [ 365.542053][T21027] netem: change failed [ 365.545544][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7220'. [ 365.562584][T21030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7220'. [ 365.884336][T21052] netlink: 54 bytes leftover after parsing attributes in process `syz.1.7230'. [ 365.893868][T21052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7230'. [ 366.452368][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7246'. [ 367.682977][ T29] audit: type=1804 audit(1775012012.601:2): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7282" name="/newroot/1456/cgroup.controllers" dev="tmpfs" ino=7310 res=1 errno=0 [ 367.733883][ T29] audit: type=1800 audit(1775012012.631:3): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7282" name="cgroup.controllers" dev="tmpfs" ino=7310 res=0 errno=0 [ 367.837671][T21170] netlink: 'syz.1.7284': attribute type 1 has an invalid length. [ 367.855914][T21170] netlink: 'syz.1.7284': attribute type 7 has an invalid length. [ 367.863927][T21170] netlink: 'syz.1.7284': attribute type 8 has an invalid length. [ 367.873396][T21170] NCSI netlink: No device for ifindex 65584 [ 368.560392][T21202] netlink: 'syz.0.7297': attribute type 11 has an invalid length. [ 368.685713][T21206] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 368.691828][T21206] syzkaller1: linktype set to 823 [ 369.483859][T21256] __nla_validate_parse: 8 callbacks suppressed [ 369.483889][T21256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7323'. [ 369.524494][T21256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7323'. [ 370.267465][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7345'. [ 371.044116][T21357] netlink: 'syz.2.7370': attribute type 5 has an invalid length. [ 371.423887][T21380] netlink: 766 bytes leftover after parsing attributes in process `syz.3.7381'. [ 372.029593][T21415] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 372.307815][T21433] netlink: 'syz.3.7406': attribute type 4 has an invalid length. [ 372.393142][T21441] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7411'. [ 372.429180][T21442] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7410'. [ 372.465120][T21442] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7410'. [ 372.863658][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7424'. [ 372.897887][T21470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7424'. [ 373.232372][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7434'. [ 373.345834][T21497] ip6gre0: Master is either lo or non-ether device [ 374.001331][T21544] netem: incorrect ge model size [ 374.040830][T21544] netem: change failed [ 374.175931][T21551] nbd0: detected capacity change from 0 to 127 [ 374.194418][ T5831] block nbd0: Receive control failed (result -32) [ 374.220501][T21557] block nbd0: Dead connection, failed to find a fallback [ 374.297300][T21557] block nbd0: shutting down sockets [ 374.303042][T21557] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.355510][T21557] Buffer I/O error on dev nbd0, logical block 0, async page read [ 374.363427][T21557] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.415462][T21557] Buffer I/O error on dev nbd0, logical block 1, async page read [ 374.423316][T21557] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.473023][T21557] Buffer I/O error on dev nbd0, logical block 2, async page read [ 374.526189][T21557] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.582135][T21557] Buffer I/O error on dev nbd0, logical block 3, async page read [ 374.615290][T21557] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.668812][T21557] Buffer I/O error on dev nbd0, logical block 0, async page read [ 374.714345][T21557] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.772017][T21557] Buffer I/O error on dev nbd0, logical block 1, async page read [ 374.814192][T21557] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.854198][T21557] Buffer I/O error on dev nbd0, logical block 2, async page read [ 374.884877][T21557] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.921944][T21557] Buffer I/O error on dev nbd0, logical block 3, async page read [ 374.941527][T21557] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.968808][T21557] Buffer I/O error on dev nbd0, logical block 0, async page read [ 374.981116][T21557] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 374.993765][T21557] Buffer I/O error on dev nbd0, logical block 1, async page read [ 375.020461][T21557] ldm_validate_partition_table(): Disk read failed. [ 375.056661][T21557] Dev nbd0: unable to read RDB block 0 [ 375.062874][T21557] nbd0: unable to read partition table [ 375.083899][T21557] ldm_validate_partition_table(): Disk read failed. [ 375.110531][T21557] Dev nbd0: unable to read RDB block 0 [ 375.136350][T21557] nbd0: unable to read partition table [ 375.204846][T21585] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 375.267944][T21555] syz.2.7459 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 375.356435][T21555] CPU: 0 UID: 0 PID: 21555 Comm: syz.2.7459 Not tainted syzkaller #0 PREEMPT(full) [ 375.356466][T21555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 375.356478][T21555] Call Trace: [ 375.356486][T21555] [ 375.356495][T21555] dump_stack_lvl+0xe8/0x150 [ 375.356530][T21555] dump_header+0xd3/0x4c0 [ 375.356560][T21555] oom_kill_process+0x3ab/0x970 [ 375.356587][T21555] out_of_memory+0x106c/0x1410 [ 375.356608][T21555] ? percpu_ref_put+0x19/0x180 [ 375.356634][T21555] ? __pfx___mutex_lock+0x10/0x10 [ 375.356670][T21555] ? __pfx_out_of_memory+0x10/0x10 [ 375.356689][T21555] ? do_raw_spin_unlock+0xf5/0x210 [ 375.356723][T21555] try_charge_memcg+0xc53/0x1560 [ 375.356751][T21555] ? __lock_acquire+0x6b5/0x2cf0 [ 375.356794][T21555] ? __pfx_try_charge_memcg+0x10/0x10 [ 375.356815][T21555] ? xa_load+0x60/0x210 [ 375.356852][T21555] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 375.356893][T21555] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 375.356922][T21555] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 375.356951][T21555] __swap_cache_prepare_and_add+0x52a/0x700 [ 375.357005][T21555] swap_cache_alloc_folio+0xf1/0x240 [ 375.357040][T21555] swap_cluster_readahead+0x369/0x690 [ 375.357078][T21555] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 375.357125][T21555] ? get_vma_policy+0x27b/0x3c0 [ 375.357155][T21555] swapin_readahead+0x196/0xc50 [ 375.357201][T21555] ? __pfx_swapin_readahead+0x10/0x10 [ 375.357233][T21555] ? swap_table_get+0x1e/0x260 [ 375.357262][T21555] ? swap_table_get+0x1e/0x260 [ 375.357287][T21555] ? swap_table_get+0x1e/0x260 [ 375.357316][T21555] ? swap_table_get+0x216/0x260 [ 375.357347][T21555] ? swap_cache_get_folio+0x513/0x520 [ 375.357385][T21555] do_swap_page+0x56f/0x5a20 [ 375.357441][T21555] ? do_swap_page+0x127/0x5a20 [ 375.357468][T21555] ? __pfx_do_swap_page+0x10/0x10 [ 375.357494][T21555] ? __pte_offset_map+0x1ae/0x240 [ 375.357519][T21555] ? pte_offset_map_rw_nolock+0xea/0x160 [ 375.357542][T21555] handle_mm_fault+0x12d2/0x3310 [ 375.357590][T21555] ? handle_mm_fault+0xee/0x3310 [ 375.357630][T21555] ? __pfx_handle_mm_fault+0x10/0x10 [ 375.357658][T21555] ? lock_vma_under_rcu+0x45a/0x500 [ 375.357712][T21555] do_user_addr_fault+0xa73/0x1340 [ 375.357748][T21555] ? rcu_is_watching+0x15/0xb0 [ 375.357777][T21555] ? trace_page_fault_user+0x84/0x210 [ 375.357808][T21555] exc_page_fault+0x6a/0xc0 [ 375.357833][T21555] asm_exc_page_fault+0x26/0x30 [ 375.357853][T21555] RIP: 0033:0x7fb154c6a1a1 [ 375.357882][T21555] Code: ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d fe b4 ed 00 e8 03 00 00 48 8d 1d ff bd 3a 00 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f [ 375.357899][T21555] RSP: 002b:00007ffd254ce5a0 EFLAGS: 00010206 [ 375.357918][T21555] RAX: 000000000005b82b RBX: 00007fb155015fa0 RCX: 000000000005b4f0 [ 375.357932][T21555] RDX: 000000000000033b RSI: 00007ffd254ce580 RDI: 00000000000003e8 [ 375.357946][T21555] RBP: 00007fb155017da0 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 375.357959][T21555] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000005b891 [ 375.357973][T21555] R13: 00007fb15501609c R14: 000000000005b62b R15: 00007ffd254ce6a0 [ 375.358008][T21555] [ 375.358016][T21555] memory: usage 307200kB, limit 307200kB, failcnt 652 [ 375.705074][T21555] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 375.713045][T21555] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 375.735499][T21555] Memory cgroup stats for /syz2: [ 375.735793][T21555] cache 0 [ 375.743900][T21555] rss 0 [ 375.765084][T21555] rss_huge 0 [ 375.768362][T21555] shmem 0 [ 375.771325][T21555] mapped_file 0 [ 375.774813][T21555] dirty 0 [ 375.805151][T21555] writeback 0 [ 375.809150][T21555] workingset_refault_anon 14 [ 375.813770][T21555] workingset_refault_file 7 [ 375.844284][T21555] swap 184320 [ 375.860165][T21555] swapcached 200704 [ 375.864037][T21555] pgpgin 65037 [ 375.878117][T21555] pgpgout 65033 [ 375.915138][T21555] pgfault 159924 [ 375.918749][T21555] pgmajfault 12 [ 375.922235][T21555] inactive_anon 0 [ 375.951117][T21555] active_anon 16384 [ 375.975124][T21555] inactive_file 0 [ 375.978944][T21555] active_file 0 [ 376.005905][T21555] unevictable 0 [ 376.009996][T21555] hierarchical_memory_limit 314572800 [ 376.035182][T21555] hierarchical_memsw_limit 9223372036854771712 [ 376.041487][T21555] total_cache 0 [ 376.066870][T21555] total_rss 0 [ 376.070213][T21555] total_rss_huge 0 [ 376.073947][T21555] total_shmem 0 [ 376.105121][T21555] total_mapped_file 0 [ 376.109162][T21555] total_dirty 0 [ 376.135141][T21555] total_writeback 0 [ 376.139012][T21555] total_workingset_refault_anon 14 [ 376.144151][T21555] total_workingset_refault_file 7 [ 376.176264][T21555] total_swap 184320 [ 376.180146][T21555] total_swapcached 200704 [ 376.184495][T21555] total_pgpgin 65037 [ 376.225467][T21555] total_pgpgout 65033 [ 376.229511][T21555] total_pgfault 159924 [ 376.233610][T21555] total_pgmajfault 12 [ 376.275161][T21555] total_inactive_anon 0 [ 376.279393][T21555] total_active_anon 16384 [ 376.283851][T21555] total_inactive_file 0 [ 376.325642][T21555] total_active_file 0 [ 376.329695][T21555] total_unevictable 0 [ 376.333712][T21555] anon_cost 0 [ 376.375162][T21555] file_cost 0 [ 376.378511][T21555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7459,pid=21555,uid=0 [ 376.449494][T21555] Memory cgroup out of memory: Killed process 21555 (syz.2.7459) total-vm:104336kB, anon-rss:1236kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 376.645233][T21620] nbd1: detected capacity change from 0 to 63 [ 376.671504][ T5829] block nbd1: Receive control failed (result -32) [ 376.681482][ T5831] block nbd1: Receive control failed (result -32) [ 376.703897][T21557] block nbd1: Send control failed (result -32) [ 376.745298][T21557] block nbd1: Request send failed, requeueing [ 376.758203][T21630] __nla_validate_parse: 4 callbacks suppressed [ 376.758223][T21630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7491'. [ 376.773963][ T25] block nbd1: Dead connection, failed to find a fallback [ 376.782331][ T25] block nbd1: shutting down sockets [ 376.789727][T21557] ldm_validate_partition_table(): Disk read failed. [ 376.800121][T21557] Dev nbd1: unable to read RDB block 0 [ 376.805939][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.811667][T21630] xfrm0: entered promiscuous mode [ 376.819689][T21557] nbd1: unable to read partition table [ 376.838703][T21557] ldm_validate_partition_table(): Disk read failed. [ 376.852762][T21557] Dev nbd1: unable to read RDB block 0 [ 376.859195][T21557] nbd1: unable to read partition table [ 376.880888][T21630] xfrm0: entered allmulticast mode [ 376.893659][T21630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7491'. [ 377.839253][T21671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7509'. [ 378.282050][T21688] tipc: Started in network mode [ 378.307959][T21688] tipc: Node identity ac14140f, cluster identity 4711 [ 378.335340][T21688] tipc: New replicast peer: 255.255.255.255 [ 378.342154][T21688] tipc: Enabled bearer , priority 10 [ 378.352587][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7519'. [ 378.734639][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.247603][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7539'. [ 379.347691][ T5886] tipc: Node number set to 2886997007 [ 379.422296][T21736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7541'. [ 379.976276][T21762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7553'. [ 380.208968][T21776] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7560'. [ 380.400503][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7566'. [ 380.785538][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7579'. [ 381.421997][T21857] tap0: tun_chr_ioctl cmd 2148553947 [ 381.755124][T21875] veth0_to_team: entered allmulticast mode [ 382.121340][T21895] netlink: 'syz.4.7617': attribute type 33 has an invalid length. [ 382.279639][T21895] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 382.309616][T21895] bond2 (unregistering): Released all slaves [ 382.891928][T21930] __nla_validate_parse: 1 callbacks suppressed [ 382.891950][T21930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7634'. [ 383.278105][T21953] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.7644'. [ 383.621721][T21977] veth0: entered promiscuous mode [ 383.631952][T21976] veth0: left promiscuous mode [ 383.687310][T21983] netlink: 'syz.0.7658': attribute type 12 has an invalid length. [ 383.721320][ T5829] block nbd2: Receive control failed (result -32) [ 383.966004][T21996] h: entered promiscuous mode [ 384.111011][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7669'. [ 384.274802][T22018] netlink: 'syz.3.7675': attribute type 1 has an invalid length. [ 384.283099][T22018] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7675'. [ 384.293625][T22018] netlink: 'syz.3.7675': attribute type 1 has an invalid length. [ 384.303353][T22018] netlink: 'syz.3.7675': attribute type 8 has an invalid length. [ 384.347114][T22018] netlink: 582 bytes leftover after parsing attributes in process `syz.3.7675'. [ 384.385252][T22018] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7675'. [ 384.529583][T22030] netlink: 'syz.4.7682': attribute type 4 has an invalid length. [ 384.547440][T22032] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7681'. [ 