last executing test programs: 41.080522669s ago: executing program 0 (id=19113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/195, 0xc3}], 0x1}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/192, 0xc0}], 0x1}, 0x2103) 40.855484242s ago: executing program 0 (id=19116): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 40.332199017s ago: executing program 0 (id=19129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)="cfcf2b3f50d6ab9c424567baf30fd5265a2d4844a5ed9c6edd4debda563d84235844726d18141f25075884091b87eb30d718af56ece22fcdf5d01264cd89eb3acc61039c18dc401192eab4f69abb7f7bbc886cf696613233a4bdb3497f84c5c4ce3411781afe630b5f0848f0c6eae5b3fb48a101424ec3e5b616a4b8612360242c87500238804bc5c15c369b4d332e763efb38a332a33dbef13124b68b022ff49e66e6af44fbe1345ab94a6475e4eb", 0xaf}, {&(0x7f0000000440)="1267aff1297f1787907c1da866fd2266d9993d971f7832a577589fab3892a46ea5e3611b4350af56c84f43143a81239ef9884fcffd5efbc628d198a637027f5db8c1abe9ff005f9d74cbe9543957e47f4745c07e8d7bf40dbda4de1f41266e7c01f2e5e09d1bcaab5520277a803da7da1386f9a4bdd9c08ef1c1fcb6855d2815555222e43517cc5f9f6aba6971001698e0", 0x91}, {&(0x7f0000000500)="1f0260a1a4f7ff0e3f494f3375c587516150b54dc8fc442551f42c6e392f0ca73d9a7b6796c4729ee5908d0713b42b6ec7b1aefa002cfeb7987362827e80d949", 0x40}], 0x3}}], 0x1, 0x10) recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000400)=""/29, 0x1d}], 0x1}, 0x100}], 0x1, 0x10122, 0x0) 39.911037758s ago: executing program 0 (id=19142): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x31) 39.830068188s ago: executing program 0 (id=19144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) 39.703732532s ago: executing program 0 (id=19147): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r1, &(0x7f0000000080)=""/47, 0x2f) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 24.51403238s ago: executing program 32 (id=19147): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r1, &(0x7f0000000080)=""/47, 0x2f) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 8.727486741s ago: executing program 5 (id=19558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@ifindex, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback=r0, r2, 0x2f, 0x2030, 0x4, @void, @void, @value=r3}, 0x20) 8.682362694s ago: executing program 5 (id=19559): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 8.373150235s ago: executing program 5 (id=19561): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/184, 0xb8}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/163, 0xa3}], 0x3}, 0xfffffffd}], 0x1, 0x40000100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 5.675897358s ago: executing program 5 (id=19570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 5.463782671s ago: executing program 5 (id=19574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.364363691s ago: executing program 5 (id=19577): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x4, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 5.067833653s ago: executing program 3 (id=19582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r3, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 5.054669446s ago: executing program 2 (id=19583): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r3, r1}) 4.886595756s ago: executing program 3 (id=19585): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392d, 0x11, r0, 0x100000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3cad75f87b473622140aca9f6be4377caaba76f08daaad767f134c2ffc2ba9c92a5971b01b71a225dababc99832633ea975d465532309695b29d56eb9befec5159067bffa2d17b24093b372ebaf5589d18a8905982d01ee2870aa096647d6afabca77e0f36a01481b10ed8f0a585ceb41bf50f0515c259bbbbee74db0e045a9fde3614d35c6f2dfa1e71dace811a410bdfb395dd7c54fa733c6f8111f24df309ad928c6462d0a53a3824f9af07b11cb0c05724c33acfad1f5f16bffaf6c58ab2b8c4626bd9d4d1cc4ab67c9838b1fc53fb4ce46d304a12fffc2110043381d08160f056e8d3908497a402dcc156ff69bbf5cb5e5443c06bc4e3c6e4f231aab0eb6fdd2bb0740ae88095360d8b247daa6628fc10edbf048d800625134022e1d5d0bcb5c50e567f50c1990b1a434caa57d210b6084c9424d37c7a71479613b69b67670baab82f13b0923a73786655cfceb0c70d511b94f992391cad9ce57c5c76675cae6a2712cb9ce6dc07bdd0118001f062a22943ca72742a0fe97c48b9b895515fc71145fac9dfd27118a70b71dd564f27e31e1112292864a7be45459524ad8fb03c1f4388bdba3d9e3882a9be894133b0deea92885d0276f268bad0396635036192da1a9788e7525b08de07b0f351147e0f2aaa239e197924a5fc6961dbfcc96ad4cae4cf59f7a812d0c7f8506216dfb7658f8f8545477f4b6c1a606554ee19621d85438014d5e569b0c467e67cf0bb046284f4145ee9f9601b950b0217d183d0266da78f83ed2cf8a83f1374295853d52cdd561a756f247598126cddc98416c42c47a5ad4fda1c419b6ce04f4b57efd2cecf7bfe1589aab05c33e397c8acfb5e4d05cc62db2ba633e74d08c9a3c92111d39ef7d1c0321bfa1827b9fbbb592c49d46244b57c985ee4cc830f7eeda32cae961c4386916f927fc7f442eb6e2eaf45a3d2b0f28d4d319fdedd003aedc1c6384085921397a041384edee7172973fddb3eee2132acdec385cb596055f82a41087097ffece144a340cfe3ec0c0b833f4a92d28709419827eb0f747d73a2e7cc7d00a24749b9dd340793e2ca36536bc47233c9e2602a7f7f94450b22117215be6086d0c0132d24350c19abcb3d713fa97f76ce6ec8f61b24bfecb3ddcd0e7bccd0c4839de19283e95e08bc629554aac9543c15b0f69f1d03374269796c477579d212708b760914bde3269d9e9b0036c7cd0e8f3376d6a62ed0cde76861423ec5f76f2ab4d0f05b21db57277feaaf8475e6e6d1e5672281db17046b7464439d69e25210f67998e912d02c5296c60a450a38495e3b6737339a05f83e5a02aa1ee5bca6bf67ba84c659ef3cc4495cb1551e749277a86db07e7c48f61ee0672919d6a00472a893b6c6eead02140318fb497a1819b692b9bcb3b5cbe7cb55b9524abb1268b3f4a031a64fe6305519a2212298089c443b0503e77b7c8a3da14387872ca35cd6524f629161d85f253498568587513aa16848fa8f8f3dea115cbe8e85bdb8aa20f20ce26f3fcaac4615a9b9d7d6919ba952f7e93a96ba26010cc4bc24622ed3bb9b063e0e686f41b2cece5a50d787676600a04bfe7e6eb78e740b8bcb4b3a51f2a39250d0163a75d8f97032c60efc5516ba48ce2d53da0a7aab99330369a2c44cfc6ac65707733971493de86a519629f7be4643a52abe3d0ca1e22dfa27d8f7c54c50e0e1f3f639dbc622afa56d22b2732232d62b0a312c359dfd25e266f2138a49689fcc789470b01aabc05563ab025938153c15abbb300192e0bc27f810246d4d24295f337db02aa6b3e801905ee519a681fd73462eb330800763f75ae88e3e57c2a5552fba4b6154cab775625b817e18ff1e26273d21bf8b3cb2a79df7e92a8e498dadc04f11c62d6841bdd0408b212a43951a4a4f4f29c9b8918644e743e2f30cc52d422a9ce03750307096a5f8b61bb585ada2ad7a63d440e418c16e6827792dd470fa980a72cbe53b354ab208b0cb99ad858ff2ee4395f7fbff96c38fe2f84ccca78b6c867d1ff0440c5795b875339b87d98e59dca2dd80b3624c7406b56dc76b0198514bdb97b228e5b726683b3c12f71fb2b1dda24d085175acdc5d7744129df8065168ac103d819bc95dd408e17bfa7ae37d0ff5145e393a37b5cc08c2c10e5ef5d80dd6c79d35c650417e6fc47467c3552bbc1a3d50d2cdce471e5cd43b48475272e30c9d415c826bed60369c1841219e15d93bd87de49e2566de3a01dfc60cd3295134c876863cbfb7be8be44b0d4369b81a778f8fb2fcd039048fd16bf9d4f08a9458dbeadb298ee12b7ee7f6f43099dc684e33bee75d23f37c5b058e56f785f1c2af0c2ad66b69fc1fc06073bd53bed4a967314a6af8ede4d2facdae08ed503c4903fd5fdfd291327cd2ead1876361a16d9341cc24a63b2b51538b7199e048c00cab7127d19ae9a3ea0755b9b5d9604fefcfe7237d641019291bcd9ce30d5a388ad7127fde6061f1e307c0024ff1c200dc04354340eb4e8daac073b7c2f1fe1cee49330cc89ac061bd8a5f1676391d22d4afc8e5875daf4806bac0b5565bb99f07723cdd063ff070ba409fba6642888ea88109b333c3748f77b99f3bd4b9b61ec5e3d798d3584937c0165f4df571b8132ae425849e7e5ce414fbb00d9a30c129e2c13b6791435bb552bb01cedf3003b3bb24503fe226121d1f83419d5c23fad54dbd08fb3449b8a561954a23b47e34b7b14ddbcec2745353269e19fe218da2d0aad6df73083b3979160d4e52c8532c9f6602bc8ee624b9d5157fefbffec98e0e91a4f3824ccb4c33e17d19011f4c8db333d0fc5530930951cb63353a3aa0617ab2aba52268b81628d9f4a56b227300488c10df1e7f7533e1e4db449cb9cb6e588debf4795f98810702de5bfb81414bdacfcbd9e66f051ec7272b41ba281e8a68fe7c61e1cb4e74077342ddb7c5191d9731448a9e42a30c4df80e533db26ca3e12ab8ce8b5f0d114888692589b6c836c603ea4210c31b0e053092d75d9ceb49c5e9e2815b5aeebfcb53e97017d0ff6c7d3410120e355f9a6a1226e64a1621a2e6c04865acb25e137243ab9b82beea39c411163afd8969b086df73751020879785ec79c451fb822c11df1ae927318b35bd583a56827fd8744df8e7693837b8ddb0e831fd97b87505d5540d76d3e09895e64cc563dadf60bec88ee70b6008a53e50523ffbd2c0aa9f19123bd6f28de9851ae1f3f6101b46acf9139792be4872bf494c8970aee100a7a0c4dfbccbf01b6ccbebdfa8291f8ab3e25a9e4ff5dbda11488630e3bb8158b8f8de8cd4f793885e7a28e5afdf45eb57ad1330dfc0c51f51986e53c458feb4a4ef55b810a32f847d7ff5500c0f769d9abc090c10f87ba4e5250f36e70abb838ccb8f9fa95d96ba1e2e75a2d808a8fa26b686149ed6738a8e63ef70ed284e25d044aaa1e14c8caea04b77c9fba96036dd8b3be2e7704c65090fa7e8bf0e45c291709d3eb16a81e8aac27a120e52c05866310d8f288367f2b5187e83a1f7d5cb9dc6f8faa648683b7c88d54871dfcdca822568959ac2f7eb7dd3a345b0a8149806105dc90abfee3d5cefae3dfece4723fdc5a73c3a087020ca2fe1b166fe5b54cfb2f661fa5b017502155bf91856c3aae5cd20a48fbb958e1a0e70df51e4e46bbea56f639f6f32698d45297296244e8aaa845c13b70fa7f4f31115de0808975c143191c89c0233c557ddb93d6233ce22a699ca9a54ca6e8ddcfb5bf9d95b9807a49d9a64f7a239c77fa4e0d92d561fca5aa3e6c149c16c11131c9ad78493572cf1a9f953cc63ef8121cfa86a0f3fdb5a73c8530ddf93a9308fcaf436455aa6817f65e4616c9e38733b1cf9fa09822953d7d203748c5e45cbbe84a4fb7d59318013ba2a7da6f972c47ff9289091d7476035affddf44cc7a0b223cd14af5243dd14cd5d0f42849bd31af8ef9de434a01c52ee583c2d93b4785c34969629ffa406335ccd090637b83a5ee126a4833e6d6cf92b8aa6f9a2213df25fa575980c0cbd98039ca978860442b7466c3d4aa215593243d9c7ad3980470c9ef85154566ceed93ccb0330634f92d1fe5050bfe135f345527c93476e474f31ea45729ec534475d36b69876644e5db59c8cb0412f8d65be9ff2bea5ac37c5b1ff5d5d484aebed8b33920bbc8ed59ba9b3bf24ab6da8ebeda14dad9148183411980136cc2fde47049c98063b0ff1816a0852af035cbe8313d88620559e8331d983a43e0f4b515a61f5761bcd2130853ea24377d042643684699ceb9441a73f1285f6a15c8e00d17b4e051df2bd16b1a5699f6dce4556b0b6c88b8b86464beb6415777a8ec890c9335cc14452d6b23e2483d5b77b56042a694435bf913cb6e48ce6ca60c3009b274869bb350a8026d80680b32c9394e9b5dfee8df555a705bb1ff17ac848ccec95bb37206a72ab1d56160682d83e38c8acca34b08fa3b8665b35d01967c0a49681ef74b89b39f785977187a9d6f70affe2a32f41fe942fbd30fd9da981cf8f75485015962cb598d3d09a039787bf8d339695d0f5cd7cb60d25cdba119fa435e3692e06bdd76db5856eb2ed2cd85a081209b0a1453d52e1f8cf5120c7f044bddc38cded7ed59a793bfb2b289137137147f704a0628bb8e3e342b6084fbcc105b5345023fed9b2d339b95b0d0c97945943a70e007fe2172c501fae54ad04c279ae6da7150ea25469ce7e9c33b51713b05dcd4753930a0a37326d276fd28c8c0f6e06660beb102e2868fee31f70d37d38769e824846b081d120d8fcd394627fd672fe823cfdcf7af07b20b40e8e5efce8e93e8414744efd2723798aad9dabd8e23efc08983db6c65cf3c43d5b759ca52d118fad7a1bb23e5b3578f616fc42e304c797e640d8b985987274766adbf424e4e9a78c29dc436636e0df6e9255ebdd2c7c0cd261d42631cc49df231d0bd080da2928bcab9a0546b404b658f75fca9d8e506f3f6639bca2a13eae6bded0081fd2239bd8c0ab2382d23eecfb8985da82fe5ed32a96ac1e198d7f8cf5752cfb296af0a2d59ed19022cb084b525d44d8c773a14743a706baf209aebb270104b16181fdc2462d356341d89ba8024171c462640abfc3bd6f602c3bbd710f6ae6a2cef146f27002f78051d6687b83dac0cc627e0af1ed8765396d9783c6429b4063a8d58728c60ec88416c5dbdf362b891d278db21c9a4558c724b06547fc5f641801dd0da8403e57cff37d407fab07bb389c40555af869af263265333bf8aa4290d7cdb9a78573362d608a549165f13323c0107aa4dfac934fef838cf6e5f06b9324a5d8474183f077de97287eaf3c85cb74165b189d7547d3fccc4c763d02ce57d59c70f39e8065cdeb5fd13c4c14609f98941b73b16fed60bc55a2d8ef92104568b595f4a31f6428d527b34c470715d1300cd41ea992763f46a739ba387f359ee1d97c51e889e5599cebd800dbeef1496e3dbacaafc403d0dc7cd3c7d193788536aa5b0f5f25482744107d74795f27a8a8832596166fdcaa548b90c48890715526a52518f16d697d65beb6321befa003dc56432e3dd4b01cede5447813eb429dce845bf9702e5063fe571d8cb6cfecf12870e373b42c4f86f75b7b249f1bdb397113dfd7a23f1930f8533e300e8d0dc1674acb3ce38342b01edcaa09a0f4502f0ba94efeb853fa917612fc16a3829b437663a1e1", 0xfc1}], 0x1, 0x6) close(0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) 4.672488645s ago: executing program 3 (id=19588): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) 4.55169199s ago: executing program 4 (id=19589): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 4.546168468s ago: executing program 2 (id=19590): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1c11a077609475b78411e88509d0050000000000f2170e65e3f5037fe422000000000086350000000200000000001900", 0x3c}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, r2, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r1) 4.463855691s ago: executing program 3 (id=19592): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x8) write(r1, 0x0, 0x0) 4.337845596s ago: executing program 4 (id=19593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000540)="dbcadafd", 0x4}], 0x1}}], 0x1, 0x400c8d0) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) 4.256881054s ago: executing program 4 (id=19594): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f00000002c0)="04", 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) 4.243186894s ago: executing program 2 (id=19595): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x6, 0xfffffffe}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 4.195351708s ago: executing program 3 (id=19596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 4.09379462s ago: executing program 4 (id=19597): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 4.080346825s ago: executing program 1 (id=19598): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.00130565s ago: executing program 4 (id=19599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 864.800474ms ago: executing program 2 (id=19600): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xbf, 0x4}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 832.270392ms ago: executing program 1 (id=19601): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}}, 0x20}}, 0x404c080) splice(r0, 0x0, r3, 0x0, 0x66, 0xf) 716.290233ms ago: executing program 1 (id=19602): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x58, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "1fae3d1f47b04fd0d023b0f6cad7d77a"}]}}]}, 0x58}}, 0x24004015) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 681.169388ms ago: executing program 4 (id=19603): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x108, 0x42030028, 0x0, &(0x7f0000000000)) 626.224997ms ago: executing program 3 (id=19604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x1, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2c, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad39"}}, 0x3a) 463.344485ms ago: executing program 1 (id=19605): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48) unshare(0x60600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 265.909342ms ago: executing program 1 (id=19606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000080)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) 218.328691ms ago: executing program 2 (id=19607): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 117.944231ms ago: executing program 1 (id=19608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 2 (id=19609): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) kernel console output (not intermixed with test programs): 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.826015][ T4096] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007ffd7d872b98 [ 726.826050][ T4096] [ 726.826094][ T4096] Mem-Info: [ 727.112542][ T4096] active_anon:12343 inactive_anon:5 isolated_anon:0 [ 727.112542][ T4096] active_file:2697 inactive_file:40475 isolated_file:0 [ 727.112542][ T4096] unevictable:768 dirty:196 writeback:0 [ 727.112542][ T4096] slab_reclaimable:12328 slab_unreclaimable:117611 [ 727.112542][ T4096] mapped:29315 shmem:1285 pagetables:1384 [ 727.112542][ T4096] sec_pagetables:0 bounce:0 [ 727.112542][ T4096] kernel_misc_reclaimable:0 [ 727.112542][ T4096] free:1279608 free_pcp:24838 free_cma:0 [ 727.177658][ T4096] Node 0 active_anon:49972kB inactive_anon:20kB active_file:10788kB inactive_file:161700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117260kB