384.718022][T22046] netlink: 'syz.2.7688': attribute type 1 has an invalid length. [ 384.763068][T22046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7688'. [ 384.840278][T22052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7690'. [ 385.015429][T22061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7696'. [ 385.591184][T22101] netlink: 'syz.1.7714': attribute type 3 has an invalid length. [ 386.061194][T22132] netlink: 'syz.4.7728': attribute type 83 has an invalid length. [ 388.132835][T22260] __nla_validate_parse: 8 callbacks suppressed [ 388.132856][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7790'. [ 388.221329][T22260] vlan2: entered allmulticast mode [ 388.239532][T22260] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 388.328060][T22271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7795'. [ 388.524621][T22281] xt_hashlimit: size too large, truncated to 1048576 [ 388.579129][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7802'. [ 388.611165][T22290] –: renamed from vxcan1 [ 388.789942][T22297] blkio.reset_stats is deprecated [ 388.981423][T22309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7810'. [ 389.422769][T22330] tap0: tun_chr_ioctl cmd 1074025678 [ 389.437639][T22330] tap0: group set to 0 [ 389.554060][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7828'. [ 389.956306][T22363] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.964701][T22363] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.279225][T22386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7850'. [ 390.327373][T22389] netlink: zone id is out of range [ 390.332551][T22389] netlink: zone id is out of range [ 390.369928][T22382] netlink: set zone limit has 4 unknown bytes [ 390.460291][T22395] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7855'. [ 390.843988][T22421] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7865'. [ 390.880036][T22421] netlink: 'syz.1.7865': attribute type 1 has an invalid length. [ 392.062417][T22490] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7898'. [ 392.234482][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7903'. [ 392.262912][T22502] bridge_slave_0: entered allmulticast mode [ 392.478642][T22520] netem: change failed [ 393.598957][T22594] veth0_to_bridge: entered promiscuous mode [ 393.616519][T22590] veth0_to_bridge: left promiscuous mode [ 393.674114][T22598] __nla_validate_parse: 7 callbacks suppressed [ 393.674145][T22598] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7950'. [ 393.940906][T22614] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7957'. [ 394.270719][T22633] netlink: 'syz.3.7966': attribute type 2 has an invalid length. [ 395.331878][T22694] bond5: entered promiscuous mode [ 395.619803][T22711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8003'. [ 395.840058][T22713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8004'. [ 395.862960][T22713] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8004'. [ 396.321515][T22739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8016'. [ 396.511356][T22748] netlink: 'syz.0.8020': attribute type 3 has an invalid length. [ 396.632484][T22754] veth0_macvtap: entered promiscuous mode [ 396.642095][T22754] macvtap1: entered allmulticast mode [ 396.648488][T22754] veth0_macvtap: entered allmulticast mode [ 396.768438][T22764] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.8028'. [ 396.967625][T22774] sctp: [Deprecated]: syz.1.8032 (pid 22774) Use of int in maxseg socket option. [ 396.967625][T22774] Use struct sctp_assoc_value instead [ 397.387835][T22799] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8046'. [ 397.416431][T22799] netlink: 'syz.1.8046': attribute type 2 has an invalid length. [ 397.887562][T22832] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8060'. [ 398.047556][T22841] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8064'. [ 398.700017][T22881] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 399.301136][T22917] bridge0: port 1(syz_tun) entered blocking state [ 399.320023][T22917] bridge0: port 1(syz_tun) entered disabled state [ 399.355320][T22917] syz_tun: entered allmulticast mode [ 399.362784][T22917] syz_tun: entered promiscuous mode [ 399.544107][T22936] __nla_validate_parse: 3 callbacks suppressed [ 399.544126][T22936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8108'. [ 399.683067][T22944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8111'. [ 400.089241][T22968] block nbd0: Unsupported socket: should be TCP or UNIX. [ 400.302942][T22981] netlink: 'syz.1.8128': attribute type 4 has an invalid length. [ 400.372487][T22984] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8131'. [ 400.425910][T22986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8133'. [ 400.837736][T23013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8144'. [ 401.583013][T23057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8163'. [ 401.749810][T23064] block nbd3: Unsupported socket: should be TCP or UNIX. [ 401.788814][T23069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8170'. [ 401.810600][T23069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8170'. [ 402.394383][T23110] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8188'. [ 402.528216][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8190'. [ 402.937296][T23137] netlink: 'syz.0.8200': attribute type 83 has an invalid length. [ 404.297416][T23206] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 404.644442][T23225] netlink: 'syz.3.8241': attribute type 5 has an invalid length. [ 405.122998][T23256] tipc: Started in network mode [ 405.140882][T23256] tipc: Node identity 0300000000000000c593be39, cluster identity 4711 [ 406.045270][T23313] __nla_validate_parse: 4 callbacks suppressed [ 406.045378][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8283'. [ 406.204711][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8287'. [ 406.310910][T23328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8290'. [ 406.608726][T23344] netem: unknown loss type 0 [ 406.623904][T23344] netem: change failed [ 406.708893][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8301'. [ 406.738499][T23350] netlink: 'syz.1.8301': attribute type 30 has an invalid length. [ 406.750997][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8301'. [ 407.415923][T23394] netlink: 'syz.1.8321': attribute type 2 has an invalid length. [ 407.437850][T23394] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8321'. [ 408.339965][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8343'. [ 409.066838][T23469] netlink: 'syz.3.8358': attribute type 1 has an invalid length. [ 409.114053][T23469] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8358'. [ 409.142261][T23469] netlink: 'syz.3.8358': attribute type 1 has an invalid length. [ 409.168584][T23469] netlink: 'syz.3.8358': attribute type 8 has an invalid length. [ 409.185277][T23469] netlink: 582 bytes leftover after parsing attributes in process `syz.3.8358'. [ 409.611018][T23505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8376'. [ 410.245246][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 410.731981][T23580] netlink: 'syz.1.8410': attribute type 4 has an invalid length. [ 410.841484][T23587] netlink: 'syz.3.8412': attribute type 19 has an invalid length. [ 410.899370][T23589] A link change request failed with some changes committed already. Interface 0¾x9ÿ may have been left with an inconsistent configuration, please check. [ 411.128648][T23599] __nla_validate_parse: 3 callbacks suppressed [ 411.128705][T23599] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8419'. [ 411.868862][T23634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8436'. [ 412.000324][T23640] netlink: 'syz.3.8439': attribute type 9 has an invalid length. [ 412.110742][T23646] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8442'. [ 412.480530][T23667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8450'. [ 412.509678][T23667] block nbd3: Unsupported socket: should be TCP or UNIX. [ 413.590065][T23737] netlink: 'syz.0.8481': attribute type 83 has an invalid length. [ 413.731206][T23744] netlink: 'syz.0.8486': attribute type 30 has an invalid length. [ 413.945473][T23756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8491'. [ 414.029097][T23761] IPv6: Can't replace route, no match found [ 414.036542][T23761] IPv6: Can't replace route, no match found [ 414.166717][T23772] netlink: 'syz.3.8499': attribute type 21 has an invalid length. [ 414.185393][T23772] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8499'. [ 414.194524][T23772] netlink: 'syz.3.8499': attribute type 4 has an invalid length. [ 414.228304][T23772] netlink: 'syz.3.8499': attribute type 5 has an invalid length. [ 414.256306][T23778] netlink: 'syz.3.8499': attribute type 21 has an invalid length. [ 414.274541][T23772] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8499'. [ 414.302092][T23778] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8499'. [ 414.363041][T23778] netlink: 'syz.3.8499': attribute type 4 has an invalid length. [ 414.371306][T23778] netlink: 'syz.3.8499': attribute type 5 has an invalid length. [ 414.380218][T23778] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8499'. [ 414.842094][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8514'. [ 415.121676][T23819] netlink: 'syz.4.8520': attribute type 3 has an invalid length. [ 415.165174][T23819] netlink: 'syz.4.8520': attribute type 3 has an invalid length. [ 415.212674][T23824] netlink: 'syz.0.8522': attribute type 83 has an invalid length. [ 416.194821][T23876] __nla_validate_parse: 2 callbacks suppressed [ 416.194843][T23876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8543'. [ 416.319364][T23880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8545'. [ 416.920339][T23913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8560'. [ 416.946026][T23913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8560'. [ 416.961743][T23913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8560'. [ 417.200435][T23926] netlink: 284 bytes leftover after parsing attributes in process `syz.0.8566'. [ 418.135252][T23954] veth0: entered promiscuous mode [ 418.150662][T23953] veth0: left promiscuous mode [ 418.478498][T23972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.109657][T24003] sctp: [Deprecated]: syz.3.8604 (pid 24003) Use of int in max_burst socket option deprecated. [ 419.109657][T24003] Use struct sctp_assoc_value instead [ 419.186619][T24008] netlink: 'syz.4.8606': attribute type 4 has an invalid length. [ 420.084626][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8634'. [ 420.206290][T24076] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 420.317951][T24083] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8641'. [ 420.329186][T24083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8641'. [ 420.750738][T24111] netlink: 'syz.4.8654': attribute type 1 has an invalid length. [ 420.764311][T24111] netlink: 'syz.4.8654': attribute type 3 has an invalid length. [ 420.775799][T24111] netlink: 'syz.4.8654': attribute type 7 has an invalid length. [ 420.784013][T24111] netlink: 'syz.4.8654': attribute type 8 has an invalid length. [ 420.792740][T24111] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8654'. [ 420.802404][T24111] NCSI netlink: No device for ifindex 131092 [ 421.658621][T24161] veth1_macvtap: left promiscuous mode [ 422.006080][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.124248][T24183] __nla_validate_parse: 1 callbacks suppressed [ 422.124272][T24183] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8688'. [ 422.269419][T24191] netlink: 'syz.4.8690': attribute type 1 has an invalid length. [ 422.565825][T24207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8700'. [ 422.583228][T24209] netlink: 'syz.4.8702': attribute type 17 has an invalid length. [ 422.589355][T24207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8700'. [ 422.605773][T24209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8702'. [ 422.614965][T24209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8702'. [ 422.672712][T24209] gretap0: entered promiscuous mode [ 422.698692][T24209] gretap0: left promiscuous mode [ 423.045378][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.239908][T24247] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8718'. [ 423.430123][T24257] xt_hashlimit: size too large, truncated to 1048576 [ 423.525551][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.533249][T24265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8726'. [ 423.957608][T24288] veth0: entered promiscuous mode [ 423.965611][T24286] veth0: left promiscuous mode [ 424.085401][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.165619][ T1062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.175247][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.186952][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.240495][T24303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8744'. [ 424.278172][T24303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8744'. [ 424.326499][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.369941][T24309] sctp: [Deprecated]: syz.1.8745 (pid 24309) Use of int in max_burst socket option deprecated. [ 424.369941][T24309] Use struct sctp_assoc_value instead [ 424.512898][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8750'. [ 424.660096][T24326] sctp: [Deprecated]: syz.0.8754 (pid 24326) Use of int in max_burst socket option. [ 424.660096][T24326] Use struct sctp_assoc_value instead [ 424.852724][T24338] syzkaller1: entered promiscuous mode [ 424.860715][T24338] syzkaller1: entered allmulticast mode [ 425.207884][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.062864][T24403] macvlan0: entered promiscuous mode [ 426.123721][T24405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.248179][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.283576][T24412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.293392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.886168][T24445] netlink: 'syz.0.8805': attribute type 4 has an invalid length. [ 427.020608][T24449] batadv_slave_1: entered promiscuous mode [ 427.057362][T24448] batadv_slave_1: left promiscuous mode [ 427.138848][T24457] __nla_validate_parse: 5 callbacks suppressed [ 427.138873][T24457] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8810'. [ 427.285304][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.369189][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.429861][T24474] syzkaller1: entered promiscuous mode [ 427.446219][T24474] syzkaller1: entered allmulticast mode [ 427.686168][T24492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8828'. [ 427.715287][T24492] netlink: 'syz.2.8828': attribute type 7 has an invalid length. [ 427.723167][T24492] netlink: 'syz.2.8828': attribute type 8 has an invalid length. [ 427.745614][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8828'. [ 428.325703][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.019483][T24573] netlink: 'syz.4.8868': attribute type 39 has an invalid length. [ 429.231272][T24586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.269580][T24586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.302260][T24586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.347528][T24590] netlink: 'syz.4.8876': attribute type 29 has an invalid length. [ 429.374470][T24590] netlink: 'syz.4.8876': attribute type 29 has an invalid length. [ 429.416992][T24590] netlink: 500 bytes leftover after parsing attributes in process `syz.4.8876'. [ 429.775402][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.807108][T24620] netlink: 'syz.0.8889': attribute type 1 has an invalid length. [ 429.835718][T24620] netlink: 136 bytes leftover after parsing attributes in process `syz.0.8889'. [ 429.863526][T24620] netlink: 'syz.0.8889': attribute type 1 has an invalid length. [ 429.905191][T24620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8889'. [ 430.098651][T24634] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8896'. [ 430.130280][T24634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8896'. [ 430.307897][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.528789][T24659] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.8909'. [ 430.756209][T24673] syzkaller1: entered promiscuous mode [ 430.761752][T24673] syzkaller1: entered allmulticast mode [ 430.817263][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8916'. [ 431.371531][ T24] net_ratelimit: 12 callbacks suppressed [ 431.371564][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.422210][ T24] IPVS: starting estimator thread 0... [ 431.422320][T24702] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.515260][T24705] IPVS: using max 27 ests per chain, 64800 per kthread [ 431.772820][T24719] syzkaller1: entered promiscuous mode [ 431.778735][T24719] syzkaller1: entered allmulticast mode [ 431.833291][T24721] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.005878][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.229321][T24743] siw: device registration error -23 [ 432.960522][T24787] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 433.045661][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.130979][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.452064][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.011949][T24824] __nla_validate_parse: 2 callbacks suppressed [ 434.011970][T24824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8981'. [ 434.080122][T24824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8981'. [ 434.132204][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.193726][T24828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8983'. [ 434.388682][T24832] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8985'. [ 434.440410][T24835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8987'. [ 434.698276][T24850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8990'. [ 435.176215][T24875] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9003'. [ 435.195276][T24875] netlink: ct family unspecified [ 435.205556][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.271218][T24881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9006'. [ 435.291669][T24878] syzkaller1: entered promiscuous mode [ 435.305355][T24878] syzkaller1: entered allmulticast mode [ 435.305566][T24881] netlink: 'syz.0.9006': attribute type 7 has an invalid length. [ 435.314690][T24878] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 435.373587][T24881] netlink: 'syz.0.9006': attribute type 8 has an invalid length. [ 435.402479][T24881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9006'. [ 435.820501][T24902] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9016'. [ 435.851320][T24902] netlink: 'syz.1.9016': attribute type 2 has an invalid length. [ 436.480517][T24942] netlink: 'syz.0.9033': attribute type 11 has an invalid length. [ 436.490090][ T5895] net_ratelimit: 1 callbacks suppressed [ 436.490111][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.588887][T24943] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 436.834703][ T29] audit: type=1800 audit(1775012081.751:4): pid=24956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9038" name="memory.events" dev="tmpfs" ino=9263 res=0 errno=0 [ 437.285335][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.379420][T24985] syzkaller1: entered promiscuous mode [ 437.384973][T24985] syzkaller1: entered allmulticast mode [ 438.048727][T25020] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 438.104716][T25022] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 438.149088][T25024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.158434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.325434][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.797044][T25057] netlink: 'syz.2.9078': attribute type 1 has an invalid length. [ 439.161117][T25077] __nla_validate_parse: 2 callbacks suppressed [ 439.161140][T25077] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9087'. [ 439.365361][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.531791][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.568802][T25093] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9094'. [ 439.750433][T25106] team0 (unregistering): Port device team_slave_0 removed [ 439.778196][T25106] team0 (unregistering): Port device team_slave_1 removed [ 439.855355][T25114] ±ÿ=–a²š«: renamed from lo (while UP) [ 439.931223][T25118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9105'. [ 439.940596][T25118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.984138][T25118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.406088][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.698787][T25161] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.9125'. [ 441.450614][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.493657][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.518369][T25256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9167'. [ 442.557608][T25256] netlink: 'syz.3.9167': attribute type 7 has an invalid length. [ 442.570811][T25256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9167'. [ 442.576169][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.614376][T25256] gretap0: entered promiscuous mode [ 442.630119][T25256] gretap0: left promiscuous mode [ 442.726277][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.023797][T25282] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9181'. [ 443.075221][T25288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9185'. [ 443.230850][T25296] erspan0: entered promiscuous mode [ 443.263697][T25296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9186'. [ 443.504895][T25317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.512749][T25317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.523875][T25317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.532033][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.542027][T25317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.668336][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9200'. [ 444.568336][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.607610][T25378] __nla_validate_parse: 2 callbacks suppressed [ 444.607631][T25378] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9225'. [ 444.871172][T25391] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9231'. [ 444.888961][T25391] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9231'. [ 445.047473][T25401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9236'. [ 445.056220][T25405] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9238'. [ 445.058594][T25401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9236'. [ 445.285279][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.543378][T25427] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9248'. [ 445.608259][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.616442][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.022952][T25459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.031913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.125364][T25463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9265'. [ 446.163898][T25468] netlink: 'syz.3.9269': attribute type 11 has an invalid length. [ 446.249315][T25463] team0: Port device team_slave_0 removed [ 446.647648][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.699932][T25502] pim6reg1: entered promiscuous mode [ 446.706463][T25502] pim6reg1: entered allmulticast mode [ 446.735500][T25499] block nbd3: server does not support multiple connections per device. [ 446.751208][T25499] block nbd3: shutting down sockets [ 447.302482][T25533] gre0: entered promiscuous mode [ 447.308758][T25533] gre0: entered allmulticast mode [ 447.486040][T25541] macvtap1: entered promiscuous mode [ 447.497019][T25541] macvtap1: entered allmulticast mode [ 447.502868][T25541] veth1_vlan: entered allmulticast mode [ 447.510007][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.522186][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.531576][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.542366][T25542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.552654][T25542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.615388][T25549] macvtap2: entered promiscuous mode [ 447.626488][T25549] macvtap2: entered allmulticast mode [ 447.676318][ T24] wg1 speed is unknown, defaulting to 1000 [ 447.686382][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.791804][T25561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9309'. [ 448.657775][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.726851][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.860880][T25612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9332'. [ 448.947486][T25619] netlink: 'syz.2.9335': attribute type 10 has an invalid length. [ 449.269456][T25634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.278402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.669195][T25719] __nla_validate_parse: 2 callbacks suppressed [ 450.669219][T25719] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.9379'. [ 450.957849][T25734] syzkaller1: entered promiscuous mode [ 450.971714][T25734] syzkaller1: entered allmulticast mode [ 451.259535][T25748] netlink: 'syz.1.9387': attribute type 9 has an invalid length. [ 451.267846][T25748] netlink: 'syz.1.9387': attribute type 11 has an invalid length. [ 451.277030][T25748] netlink: 'syz.1.9387': attribute type 12 has an invalid length. [ 451.289131][T25748] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.9387'. [ 451.307770][T25748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9387'. [ 451.461759][T25758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9391'. [ 451.778610][T25778] netlink: 'syz.0.9398': attribute type 12 has an invalid length. [ 451.792967][T25778] netlink: 'syz.0.9398': attribute type 29 has an invalid length. [ 451.804553][T25778] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9398'. [ 451.815692][T25778] netlink: 'syz.0.9398': attribute type 2 has an invalid length. [ 451.823482][T25778] netlink: 23 bytes leftover after parsing attributes in process `syz.0.9398'. [ 452.182138][T25804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9410'. [ 452.191701][T25804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9410'. [ 452.200652][T25804] netlink: 'syz.0.9410': attribute type 15 has an invalid length. [ 452.216576][T25804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9410'. [ 452.216571][ T1062] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 452.235301][T25804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9410'. [ 452.235740][ T1062] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 452.244372][T25804] netlink: 'syz.0.9410': attribute type 15 has an invalid length. [ 452.262515][ T1062] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 452.273065][ T1062] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 452.886115][ T5933] net_ratelimit: 10 callbacks suppressed [ 452.886137][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.144306][T25843] netlink: 'syz.2.9428': attribute type 15 has an invalid length. [ 453.183168][ T1062] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 453.202596][ T1062] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 453.217649][ T1062] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 453.255115][ T1062] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 453.383469][T25854] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 453.394495][T25845] veth1_vlan: left allmulticast mode [ 453.925580][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.442154][T25904] validate_nla: 1 callbacks suppressed [ 454.442176][T25904] netlink: 'syz.3.9451': attribute type 10 has an invalid length. [ 454.736799][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.767161][T25912] netlink: 'syz.1.9455': attribute type 21 has an invalid length. [ 454.798859][T25912] netlink: 'syz.1.9455': attribute type 22 has an invalid length. [ 454.817818][T25912] netlink: 'syz.1.9455': attribute type 23 has an invalid length. [ 454.826212][T25912] netlink: 'syz.1.9455': attribute type 25 has an invalid length. [ 454.840709][T25912] netlink: 'syz.1.9455': attribute type 26 has an invalid length. [ 454.966186][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.741191][T25942] __nla_validate_parse: 7 callbacks suppressed [ 455.741212][T25942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9466'. [ 456.029475][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.045432][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.055666][T25962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9474'. [ 