dirty:784kB writeback:0kB shmem:3604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12400kB pagetables:5280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 727.254098][ T4096] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 727.349329][ T4096] Node 0 DMA free:15136kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:116kB free_cma:0kB [ 727.420058][ T4096] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 727.441392][ T4096] Node 0 DMA32 free:1211572kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53472kB inactive_anon:20kB active_file:10788kB inactive_file:161700kB unevictable:1536kB writepending:784kB zspages:0kB present:3129332kB managed:2552916kB mlocked:0kB bounce:0kB free_pcp:41144kB local_pcp:26268kB free_cma:0kB [ 727.521441][ T4096] lowmem_reserve[]: 0 0 0 0 0 [ 727.534279][ T4096] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 727.594798][ T4096] lowmem_reserve[]: 0 0 0 0 0 [ 727.601070][ T4096] Node 1 Normal free:3890828kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:53632kB local_pcp:25296kB free_cma:0kB [ 727.674771][ T4096] lowmem_reserve[]: 0 0 0 0 0 [ 727.684981][ T4096] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15136kB [ 727.741058][ T4096] Node 0 DMA32: 5155*4kB (UM) 5293*8kB (UME) 2409*16kB (UM) 1217*32kB (UM) 650*64kB (UM) 854*128kB (UME) 722*256kB (UM) 489*512kB (UM) 274*1024kB (UM) 105*2048kB (UM) 0*4096kB = 1222180kB [ 727.774748][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.788971][ T4096] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 727.814746][ T4096] Node 1 Normal: 3*4kB (UM) 8*8kB (UM) 8*16kB (UM) 10*32kB (UM) 8*64kB (UM) 9*128kB (UM) 6*256kB (UM) 8*512kB (UM) 6*1024kB (UM) 5*2048kB (U) 944*4096kB (UM) = 3890828kB [ 727.843933][ T4096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.853788][ T4096] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 727.864730][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 727.907042][ T4096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.925257][ T4096] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 727.944661][ T4096] 44453 total pagecache pages [ 727.953801][ T4096] 0 pages in swap cache [ 727.962718][ T4096] Free swap = 124996kB [ 727.970751][ T4096] Total swap = 124996kB [ 727.979952][ T4096] 2097051 pages RAM [ 727.988306][ T4096] 0 pages HighMem/MovableOnly [ 727.998648][ T4096] 427036 pages reserved [ 728.007272][ T4096] 0 pages cma reserved [ 728.014802][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 728.042680][ T4103] gretap0: left allmulticast mode [ 728.089149][ T4103] geneve0: left promiscuous mode [ 728.140531][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.154857][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.169621][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.206810][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.190675][ T4169] tipc: Enabling of bearer rejected, failed to enable media [ 729.228949][ T4171] pimreg: entered allmulticast mode [ 729.258330][ T4171] pimreg: left allmulticast mode [ 729.968489][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14632'. [ 730.770617][ T4220] validate_nla: 43 callbacks suppressed [ 730.770637][ T4220] netlink: 'syz.4.14643': attribute type 1 has an invalid length. [ 730.821322][ T4220] netlink: 'syz.4.14643': attribute type 7 has an invalid length. [ 730.845947][ T4220] netlink: 'syz.4.14643': attribute type 8 has an invalid length. [ 730.869548][ T4220] netlink: 208 bytes leftover after parsing attributes in process `syz.4.14643'. [ 730.898979][ T4220] NCSI netlink: No device for ifindex 1073545264 [ 732.080698][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14655'. [ 732.092809][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14655'. [ 732.849652][ T2880] block nbd9: Receive control failed (result -32) [ 732.907654][ T4274] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 733.448882][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.476468][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.728038][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.759289][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.794949][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.825104][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.836420][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.860811][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.882105][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.913141][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.302354][ T4336] vxcan2: entered allmulticast mode [ 735.359087][ T4340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14695'. [ 735.559842][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14699'. [ 735.574398][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.592829][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.175434][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 736.183381][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 736.815356][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 737.235115][ T4423] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 737.257875][ T4423] syzkaller1: linktype set to 769 [ 737.610026][ T4437] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14742'. [ 737.912662][ T4448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14747'. [ 737.923953][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14747'. [ 737.936310][ T4446] netlink: 7 bytes leftover after parsing attributes in process `syz.4.14746'. [ 737.958738][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14747'. [ 738.841355][ T4481] xt_hashlimit: size too large, truncated to 1048576 [ 739.822443][ T4485] gretap0: left allmulticast mode [ 739.833973][ T4487] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 739.877828][ T4118] syz1: Port: 1 Link DOWN [ 739.917300][ T4493] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 739.958501][ T1169] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.998868][ T1169] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.024265][ T1169] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.048673][ T1169] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.138437][ T4502] xfrm0 speed is unknown, defaulting to 1000 [ 740.462592][ T4523] netlink: 'syz.4.14776': attribute type 2 has an invalid length. [ 741.091666][ T4502] lo speed is unknown, defaulting to 1000 [ 741.734515][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14784'. [ 741.784197][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14784'. [ 742.220158][ T4565] netlink: 332 bytes leftover after parsing attributes in process `syz.2.14787'. [ 742.235764][ T4565] netlink: 'syz.2.14787': attribute type 9 has an invalid length. [ 742.256260][ T4565] netlink: 108 bytes leftover after parsing attributes in process `syz.2.14787'. [ 742.288956][ T4565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14787'. [ 743.927441][ T4624] bond6 (unregistering): Released all slaves [ 743.948152][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14812'. [ 744.630710][ T4673] netlink: 'syz.3.14830': attribute type 9 has an invalid length. [ 744.648646][ T4673] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14830'. [ 744.805479][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14832'. [ 744.857591][ T4684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14834'. [ 745.136576][ T4702] tap0: tun_chr_ioctl cmd 1074025677 [ 745.152275][ T4702] tap0: linktype set to 776 [ 745.296834][ T4712] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14847'. [ 745.451439][ T4723] netlink: 'syz.1.14852': attribute type 1 has an invalid length. [ 745.514728][ T4723] netlink: 'syz.1.14852': attribute type 1 has an invalid length. [ 745.846866][ T4750] netlink: 'syz.4.14864': attribute type 1 has an invalid length. [ 745.888107][ T4752] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 745.893283][ T4750] netlink: 'syz.4.14864': attribute type 2 has an invalid length. [ 747.263183][ T4836] __nla_validate_parse: 4 callbacks suppressed [ 747.263232][ T4836] netlink: 256 bytes leftover after parsing attributes in process `syz.1.14903'. [ 747.294234][ T4836] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14903'. [ 748.392097][ T4888] sch_fq: defrate 0 ignored. [ 749.078517][ T4926] ip6gre3: entered promiscuous mode [ 749.104493][ T4926] ip6gre3: entered allmulticast mode [ 749.174363][ T4929] veth0_to_team: entered promiscuous mode [ 749.186494][ T4929] gretap0: entered promiscuous mode [ 749.712393][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14956'. [ 754.227706][ T5184] netlink: 216 bytes leftover after parsing attributes in process `syz.4.15053'. [ 754.245189][ T5184] netlink: 'syz.4.15053': attribute type 2 has an invalid length. [ 754.368510][ T5188] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 755.076707][ T30] audit: type=1804 audit(1781627998.885:7): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15073" name="/newroot/2993/cgroup.controllers" dev="tmpfs" ino=15012 res=1 errno=0 [ 755.133254][ T30] audit: type=1800 audit(1781627998.915:8): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15073" name="cgroup.controllers" dev="tmpfs" ino=15012 res=0 errno=0 [ 755.762747][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15092'. [ 755.806647][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15092'. [ 755.837193][ T5267] netlink: 'syz.1.15092': attribute type 20 has an invalid length. [ 756.256241][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15105'. [ 756.275189][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15105'. [ 756.434862][ T5308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15107'. [ 756.803975][ T5318] tunl0: entered allmulticast mode [ 756.898322][ T5324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15114'. [ 756.909754][ T5324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15114'. [ 757.786759][ T5372] pim6reg0: tun_chr_ioctl cmd 35111 [ 757.800637][ T5376] netlink: 'syz.2.15138': attribute type 3 has an invalid length. [ 757.814164][ T5376] netlink: 'syz.2.15138': attribute type 1 has an invalid length. [ 757.823571][ T5376] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15138'. [ 757.886985][ T5383] sctp: [Deprecated]: syz.4.15140 (pid 5383) Use of int in max_burst socket option. [ 757.886985][ T5383] Use struct sctp_assoc_value instead [ 758.150362][ T5399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15147'. [ 758.195839][ T5399] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 759.197438][ T5460] nbd: couldn't find a device at index 0 [ 759.312136][ T5440] __nla_validate_parse: 2 callbacks suppressed [ 759.312170][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15166'. [ 761.199318][ T5559] tipc: Enabling of bearer rejected, already enabled [ 761.249537][ T5561] vcan0: tx drop: invalid sa for name 0x0000000000000da6 [ 761.632801][ T5586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15229'. [ 761.989173][ T5609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15240'. [ 762.044782][ T5609] vlan2: entered promiscuous mode [ 762.055519][ T5609] vlan2: entered allmulticast mode [ 762.780667][ T5665] bond6: entered promiscuous mode [ 763.115145][ T5685] netlink: 84 bytes leftover after parsing attributes in process `syz.1.15269'. [ 763.188520][ T5700] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15271'. [ 763.212821][ T5701] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 763.536565][ T5736] netlink: 'syz.0.15280': attribute type 5 has an invalid length. [ 763.811198][ T5773] vlan3: entered promiscuous mode [ 763.984122][ T5786] tipc: Enabling of bearer rejected, already enabled [ 764.008588][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15294'. [ 764.136605][ T5796] IPv6: NLM_F_CREATE should be specified when creating new route [ 764.415093][ T5812] netlink: 'syz.4.15303': attribute type 12 has an invalid length. [ 764.455253][ T5812] netlink: 'syz.4.15303': attribute type 11 has an invalid length. [ 764.480913][ T5812] netlink: 212004 bytes leftover after parsing attributes in process `syz.4.15303'. [ 766.530462][ T5916] bond5: (slave tunl0): Device is not bonding slave [ 766.564229][ T5916] bond5: option active_slave: invalid value (tunl0) [ 766.971656][ T5916] bond5 (unregistering): Released all slaves [ 767.692398][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15368'. [ 768.275762][ T5959] gretap2: entered allmulticast mode [ 768.366193][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15369'. [ 768.444225][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15372'. [ 768.812732][ T5985] netlink: 480 bytes leftover after parsing attributes in process `syz.3.15383'. [ 768.841114][ T5985] netlink: 480 bytes leftover after parsing attributes in process `syz.3.15383'. [ 769.003183][ T5995] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15385'. [ 769.342435][ T6014] netlink: 'syz.3.15393': attribute type 1 has an invalid length. [ 769.446703][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15394'. [ 770.127799][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15412'. [ 770.155536][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15412'. [ 770.255993][ T6058] netlink: 1 bytes leftover after parsing attributes in process `syz.1.15415'. [ 770.305863][ T6060] syzkaller1: tun_chr_ioctl cmd 35108 [ 771.171427][ T6112] netlink: 81 bytes leftover after parsing attributes in process `syz.0.15441'. [ 771.771014][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15454'. [ 771.803803][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15454'. [ 771.836092][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15454'. [ 771.864773][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15454'. [ 771.884251][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15454'. [ 771.908361][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15454'. [ 772.329682][ T6168] tipc: Cannot configure node identity twice [ 772.997609][ T6205] netlink: 'syz.2.15486': attribute type 12 has an invalid length. [ 773.542865][ T6232] macvtap0: entered allmulticast mode [ 773.554717][ T6232] veth0_to_bridge: entered allmulticast mode [ 773.635288][ T6232] veth0_to_bridge: left allmulticast mode [ 776.540757][ T6364] __nla_validate_parse: 3 callbacks suppressed [ 776.540778][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15557'. [ 777.217175][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15576'. [ 777.243544][ T6406] bond0: Unable to set up delay as MII monitoring is disabled [ 777.424823][ T6422] batadv_slave_0: entered promiscuous mode [ 777.431877][ T6420] batadv_slave_0: left promiscuous mode [ 777.439977][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15584'. [ 778.318147][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15606'. [ 778.826982][ T6494] bond7: ARP target 9.0.0.0 is already present [ 778.835346][ T6494] bond7: option arp_ip_target: invalid value (9) [ 778.842284][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15615'. [ 778.886920][ T6494] bond7 (unregistering): Released all slaves [ 779.853848][ T6538] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 779.887174][ T6538] bond7 (unregistering): Released all slaves [ 779.939884][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15634'. [ 780.239977][ T6570] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15643'. [ 780.272419][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15643'. [ 780.299329][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15643'. [ 781.447963][ T6637] netlink: 7 bytes leftover