457.064741][T25962] netlink: 'syz.1.9474': attribute type 7 has an invalid length. [ 457.073360][T25962] netlink: 'syz.1.9474': attribute type 8 has an invalid length. [ 457.081502][T25962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9474'. [ 457.775395][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.988191][T25928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.089596][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.182168][T25975] netlink: 'syz.1.9481': attribute type 22 has an invalid length. [ 458.190672][T25975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9481'. [ 458.196562][T25977] netlink: 'syz.0.9478': attribute type 7 has an invalid length. [ 458.209342][T25975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9481'. [ 458.311989][T25982] veth0: entered promiscuous mode [ 458.319242][T25982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9483'. [ 458.633684][T25998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9489'. [ 458.747788][T26004] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9492'. [ 458.971453][T26020] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9499'. [ 459.050454][T26016] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 459.136276][T26016] bond6: (slave lo): Enslaving as an active interface with an up link [ 459.149300][T26016] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 459.366901][T26037] bond6: option mode: unable to set because the bond device has slaves [ 459.409383][T26037] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 460.273907][T26079] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9526'. [ 460.995878][T26124] validate_nla: 2 callbacks suppressed [ 460.995902][T26124] netlink: 'syz.1.9542': attribute type 1 has an invalid length. [ 461.077133][T26124] bond7: entered promiscuous mode [ 461.082644][T26124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 461.130655][T26131] bond7: (slave bridge4): making interface the new active one [ 461.144362][T26131] bridge4: entered promiscuous mode [ 461.151929][T26131] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 461.270147][T26140] netlink: 'syz.3.9546': attribute type 12 has an invalid length. [ 461.289494][T26140] __nla_validate_parse: 1 callbacks suppressed [ 461.289514][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9546'. [ 461.347260][T26140] netlink: 'syz.3.9546': attribute type 12 has an invalid length. [ 461.374521][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9546'. [ 461.623731][T26158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.727660][T26164] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 461.741226][T26164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.741626][T26161] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 461.803725][T26167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9555'. [ 462.608338][T26205] ip6gre1: entered promiscuous mode [ 462.613653][T26205] ip6gre1: entered allmulticast mode [ 463.433254][T26237] vlan1: left allmulticast mode [ 463.445348][T26237] veth0_vlan: left allmulticast mode [ 463.637689][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9578'. [ 463.665520][T26243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9578'. [ 463.695653][T26243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9578'. [ 463.726061][T26247] trusted_key: syz.3.9579 sent an empty control message without MSG_MORE. [ 463.732713][ T134] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 463.745657][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9578'. [ 463.754735][ T134] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 463.764477][T26243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9578'. [ 463.775372][ T134] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 463.784767][ T134] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 463.793839][T26243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9578'. [ 463.947674][T26253] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9583'. [ 464.336877][T26269] netlink: 'syz.0.9590': attribute type 1 has an invalid length. [ 464.519705][T26273] pim6reg1: entered promiscuous mode [ 464.550214][T26273] pim6reg1: entered allmulticast mode [ 464.701816][T26278] gretap1: entered promiscuous mode [ 464.728503][T26278] batman_adv: batadv0: Adding interface: gretap1 [ 464.734903][T26278] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 464.775138][T26278] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 464.863660][T26280] bridge_slave_0: left promiscuous mode [ 464.914003][T26280] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.980700][T26280] bridge_slave_1: left allmulticast mode [ 464.987067][T26280] bridge_slave_1: left promiscuous mode [ 464.993078][T26280] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.021966][T26280] bond0: (slave bond_slave_0): Releasing backup interface [ 465.058794][T26280] bond0: (slave bond_slave_1): Releasing backup interface [ 465.089939][T26280] team0: Port device team_slave_1 removed [ 465.100258][T26280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.128048][T26282] team0: Mode changed to "random" [ 465.139591][ T983] syz1: Port: 1 Link DOWN [ 465.322070][T26295] xt_hashlimit: size too large, truncated to 1048576 [ 465.374423][T26297] veth0: entered promiscuous mode [ 465.390000][T26296] veth0: left promiscuous mode [ 465.794306][T26314] netlink: 'syz.2.9608': attribute type 13 has an invalid length. [ 465.817162][T26314] netlink: 'syz.2.9608': attribute type 13 has an invalid length. [ 466.273145][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb5d400: rx timeout, send abort [ 466.342015][T26338] __nla_validate_parse: 7 callbacks suppressed [ 466.342030][T26338] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9615'. [ 466.506444][T26348] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9624'. [ 466.517092][T26348] netlink: Unknown conntrack attr (0) [ 466.609862][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9626'. [ 466.774155][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb5f800: rx timeout, send abort [ 466.782799][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb5d400: abort rx timeout. Force session deactivation [ 466.925724][T26366] syzkaller1: entered promiscuous mode [ 466.931271][T26366] syzkaller1: entered allmulticast mode [ 467.042721][T26376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9636'. [ 467.063222][T26376] netlink: 'syz.4.9636': attribute type 7 has an invalid length. [ 467.095273][T26376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9636'. [ 467.139571][T26376] erspan0: entered promiscuous mode [ 467.145631][T26381] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.9639'. [ 467.156657][T26376] erspan0: left promiscuous mode [ 467.282495][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb5f800: abort rx timeout. Force session deactivation [ 467.431420][T26394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9644'. [ 467.460826][T26401] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.9646'. [ 467.664955][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9653'. [ 467.978980][T26433] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 468.199751][T26447] bond3: (slave 26±ÿ=–a²š«): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 468.203304][T26448] netlink: 'syz.4.9666': attribute type 9 has an invalid length. [ 468.247642][T26447] bond3: (slave 26±ÿ=–a²š«): Enslaving as an active interface with an up link [ 468.273047][T26448] netlink: 'syz.4.9666': attribute type 11 has an invalid length. [ 468.278622][T26450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9667'. [ 468.290991][T26448] netlink: 'syz.4.9666': attribute type 12 has an invalid length. [ 468.293230][T26447] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 468.454058][T26458] syzkaller1: entered promiscuous mode [ 468.460015][T26458] syzkaller1: entered allmulticast mode [ 468.773500][T26476] "syz.3.9679" (26476) uses obsolete ecb(arc4) skcipher [ 468.891651][T26482] syz_tun: entered allmulticast mode [ 468.902974][T26481] syz_tun: left allmulticast mode [ 468.977805][T26487] vlan2: entered allmulticast mode [ 468.994621][T26487] bridge0: entered allmulticast mode [ 469.001516][T26487] bridge0: port 3(vlan2) entered blocking state [ 469.008720][T26487] bridge0: port 3(vlan2) entered disabled state [ 469.368249][T26461] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 469.406637][T26461] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 469.762800][T26522] bond0: (slave vlan0): Error -34 calling dev_set_mtu [ 470.172843][T26547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.526596][T26573] netlink: 'syz.3.9719': attribute type 20 has an invalid length. [ 470.618132][ T155] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.629716][T26573] netlink: 'syz.3.9719': attribute type 20 has an invalid length. [ 470.649841][ T155] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.748311][ T155] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.785742][ T155] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.817972][T26577] wg1 speed is unknown, defaulting to 1000 [ 470.858557][T26577] wlan1 speed is unknown, defaulting to 1000 [ 470.965427][T26586] syzkaller1: entered promiscuous mode [ 470.980280][T26586] syzkaller1: entered allmulticast mode [ 471.120090][ T29] audit: type=1800 audit(1775012116.041:5): pid=26602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9732" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=9742 res=0 errno=0 [ 471.297378][T26603] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.920517][T26641] __nla_validate_parse: 9 callbacks suppressed [ 471.920539][T26641] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9746'. [ 471.944790][T26640] atomic_op ffff888029d47198 conn xmit_atomic 0000000000000000 [ 472.152860][T26655] tls_set_device_offload_rx: netdev not found [ 473.830823][T26718] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9778'. [ 474.717926][T26748] netlink: 'syz.1.9786': attribute type 10 has an invalid length. [ 474.752328][T26748] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 474.841300][T26753] netlink: 'syz.2.9789': attribute type 11 has an invalid length. [ 476.053445][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9800'. [ 476.461052][T26788] netlink: 'syz.0.9802': attribute type 1 has an invalid length. [ 477.075756][T26796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9806'. [ 477.889033][T26817] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.9815'. [ 477.926007][T26817] netlink: Unknown conntrack attr (type=2304, max=9) [ 478.079437][T26824] netlink: 'syz.0.9817': attribute type 1 has an invalid length. [ 478.112405][T26824] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.9817'. [ 478.259302][T26828] netlink: 'syz.1.9819': attribute type 1 has an invalid length. [ 478.354631][T26828] 8021q: adding VLAN 0 to HW filter on device bond8 [ 478.452182][T26834] bond8: (slave geneve3): making interface the new active one [ 478.464040][T26834] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 478.624922][T26703] Set syz1 is full, maxelem 65536 reached [ 479.192448][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9836'. [ 479.202534][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9836'. [ 479.395781][T26876] netlink: 'syz.4.9840': attribute type 15 has an invalid length. [ 480.419040][T26918] ip6gre3: entered promiscuous mode [ 480.718688][T26943] "syz.1.9871" (26943) uses obsolete ecb(arc4) skcipher [ 481.674398][T26985] syzkaller1: entered promiscuous mode [ 481.680719][T26985] syzkaller1: entered allmulticast mode [ 481.971292][T26996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9895'. [ 482.138120][T27003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9898'. [ 482.397410][T27017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9904'. [ 482.515347][T27023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9907'. [ 482.604062][T27027] netlink: 'syz.0.9909': attribute type 1 has an invalid length. [ 482.662952][T27027] 8021q: adding VLAN 0 to HW filter on device bond6 [ 482.702359][T27034] bond6: (slave geneve3): making interface the new active one [ 482.752663][T27034] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 482.862879][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9918'. [ 482.872509][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9918'. [ 482.875668][T27046] vlan2: entered allmulticast mode [ 482.883296][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9918'. [ 482.889831][T27046] bond0: entered allmulticast mode [ 482.923080][T27048] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9919'. [ 483.024147][T27048] bond0 (unregistering): Released all slaves [ 483.169506][T27060] netlink: 'syz.2.9924': attribute type 22 has an invalid length. [ 483.181463][T27060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9924'. [ 483.195657][T27060] netlink: 'syz.2.9924': attribute type 22 has an invalid length. [ 483.204243][T27060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9924'. [ 483.273741][T27064] netlink: 'syz.0.9925': attribute type 11 has an invalid length. [ 483.283290][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9925'. [ 483.303486][T27064] netlink: 'syz.0.9925': attribute type 11 has an invalid length. [ 483.815915][T27092] netlink: 'syz.4.9940': attribute type 21 has an invalid length. [ 483.829902][T27092] netlink: 'syz.4.9940': attribute type 21 has an invalid length. [ 483.840246][T27096] sctp: [Deprecated]: syz.3.9942 (pid 27096) Use of int in maxseg socket option. [ 483.840246][T27096] Use struct sctp_assoc_value instead [ 484.370043][T27123] netlink: 'syz.3.9955': attribute type 4 has an invalid length. [ 484.402732][T27123] netlink: 'syz.3.9955': attribute type 4 has an invalid length. [ 484.623979][T27134] netlink: 'syz.3.9961': attribute type 1 has an invalid length. [ 485.122734][T27161] PKCS7: Unknown OID: [4] (bad) [ 485.141561][T27161] PKCS7: Only support pkcs7_signedData type [ 485.403352][T27164] syzkaller0: entered promiscuous mode [ 485.411845][T27164] syzkaller0: entered allmulticast mode [ 485.508280][T27168] bond3: (slave bridge5): making interface the new active one [ 485.526569][T27168] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 