after parsing attributes in process `syz.0.15674'. [ 781.769094][ T6658] __nla_validate_parse: 3 callbacks suppressed [ 781.769116][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15683'. [ 781.811617][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15683'. [ 783.509943][ T6741] bond0: (slave ip6tnl0): refused to change device type [ 783.547544][ T6741] ip6erspan1: entered allmulticast mode [ 784.530833][ T6781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15738'. [ 784.603060][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15740'. [ 784.700266][ T6792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.015614][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15756'. [ 785.044864][ T6813] veth1_to_team: entered promiscuous mode [ 785.064082][ T6813] veth1_to_team: left promiscuous mode [ 785.165897][ T6822] netlink: 'syz.1.15758': attribute type 1 has an invalid length. [ 785.871444][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15776'. [ 785.901311][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15776'. [ 786.261503][ T6875] tun0: tun_chr_ioctl cmd 1074812117 [ 786.295701][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15784'. [ 786.362980][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15788'. [ 787.592850][ T6962] tipc: New replicast peer: 255.255.255.255 [ 787.610822][ T6962] tipc: Enabled bearer , priority 5 [ 787.697113][ T6969] xt_hashlimit: size too large, truncated to 1048576 [ 787.750659][ T6973] @0Ù: renamed from bond_slave_1 [ 788.364686][ T6999] IPv6: NLM_F_CREATE should be specified when creating new route [ 788.414192][ T7004] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15837'. [ 788.725988][ T4107] tipc: Node number set to 2886997007 [ 788.975984][ T7030] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.15851'. [ 788.999269][ T7030] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.15851'. [ 789.103092][ T7038] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.15854'. [ 789.130269][ T7040] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.15855'. [ 789.855483][ T7081] xt_hashlimit: size too large, truncated to 1048576 [ 790.027733][ T7090] xt_hashlimit: max too large, truncated to 1048576 [ 790.055496][ T7090] No such timeout policy "syz1" [ 791.172052][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15906'. [ 791.209661][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15906'. [ 791.656325][ T7185] netlink: 'syz.3.15921': attribute type 11 has an invalid length. [ 791.692318][ T7185] netlink: 'syz.3.15921': attribute type 4 has an invalid length. [ 791.726700][ T7185] netlink: 'syz.3.15921': attribute type 6 has an invalid length. [ 791.753687][ T7185] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.15921'. [ 792.771241][ T7234] netlink: 'syz.4.15942': attribute type 3 has an invalid length. [ 792.782601][ T7233] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 792.800893][ T7234] netlink: 'syz.4.15942': attribute type 3 has an invalid length. [ 792.946483][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15948'. [ 793.251758][ T7263] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 793.369491][ T7267] tipc: Enabled bearer , priority 5 [ 793.411549][ T7265] xfrm0 speed is unknown, defaulting to 1000 [ 793.655383][ T7272] batman_adv: batadv0: Interface deactivated: macsec3 [ 793.679444][ T7272] batman_adv: batadv0: Removing interface: macsec3 [ 793.863385][ T7265] lo speed is unknown, defaulting to 1000 [ 794.504463][ T5764] tipc: Node number set to 2886997007 [ 794.610410][ T7305] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15971'. [ 794.658266][ T7307] veth0: entered promiscuous mode [ 794.665575][ T7306] veth0: left promiscuous mode [ 795.040069][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15980'. [ 795.542534][ T7341] netlink: 'syz.3.15988': attribute type 4 has an invalid length. [ 795.725647][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15995'. [ 797.047585][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16033'. [ 797.213326][ T7454] xt_hashlimit: max too large, truncated to 1048576 [ 797.229548][ T7454] xt_hashlimit: overflow, try lower: 2/0 [ 797.790391][ T7488] netlink: 'syz.0.16052': attribute type 29 has an invalid length. [ 797.825435][ T7488] netlink: 'syz.0.16052': attribute type 29 has an invalid length. [ 797.954482][ T7496] smc: net device lo applied user defined pnetid SYZ2 [ 797.962692][ T7496] smc: net device lo erased user defined pnetid SYZ2 [ 798.025039][ T7500] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 798.424818][ T7521] tipc: Enabling of bearer rejected, failed to enable media [ 799.080750][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16078'. [ 799.097525][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16078'. [ 799.460424][ T7579] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.16092'. [ 799.738391][ T7597] batadv_slave_1: entered allmulticast mode [ 799.771821][ T7597] dvmrp8: entered allmulticast mode [ 799.788002][ T7596] batadv_slave_1: left allmulticast mode [ 799.812285][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16102'. [ 799.965619][ T7606] syzkaller1: entered promiscuous mode [ 799.983272][ T7606] syzkaller1: entered allmulticast mode [ 800.279130][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16115'. [ 800.385261][ T7634] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16117'. [ 801.070852][ T7664] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 801.111128][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16133'. [ 801.697100][ T7703] netlink: 'syz.2.16145': attribute type 1 has an invalid length. [ 801.705259][ T7703] netlink: 'syz.2.16145': attribute type 1 has an invalid length. [ 801.720139][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16145'. [ 801.732448][ T7703] netlink: 1 bytes leftover after parsing attributes in process `syz.2.16145'. [ 801.748115][ T7705] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16144'. [ 803.589315][ T7794] syzkaller1: entered promiscuous mode [ 803.595101][ T7794] syzkaller1: entered allmulticast mode [ 803.964497][ T7815] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 804.024186][ T7815] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 804.277233][ T7832] gretap0: left promiscuous mode [ 804.327473][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.352485][ T7832] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.381256][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.501959][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.546041][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.558450][ T7832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 804.570113][ T7832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.604992][ T7832] veth1_vlan: left promiscuous mode [ 804.611460][ T7832] veth0_vlan: left promiscuous mode [ 804.627328][ T7832] veth0_vlan: entered promiscuous mode [ 804.646726][ T7832] veth1_vlan: entered promiscuous mode [ 804.659843][ T7832] veth1_macvtap: left promiscuous mode [ 804.667877][ T7832] veth0_macvtap: left promiscuous mode [ 804.675385][ T7832] veth0_macvtap: entered promiscuous mode [ 804.682229][ T7832] veth1_macvtap: entered promiscuous mode [ 804.704921][ T7832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 804.713344][ T7832] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 804.721945][ T7832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 804.730674][ T7832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 804.740891][ T7832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 804.757544][ T7832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 804.781036][ T7832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 804.861920][ T7832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.881408][ T7832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 804.912728][ T7832] gretap0: entered promiscuous mode [ 804.923476][ T7832] gretap0: entered allmulticast mode [ 804.934372][ T7832] geneve0: entered promiscuous mode [ 804.941823][ T7832] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 805.054204][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.064416][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.076031][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.087197][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.158954][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.178278][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.189567][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.210384][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.642170][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16221'. [ 806.075561][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16226'. [ 806.086120][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16226'. [ 806.456183][ T7922] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16233'. [ 806.733400][ T7932] netlink: 'syz.2.16238': attribute type 1 has an invalid length. [ 806.784872][ T7932] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16238'. [ 806.989394][ T7948] netlink: 'syz.2.16246': attribute type 4 has an invalid length. [ 807.040665][ T7954] syzkaller1: entered promiscuous mode [ 807.053622][ T7954] syzkaller1: entered allmulticast mode [ 807.321834][ T1129] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.337662][ T1129] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.347163][ T1129] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.356040][ T1129] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.422622][ T7970] bridge6: entered promiscuous mode [ 807.433166][ T7970] bridge6: entered allmulticast mode [ 807.452017][ T7970] team0: Port device bridge6 added [ 807.505052][ T7978] syzkaller1: entered promiscuous mode [ 807.513345][ T7978] syzkaller1: entered allmulticast mode [ 807.657964][ T7986] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16262'. [ 807.700935][ T7989] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.16263'. [ 807.742368][ T7991] xt_hashlimit: size too large, truncated to 1048576 [ 808.371615][ T8025] pim6reg1: entered allmulticast mode [ 808.649010][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16284'. [ 808.666425][ T7865] wlan1: Trigger new scan to find an IBSS to join [ 808.689845][ T8038] netlink: 'syz.1.16284': attribute type 29 has an invalid length. [ 808.729806][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16284'. [ 809.193106][ T8069] netlink: 27 bytes leftover after parsing attributes in process `syz.3.16296'. [ 809.498135][ T8087] syzkaller1: entered promiscuous mode [ 809.509448][ T8087] syzkaller1: entered allmulticast mode [ 810.341303][ T8130] netlink: 'syz.4.16323': attribute type 1 has an invalid length. [ 810.368947][ T8130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.548269][ T8170] xfrm0 speed is unknown, defaulting to 1000 [ 811.696119][ T1129] wlan1: Trigger new scan to find an IBSS to join [ 812.037509][ T8170] lo speed is unknown, defaulting to 1000 [ 812.270818][ T8195] __nla_validate_parse: 1 callbacks suppressed [ 812.270839][ T8195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16351'. [ 812.607546][ T7865] wlan1: Creating new IBSS network, BSSID 56:c9:8c:ef:3a:33 [ 812.790635][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16359'. [ 813.328443][ T8240] netlink: 'syz.1.16369': attribute type 4 has an invalid length. [ 813.358383][ T8240] netlink: 'syz.1.16369': attribute type 4 has an invalid length. [ 814.302497][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16384'. [ 814.513398][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16391'. [ 814.538642][ T8298] netlink: 'syz.1.16391': attribute type 7 has an invalid length. [ 814.564726][ T8298] netlink: 'syz.1.16391': attribute type 8 has an invalid length. [ 814.576149][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16391'. [ 814.599683][ T8298] erspan0: entered promiscuous mode [ 814.616454][ T8298] erspan0: left promiscuous mode [ 814.865213][ T8314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16398'. [ 815.289879][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16403'. [ 815.761374][ T2880] block nbd10: Receive control failed (result -32) [ 815.796889][ T8314] nbd10: detected capacity change from 0 to 1 [ 815.809543][ T8052] buffer_io_error: 138 callbacks suppressed [ 815.809560][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 815.837557][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 815.846090][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 815.856251][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 815.864218][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 815.874404][ T8052] ldm_validate_partition_table(): Disk read failed. [ 815.881414][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 815.901009][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 815.923592][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 815.950431][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 815.982678][ T8052] Dev nbd10: unable to read RDB block 0 [ 815.998511][ T8052] Buffer I/O error on dev nbd10, logical block 0, async page read [ 816.024409][ T8052] nbd10: unable to read partition table [ 816.030973][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16408'. [ 816.040727][ T8052] nbd10: partition table beyond EOD, truncated [ 816.806915][ T8380] netlink: 'syz.1.16429': attribute type 1 has an invalid length. [ 816.834631][ T8380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.097402][ T8393] syzkaller1: entered promiscuous mode [ 817.113147][ T8393] syzkaller1: entered allmulticast mode [ 817.131137][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16436'. [ 817.624437][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16444'. [ 817.702718][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16447'. [ 817.758341][ T7853] tipc: Subscription rejected, illegal request [ 818.038235][ T8435] batman_adv: batadv0: Adding interface: wlan0 [ 818.052487][ T8435] batman_adv: batadv0: Interface activated: wlan0 [ 818.140149][ T30] audit: type=1800 audit(1781628061.955:9): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16454" name="memory.events" dev="tmpfs" ino=16606 res=0 errno=0 [ 818.665332][ T8478] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16472'. [ 820.685691][ T8549] syzkaller1: entered promiscuous mode [ 820.704404][ T8549] syzkaller1: entered allmulticast mode [ 820.765111][ T8553] syzkaller1: entered promiscuous mode [ 820.774767][ T8553] syzkaller1: entered allmulticast mode [ 821.068851][ T8566] netlink: 'syz.2.16511': attribute type 4 has an invalid length. [ 821.235443][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16515'. [ 821.304413][ T8581] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.16518'. [ 822.089337][ T30] audit: type=1800 audit(1781628065.905:10): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.16538" name="memory.events" dev="tmpfs" ino=16284 res=0 errno=0 [ 822.163668][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16541'. [ 822.244461][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16543'. [ 822.491925][ T8653] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16548'. [ 822.596780][ T8656] ip6gretap0: left promiscuous mode [ 822.614158][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.631698][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.698950][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.713093][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.729115][ T8656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 822.744125][ T8656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.761057][ T8656] veth1_vlan: left promiscuous mode [ 822.768688][ T8656] veth0_vlan: left promiscuous mode [ 822.777849][ T8656] veth0_vlan: entered promiscuous mode [ 822.786100][ T8656] veth1_vlan: entered promiscuous mode [ 822.797813][ T8656] veth1_macvtap: left promiscuous mode [ 822.805519][ T8656] veth0_macvtap: left promiscuous mode [ 822.815416][ T8656] veth0_macvtap: entered promiscuous mode [ 822.823667][ T8656] veth1_macvtap: entered promiscuous mode [ 822.841964][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.857218][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.875857][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.883820][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.913149][ T8656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.959256][ T8656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 822.976853][ T8656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 822.989074][ T8656] ip6gretap0: entered promiscuous mode [ 823.011502][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.018718][ T13] bridge0: port 1(bridge_slave_0) entered listening state [ 823.029146][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.036321][ T13] bridge0: port 2(bridge_slave_1) entered listening state [ 823.086264][ T7853] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.095304][ T7853] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 823.104042][ T7853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.113246][ T7853] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.124800][ T7853] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 823.133470][ T7853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.177477][ T7853] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.186330][ T7853] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 823.197755][ T7853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.206855][ T7853] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.234268][ T7853] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 823.251622][ T7853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.311277][ T1129] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 823.322512][ T1129] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 823.335803][ T4118] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 823.393392][ T1129] bond0: (slave bridge0): link status definitely down, disabling slave [ 823.735792][ T4119] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 823.899840][ T8704] bridge0: port 4(vlan3) entered blocking state [ 823.919893][ T8704] bridge0: port 4(vlan3) entered disabled state [ 823.937762][ T8704] vlan3: entered allmulticast mode [ 823.945976][ T4119] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 823.962632][ T8704] bridge0: entered allmulticast mode [ 823.982555][ T8704] vlan3: left allmulticast mode [ 823.999424][ T8704] bridge0: left allmulticast mode [ 824.031685][ T30] audit: type=1804 audit(1781628067.845:11): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.16574" name="/newroot/3363/memory.events" dev="tmpfs" ino=16882 res=1 errno=0 [ 824.815839][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058d21c00: rx timeout, send abort [ 825.327004][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058d21c00: abort rx timeout. Force session deactivation [ 826.172306][ T8789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16603'. [ 826.664107][ T8810] IPv6: NLM_F_CREATE should be specified when creating new route [ 827.018900][ T8827] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16619'. [ 827.183330][ T8836] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.16622'. [ 827.295031][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 827.311789][ T8844] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.16625'. [ 827.502511][ T8850] batadv_slave_1: entered promiscuous mode [ 827.523529][ T8849] batadv_slave_1: left promiscuous mode [ 828.136089][ T8880] xt_hashlimit: size too large, truncated to 1048576 [ 828.240324][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16645'. [ 828.730917][ T8913] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.16658'. [ 828.779895][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16657'. [ 828.835354][ T8917] bond0: (slave team0): Releasing backup interface [ 828.873115][ T8917] team0 (unregistering): Port device team_slave_0 removed [ 828.906946][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16660'. [ 828.923945][ T8917] team0 (unregistering): Port device team_slave_1 removed [ 828.971033][ T8921] veth0_to_team (unregistering): left promiscuous mode [ 828.991210][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16661'. [ 829.019465][ T8921] team_slave_0 (unregistering): left promiscuous mode [ 829.034775][ T8921] team_slave_0 (unregistering): left allmulticast mode [ 829.057472][ T8921] team0: Port device team_slave_0 removed [ 829.182527][ T8929] netlink: 'syz.4.16662': attribute type 4 has an invalid length. [ 829.978788][ T8964] 8021q: adding VLAN 0 to HW filter on device .` [ 830.047431][ T8964] veth1_macvtap: left promiscuous mode [ 830.054357][ T8964] veth0_macvtap: left promiscuous mode [ 830.061659][ T8964] veth0_macvtap: entered promiscuous mode [ 830.074416][ T8964] veth1_macvtap: entered promiscuous mode [ 830.093393][ T8964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 830.113336][ T8964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.122623][ T8964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.134850][ T8964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.159176][ T8964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 830.180463][ T8964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 830.222607][ T8964] 8021q: adding VLAN 0 to HW filter on device bond4 [ 830.253694][ T8980] IPVS: Scheduler module ip_vs_sip not found [ 830.307290][ T8964] 8021q: adding VLAN 0 to HW filter on device bond5 [ 830.353162][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.393844][ T8964] 8021q: adding VLAN 0 to HW filter on device bond6 [ 830.456541][ T7853] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.468110][ T7853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.500619][ T7853] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.510246][ T7853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.531941][ T7853] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.552952][ T7853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.581366][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 830.604326][ T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 830.669575][ T13] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 831.089913][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16700'. [ 831.364014][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16709'. [ 831.428986][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16710'. [ 831.448977][ T9044] netlink: 'syz.3.16710': attribute type 2 has an invalid length. [ 831.457319][ T9044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16710'. [ 831.549053][ T9051] batadv_slave_0: entered promiscuous mode [ 831.556871][ T9050] batadv_slave_0: left promiscuous mode [ 831.729985][ T9059] geneve4: entered promiscuous mode [ 831.756352][ T7853] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.362595][ T1169] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.371106][ T1169] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.429304][ T9066] erspan0: entered promiscuous mode [ 832.555863][ T1169] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.588880][ T4107] lo speed is unknown, defaulting to 1000 [ 832.606204][ T4107] syz2: Port: 1 Link ACTIVE [ 832.629283][ T9079] netlink: 27 bytes leftover after parsing attributes in process `syz.1.16724'. [ 832.882440][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16733'. [ 832.940379][ T9093] bond4: option ad_actor_sys_prio: invalid value (0) [ 832.948141][ T9093] bond4: option ad_actor_sys_prio: allowed values 1 - 65535 [ 832.968686][ T9093] bond4 (unregistering): Released all slaves [ 833.152651][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16741'. [ 833.189893][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16740'. [ 833.220459][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16740'. [ 833.239682][ T9112] syzkaller1: entered promiscuous mode [ 833.249158][ T9112] syzkaller1: entered allmulticast mode [ 833.303532][ T9116] batadv_slave_1: entered promiscuous mode [ 833.322015][ T9115] batadv_slave_1: left promiscuous mode [ 833.466576][ T9122] syzkaller1: entered promiscuous mode [ 833.476244][ T9122] syzkaller1: entered allmulticast mode [ 834.157497][ T9162] netlink: 256 bytes leftover after parsing attributes in process `syz.3.16765'. [ 834.334694][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 834.342466][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 834.528327][ T9174] syzkaller1: entered promiscuous mode [ 834.543088][ T9174] syzkaller1: entered allmulticast mode [ 834.737004][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 835.375186][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 835.597137][ T9230] netlink: 212320 bytes leftover after parsing attributes in process `syz.0.16796'. [ 836.053991][ T9247] ipvlan1: entered promiscuous mode [ 836.061187][ T9247] ipvlan1: left promiscuous mode [ 836.510471][ T9281] x_tables: duplicate underflow at hook 1 [ 837.213732][ T9312] __nla_validate_parse: 1 callbacks suppressed [ 837.213753][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16830'. [ 837.244711][ T9312] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16830'. [ 837.607698][ T9326] sctp: [Deprecated]: syz.3.16839 (pid 9326) Use of int in max_burst socket option. [ 837.607698][ T9326] Use struct sctp_assoc_value instead [ 837.873669][ T4118] lo speed is unknown, defaulting to 1000 [ 838.001054][ T9344] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.16847'. [ 838.292855][ T9360] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16853'. [ 838.320989][ T9365] netlink: 'syz.2.16854': attribute type 11 has an invalid length. [ 838.576784][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 838.585908][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 838.805915][ T9389] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16865'. [ 839.251072][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16878'. [ 839.278920][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16878'. [ 839.317669][ T9418] batman_adv: batadv0: Adding interface: vlan2 [ 839.335764][ T9418] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 839.389405][ T9421] netlink: 'syz.4.16882': attribute type 3 has an invalid length. [ 839.603588][ T9438] batadv_slave_1: entered promiscuous mode [ 839.619149][ T9437] batadv_slave_1: left promiscuous mode [ 839.889797][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16896'. [ 839.900652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 840.049780][ T4107] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 840.071317][ T9454] bond9: Invalid ad_actor_system MAC address. [ 840.077643][ T9454] bond9: option ad_actor_system: invalid value (7) [ 840.087961][ T9454] bond9 (unregistering): Released all slaves [ 840.455238][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 840.486273][ T4107] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 840.553251][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16909'. [ 840.586202][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16909'. [ 841.244092][ T9516] netlink: 'syz.4.16925': attribute type 62 has an invalid length. [ 841.537588][ T30] audit: type=1804 audit(1781628085.355:12): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.16930" name="/newroot/3325/memory.events" dev="tmpfs" ino=16690 res=1 errno=0 [ 841.600924][ T30] audit: type=1800 audit(1781628085.355:13): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16930" name="memory.events" dev="tmpfs" ino=16690 res=0 errno=0 [ 841.668326][ T30] audit: type=1804 audit(1781628085.385:14): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.16930" name="/newroot/3325/memory.events" dev="tmpfs" ino=16690 res=1 errno=0 [ 841.774900][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 841.939910][ T9542] syzkaller1: entered promiscuous mode [ 841.952493][ T9542] syzkaller1: entered allmulticast mode [ 842.413184][ T9562] syzkaller1: entered promiscuous mode [ 842.422567][ T9562] syzkaller1: entered allmulticast mode [ 842.425128][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.200647][ T9605] __nla_validate_parse: 2 callbacks suppressed [ 843.200669][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16965'. [ 843.218373][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16966'. [ 843.230385][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16965'. [ 843.276597][ T9606] macvtap0: entered promiscuous mode [ 843.292350][ T9606] macvtap0: entered allmulticast mode [ 843.306541][ T9606] veth1_vlan: entered allmulticast mode [ 843.334998][ T9609] macvtap1: entered promiscuous mode [ 843.341890][ T9609] macvtap1: entered allmulticast mode [ 843.697207][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 843.973533][ T9638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16979'. [ 844.036286][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16982'. [ 844.208089][ T9648] sctp: [Deprecated]: syz.4.16986 (pid 9648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 844.208089][ T9648] Use struct sctp_sack_info instead [ 844.515330][ T9665] xfrm0 speed is unknown, defaulting to 1000 [ 844.598584][ T9669] bridge0: port 4(vlan3) entered blocking state [ 844.626574][ T9669] bridge0: port 4(vlan3) entered disabled state [ 844.645010][ T9669] vlan3: entered allmulticast mode [ 844.672228][ T9669] vlan3: entered promiscuous mode [ 844.689003][ T9669] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 844.980478][ T1169] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 845.316908][ T9665] lo speed is unknown, defaulting to 1000 [ 846.191130][ T9727] netlink: 'syz.0.17020': attribute type 1 has an invalid length. [ 846.199253][ T9727] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17020'. [ 846.935077][ T9754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17033'. [ 847.081947][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17033'. [ 847.130144][ T9758] nbd: device at index 64 is going down [ 847.363163][ T9666] udevd[9666]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 847.409836][ T9763] udevd[9763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 847.939384][ T9791] xfrm0 speed is unknown, defaulting to 1000 [ 848.373013][ T9814] netlink: 204 bytes leftover after parsing attributes in process `syz.0.17056'. [ 848.741683][ T9791] lo speed is unknown, defaulting to 1000 [ 848.816667][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17064'. [ 849.301655][ T9851] sctp: [Deprecated]: syz.3.17074 (pid 9851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 849.301655][ T9851] Use struct sctp_sack_info instead [ 850.172773][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17087'. [ 850.188829][ T9882] netlink: 'syz.0.17088': attribute type 11 has an invalid length. [ 850.196003][ T9880] netlink: 'syz.2.17087': attribute type 20 has an invalid length. [ 850.227873][ T9880] netlink: 'syz.2.17087': attribute type 21 has an invalid length. [ 850.443072][ T9890] netlink: 'syz.2.17093': attribute type 1 has an invalid length. [ 850.455730][ T9890] netlink: 88 bytes leftover after parsing attributes in process `syz.2.17093'. [ 850.483968][ T9890] netlink: 1 bytes leftover after parsing attributes in process `syz.2.17093'. [ 850.501784][ T9890] netlink: 'syz.2.17093': attribute type 1 has an invalid length. [ 850.510755][ T9890] netlink: 634 bytes leftover after parsing attributes in process `syz.2.17093'. [ 850.892299][ T9911] syzkaller1: entered promiscuous mode [ 850.910921][ T9911] syzkaller1: entered allmulticast mode [ 850.955597][ T9916] netlink: 'syz.4.17104': attribute type 1 has an invalid length. [ 850.980510][ T9916] netlink: 96 bytes leftover after parsing attributes in process `syz.4.17104'. [ 850.990216][ T9916] netlink: 1 bytes leftover after parsing attributes in process `syz.4.17104'. [ 850.999356][ T9916] netlink: 'syz.4.17104': attribute type 1 has an invalid length. [ 851.009141][ T9916] netlink: 'syz.4.17104': attribute type 8 has an invalid length. [ 851.017431][ T9916] netlink: 582 bytes leftover after parsing attributes in process `syz.4.17104'. [ 851.388497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 851.552360][ T9943] netlink: 'syz.4.17115': attribute type 22 has an invalid length. [ 851.599247][ T9943] netlink: 'syz.4.17115': attribute type 22 has an invalid length. [ 851.636764][ T9943] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17115'. [ 852.015936][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 852.160749][ T9962] bond7 (unregistering): Released all slaves [ 852.253793][ T9969] veth1_macvtap: left promiscuous mode [ 852.336045][ T9969] veth1_macvtap: entered promiscuous mode [ 853.936910][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.944370][ C0] bridge0: topology change detected, propagating [ 853.951310][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.958596][ C0] bridge0: topology change detected, propagating [ 854.324104][T10039] __nla_validate_parse: 1 callbacks suppressed [ 854.324127][T10039] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17149'. [ 854.781918][T10051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17154'. [ 854.977813][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17154'. [ 855.012597][T10055] nbd: device at index 64 is going down [ 855.232385][ T9666] udevd[9666]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 855.673335][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17161'. [ 856.495317][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 857.805370][ T7853] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 858.450275][T10115] xt_hashlimit: size too large, truncated to 1048576 [ 858.557940][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17182'. [ 858.578990][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17182'. [ 858.623282][T10124] geneve5: entered promiscuous mode [ 858.637986][T10124] geneve5: entered allmulticast mode [ 859.055376][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 859.765750][T10153] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 859.782813][ T4107] lo speed is unknown, defaulting to 1000 [ 859.792308][ T4107] syz2: Port: 1 Link DOWN [ 860.975126][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 861.457967][T10213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17209'. [ 861.478553][T10215] gretap0: entered promiscuous mode [ 861.658488][T10221] syzkaller1: entered promiscuous mode [ 861.667173][T10221] syzkaller1: entered allmulticast mode [ 863.855569][T10315] syzkaller1: entered promiscuous mode [ 863.861208][T10315] syzkaller1: entered allmulticast mode [ 863.925707][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17247'. [ 864.076612][T10325] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17250'. [ 864.271924][T10336] syzkaller1: entered promiscuous mode [ 864.282341][T10336] syzkaller1: entered allmulticast mode [ 864.554952][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17261'. [ 864.577418][T10352] netlink: 'syz.2.17261': attribute type 2 has an invalid length. [ 865.119542][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17269'. [ 865.595450][T10394] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967272. macoff=96 [ 865.748226][T10402] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.17278'. [ 866.493061][T10424] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17288'. [ 867.023098][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17300'. [ 868.220601][T10516] syzkaller1: entered promiscuous mode [ 868.240275][T10516] syzkaller1: entered allmulticast mode [ 868.783931][T10546] netlink: 'syz.0.17332': attribute type 2 has an invalid length. [ 869.149821][T10565] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17341'. [ 869.755459][T10596] netlink: 566 bytes leftover after parsing attributes in process `syz.0.17351'. [ 870.519543][ T30] audit: type=1800 audit(1781628114.335:15): pid=10636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17367" name=CB dev="tmpfs" ino=17272 res=0 errno=0 [ 870.652201][T10644] netlink: 'syz.0.17371': attribute type 6 has an invalid length. [ 870.798921][T10651] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17374'. [ 870.928219][T10660] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17379'. [ 871.282524][T10674] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.17385'. [ 871.513251][T10684] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17388'. [ 871.768993][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17392'. [ 871.800098][T10693] block nbd11: Unsupported socket: should be TCP or UNIX. [ 872.997394][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17425'. [ 873.203241][T10779] xt_hashlimit: size too large, truncated to 1048576 [ 873.383255][T10789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17434'. [ 873.708693][T10808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 873.937648][T10820] veth1_to_bond: entered allmulticast mode [ 873.947322][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17449'. [ 873.960307][T10820] veth1_to_bond (unregistering): left allmulticast mode [ 873.991978][T10820] bond0: (slave c@0Ù): Releasing backup interface [ 875.268865][T10893] netlink: 180 bytes leftover after parsing attributes in process `syz.0.17485'. [ 875.378053][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17489'. [ 875.388672][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17488'. [ 875.394253][T10903] netlink: 80 bytes leftover after parsing attributes in process `syz.3.17489'. [ 876.065312][T10939] netlink: 'syz.1.17505': attribute type 1 has an invalid length. [ 876.073436][T10939] netlink: 'syz.1.17505': attribute type 2 has an invalid length. [ 876.779589][T10972] syzkaller1: entered promiscuous mode [ 876.786775][T10972] syzkaller1: entered allmulticast mode [ 876.976268][ T7865] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 876.994048][T10985] netlink: 236 bytes leftover after parsing attributes in process `syz.0.17526'. [ 877.014321][T10985] netlink: 236 bytes leftover after parsing attributes in process `syz.0.17526'. [ 878.014454][T11031] tipc: Enabling of bearer rejected, already enabled [ 878.558118][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17558'. [ 878.762348][T11060] bridge0: entered allmulticast mode [ 878.916912][T11066] netlink: 'syz.3.17564': attribute type 4 has an invalid length. [ 879.270413][T11080] tipc: Enabled bearer , priority 16 [ 879.536815][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 879.855242][T11107] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.17584'. [ 880.065698][T11117] veth1_to_bond: entered promiscuous mode [ 880.078629][T11117] veth1_to_bond: entered allmulticast mode [ 880.095299][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17589'. [ 880.200528][T11117] veth1_to_bond (unregistering): left promiscuous mode [ 880.231800][T11117] veth1_to_bond (unregistering): left allmulticast mode [ 880.940895][T11158] netlink: 'syz.0.17608': attribute type 1 has an invalid length. [ 880.978327][T11158] bond4: entered promiscuous mode [ 880.984349][T11158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 881.038926][T11158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 881.052647][T11158] bond4: (slave bond5): making interface the new active one [ 881.060975][T11158] bond5: entered promiscuous mode [ 881.068765][T11158] bond4: (slave bond5): Enslaving as an active interface with an up link [ 881.326393][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17612'. [ 881.357507][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17612'. [ 881.992697][T11195] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.17624'. [ 882.017981][T11195] netlink: Conntrack attr has 4 unknown bytes [ 883.888184][T11257] netlink: 'syz.3.17649': attribute type 7 has an invalid length. [ 883.896402][T11257] netlink: 'syz.3.17649': attribute type 8 has an invalid length. [ 883.904319][T11257] netlink: 'syz.3.17649': attribute type 8 has an invalid length. [ 883.914644][T11257] netlink: 'syz.3.17649': attribute type 4 has an invalid length. [ 883.922563][T11257] netlink: 'syz.3.17649': attribute type 7 has an invalid length. [ 883.931046][T11257] netlink: 207236 bytes leftover after parsing attributes in process `syz.3.17649'. [ 884.024686][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 885.190174][T11259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.289860][ T4116] IPVS: starting estimator thread 0... [ 885.298597][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 885.404837][T11265] IPVS: using max 28 ests per chain, 67200 per kthread [ 885.834711][T11292] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 885.855124][ T4107] syzkaller1: tun_net_xmit 90 [ 885.862298][T11292] syzkaller1: Linktype set failed because interface is up [ 886.419203][T11324] netlink: 'syz.2.17677': attribute type 11 has an invalid length. [ 886.773305][T11349] pim6reg1: entered promiscuous mode [ 886.784686][T11349] pim6reg1: entered allmulticast mode [ 887.206626][T11371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 887.579517][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17705'. [ 887.719288][T11390] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.17707'. [ 887.766249][T11390] netlink: Conntrack attr has 3 unknown bytes [ 887.816524][T11395] netlink: 'syz.4.17709': attribute type 1 has an invalid length. [ 887.932860][T11395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 887.973763][ T30] audit: type=1800 audit(1781628131.785:16): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17710" name=20 dev="tmpfs" ino=17727 res=0 errno=0 [ 888.004997][T11398] bond5: option lp_interval: invalid value (18446744073709551607) [ 888.046973][T11398] bond5: option lp_interval: allowed values 1 - 2147483647 [ 888.531535][T11412] netlink: 'syz.2.17716': attribute type 9 has an invalid length. [ 888.558208][T11412] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.17716'. [ 889.734455][T11458] xfrm0 speed is unknown, defaulting to 1000 [ 890.320394][T11458] lo speed is unknown, defaulting to 1000 [ 890.678285][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17753'. [ 890.697971][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17753'. [ 890.720566][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17753'. [ 890.748064][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17753'. [ 890.770619][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17753'. [ 890.798309][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17753'. [ 891.595643][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17761'. [ 891.695426][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 892.042657][T11536] xfrm0 speed is unknown, defaulting to 1000 [ 892.054691][T11540] pim6reg1: entered promiscuous mode [ 892.061638][T11540] pim6reg1: entered allmulticast mode [ 892.834395][T11536] lo speed is unknown, defaulting to 1000 [ 893.367310][T11486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 893.824275][T11600] netlink: 'syz.3.17777': attribute type 1 has an invalid length. [ 894.038710][T11600] 8021q: adding VLAN 0 to HW filter on device bond7 [ 894.206455][T11607] bond7: (slave geneve4): making interface the new active one [ 894.253492][T11607] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 894.337594][T11612] syzkaller1: entered promiscuous mode [ 894.404423][T11612] syzkaller1: entered allmulticast mode [ 895.507334][T11664] atomic_op ffff888028ceb998 conn xmit_atomic 0000000000000000 [ 895.537087][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 895.727188][ T30] audit: type=1800 audit(1781628139.545:17): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17797" name="memory.events" dev="tmpfs" ino=17844 res=0 errno=0 [ 896.286218][T11690] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 896.303202][T11690] bond8 (unregistering): Released all slaves [ 896.360217][T11695] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17804'. [ 896.654215][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17808'. [ 896.684756][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17808'. [ 896.737570][T11705] geneve5: entered promiscuous mode [ 896.758791][T11705] geneve5: entered allmulticast mode [ 897.267105][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17817'. [ 897.296452][T11733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17817'. [ 897.447850][T11737] netlink: 'syz.0.17820': attribute type 13 has an invalid length. [ 897.575277][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 897.702560][T11740] sch_tbf: burst 6 is lower than device gretap0 mtu (1550) ! [ 897.717034][ T4116] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 898.025306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 898.042600][T11757] netlink: 240 bytes leftover after parsing attributes in process `syz.4.17823'. [ 898.103373][T11760] netlink: 'syz.3.17827': attribute type 2 has an invalid length. [ 898.825308][ T4116] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 899.247958][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17846'. [ 899.312958][T11806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17846'. [ 900.495802][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17862'. [ 900.517725][T11850] netlink: 'syz.4.17862': attribute type 1 has an invalid length. [ 900.534600][T11850] netlink: 'syz.4.17862': attribute type 2 has an invalid length. [ 901.541676][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17887'. [ 901.646644][T11907] bond6: entered promiscuous mode [ 901.664461][T11907] 8021q: adding VLAN 0 to HW filter on device bond6 [ 901.715210][T11911] 8021q: adding VLAN 0 to HW filter on device bond6 [ 901.725070][T11911] bond6: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 901.746100][T11911] bond6: (slave ip6gre4): Error -95 calling set_mac_address [ 902.233177][T11946] bridge0: port 5(syz_tun) entered blocking state [ 902.242774][T11948] sctp: [Deprecated]: syz.4.17904 (pid 11948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 902.242774][T11948] Use struct sctp_sack_info instead [ 902.250516][T11946] bridge0: port 5(syz_tun) entered disabled state [ 902.284068][T11946] syz_tun: entered allmulticast mode [ 902.291980][T11946] syz_tun: entered promiscuous mode [ 902.298537][T11946] bridge0: port 5(syz_tun) entered blocking state [ 902.307142][T11946] bridge0: port 5(syz_tun) entered listening state [ 902.411202][T11955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17908'. [ 903.128143][T11994] netlink: 112 bytes leftover after parsing attributes in process `syz.1.17925'. [ 903.289394][T12002] syzkaller1: entered promiscuous mode [ 903.306777][T12002] syzkaller1: entered allmulticast