487.294565][T27183] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 487.471146][T27203] __nla_validate_parse: 13 callbacks suppressed [ 487.471172][T27203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9989'. [ 487.726150][T27220] validate_nla: 4 callbacks suppressed [ 487.726172][T27220] netlink: 'syz.2.9996': attribute type 21 has an invalid length. [ 487.763159][T27220] netlink: 'syz.2.9996': attribute type 22 has an invalid length. [ 487.776135][T27220] netlink: 'syz.2.9996': attribute type 23 has an invalid length. [ 487.784179][T27220] netlink: 'syz.2.9996': attribute type 25 has an invalid length. [ 487.792214][T27220] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9996'. [ 488.123179][T27230] netlink: 'syz.4.10000': attribute type 4 has an invalid length. [ 488.280148][T27234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10003'. [ 488.413238][T27240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10006'. [ 488.437925][T27240] hsr_slave_0: left promiscuous mode [ 488.446410][T27240] hsr_slave_1: left promiscuous mode [ 488.628131][T27247] netlink: 'syz.2.10009': attribute type 1 has an invalid length. [ 488.668587][T27247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.731121][T27247] bond4: (slave gretap1): making interface the new active one [ 488.775979][T27247] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 488.779536][T27255] netlink: 'syz.3.10012': attribute type 1 has an invalid length. [ 488.859983][T27255] bond4: entered promiscuous mode [ 488.900414][T27255] 8021q: adding VLAN 0 to HW filter on device bond4 [ 489.002188][T27269] netlink: 'syz.4.10017': attribute type 1 has an invalid length. [ 489.031312][T27264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 489.042382][T27264] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 489.053571][T27264] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 489.067873][T27264] bond4: (slave ip6gre1): making interface the new active one [ 489.078209][T27264] ip6gre1: entered promiscuous mode [ 489.086902][T27264] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 489.448930][ T1062] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.458345][ T1062] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.481369][ T1062] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.491484][ T1062] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.091779][T27331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10039'. [ 490.141447][T27331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10039'. [ 490.727376][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.739167][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.766703][T25740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.786483][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.796229][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.828699][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10049'. [ 491.094859][T27370] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.10055'. [ 491.333333][T27382] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10061'. [ 492.180944][T27416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10076'. [ 492.182747][T27410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.207425][T27410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.369947][T27410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.382651][T27410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.432939][T27423] netlink: 'syz.1.10081': attribute type 1 has an invalid length. [ 492.442887][T27423] netlink: 'syz.1.10081': attribute type 4 has an invalid length. [ 492.544428][T27410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.564071][T27410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.716330][T27410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.727543][T27410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.787378][T27441] __nla_validate_parse: 2 callbacks suppressed [ 492.787400][T27441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10088'. [ 493.189111][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.198753][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.229454][T27460] syzkaller1: entered promiscuous mode [ 493.235776][T27460] syzkaller1: entered allmulticast mode [ 493.352701][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.363874][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.453292][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.472568][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.485879][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.504323][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.931775][T27491] syzkaller1: entered promiscuous mode [ 493.938186][T27495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10106'. [ 493.953004][T27491] syzkaller1: entered allmulticast mode [ 494.012140][T27495] team0: entered promiscuous mode [ 494.025271][T27495] team0: entered allmulticast mode [ 494.641744][T27528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.902091][T27538] netlink: 'syz.0.10127': attribute type 2 has an invalid length. [ 494.955875][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10128'. [ 494.966624][T27542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10128'. [ 494.982255][T27541] syzkaller1: entered promiscuous mode [ 494.992641][T27541] syzkaller1: entered allmulticast mode [ 495.029470][T27548] netlink: 'syz.2.10130': attribute type 16 has an invalid length. [ 495.068663][T27548] netlink: 'syz.2.10130': attribute type 17 has an invalid length. [ 495.079054][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10128'. [ 495.105315][T27542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10128'. [ 495.198331][T27548] erspan0: entered promiscuous mode [ 495.205310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.215321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.235810][T27548] bridge0: port 1(syz_tun) entered blocking state [ 495.242420][T27548] bridge0: port 1(syz_tun) entered forwarding state [ 495.254076][T27548] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.273739][T27548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.305563][T27554] bridge0: entered allmulticast mode [ 495.430244][T27564] netlink: 'syz.3.10138': attribute type 1 has an invalid length. [ 495.582152][T27569] bond5: (slave ip6gretap1): making interface the new active one [ 495.591067][T27569] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 495.600089][T27569] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 495.614078][T27569] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 495.983007][T27594] sock: sock_set_timeout: `syz.1.10150' (pid 27594) tries to set negative timeout [ 496.372156][T27621] netlink: 'syz.0.10160': attribute type 1 has an invalid length. [ 496.387704][T27621] netlink: 'syz.0.10160': attribute type 4 has an invalid length. [ 496.396234][T27621] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10160'. [ 496.488027][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.497671][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.514250][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.548443][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10162'. [ 496.934401][T27645] syzkaller0: entered allmulticast mode [ 496.977328][ T1062] nci: nci_rsp_packet: unknown rsp opcode 0x82d [ 497.612284][T27674] netlink: 'syz.1.10181': attribute type 39 has an invalid length. [ 497.656071][T27638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.852022][T27682] syzkaller1: entered promiscuous mode [ 497.860576][T27682] syzkaller1: entered allmulticast mode [ 498.280019][T27711] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10189'. [ 498.616134][T27730] netlink: 'syz.0.10201': attribute type 1 has an invalid length. [ 498.727147][T27730] bond0: (slave gretap2): making interface the new active one [ 498.759310][T27730] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 498.778195][T27732] syzkaller1: entered promiscuous mode [ 498.783959][T27732] syzkaller1: entered allmulticast mode [ 499.113557][T27740] netlink: 'syz.0.10206': attribute type 1 has an invalid length. [ 499.152901][T27740] bond7: entered promiscuous mode [ 499.159993][T27740] 8021q: adding VLAN 0 to HW filter on device bond7 [ 499.248161][T27740] 8021q: adding VLAN 0 to HW filter on device bond7 [ 499.270771][T27740] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 499.302602][T27740] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 499.338443][T27740] bond7: (slave vcan1): making interface the new active one [ 499.359976][T27740] vcan1: entered promiscuous mode [ 499.371716][T27740] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 499.579577][T27757] IPv6: sit2: Disabled Multicast RS [ 499.608472][T27757] sit2: entered allmulticast mode [ 499.642005][ T12] nci: nci_ntf_packet: unknown ntf opcode 0xe27 [ 499.670801][T27762] netlink: 'syz.2.10212': attribute type 1 has an invalid length. [ 499.846693][T27769] syzkaller1: entered promiscuous mode [ 499.852434][T27769] syzkaller1: entered allmulticast mode [ 500.274531][T27791] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10224'. [ 500.287760][T27791] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10224'. [ 500.335385][T27751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.347341][T27789] netlink: 'syz.3.10219': attribute type 11 has an invalid length. [ 500.373561][T27789] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.10219'. [ 500.474609][T27796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10227'. [ 500.908458][T27820] netlink: 'syz.0.10236': attribute type 16 has an invalid length. [ 500.917002][T27820] netlink: 'syz.0.10236': attribute type 17 has an invalid length. [ 501.102842][T27820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.528299][T27853] syzkaller1: entered promiscuous mode [ 501.541751][T27853] syzkaller1: entered allmulticast mode [ 501.570186][T27857] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10251'. [ 501.865773][T27872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10257'. [ 501.878601][T27872] netlink: 'syz.1.10257': attribute type 7 has an invalid length. [ 501.902617][T27872] netlink: 'syz.1.10257': attribute type 8 has an invalid length. [ 501.914728][T27872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10257'. [ 502.090387][T27883] netlink: 'syz.2.10261': attribute type 1 has an invalid length. [ 502.201292][T27883] bond5: (slave gretap2): making interface the new active one [ 502.209938][T27883] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 502.246371][ T1062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.255697][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.434719][T27902] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 502.973410][T27925] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10278'. [ 503.404533][T27946] tipc: Failed to remove unknown binding: 66,1,1/2886997057:3786290016/3786290018 [ 503.417958][T27946] tipc: Failed to remove unknown binding: 66,1,1/2886997057:3786290016/3786290018 [ 503.561088][T27953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10292'. [ 503.698776][T27961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10294'. [ 503.983766][T27978] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.10303'. [ 504.666007][T28013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10317'. [ 504.689861][T28013] geneve4: entered promiscuous mode [ 504.891206][T28022] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10321'. [ 504.943472][T28028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10324'. [ 505.261074][T28044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10329'. [ 505.286424][T28044] netlink: 'syz.2.10329': attribute type 3 has an invalid length. [ 505.688031][T28058] syzkaller1: entered promiscuous mode [ 505.693671][T28058] syzkaller1: entered allmulticast mode [ 507.279736][T28108] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10353'. [ 507.419391][T28112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10355'. [ 507.431720][T28112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10355'. [ 508.354176][T28157] bridge_slave_1: left allmulticast mode [ 508.381782][T28157] bridge_slave_1: left promiscuous mode [ 508.398411][T28157] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.447821][T28157] ¾x9ÿ: left allmulticast mode [ 508.452667][T28157] ¾x9ÿ: left promiscuous mode [ 508.479413][T28157] bridge0: port 1(1¾x9ÿ) entered disabled state [ 508.508621][T28157] bond0: (slave bridge0): Releasing backup interface [ 508.539340][T28157] bridge0 (unregistering): left allmulticast mode [ 509.718890][T28225] syzkaller0: entered promiscuous mode [ 509.724549][T28225] syzkaller0: entered allmulticast mode [ 509.736919][T28235] __nla_validate_parse: 2 callbacks suppressed [ 509.736939][T28235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10397'. [ 511.575952][T28256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10404'. [ 512.032539][T28279] syzkaller0: entered promiscuous mode [ 512.038581][T28279] syzkaller0: entered allmulticast mode [ 514.498857][T28354] netlink: 'syz.0.10446': attribute type 2 has an invalid length. [ 515.463423][T28407] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.10463'. [ 515.790392][T28422] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 515.921954][T28434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10470'. [ 516.003541][T28439] netlink: zone id is out of range [ 516.034006][T28439] netlink: zone id is out of range [ 516.055283][T28439] netlink: zone id is out of range [ 516.060491][T28439] netlink: zone id is out of range [ 516.087391][T28444] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 516.097948][T28439] netlink: zone id is out of range [ 516.097966][T28439] netlink: zone id is out of range [ 516.097975][T28439] netlink: zone id is out of range [ 516.097985][T28439] netlink: zone id is out of range [ 516.097995][T28439] netlink: zone id is out of range [ 516.098004][T28439] netlink: zone id is out of range [ 516.304066][T28453] wg1 speed is unknown, defaulting to 1000 [ 516.346782][T28453] wlan1 speed is unknown, defaulting to 1000 [ 516.671151][T28463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10483'. [ 516.785854][T28463] erspan0: entered promiscuous mode [ 516.794544][T28468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10484'. [ 