mode [ 903.823310][T12034] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.17942'. [ 904.172191][T12060] erspan0: entered promiscuous mode [ 904.179410][T12059] erspan0: left promiscuous mode [ 904.538384][T12075] netlink: 9 bytes leftover after parsing attributes in process `syz.3.17957'. [ 904.574240][T12075] netlink: 5 bytes leftover after parsing attributes in process `syz.3.17957'. [ 904.586670][T12075] 0ªî{X¹¦: renamed from gretap0 [ 904.596197][T12075] 0ªî{X¹¦: entered allmulticast mode [ 904.604044][T12075] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 904.949262][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17968'. [ 904.967213][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17968'. [ 905.878014][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17991'. [ 906.362963][T12173] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.18003'. [ 906.572826][T12182] __nla_validate_parse: 2 callbacks suppressed [ 906.572845][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18007'. [ 906.591284][T12182] netlink: 'syz.2.18007': attribute type 30 has an invalid length. [ 906.615638][ T7853] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.634990][ T7853] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.644169][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18007'. [ 906.654745][ T7853] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.656532][T12182] netlink: 'syz.2.18007': attribute type 30 has an invalid length. [ 906.664044][ T7853] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.864003][T12040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 907.578534][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18023'. [ 908.466300][ T30] audit: type=1800 audit(1781628152.285:18): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18037" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=18022 res=0 errno=0 [ 908.671273][T12283] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.18041'. [ 908.840359][T12293] netlink: 'syz.1.18045': attribute type 9 has an invalid length. [ 908.850457][T12293] netlink: 186364 bytes leftover after parsing attributes in process `syz.1.18045'. [ 909.384384][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18058'. [ 909.416971][T12320] hsr_slave_1 (unregistering): left promiscuous mode [ 909.983236][T12348] netlink: 'syz.0.18070': attribute type 18 has an invalid length. [ 909.994187][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18070'. [ 910.086867][T12348] netlink: 'syz.0.18070': attribute type 18 has an invalid length. [ 910.112950][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18070'. [ 910.339446][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18076'. [ 910.356578][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18078'. [ 910.375471][T12365] netlink: 'syz.4.18078': attribute type 6 has an invalid length. [ 910.394767][T12365] netlink: 'syz.4.18078': attribute type 5 has an invalid length. [ 910.416762][T12365] netlink: 'syz.4.18078': attribute type 6 has an invalid length. [ 910.436986][T12365] netlink: 'syz.4.18078': attribute type 5 has an invalid length. [ 911.675626][T12444] __nla_validate_parse: 7 callbacks suppressed [ 911.675646][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18112'. [ 911.713002][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18112'. [ 911.955724][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18118'. [ 911.965224][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18118'. [ 911.974292][T12458] netlink: 'syz.1.18118': attribute type 7 has an invalid length. [ 911.983933][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18118'. [ 911.994095][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18118'. [ 912.008805][T12458] netlink: 'syz.1.18118': attribute type 7 has an invalid length. [ 912.459076][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18133'. [ 912.470167][T12488] netlink: 'syz.4.18133': attribute type 30 has an invalid length. [ 912.522777][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18133'. [ 912.534917][T12493] netlink: 'syz.4.18133': attribute type 30 has an invalid length. [ 912.842260][ T1169] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23 [ 913.226162][T12525] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.18147'. [ 913.590911][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18155'. [ 914.779400][T12599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.939530][T12605] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 914.947066][T12605] syzkaller1: Refused to change device type [ 915.169555][T12624] netlink: 'syz.0.18191': attribute type 1 has an invalid length. [ 915.211607][T12624] bond6: entered promiscuous mode [ 915.218996][T12624] 8021q: adding VLAN 0 to HW filter on device bond6 [ 915.262745][T12628] bond6: (slave veth11): making interface the new active one [ 915.270368][T12628] veth11: entered promiscuous mode [ 915.277871][T12628] bond6: (slave veth11): Enslaving as an active interface with an up link [ 915.582881][T12647] syzkaller1: entered promiscuous mode [ 915.601905][T12647] syzkaller1: entered allmulticast mode [ 916.352476][T12691] bond9: option ad_select: invalid value (34) [ 916.367624][T12691] bond9 (unregistering): Released all slaves [ 916.736519][T12667] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 916.755681][T12667] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 916.912032][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.940935][T12712] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.970550][T12712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.036628][T12712] bridge_slave_1: entered promiscuous mode [ 917.130107][T12712] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 917.147893][T12712] veth0_vlan: left promiscuous mode [ 917.155727][T12712] veth0_vlan: entered promiscuous mode [ 917.166181][T12712] tipc: Resetting bearer [ 917.224100][T12712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.263919][T12712] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 917.362637][ T4116] syz1: Port: 1 Link ACTIVE [ 917.459543][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 917.502125][ T36] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 917.520341][ T36] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 917.522381][T12731] __nla_validate_parse: 3 callbacks suppressed [ 917.536364][T12731] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.18234'. [ 917.836255][T12739] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 917.934577][ C1] bridge0: port 5(syz_tun) entered learning state [ 918.137907][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18250'. [ 918.266298][T12773] xfrm0 speed is unknown, defaulting to 1000 [ 918.608563][T12773] lo speed is unknown, defaulting to 1000 [ 918.926958][T12805] netlink: 'syz.4.18264': attribute type 22 has an invalid length. [ 918.977151][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18264'. [ 919.097448][T12805] netlink: 'syz.4.18264': attribute type 22 has an invalid length. [ 919.116309][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18264'. [ 920.097001][T12839] syzkaller1: entered promiscuous mode [ 920.118618][T12839] syzkaller1: entered allmulticast mode [ 920.801241][T12876] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 921.065862][T12876] bond9 (unregistering): Released all slaves [ 921.072961][T12898] netlink: 'syz.4.18304': attribute type 11 has an invalid length. [ 921.295463][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 921.374687][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 921.433296][T12913] bridge0: entered allmulticast mode [ 921.441411][T12913] team0: left allmulticast mode [ 921.455918][T12913] team_slave_1: left allmulticast mode [ 921.472215][T12913] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 921.512377][T12913] team0: left promiscuous mode [ 921.519231][T12913] team_slave_1: left promiscuous mode [ 921.525723][T12913] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 921.536932][T12913] bridge0: port 3(team0) entered disabled state [ 921.574785][T12913] bridge_slave_1: left allmulticast mode [ 921.587958][T12913] bridge_slave_1: left promiscuous mode [ 921.603763][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.614954][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 921.648837][T12913] bridge_slave_0: left allmulticast mode [ 921.664691][T12913] bridge_slave_0: left promiscuous mode [ 921.688841][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.759466][T12913] bond0: (slave bridge0): Releasing backup interface [ 921.861120][T12934] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.18321'. [ 922.262002][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18330'. [ 922.282446][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18330'. [ 922.418830][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18330'. [ 922.445620][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18330'. [ 922.746820][T12977] netlink: 'syz.2.18339': attribute type 25 has an invalid length. [ 922.758135][T12979] netlink: 'syz.0.18340': attribute type 4 has an invalid length. [ 922.768004][T12979] netlink: 'syz.0.18340': attribute type 8 has an invalid length. [ 922.776898][T12979] netlink: 'syz.0.18340': attribute type 1 has an invalid length. [ 922.785773][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18339'. [ 922.795178][T12979] netlink: 172 bytes leftover after parsing attributes in process `syz.0.18340'. [ 922.807524][T12979] NCSI netlink: No device for ifindex 0 [ 922.889222][T12977] netlink: 'syz.2.18339': attribute type 25 has an invalid length. [ 922.902479][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18339'. [ 923.200122][T12991] syzkaller1: entered promiscuous mode [ 923.224210][T12991] syzkaller1: entered allmulticast mode [ 923.254954][T12991] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 923.285056][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18351'. [ 923.299432][T12997] gtp2: entered promiscuous mode [ 923.306017][T12997] gtp2: entered allmulticast mode [ 923.313487][T12997] team0: Device gtp2 is of different type [ 923.442519][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18355'. [ 923.455176][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18355'. [ 923.691917][T13024] netlink: 'syz.2.18359': attribute type 13 has an invalid length. [ 924.257615][T13050] pim6reg1: entered promiscuous mode [ 924.278365][T13050] pim6reg1: entered allmulticast mode [ 924.741548][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18375'. [ 924.763929][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18375'. [ 924.782333][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18375'. [ 924.800857][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18375'. [ 924.832451][T13067] netlink: 'syz.2.18376': attribute type 1 has an invalid length. [ 924.881121][T13067] 8021q: adding VLAN 0 to HW filter on device bond9 [ 925.332253][T13084] 8021q: adding VLAN 0 to HW filter on device bond10 [ 925.534073][T13094] bond7: entered promiscuous mode [ 925.540202][T13094] 8021q: adding VLAN 0 to HW filter on device bond7 [ 925.559514][T13099] syzkaller1: entered promiscuous mode [ 925.565270][T13099] syzkaller1: entered allmulticast mode [ 925.585588][T13094] bridge6: entered promiscuous mode [ 925.591539][T13094] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 925.711670][T13104] bridge0: port 5(syz_tun) entered disabled state [ 925.718353][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.725804][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.736467][T13104] bridge0: entered allmulticast mode [ 925.756166][T13104] syz_tun: left allmulticast mode [ 925.762318][T13104] syz_tun: left promiscuous mode [ 925.768224][T13104] bridge0: port 5(syz_tun) entered disabled state [ 925.781767][T13104] vlan3: left allmulticast mode [ 925.787340][T13104] vlan3: left promiscuous mode [ 925.792176][T13104] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 925.802735][T13104] bridge0: port 4(vlan3) entered disabled state [ 925.812095][T13104] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 925.821844][T13104] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 925.832302][T13104] bridge0: port 3(netdevsim1) entered disabled state [ 925.843802][T13104] bridge_slave_1: left promiscuous mode [ 925.850720][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.862177][T13104] bridge_slave_0: left allmulticast mode [ 925.868741][T13104] bridge_slave_0: left promiscuous mode [ 925.875373][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.894088][T13104] bond0: (slave bridge0): Releasing backup interface [ 926.589961][T13018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 926.854237][T13123] netlink: 'syz.3.18399': attribute type 1 has an invalid length. [ 926.875265][T13123] netlink: 'syz.3.18399': attribute type 4 has an invalid length. [ 927.149256][T13136] xfrm0 speed is unknown, defaulting to 1000 [ 928.083501][T13136] lo speed is unknown, defaulting to 1000 [ 928.104904][T13178] lo: Caught tx_queue_len zero misconfig [ 928.137256][T13178] __nla_validate_parse: 3 callbacks suppressed [ 928.137274][T13178] netlink: 260 bytes leftover after parsing attributes in process `syz.0.18422'. [ 928.287511][T13187] netlink: 27 bytes leftover after parsing attributes in process `syz.0.18426'. [ 928.388280][T13189] netlink: 'syz.3.18427': attribute type 13 has an invalid length. [ 928.631888][T13200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18432'. [ 928.644240][T13200] netlink: 'syz.1.18432': attribute type 7 has an invalid length. [ 928.657785][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18432'. [ 928.814680][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 928.874245][T13196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 928.887988][T13196] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 929.185873][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18437'. [ 929.455077][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 929.472682][T13220] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 929.755187][T13229] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 929.789701][T13229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.903282][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18445'. [ 930.095381][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 930.683514][T13261] netlink: 204 bytes leftover after parsing attributes in process `syz.4.18458'. [ 930.719669][T13261] netlink: 84 bytes leftover after parsing attributes in process `syz.4.18458'. [ 930.902954][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18462'. [ 931.857152][T13303] bond8: entered promiscuous mode [ 931.875216][T13303] 8021q: adding VLAN 0 to HW filter on device bond8 [ 932.007933][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18491'. [ 932.245509][T13328] netlink: 'syz.3.18485': attribute type 7 has an invalid length. [ 932.293235][T13328] netlink: 'syz.3.18485': attribute type 7 has an invalid length. [ 932.873755][T13355] xt_hashlimit: size too large, truncated to 1048576 [ 934.158049][T13411] xfrm0 speed is unknown, defaulting to 1000 [ 934.710375][T13430] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 934.799398][T13430] bond7: (slave lo): Enslaving as an active interface with an up link [ 934.828164][T13430] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 934.893797][T13411] lo speed is unknown, defaulting to 1000 [ 935.412491][T13450] xfrm0 speed is unknown, defaulting to 1000 [ 935.894905][T13465] netlink: 'syz.2.18538': attribute