516.799223][T28463] macvtap1: entered promiscuous mode [ 516.811481][T28463] macvtap1: entered allmulticast mode [ 516.818809][T28463] erspan0: entered allmulticast mode [ 516.864189][T28468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10484'. [ 517.182098][T28482] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10490'. [ 517.442069][T28352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.976987][T28510] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10501'. [ 518.494581][T28539] netlink: 'syz.1.10515': attribute type 1 has an invalid length. [ 518.592145][T28539] bond9: entered promiscuous mode [ 518.598388][T28539] 8021q: adding VLAN 0 to HW filter on device bond9 [ 518.711869][T28544] 8021q: adding VLAN 0 to HW filter on device bond9 [ 518.720436][T28544] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 518.731229][T28544] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 518.748258][T28544] bond9: (slave vti0): making interface the new active one [ 518.756525][T28544] vti0: entered promiscuous mode [ 518.763079][T28544] bond9: (slave vti0): Enslaving as an active interface with an up link [ 519.180453][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10526'. [ 519.388603][T28577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10531'. [ 521.931523][T28630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10551'. [ 521.942008][T28630] block nbd0: Unsupported socket: should be TCP or UNIX. [ 522.102587][T28639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10556'. [ 524.354799][T28690] sctp: [Deprecated]: syz.4.10568 (pid 28690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.354799][T28690] Use struct sctp_sack_info instead [ 524.542294][T28701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10572'. [ 524.557387][T28693] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 524.573655][T28693] bond4 (unregistering): Released all slaves [ 524.598920][T28705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10574'. [ 524.654244][T28696] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10570'. [ 524.718823][T28696] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10570'. [ 524.905646][T28718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10578'. [ 525.096917][T28729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10584'. [ 525.230754][T28731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10585'. [ 525.413212][T28745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10592'. [ 526.393615][T28788] sctp: [Deprecated]: syz.1.10610 (pid 28788) Use of int in maxseg socket option. [ 526.393615][T28788] Use struct sctp_assoc_value instead [ 526.755850][T28797] scsi_nl_rcv_msg: discarding partial skb [ 527.283160][T28818] __nla_validate_parse: 4 callbacks suppressed [ 527.283182][T28818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10618'. [ 528.835760][T28846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10621'. [ 528.872133][T28846] netdevsim netdevsim1: Direct firmware load for 0 failed with error -2 [ 528.872555][T28847] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10622'. [ 528.895145][T28846] netdevsim netdevsim1: Falling back to sysfs fallback for: 0 [ 528.916658][T28849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10623'. [ 528.937154][T28853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10625'. [ 529.373101][T28863] macvtap0: entered promiscuous mode [ 529.380474][T28863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10629'. [ 529.393518][T28863] veth0_macvtap: left promiscuous mode [ 529.612278][T28874] netlink: 'syz.0.10633': attribute type 1 has an invalid length. [ 529.697021][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10633'. [ 529.793626][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10633'. [ 529.813252][T28874] bond8: entered promiscuous mode [ 529.848872][T28874] 8021q: adding VLAN 0 to HW filter on device bond8 [ 530.005559][T28895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10638'. [ 530.072048][T28883] bond8: (slave bridge6): making interface the new active one [ 530.100316][T28883] bridge6: entered promiscuous mode [ 530.125150][T28883] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 530.428850][T28910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10644'. [ 530.660073][T28921] netlink: 'syz.0.10649': attribute type 29 has an invalid length. [ 530.691031][T28921] netlink: 'syz.0.10649': attribute type 29 has an invalid length. [ 530.706585][T28921] netlink: 'syz.0.10649': attribute type 32 has an invalid length. [ 530.880543][T28936] bond4: entered allmulticast mode [ 530.925764][T28936] ip6gre1: entered allmulticast mode [ 531.474730][T28952] syzkaller1: entered promiscuous mode [ 531.486539][T28952] syzkaller1: entered allmulticast mode [ 531.675884][T28956] dvmrp0: entered allmulticast mode [ 532.601226][T28976] __nla_validate_parse: 3 callbacks suppressed [ 532.601247][T28976] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10669'. [ 532.639961][T28976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10669'. [ 532.818941][T28982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10673'. [ 532.911021][T28990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10676'. [ 533.098601][T29004] netlink: 'syz.2.10682': attribute type 1 has an invalid length. [ 533.174608][T29004] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.222473][T29007] bond6: (slave veth7): Enslaving as an active interface with a down link [ 533.298321][T29004] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 533.306374][T29004] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 533.447712][T29019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10687'. [ 533.458144][T29019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10687'. [ 533.916399][T29033] dvmrp0: entered allmulticast mode [ 533.919511][T29030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10692'. [ 534.204599][T29043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10696'. [ 534.513880][T29051] netlink: 'syz.2.10698': attribute type 4 has an invalid length. [ 534.575357][T29054] netlink: 'syz.2.10698': attribute type 4 has an invalid length. [ 534.641603][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10700'. [ 535.432022][T29093] netlink: 'syz.2.10710': attribute type 4 has an invalid length. [ 536.920008][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10726'. [ 538.117878][T29186] __nla_validate_parse: 1 callbacks suppressed [ 538.117901][T29186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10734'. [ 538.339832][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10740'. [ 538.465811][T29202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10741'. [ 538.535876][T29202] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 538.560763][T29202] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 538.587764][T29202] team0: Failed to send options change via netlink (err -105) [ 538.609946][T29202] team0: Port device batadv1 added [ 538.662356][T29191] mpoa:mpoad_close: () going down [ 538.990651][T29210] syzkaller1: entered promiscuous mode [ 539.015949][T29210] syzkaller1: entered allmulticast mode [ 539.090678][T29214] netlink: 'syz.4.10748': attribute type 1 has an invalid length. [ 539.113954][T29214] netlink: 'syz.4.10748': attribute type 4 has an invalid length. [ 539.115282][T29216] vcan0: tx address claim with different name [ 539.132815][T29214] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.10748'. [ 539.454840][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10752'. [ 540.206198][T29271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10768'. [ 540.703768][T29293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10774'. [ 541.192540][T29306] netlink: 'syz.4.10777': attribute type 10 has an invalid length. [ 541.222915][T29306] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 541.274832][T29313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10779'. [ 541.946143][T29345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10791'. [ 542.333809][T29363] tipc: Failed to remove unknown binding: 66,1,1/0:1628161850/1628161852 [ 542.711814][T29373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10797'. [ 544.228628][T29391] netlink: 'syz.1.10802': attribute type 1 has an invalid length. [ 544.330856][T29391] bond10: entered promiscuous mode [ 544.336277][T29391] bond10: entered allmulticast mode [ 544.341829][T29391] 8021q: adding VLAN 0 to HW filter on device bond10 [ 544.365107][T29396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.417705][T29396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.546853][T29408] __nla_validate_parse: 1 callbacks suppressed [ 544.546875][T29408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10808'. [ 544.976873][T29432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10820'. [ 545.076481][T29432] vcan0 (unregistering): left allmulticast mode [ 545.343664][T29444] wg1 speed is unknown, defaulting to 1000 [ 545.399827][T29444] wlan1 speed is unknown, defaulting to 1000 [ 546.277944][T29460] netlink: 'syz.2.10827': attribute type 5 has an invalid length. [ 546.447068][T29469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10832'. [ 547.201098][T29486] syzkaller0: entered promiscuous mode [ 547.209870][T29486] syzkaller0: entered allmulticast mode [ 547.376730][T29492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10838'. [ 547.946822][T29510] netlink: 'syz.2.10846': attribute type 10 has an invalid length. [ 547.993384][T29514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10848'. [ 548.078774][T29514] netlink: 'syz.1.10848': attribute type 1 has an invalid length. [ 548.535260][T29537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10857'. [ 548.797421][T29548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10862'. [ 549.047677][T29555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10865'. [ 549.078255][T29557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10866'. [ 549.169324][T29557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.232364][T29557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.631179][T29571] netlink: 'syz.3.10872': attribute type 1 has an invalid length. [ 549.669422][T29571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.691806][T29571] veth0_to_bond: left allmulticast mode [ 549.705585][T29571] bond6: (slave veth0_to_bond): making interface the new active one [ 549.716210][T29571] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 549.747893][T29571] bond6: entered promiscuous mode [ 549.756093][T29571] veth0_to_bond: entered promiscuous mode [ 549.774407][T29571] bond6: entered allmulticast mode [ 549.784077][T29571] veth0_to_bond: entered allmulticast mode [ 550.067645][T29586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10877'. [ 550.219425][T29592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10880'. [ 550.543025][T29603] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10885'. [ 550.661171][T29612] netlink: 'syz.0.10889': attribute type 1 has an invalid length. [ 550.673125][T29614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10888'. [ 550.768364][T29617] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 550.787215][T29617] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 550.789424][T29620] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.10890'. [ 550.808131][T29617] bond9: (slave ip6gre2): making interface the new active one [ 550.816883][T29617] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 551.462217][T29648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10900'. [ 551.505287][T29648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10900'. [ 551.506145][T29650] net_ratelimit: 185 callbacks suppressed [ 551.506161][T29650] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 551.859289][T29667] netlink: 'syz.0.10909': attribute type 39 has an invalid length. [ 551.982160][T29670] bond7: entered promiscuous mode [ 552.183841][T29689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10918'. [ 552.630939][T29708] wg1 speed is unknown, defaulting to 1000 [ 552.662449][T29708] wlan1 speed is unknown, defaulting to 1000 [ 552.997809][T29718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10930'. [ 553.060929][T29722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10930'. [ 553.364782][T29735] netlink: 'syz.0.10935': attribute type 1 has an invalid length. [ 553.467600][T29735] bond10: entered promiscuous mode [ 553.494777][T29735] 8021q: adding VLAN 0 to HW filter on device bond10 [ 553.574003][T29747] bond10: (slave bridge7): making interface the new active one [ 553.581999][T29747] bridge7: entered promiscuous mode [ 553.606933][T29747] bridge7: left promiscuous mode [ 553.978235][T29756] wg1 speed is unknown, defaulting to 1000 [ 553.996378][T29756] wlan1 speed is unknown, defaulting to 1000 [ 554.103655][T29763] syzkaller1: entered promiscuous mode [ 554.115132][T29763] syzkaller1: entered allmulticast mode [ 554.382361][T29770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 554.892968][T29805] tipc: Started in network mode [ 554.898116][T29805] tipc: Node identity 0a184f55edda, cluster identity 5 [ 554.906382][T29805] tipc: Enabled bearer , priority 0 [ 554.973762][T29805] syzkaller0: entered promiscuous mode [ 555.000725][T29805] syzkaller0: entered allmulticast mode [ 555.016527][T29805] tipc: Resetting bearer [ 555.091994][T29804] tipc: Resetting bearer [ 555.132489][T29816] __nla_validate_parse: 2 callbacks suppressed [ 555.132509][T29816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10958'. [ 555.202427][T29816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10958'. [ 555.526180][T29835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10966'. [ 556.952362][T29804] tipc: Disabling bearer [ 556.988000][ T983] tipc: Node number set to 3888271189 [ 557.064624][T29846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10968'. [ 557.076965][T29846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10968'. [ 557.088675][T29846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10968'. [ 557.134253][T29848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10969'. [ 557.144448][T29848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10969'. [ 557.360586][T29861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10975'. [ 558.291088][T29892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10984'. [ 558.519737][T29901] bridge8: entered promiscuous mode [ 558.528623][T29901] bridge8: entered allmulticast mode [ 558.539557][T29901] team0: Port device bridge8 added [ 558.557469][T29901] bridge0: port 2(team0) entered blocking state [ 558.570417][T29901] bridge0: port 2(team0) entered disabled state [ 558.577488][T29901] team0: entered allmulticast mode [ 558.587705][T29901] team_slave_0: entered allmulticast mode [ 558.593528][T29901] team_slave_1: entered allmulticast mode [ 558.604843][T29901] batadv1: entered allmulticast mode [ 558.614613][T29901] team0: left allmulticast mode [ 558.623394][T29901] team_slave_0: left allmulticast mode [ 558.629169][T29901] team_slave_1: left allmulticast mode [ 558.634886][T29901] batadv1: left allmulticast mode [ 559.691733][T29958] bond6: (slave lo): Releasing backup interface [ 559.699199][T29958] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 559.739799][T29958] bond0: (slave bridge0): Releasing backup interface [ 559.776296][T29958] bond0: (slave batadv0): Releasing backup interface [ 559.809475][T29958] bridge_slave_0: left allmulticast mode [ 559.836503][T29958] bridge_slave_0: left promiscuous mode [ 559.842538][T29958] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.879045][T29958] bond0: (slave bridge_slave_1): Releasing backup interface [ 559.906827][T29958] bond0: (slave bond_slave_0): Releasing backup interface [ 559.930381][T29958] bond0: (slave bond_slave_1): Releasing backup interface [ 559.970396][T29958] team0: Port device team_slave_0 removed [ 559.990938][T29958] team0: Port device team_slave_1 removed [ 559.997630][T29958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.005941][T29958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.015982][T29958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 560.034033][T29961] team0: No ports can be present during mode change [ 560.496994][T29989] __nla_validate_parse: 6 callbacks suppressed [ 560.497017][T29989] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11022'. [ 560.532626][T29989] syzkaller1: entered promiscuous mode [ 560.538553][T29989] syzkaller1: entered allmulticast mode [ 560.916639][T29868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.149574][T30017] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 561.157606][T30021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11037'. [ 561.157637][T30021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11037'. [ 561.354039][T30032] : entered promiscuous mode [ 561.484733][T30037] bridge4: entered promiscuous mode [ 561.495143][T30037] bridge4: entered allmulticast mode [ 561.538809][T30037] team0: Port device bridge4 added [ 561.568638][T30043] bridge0: port 1(team0) entered blocking state [ 561.591051][T30043] bridge0: port 1(team0) entered disabled state [ 564.514728][T30041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 564.770447][T30099] bond4: entered promiscuous mode [ 564.796012][T30108] macvlan4: entered promiscuous mode [ 564.801620][T30108] macvlan4: entered allmulticast mode [ 564.808863][T30108] bond4: (slave macvlan4): Opening slave failed [ 564.902571][T30112] tipc: Enabled bearer , priority 0 [ 564.913501][T30112] +: renamed from syzkaller0 [ 564.958251][T30112] tipc: Disabling bearer [ 565.082609][T30122] syzkaller1: entered promiscuous mode [ 565.099321][T30122] syzkaller1: entered allmulticast mode [ 565.109866][T30123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11071'. [ 565.122952][T30123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11071'. [ 565.477136][T30144] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11079'. [ 565.606593][T30151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11082'. [ 565.863658][T30162] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 565.879563][T30162] bond12 (unregistering): Released all slaves [ 565.930676][T30147] lec:lec_atm_close: lec0: Shut down! [ 566.675621][T30178] lec:lec_atm_close: lec0: Shut down! [ 567.053298][T30203] syzkaller0: entered promiscuous mode [ 567.060090][T30203] syzkaller0: entered allmulticast mode [ 567.815168][T30210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11102'. [ 568.064471][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b47b400: rx timeout, send abort [ 568.158330][T30126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.565889][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b47a400: rx timeout, send abort [ 568.574395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b47b400: abort rx timeout. Force session deactivation [ 569.074175][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b47a400: abort rx timeout. Force session deactivation [ 569.801560][T30234] tipc: Enabling of bearer rejected, failed to enable media [ 570.426045][T30265] tipc: Enabled bearer , priority 0 [ 570.607517][T30265] syzkaller0: entered promiscuous mode [ 570.613067][T30265] syzkaller0: entered allmulticast mode [ 570.629204][T30241] lec:lec_atm_close: lec0: Shut down! [ 570.646986][T30265] tipc: Resetting bearer [ 570.696655][T30264] tipc: Resetting bearer [ 570.905632][T30253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 572.165536][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 573.578480][T30264] tipc: Disabling bearer [ 573.606583][ T10] tipc: Node number set to 4269801642 [ 573.708466][T30308] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 573.732151][T30310] bridge5: entered promiscuous mode [ 573.748922][T30310] bridge5: entered allmulticast mode [ 573.756816][T30319] tipc: Failed to remove unknown binding: 66,0,0/0:3661198267/3661198268 [ 573.777346][T30319] tipc: Failed to remove unknown binding: 66,0,0/0:3661198267/3661198268 [ 573.964777][T30328] tipc: Failed to remove unknown binding: 66,0,0/0:370748394/370748395 [ 573.995422][ T5928] lec:lec_start_xmit: lec0:No lecd attached [ 574.036108][T30328] tipc: Failed to remove unknown binding: 66,0,0/0:370748394/370748395 [ 574.159625][T30338] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 574.990509][T30374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11142'. [ 575.526839][T30395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11145'. [ 575.888961][T30412] tipc: Enabled bearer , priority 0 [ 575.995774][T30412] syzkaller0: entered promiscuous mode [ 576.001493][T30412] syzkaller0: entered allmulticast mode [ 576.008460][T30412] tipc: Resetting bearer [ 576.028805][T30410] tipc: Resetting bearer [ 576.881279][T30444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11160'. [ 578.349660][T30410] tipc: Disabling bearer [ 578.558322][T30471] tipc: Enabled bearer , priority 0 [ 578.764106][T30471] syzkaller0: entered promiscuous mode [ 578.775298][T30471] syzkaller0: entered allmulticast mode [ 578.784915][T30471] tipc: Resetting bearer [ 578.898248][T30470] tipc: Resetting bearer [ 578.911369][T30486] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11172'. [ 579.044977][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 579.054284][ C1] lec:lec_tx_timeout: lec0 [ 579.059561][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 579.146709][T30492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11175'. [ 579.157025][T30492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11175'. [ 579.267654][T30494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11176'. [ 579.766049][T30500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11178'. [ 579.973762][T30506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11180'. [ 580.707557][T30470] tipc: Disabling bearer [ 582.423438][T30523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11182'. [ 582.470085][T30528] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11185'. [ 582.505978][T30533] netlink: 'syz.4.11186': attribute type 1 has an invalid length. [ 582.514858][T30529] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11183'. [ 582.619513][T30540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11189'. [ 582.625622][T30533] bond5: entered promiscuous mode [ 582.634431][T30533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 582.646143][T30534] bridge0: port 1(syz_tun) entered disabled state [ 582.699789][T30535] bond5: (slave bridge11): making interface the new active one [ 582.737613][T30535] bridge11: entered promiscuous mode [ 582.744324][T30535] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 582.797003][T30542] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 582.811064][T30542] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 582.905348][T30558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11192'. [ 583.818721][T30591] wg1 speed is unknown, defaulting to 1000 [ 583.847891][T30591] wlan1 speed is unknown, defaulting to 1000 [ 584.075035][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 584.083104][ C1] lec:lec_tx_timeout: lec0 [ 584.088032][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 585.005340][T30658] netlink: 'syz.3.11214': attribute type 1 has an invalid length. [ 585.096599][T30658] bond8: entered promiscuous mode [ 585.102127][T30658] 8021q: adding VLAN 0 to HW filter on device bond8 [ 585.258527][T30658] bond8: (slave bridge7): making interface the new active one [ 585.297675][T30658] bridge7: entered promiscuous mode [ 585.329170][T30658] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 585.350584][T30663] tipc: Enabled bearer , priority 0 [ 585.444418][T30671] syzkaller0: entered promiscuous mode [ 585.465940][T30671] syzkaller0: entered allmulticast mode [ 585.472582][T30671] tipc: Resetting bearer [ 585.552500][T30686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11219'. [ 585.580624][T30662] tipc: Resetting bearer [ 585.749142][T30695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11221'. [ 585.750022][T30694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11220'. [ 587.428615][T30662] tipc: Disabling bearer [ 587.437539][T30686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.451873][T30686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.612466][T30717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11223'. [ 587.761176][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11226'. [ 588.180916][T30747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11234'. [ 588.411947][T30749] bond7: (slave ip6gretap1): making interface the new active one [ 588.474865][T30749] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 588.552164][T30769] bond9: entered allmulticast mode [ 588.566037][T30769] vti0: entered allmulticast mode [ 588.621339][T30769] dvmrp8: entered allmulticast mode [ 588.698180][T30768] bond9: left allmulticast mode [ 588.717183][T30768] vti0: left allmulticast mode [ 588.834370][T30781] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11240'. [ 589.039821][T30791] netlink: 'syz.2.11243': attribute type 1 has an invalid length. [ 589.095135][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 589.103731][ C1] lec:lec_tx_timeout: lec0 [ 589.108944][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 589.860787][T30831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11253'. [ 591.122627][T30850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11259'. [ 591.152100][T30852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11260'. [ 591.357523][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11260'. [ 591.521670][T30865] wg1 speed is unknown, defaulting to 1000 [ 591.572063][T30865] wlan1 speed is unknown, defaulting to 1000 [ 591.796692][T30879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11266'. [ 592.006421][T30870] nbd3: detected capacity change from 0 to 127 [ 592.223565][T30890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11267'. [ 592.351385][T30893] netlink: 'syz.1.11268': attribute type 1 has an invalid length. [ 592.768922][T30910] netlink: 'syz.3.11272': attribute type 1 has an invalid length. [ 592.782347][T30915] __nla_validate_parse: 3 callbacks suppressed [ 592.782369][T30915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11273'. [ 592.914169][T30918] syzkaller0: entered promiscuous mode [ 592.932202][T30918] syzkaller0: entered allmulticast mode [ 593.165158][ T134] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 593.178232][ T134] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.551806][T30952] wg1 speed is unknown, defaulting to 1000 [ 593.598687][T30952] wlan1 speed is unknown, defaulting to 1000 [ 593.701826][T30961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11283'. [ 593.852269][T30967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11283'. [ 594.124971][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 594.133120][ C1] lec:lec_tx_timeout: lec0 [ 594.139318][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 594.477201][T30991] syzkaller0: entered promiscuous mode [ 594.482845][T30991] syzkaller0: entered allmulticast mode [ 595.051123][T31028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11299'. [ 595.255607][T31028] 8021q: adding VLAN 0 to HW filter on device bond8 [ 595.342125][T31029] macvlan2: entered promiscuous mode [ 595.362598][T31029] macvlan2: entered allmulticast mode [ 595.391051][T31029] bond8: entered allmulticast mode [ 595.411041][T31029] bond8: entered promiscuous mode [ 595.429829][T31029] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 595.460922][T31029] team0: Device macvlan2 is of different type [ 595.482632][T31029] bond8: left allmulticast mode [ 595.490296][T31029] bond8: left promiscuous mode [ 595.630607][T31052] syzkaller0: entered promiscuous mode [ 595.650797][T31052] syzkaller0: entered allmulticast mode [ 596.230529][T31082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11307'. [ 596.247617][T31080] syzkaller0: entered promiscuous mode [ 596.253323][T31080] syzkaller0: entered allmulticast mode [ 596.262158][T31082] netlink: 'syz.2.11307': attribute type 3 has an invalid length. [ 596.399146][T31090] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11308'. [ 597.124827][T31103] syzkaller0: entered promiscuous mode [ 597.156152][T31103] syzkaller0: entered allmulticast mode [ 597.564314][T31125] syzkaller0: entered promiscuous mode [ 597.584051][T31125] syzkaller0: entered allmulticast mode [ 597.755733][T31145] netlink: 13 bytes leftover after parsing attributes in process `syz.0.11321'. [ 599.155062][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 599.163206][ C1] lec:lec_tx_timeout: lec0 [ 599.168032][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 600.234639][T31117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.257440][T31172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11326'. [ 600.360102][ T983] [ 600.362524][ T983] ====================================================== [ 600.369675][ T983] WARNING: possible circular locking dependency detected [ 600.376823][ T983] syzkaller #0 Not tainted [ 600.381372][ T983] ------------------------------------------------------ [ 600.388770][ T983] kworker/1:3/983 is trying to acquire lock: [ 600.394865][ T983] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 600.404740][ T983] [ 600.404740][ T983] but task is already holding lock: [ 600.412114][ T983] ffffffff8ff84688 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 600.422670][ T983] [ 600.422670][ T983] which lock already depends on the new lock. [ 600.422670][ T983] [ 600.433079][ T983] [ 600.433079][ T983] the existing dependency chain (in reverse order) is: [ 600.442199][ T983] [ 600.442199][ T983] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 600.450122][ T983] __mutex_lock+0x19f/0x1300 [ 600.455244][ T983] kobject_uevent_net_broadcast+0x27e/0x560 [ 600.461692][ T983] kobject_uevent_env+0x55c/0x9e0 [ 600.467247][ T983] device_add+0x557/0xb70 [ 600.472104][ T983] device_create+0x269/0x300 [ 600.477224][ T983] msr_device_create+0x33/0x50 [ 600.482507][ T983] cpuhp_invoke_callback+0x445/0x860 [ 600.488324][ T983] cpuhp_thread_fun+0x36b/0x780 [ 600.493704][ T983] smpboot_thread_fn+0x541/0xa50 [ 600.499171][ T983] kthread+0x388/0x470 [ 600.503897][ T983] ret_from_fork+0x51e/0xb90 [ 600.509017][ T983] ret_from_fork_asm+0x1a/0x30 [ 600.514315][ T983] [ 600.514315][ T983] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 600.521967][ T983] cpuhp_thread_fun+0x127/0x780 [ 600.527349][ T983] smpboot_thread_fn+0x541/0xa50 [ 600.532838][ T983] kthread+0x388/0x470 [ 600.537516][ T983] ret_from_fork+0x51e/0xb90 [ 600.542632][ T983] ret_from_fork_asm+0x1a/0x30 [ 600.547926][ T983] [ 600.547926][ T983] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 600.555926][ T983] cpus_read_lock+0x42/0x160 [ 600.561051][ T983] static_key_disable+0x12/0x20 [ 600.566432][ T983] __inet_hash_connect+0x2430/0x2440 [ 600.572251][ T983] tcp_v4_connect+0xd5f/0x19b0 [ 600.577606][ T983] __inet_stream_connect+0x25a/0xdd0 [ 600.583422][ T983] inet_stream_connect+0x66/0xa0 [ 600.588882][ T983] __sys_connect+0x312/0x450 [ 600.593997][ T983] __x64_sys_connect+0x7a/0x90 [ 600.599280][ T983] do_syscall_64+0x14d/0xf80 [ 600.604483][ T983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.610899][ T983] [ 600.610899][ T983] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 600.618636][ T983] lock_sock_nested+0x48/0x100 [ 600.623996][ T983] tcp_sendmsg+0x21/0x50 [ 600.628763][ T983] sock_sendmsg+0x379/0x450 [ 600.633793][ T983] __sock_xmit+0x251/0x510 [ 600.638736][ T983] nbd_send_cmd+0x85b/0x1d10 [ 600.643856][ T983] nbd_queue_rq+0xf2a/0x1100 [ 600.648982][ T983] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 600.655224][ T983] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 600.662078][ T983] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 600.668584][ T983] blk_mq_run_hw_queue+0x348/0x4f0 [ 600.674218][ T983] blk_mq_dispatch_list+0xd16/0xe10 [ 600.679941][ T983] blk_mq_flush_plug_list+0x48d/0x570 [ 600.685851][ T983] __blk_flush_plug+0x3ed/0x4d0 [ 600.691322][ T983] __submit_bio+0x28d/0x580 [ 600.696352][ T983] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 600.702506][ T983] block_read_full_folio+0x599/0x830 [ 600.708321][ T983] filemap_read_folio+0x137/0x3b0 [ 600.713877][ T983] do_read_cache_folio+0x358/0x590 [ 600.719524][ T983] read_part_sector+0xb6/0x2b0 [ 600.724815][ T983] adfspart_check_ICS+0xa5/0xa40 [ 600.730294][ T983] bdev_disk_changed+0x7ba/0x1550 [ 600.736016][ T983] blkdev_get_whole+0x380/0x510 [ 600.741394][ T983] bdev_open+0x31e/0xd30 [ 600.746177][ T983] blkdev_open+0x470/0x610 [ 600.751130][ T983] do_dentry_open+0x785/0x14e0 [ 600.756477][ T983] vfs_open+0x3b/0x340 [ 600.761161][ T983] path_openat+0x2e08/0x3860 [ 600.766274][ T983] do_file_open+0x23e/0x4a0 [ 600.771389][ T983] do_sys_openat2+0x113/0x200 [ 600.776599][ T983] __x64_sys_openat+0x138/0x170 [ 600.782067][ T983] do_syscall_64+0x14d/0xf80 [ 600.787180][ T983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.793630][ T983] [ 600.793630][ T983] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 600.801302][ T983] __mutex_lock+0x19f/0x1300 [ 600.806528][ T983] nbd_queue_rq+0x37b/0x1100 [ 600.811675][ T983] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 600.817766][ T983] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 600.824643][ T983] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 600.831164][ T983] blk_mq_run_hw_queue+0x348/0x4f0 [ 600.836892][ T983] blk_mq_dispatch_list+0xd16/0xe10 [ 600.842661][ T983] blk_mq_flush_plug_list+0x48d/0x570 [ 600.848565][ T983] __blk_flush_plug+0x3ed/0x4d0 [ 600.853944][ T983] __submit_bio+0x28d/0x580 [ 600.859067][ T983] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 600.865230][ T983] block_read_full_folio+0x599/0x830 [ 600.871060][ T983] filemap_read_folio+0x137/0x3b0 [ 600.876609][ T983] do_read_cache_folio+0x358/0x590 [ 600.882330][ T983] read_part_sector+0xb6/0x2b0 [ 600.887806][ T983] adfspart_check_ICS+0xa5/0xa40 [ 600.893290][ T983] bdev_disk_changed+0x7ba/0x1550 [ 600.898844][ T983] blkdev_get_whole+0x380/0x510 [ 600.904322][ T983] bdev_open+0x31e/0xd30 [ 600.909176][ T983] blkdev_open+0x470/0x610 [ 600.914142][ T983] do_dentry_open+0x785/0x14e0 [ 600.919432][ T983] vfs_open+0x3b/0x340 [ 600.924044][ T983] path_openat+0x2e08/0x3860 [ 600.929174][ T983] do_file_open+0x23e/0x4a0 [ 600.934208][ T983] do_sys_openat2+0x113/0x200 [ 600.939426][ T983] __x64_sys_openat+0x138/0x170 [ 600.944802][ T983] do_syscall_64+0x14d/0xf80 [ 600.949932][ T983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.956446][ T983] [ 600.956446][ T983] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 600.963676][ T983] __mutex_lock+0x19f/0x1300 [ 600.968815][ T983] nbd_queue_rq+0xc6/0x1100 [ 600.973867][ T983] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 600.980472][ T983] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 600.987390][ T983] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 600.994057][ T983] blk_mq_run_hw_queue+0x348/0x4f0 [ 600.999696][ T983] blk_mq_dispatch_list+0xd16/0xe10 [ 601.005435][ T983] blk_mq_flush_plug_list+0x48d/0x570 [ 601.011342][ T983] __blk_flush_plug+0x3ed/0x4d0 [ 601.016919][ T983] __submit_bio+0x28d/0x580 [ 601.022873][ T983] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 601.029054][ T983] block_read_full_folio+0x599/0x830 [ 601.034883][ T983] filemap_read_folio+0x137/0x3b0 [ 601.040444][ T983] do_read_cache_folio+0x358/0x590 [ 601.046261][ T983] read_part_sector+0xb6/0x2b0 [ 601.051546][ T983] adfspart_check_ICS+0xa5/0xa40 [ 601.057036][ T983] bdev_disk_changed+0x7ba/0x1550 [ 601.062621][ T983] blkdev_get_whole+0x380/0x510 [ 601.068003][ T983] bdev_open+0x31e/0xd30 [ 601.072769][ T983] blkdev_open+0x470/0x610 [ 601.077711][ T983] do_dentry_open+0x785/0x14e0 [ 601.083043][ T983] vfs_open+0x3b/0x340 [ 601.087638][ T983] path_openat+0x2e08/0x3860 [ 601.092786][ T983] do_file_open+0x23e/0x4a0 [ 601.097809][ T983] do_sys_openat2+0x113/0x200 [ 601.103034][ T983] __x64_sys_openat+0x138/0x170 [ 601.108425][ T983] do_syscall_64+0x14d/0xf80 [ 601.113539][ T983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.119958][ T983] [ 601.119958][ T983] -> #3 (set->srcu){.+.+}-{0:0}: [ 601.127177][ T983] __synchronize_srcu+0xca/0x300 [ 601.132728][ T983] elevator_switch+0x1e8/0x7a0 [ 601.138102][ T983] elevator_change+0x2cc/0x450 [ 601.143403][ T983] elevator_set_default+0x36c/0x430 [ 601.149383][ T983] blk_register_queue+0x366/0x430 [ 601.155022][ T983] __add_disk+0x677/0xd50 [ 601.159967][ T983] add_disk_fwnode+0xfb/0x480 [ 601.165267][ T983] nbd_dev_add+0x72c/0xb50 [ 601.170300][ T983] nbd_init+0x168/0x1f0 [ 601.175035][ T983] do_one_initcall+0x250/0x8d0 [ 601.180328][ T983] do_initcall_level+0x104/0x190 [ 601.185797][ T983] do_initcalls+0x59/0xa0 [ 601.190680][ T983] kernel_init_freeable+0x2a6/0x3e0 [ 601.196404][ T983] kernel_init+0x1d/0x1d0 [ 601.201260][ T983] ret_from_fork+0x51e/0xb90 [ 601.206388][ T983] ret_from_fork_asm+0x1a/0x30 [ 601.211680][ T983] [ 601.211680][ T983] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 601.219504][ T983] __mutex_lock+0x19f/0x1300 [ 601.224709][ T983] elevator_change+0x1b3/0x450 [ 601.230018][ T983] elevator_set_none+0xb5/0x140 [ 601.235483][ T983] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 601.241820][ T983] nbd_start_device+0x17f/0xb10 [ 601.247283][ T983] nbd_genl_connect+0x165b/0x1cf0 [ 601.252827][ T983] genl_family_rcv_msg_doit+0x22a/0x330 [ 601.258900][ T983] genl_rcv_msg+0x61c/0x7a0 [ 601.263930][ T983] netlink_rcv_skb+0x232/0x4b0 [ 601.269230][ T983] genl_rcv+0x28/0x40 [ 601.273733][ T983] netlink_unicast+0x80f/0x9b0 [ 601.279025][ T983] netlink_sendmsg+0x813/0xb40 [ 601.284306][ T983] ____sys_sendmsg+0x972/0x9f0 [ 601.289611][ T983] ___sys_sendmsg+0x2a5/0x360 [ 601.295003][ T983] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.300486][ T983] do_syscall_64+0x14d/0xf80 [ 601.305778][ T983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.312192][ T983] [ 601.312192][ T983] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 601.320801][ T983] blk_alloc_queue+0x546/0x680 [ 601.326191][ T983] __blk_mq_alloc_disk+0x197/0x390 [ 601.331844][ T983] nbd_dev_add+0x499/0xb50 [ 601.336786][ T983] nbd_init+0x168/0x1f0 [ 601.341477][ T983] do_one_initcall+0x250/0x8d0 [ 601.346955][ T983] do_initcall_level+0x104/0x190 [ 601.352435][ T983] do_initcalls+0x59/0xa0 [ 601.357292][ T983] kernel_init_freeable+0x2a6/0x3e0 [ 601.363052][ T983] kernel_init+0x1d/0x1d0 [ 601.367909][ T983] ret_from_fork+0x51e/0xb90 [ 601.373039][ T983] ret_from_fork_asm+0x1a/0x30 [ 601.378335][ T983] [ 601.378335][ T983] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 601.385558][ T983] __lock_acquire+0x15a5/0x2cf0 [ 601.390939][ T983] lock_acquire+0xf0/0x2e0 [ 601.395877][ T983] fs_reclaim_acquire+0x71/0x100 [ 601.401339][ T983] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 601.407764][ T983] __alloc_skb+0x1d0/0x7d0 [ 601.412705][ T983] alloc_uevent_skb+0x7d/0x230 [ 601.418018][ T983] kobject_uevent_net_broadcast+0x2fa/0x560 [ 601.424449][ T983] kobject_uevent_env+0x55c/0x9e0 [ 601.429999][ T983] rfkill_set_block+0x3a2/0x440 [ 601.435462][ T983] rfkill_sync_work+0x114/0x200 [ 601.440848][ T983] process_scheduled_works+0xb6e/0x18c0 [ 601.446921][ T983] worker_thread+0xa53/0xfc0 [ 601.452036][ T983] kthread+0x388/0x470 [ 601.456716][ T983] ret_from_fork+0x51e/0xb90 [ 601.462005][ T983] ret_from_fork_asm+0x1a/0x30 [ 601.467302][ T983] [ 601.467302][ T983] other info that might help us debug this: [ 601.467302][ T983] [ 601.477529][ T983] Chain exists of: [ 601.477529][ T983] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 601.477529][ T983] [ 601.490226][ T983] Possible unsafe locking scenario: [ 601.490226][ T983] [ 601.497674][ T983] CPU0 CPU1 [ 601.503060][ T983] ---- ---- [ 601.508748][ T983] lock(uevent_sock_mutex); [ 601.513437][ T983] lock(cpuhp_state-up); [ 601.520286][ T983] lock(uevent_sock_mutex); [ 601.527406][ T983] lock(fs_reclaim); [ 601.531390][ T983] [ 601.531390][ T983] *** DEADLOCK *** [ 601.531390][ T983] [ 601.539529][ T983] 4 locks held by kworker/1:3/983: [ 601.544639][ T983] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 601.555785][ T983] #1: ffffc9000542fc40 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 601.568236][ T983] #2: ffffffff8fee8b68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 601.578248][ T983] #3: ffffffff8ff84688 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 601.589217][ T983] [ 601.589217][ T983] stack backtrace: [ 601.595194][ T983] CPU: 1 UID: 0 PID: 983 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 601.595213][ T983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 601.595225][ T983] Workqueue: events rfkill_sync_work [ 601.595242][ T983] Call Trace: [ 601.595251][ T983] [ 601.595258][ T983] dump_stack_lvl+0xe8/0x150 [ 601.595281][ T983] print_circular_bug+0x2e1/0x300 [ 601.595306][ T983] check_noncircular+0x12e/0x150 [ 601.595331][ T983] __lock_acquire+0x15a5/0x2cf0 [ 601.595351][ T983] ? lockdep_unlock+0x5d/0xd0 [ 601.595368][ T983] ? __lock_acquire+0x146e/0x2cf0 [ 601.595392][ T983] ? __pfx___mutex_trylock_common+0x10/0x10 [ 601.595426][ T983] lock_acquire+0xf0/0x2e0 [ 601.595448][ T983] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 601.595474][ T983] fs_reclaim_acquire+0x71/0x100 [ 601.595496][ T983] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 601.595517][ T983] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 601.595538][ T983] ? __alloc_skb+0x1d0/0x7d0 [ 601.595558][ T983] ? __local_bh_enable_ip+0xd0/0x130 [ 601.595583][ T983] __alloc_skb+0x1d0/0x7d0 [ 601.595607][ T983] alloc_uevent_skb+0x7d/0x230 [ 601.595635][ T983] kobject_uevent_net_broadcast+0x2fa/0x560 [ 601.595660][ T983] kobject_uevent_env+0x55c/0x9e0 [ 601.595685][ T983] rfkill_set_block+0x3a2/0x440 [ 601.595701][ T983] rfkill_sync_work+0x114/0x200 [ 601.595715][ T983] ? process_scheduled_works+0xa8d/0x18c0 [ 601.595735][ T983] process_scheduled_works+0xb6e/0x18c0 [ 601.595765][ T983] ? __pfx_process_scheduled_works+0x10/0x10 [ 601.595786][ T983] ? assign_work+0x3d5/0x5e0 [ 601.595806][ T983] worker_thread+0xa53/0xfc0 [ 601.595836][ T983] kthread+0x388/0x470 [ 601.595851][ T983] ? __pfx_worker_thread+0x10/0x10 [ 601.595870][ T983] ? __pfx_kthread+0x10/0x10 [ 601.595884][ T983] ret_from_fork+0x51e/0xb90 [ 601.595905][ T983] ? __pfx_ret_from_fork+0x10/0x10 [ 601.595924][ T983] ? __switch_to+0xc7d/0x1450 [ 601.595941][ T983] ? __pfx_kthread+0x10/0x10 [ 601.595957][ T983] ret_from_fork_asm+0x1a/0x30 [ 601.595984][ T983] [ 604.175027][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 604.183185][ C1] lec:lec_tx_timeout: lec0 [ 604.187800][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 610.004985][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 610.013180][ C1] lec:lec_tx_timeout: lec0 [ 610.017923][ C1] lec:lec_start_xmit: lec0:No lecd attached