type 1 has an invalid length. [ 935.911656][T13465] netlink: 'syz.2.18538': attribute type 3 has an invalid length. [ 935.927481][T13465] __nla_validate_parse: 1 callbacks suppressed [ 935.927499][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18538'. [ 936.213511][T13450] lo speed is unknown, defaulting to 1000 [ 936.883683][T13493] nbd: couldn't find a device at index 0 [ 937.774786][ T1169] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 938.203045][T13539] syzkaller1: entered promiscuous mode [ 938.229366][T13539] syzkaller1: entered allmulticast mode [ 938.866983][T13559] trusted_key: syz.0.18580 sent an empty control message without MSG_MORE. [ 940.009259][T13617] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.18602'. [ 940.203059][T13624] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 940.469191][T13638] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.18610'. [ 941.625885][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 941.686581][T13691] netlink: 'syz.4.18633': attribute type 13 has an invalid length. [ 941.773421][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18635'. [ 941.787960][T13691] netlink: 'syz.4.18633': attribute type 13 has an invalid length. [ 941.957034][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18636'. [ 942.049011][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18639'. [ 942.104435][T13703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18639'. [ 942.132013][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18639'. [ 943.535592][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 944.085170][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18670'. [ 944.815217][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 945.079627][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18687'. [ 945.089699][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18687'. [ 945.101035][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18687'. [ 945.110626][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18687'. [ 945.345665][T13829] syzkaller1: entered promiscuous mode [ 945.353737][T13829] syzkaller1: entered allmulticast mode [ 946.096090][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 947.183214][T13908] __nla_validate_parse: 1 callbacks suppressed [ 947.183232][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18717'. [ 947.735439][T13933] block nbd11: server does not support multiple connections per device. [ 947.767175][T13939] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 947.780844][T13933] block nbd11: shutting down sockets [ 949.816885][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18749'. [ 949.913676][T13986] bond9: (slave gre5): The slave device specified does not support setting the MAC address [ 949.936590][T13990] netlink: 'syz.3.18752': attribute type 1 has an invalid length. [ 949.946200][T13986] bond9: (slave gre5): Error -95 calling set_mac_address [ 949.961863][T13988] lo: Caught tx_queue_len zero misconfig [ 950.075947][T13992] gretap0: entered allmulticast mode [ 950.125359][T13992] bond8: (slave gretap0): making interface the new active one [ 950.145544][T13992] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 950.401884][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18758'. [ 950.431411][T14005] netlink: 'syz.4.18758': attribute type 11 has an invalid length. [ 950.485722][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18758'. [ 950.485751][T14009] netlink: 2736 bytes leftover after parsing attributes in process `syz.1.18759'. [ 950.511868][T14005] netlink: 'syz.4.18758': attribute type 11 has an invalid length. [ 951.458025][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18775'. [ 952.316787][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18782'. [ 952.359795][T14066] team1: entered promiscuous mode [ 952.365306][T14066] team1: entered allmulticast mode [ 952.371032][T14066] 8021q: adding VLAN 0 to HW filter on device team1 [ 952.375763][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18782'. [ 952.436626][T14067] team2: entered promiscuous mode [ 952.449190][T14067] team2: entered allmulticast mode [ 952.463709][T14067] 8021q: adding VLAN 0 to HW filter on device team2 [ 952.771828][T14077] vlan0: entered promiscuous mode [ 952.874088][T14084] lo: Caught tx_queue_len zero misconfig [ 953.205914][T14104] netlink: 7 bytes leftover after parsing attributes in process `syz.0.18792'. [ 953.283795][T14106] syzkaller1: entered promiscuous mode [ 953.289660][T14106] syzkaller1: entered allmulticast mode [ 955.787161][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18833'. [ 955.947591][T14195] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.18835'. [ 955.987228][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18836'. [ 956.927614][T14218] sctp: [Deprecated]: syz.4.18845 (pid 14218) Use of int in max_burst socket option deprecated. [ 956.927614][T14218] Use struct sctp_assoc_value instead [ 956.974968][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 958.817025][T14272] syzkaller0: entered promiscuous mode [ 958.822579][T14272] syzkaller0: entered allmulticast mode [ 958.948856][T14286] nbd: couldn't find a device at index 0 [ 959.069859][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18874'. [ 961.306983][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18882'. [ 961.714796][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18874'. [ 962.153542][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18891'. [ 962.205972][T14362] netlink: 'syz.1.18892': attribute type 1 has an invalid length. [ 962.213899][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18891'. [ 962.264965][T14362] gretap5: entered allmulticast mode [ 962.277093][T14362] bond10: (slave gretap5): making interface the new active one [ 962.288097][T14362] bond10: (slave gretap5): Enslaving as an active interface with an up link [ 962.634867][T14371] netlink: 'syz.2.18895': attribute type 1 has an invalid length. [ 962.650581][T14371] netlink: 'syz.2.18895': attribute type 1 has an invalid length. [ 962.669966][T14371] netlink: 264 bytes leftover after parsing attributes in process `syz.2.18895'. [ 962.694724][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18895'. [ 962.704299][T14371] netlink: 'syz.2.18895': attribute type 1 has an invalid length. [ 962.713114][T14371] netlink: 'syz.2.18895': attribute type 1 has an invalid length. [ 962.721480][T14371] netlink: 264 bytes leftover after parsing attributes in process `syz.2.18895'. [ 962.731136][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18895'. [ 962.768526][T14379] netlink: 'syz.3.18899': attribute type 21 has an invalid length. [ 962.786282][T14379] netlink: 'syz.3.18899': attribute type 22 has an invalid length. [ 962.810689][T14379] netlink: 'syz.3.18899': attribute type 23 has an invalid length. [ 962.826318][T14379] netlink: 'syz.3.18899': attribute type 25 has an invalid length. [ 962.841970][T14379] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18899'. [ 963.145495][T14393] xfrm0 speed is unknown, defaulting to 1000 [ 963.583367][T14393] lo speed is unknown, defaulting to 1000 [ 964.196188][T14419] xfrm0 speed is unknown, defaulting to 1000 [ 964.463241][T14419] lo speed is unknown, defaulting to 1000 [ 965.765064][T14462] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 965.791436][T14462] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 965.984239][T14467] sctp: [Deprecated]: syz.3.18935 (pid 14467) Use of int in max_burst socket option. [ 965.984239][T14467] Use struct sctp_assoc_value instead [ 966.103864][T14482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18940'. [ 966.181185][T14484] netlink: 51 bytes leftover after parsing attributes in process `syz.2.18942'. [ 966.283762][T14488] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 966.291493][T14488] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 966.492936][T14503] netlink: 'syz.4.18950': attribute type 4 has an invalid length. [ 967.215500][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 968.456055][T14555] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.18968'. [ 969.165479][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 969.855984][T14607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18970'. [ 970.192764][T14618] validate_nla: 1 callbacks suppressed [ 970.192786][T14618] netlink: 'syz.2.18981': attribute type 8 has an invalid length. [ 970.207114][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18981'. [ 970.227465][T14618] veth1_to_team: entered promiscuous mode [ 970.235252][T14618] veth1_to_team: left promiscuous mode [ 970.899317][T14656] xfrm0 speed is unknown, defaulting to 1000 [ 971.071968][T14656] lo speed is unknown, defaulting to 1000 [ 971.204876][T14667] xfrm0 speed is unknown, defaulting to 1000 [ 971.438717][T14667] lo speed is unknown, defaulting to 1000 [ 971.651734][T14674] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.18995'. [ 971.694658][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 971.926612][T14682] netlink: 'syz.4.18999': attribute type 4 has an invalid length. [ 971.966719][T14682] netlink: 'syz.4.18999': attribute type 4 has an invalid length. [ 972.534232][T14591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 973.524268][T14711] : entered promiscuous mode [ 973.574314][T14721] syzkaller1: entered promiscuous mode [ 973.601057][T14721] syzkaller1: entered allmulticast mode [ 974.183191][T14757] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.19026'. [ 974.273272][T14765] netlink: 'syz.2.19029': attribute type 1 has an invalid length. [ 974.286537][T14736] batman_adv: batadv0: Interface deactivated: wlan0 [ 974.359388][T14765] bond11: entered promiscuous mode [ 974.365620][T14765] 8021q: adding VLAN 0 to HW filter on device bond11 [ 974.426058][T14765] 8021q: adding VLAN 0 to HW filter on device bond11 [ 974.437489][T14765] bond11: (slave ipip2): The slave device specified does not support setting the MAC address [ 974.459571][T14765] bond11: (slave ipip2): Setting fail_over_mac to active for active-backup mode [ 974.488018][T14765] bond11: (slave ipip2): making interface the new active one [ 974.498761][T14765] ipip2: entered promiscuous mode [ 974.506298][T14765] bond11: (slave ipip2): Enslaving as an active interface with an up link [ 975.352889][T14805] netlink: 'syz.0.19041': attribute type 1 has an invalid length. [ 975.363928][T14805] netlink: 'syz.0.19041': attribute type 4 has an invalid length. [ 975.372511][T14805] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.19041'. [ 976.056792][T14827] bridge0: entered promiscuous mode [ 976.062133][T14827] bridge0: entered allmulticast mode [ 976.174693][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 978.392573][T14883] netlink: 'syz.0.19072': attribute type 1 has an invalid length. [ 978.495945][T14883] bond8: entered promiscuous mode [ 978.501730][T14883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 978.664815][T14900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19077'. [ 978.735466][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 978.749182][T14883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 978.756725][T14883] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 978.767381][T14883] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 978.791389][T14883] bond8: (slave vti0): making interface the new active one [ 978.799159][T14883] vti0: entered promiscuous mode [ 978.807433][T14883] bond8: (slave vti0): Enslaving as an active interface with an up link [ 978.965316][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19078'. [ 978.976974][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19078'. [ 978.996886][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19078'. [ 979.013805][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19078'. [ 979.443341][T14925] xfrm0 speed is unknown, defaulting to 1000 [ 979.465117][T14921] netlink: 192 bytes leftover after parsing attributes in process `syz.4.19085'. [ 979.839671][T14925] lo speed is unknown, defaulting to 1000 [ 979.966132][T14946] xfrm0 speed is unknown, defaulting to 1000 [ 980.425869][T14946] lo speed is unknown, defaulting to 1000 [ 981.439519][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19105'. [ 981.453349][T14972] netlink: 'syz.1.19105': attribute type 5 has an invalid length. [ 981.477855][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19105'. [ 981.543393][T14972] geneve6: entered promiscuous mode [ 981.555007][T14972] geneve6: entered allmulticast mode [ 981.575929][T13896] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 44114 - 0 [ 981.600396][T13896] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 44114 - 0 [ 981.627839][T13896] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 44114 - 0 [ 981.658727][T13896] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 44114 - 0 [ 981.750192][T14980] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.19110'. [ 981.972040][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19114'. [ 982.293374][T15002] netlink: 'syz.2.19120': attribute type 3 has an invalid length. [ 984.027020][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19152'. [ 984.214684][T15086] IPVS: nq: FWM 3 0x00000003 - no destination available [ 985.107436][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19176'. [ 985.544341][T15143] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4129537595/4129537597 [ 985.555898][T15143] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4129537595/4129537597 [ 985.699775][T15149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19183'. [ 985.712412][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19183'. [ 985.723601][T15149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19183'. [ 985.733321][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19183'. [ 986.142503][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19186'. [ 986.171117][T15159] xfrm0 speed is unknown, defaulting to 1000 [ 986.187651][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19186'. [ 986.210502][T15157] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 986.498018][T15159] lo speed is unknown, defaulting to 1000 [ 986.944020][T15177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.071423][T15177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.168725][T15177] team0: Port device netdevsim1 removed [ 987.175799][T15177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.336147][T15177] netdevsim netdevsim2 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.459334][T15181] netlink: 'syz.3.19193': attribute type 21 has an invalid length. [ 987.608240][T15181] netlink: 'syz.3.19193': attribute type 21 has an invalid length. [ 987.835048][ T1125] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.880234][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.928192][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.948372][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.129280][T15191] netlink: 'syz.1.19198': attribute type 1 has an invalid length. [ 988.165240][T15191] bond11: entered promiscuous mode [ 988.170959][T15191] 8021q: adding VLAN 0 to HW filter on device bond11 [ 988.222377][T15191] 8021q: adding VLAN 0 to HW filter on device bond11 [ 988.240987][T15191] bond11: (slave gre5): The slave device specified does not support setting the MAC address [ 988.269511][T15191] bond11: (slave gre5): Setting fail_over_mac to active for active-backup mode [ 988.315268][T15191] bond11: (slave gre5): making interface the new active one [ 988.338104][T15191] gre5: entered promiscuous mode [ 988.359867][T15191] bond11: (slave gre5): Enslaving as an active interface with an up link [ 988.388742][T15199] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.19200'. [ 988.406395][T15199] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 988.537345][T15203] netlink: 'syz.3.19202': attribute type 1 has an invalid length. [ 988.710648][T15205] bond9: (slave bridge11): making interface the new active one [ 988.723074][T15205] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 989.170842][T15219] netlink: 'syz.4.19208': attribute type 1 has an invalid length. [ 989.203738][T15219] bond8: entered promiscuous mode [ 989.209403][T15219] 8021q: adding VLAN 0 to HW filter on device bond8 [ 989.267667][T15219] 8021q: adding VLAN 0 to HW filter on device bond8 [ 989.278863][T15219] bond8: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 989.289887][T15219] bond8: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 989.309090][T15219] bond8: (slave ip6gre4): making interface the new active one [ 989.317054][T15219] ip6gre4: entered promiscuous mode [ 989.324278][T15219] bond8: (slave ip6gre4): Enslaving as an active interface with an up link [ 990.011536][T15256] macvlan5: entered allmulticast mode [ 990.274814][T15261] netlink: 'syz.3.19226': attribute type 8 has an invalid length. [ 990.301463][T15261] netlink: 'syz.3.19226': attribute type 9 has an invalid length. [ 990.375952][T15264] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 990.384089][T15264] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 990.661519][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19233'. [ 990.827720][T15280] pimreg: entered allmulticast mode [ 990.939558][T15288] syzkaller1: entered promiscuous mode [ 990.945172][T15288] syzkaller1: entered allmulticast mode [ 991.054266][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19242'. [ 991.512002][T15321] netlink: 276 bytes leftover after parsing attributes in process `syz.4.19253'. [ 991.771458][T15333] syzkaller1: entered promiscuous mode [ 991.777934][T15333] syzkaller1: entered allmulticast mode [ 992.440170][T15364] netlink: 'syz.1.19271': attribute type 1 has an invalid length. [ 992.488700][T15364] bond12: entered promiscuous mode [ 992.494366][T15364] 8021q: adding VLAN 0 to HW filter on device bond12 [ 992.538065][T15364] 8021q: adding VLAN 0 to HW filter on device bond12 [ 992.547997][T15364] bond12: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 992.559710][T15364] bond12: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 992.575198][T15364] bond12: (slave ip6gre3): making interface the new active one [ 992.582886][T15364] ip6gre3: entered promiscuous mode [ 992.591019][T15364] bond12: (slave ip6gre3): Enslaving as an active interface with an up link [ 993.582918][T15406] netlink: 'syz.1.19288': attribute type 1 has an invalid length. [ 993.682758][T15406] 8021q: adding VLAN 0 to HW filter on device bond13 [ 993.743094][T15412] bond13: (slave gretap6): making interface the new active one [ 993.763231][T15412] bond13: (slave gretap6): Enslaving as an active interface with an up link [ 994.043702][T15426] ip6gre4: entered promiscuous mode [ 994.057636][T15426] ip6gre4: entered allmulticast mode [ 994.619449][T15451] syzkaller1: entered promiscuous mode [ 994.629207][T15451] syzkaller1: entered allmulticast mode [ 995.849906][T15494] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.19322'. [ 995.890037][T15496] openvswitch: : Dropping previously announced user features [ 995.925770][T15496] openvswitch: : Dropping previously announced user features [ 996.768748][T15528] netlink: 'syz.4.19337': attribute type 39 has an invalid length. [ 997.037656][T15536] netlink: 'syz.3.19340': attribute type 4 has an invalid length. [ 997.125807][T15540] netlink: 'syz.1.19341': attribute type 4 has an invalid length. [ 997.181644][T15540] netlink: 'syz.1.19341': attribute type 4 has an invalid length. [ 997.308329][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19346'. [ 997.341911][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19348'. [ 997.353613][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19348'. [ 997.506933][T15561] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 997.622018][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19355'. [ 998.665481][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19365'. [ 998.678713][ T4947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 998.689487][ T4947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 998.702800][ T4947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 998.711026][ T4947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 998.719192][ T4947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 999.018788][T15585] bond0: left allmulticast mode [ 999.154294][T15590] only policy match revision 0 supported [ 999.154407][T15590] unable to load match [ 999.183229][ T5764] xfrm0 speed is unknown, defaulting to 1000 [ 999.204067][ T5764] syz0: Port: 1 Link DOWN [ 999.238567][T15594] 8021q: adding VLAN 0 to HW filter on device bond14 [ 999.246592][ T1125] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.256789][ T1125] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.281159][ T5756] xfrm0 speed is unknown, defaulting to 1000 [ 999.288381][ T1125] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.299742][ T1125] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.309128][ T1125] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.318562][ T1125] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.356036][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19368'. [ 999.500246][T15618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19370'. [ 999.693809][T15629] netlink: 181256 bytes leftover after parsing attributes in process `syz.1.19374'. [ 999.923033][T15592] xfrm0 speed is unknown, defaulting to 1000 [ 1000.390436][T15592] lo speed is unknown, defaulting to 1000 [ 1000.815199][ T2880] Bluetooth: hci5: command tx timeout [ 1000.827394][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19397'. [ 1000.874414][T15680] bond9: entered promiscuous mode [ 1000.880602][T15680] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1001.008976][T15686] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.19398'. [ 1001.019682][T15686] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.19398'. [ 1001.698568][T15592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.706233][T15592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.713575][T15592] bridge_slave_0: entered allmulticast mode [ 1001.722610][T15592] bridge_slave_0: entered promiscuous mode [ 1001.732055][T15592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.740054][T15592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.747855][T15592] bridge_slave_1: entered allmulticast mode [ 1001.756423][T15592] bridge_slave_1: entered promiscuous mode [ 1001.803247][T15592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.818094][T15592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.859333][T15592] team0: Port device team_slave_0 added [ 1001.868468][T15592] team0: Port device team_slave_1 added [ 1001.933040][T15592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.940831][T15592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.967738][T15592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.006870][T15592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.020908][T15592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.060132][T15592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.187317][T15592] hsr_slave_0: entered promiscuous mode [ 1002.194105][T15592] hsr_slave_1: entered promiscuous mode [ 1002.211384][T15592] debugfs: 'hsr0' already exists in 'hsr' [ 1002.225349][T15592] Cannot create hsr debugfs directory [ 1002.362797][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19411'. [ 1002.795570][T15592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1002.825674][T15592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1002.846082][T15592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1002.875045][T15592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1002.891430][T15592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1002.898449][ T2880] Bluetooth: hci5: command tx timeout [ 1002.907979][T15747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19420'. [ 1002.933574][T15592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.959263][T15592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1002.994393][T15592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1003.563429][T15592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.595043][T15592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.609492][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.616700][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.655950][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.663182][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.991594][T15799] netlink: 240 bytes leftover after parsing attributes in process `syz.3.19432'. [ 1004.203193][T15806] syzkaller1: entered promiscuous mode [ 1004.212113][T15806] syzkaller1: entered allmulticast mode [ 1004.405711][T15592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.955747][T15592] veth0_vlan: entered promiscuous mode [ 1004.975330][ T2880] Bluetooth: hci5: command tx timeout [ 1004.992280][T15592] veth1_vlan: entered promiscuous mode [ 1005.078305][T15592] veth0_macvtap: entered promiscuous mode [ 1005.254349][T15592] veth1_macvtap: entered promiscuous mode [ 1005.312068][T15592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.351174][T15592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.394783][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.408206][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.421361][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.430973][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.657017][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.674202][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.745592][ T7865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.754204][ T7865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.081646][T15877] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.19462'. [ 1006.587492][T15899] netlink: 192 bytes leftover after parsing attributes in process `syz.3.19471'. [ 1006.617082][T15899] netlink: 192 bytes leftover after parsing attributes in process `syz.3.19471'. [ 1006.779253][T15904] veth0: entered promiscuous mode [ 1006.796083][T15904] bond0: entered promiscuous mode [ 1006.812731][T15902] bond0: left promiscuous mode [ 1006.828347][T15902] veth0: left promiscuous mode [ 1007.057567][ T2880] Bluetooth: hci5: command tx timeout [ 1007.448392][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19478'. [ 1007.477259][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19478'. [ 1007.639973][T15938] netlink: 'syz.1.19486': attribute type 1 has an invalid length. [ 1007.908701][T15956] netlink: 'syz.4.19492': attribute type 1 has an invalid length. [ 1007.999194][T15956] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1008.642702][T15947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1009.335278][ T5764] IPVS: starting estimator thread 0... [ 1009.355425][T15980] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1009.444878][T15981] IPVS: using max 29 ests per chain, 69600 per kthread [ 1010.076176][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19508'. [ 1011.014661][T16019] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 1012.466654][T16063] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.19534'. [ 1012.918587][ T7865] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.936283][ T7865] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.959606][ T7865] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.621017][T16093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19547'. [ 1013.679480][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19547'. [ 1013.693992][T16097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19550'. [ 1014.313401][T16119] GUP no longer grows the stack in syz.5.19559 (16119): 200000003000-20000000a000 (200000001000) [ 1014.327587][T16119] CPU: 0 UID: 0 PID: 16119 Comm: syz.5.19559 Not tainted syzkaller #0 PREEMPT(full) [ 1014.327617][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.327630][T16119] Call Trace: [ 1014.327639][T16119] [ 1014.327648][T16119] dump_stack_lvl+0xe8/0x150 [ 1014.327680][T16119] __get_user_pages+0x238c/0x2720 [ 1014.327772][T16119] ? down_read_killable+0x1bb/0x340 [ 1014.327868][T16119] __gup_longterm_locked+0xd52/0x15c0 [ 1014.327896][T16119] ? lock_acquire+0x106/0x350 [ 1014.327951][T16119] gup_fast_fallback+0x1d82/0x20d0 [ 1014.328012][T16119] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1014.328040][T16119] ? is_valid_gup_args+0x11f/0x200 [ 1014.328066][T16119] ? get_user_pages_fast+0x4d/0xb0 [ 1014.328093][T16119] __iov_iter_get_pages_alloc+0x378/0xa40 [ 1014.328177][T16119] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1014.328220][T16119] iov_iter_get_pages2+0x5e/0xa0 [ 1014.328249][T16119] __se_sys_vmsplice+0x7b5/0x1660 [ 1014.328298][T16119] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1014.328327][T16119] ? __pfx_futex_wait+0x10/0x10 [ 1014.328436][T16119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.328460][T16119] do_syscall_64+0x174/0x580 [ 1014.328483][T16119] ? trace_irq_disable+0x3b/0x140 [ 1014.328514][T16119] ? clear_bhb_loop+0x40/0x90 [ 1014.328539][T16119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.328559][T16119] RIP: 0033:0x7f69f939ce59 [ 1014.328579][T16119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.328597][T16119] RSP: 002b:00007f69fa297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1014.328619][T16119] RAX: ffffffffffffffda RBX: 00007f69f9615fa0 RCX: 00007f69f939ce59 [ 1014.328635][T16119] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1014.328648][T16119] RBP: 00007f69f9432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1014.328660][T16119] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1014.328672][T16119] R13: 00007f69f9616038 R14: 00007f69f9615fa0 R15: 00007ffffebead78 [ 1014.328715][T16119] [ 1014.554860][T16121] netlink: 'syz.3.19560': attribute type 4 has an invalid length. [ 1014.676294][T16125] syzkaller0: entered promiscuous mode [ 1014.681813][T16125] syzkaller0: entered allmulticast mode [ 1014.688920][T16038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1017.022123][T16127] syzkaller1: entered promiscuous mode [ 1017.028314][T16127] syzkaller1: entered allmulticast mode [ 1017.036161][T16136] team0: entered allmulticast mode [ 1017.041314][T16136] team_slave_1: entered allmulticast mode [ 1017.048105][T16139] team0: left allmulticast mode [ 1017.053328][T16139] team_slave_1: left allmulticast mode [ 1017.065825][T16140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1017.208297][T16154] netlink: 'syz.2.19569': attribute type 1 has an invalid length. [ 1017.281022][T16154] bond12: entered promiscuous mode [ 1017.287210][T16154] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1017.729738][T16178] xfrm0 speed is unknown, defaulting to 1000 [ 1018.079068][T16199] netlink: 'syz.1.19584': attribute type 10 has an invalid length. [ 1018.130564][T16199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.154139][T16199] bond0: (slave team0): Enslaving as an active interface with an up link [ 1018.288411][T16203] PKCS7: Unknown OID: [4] (bad) [ 1018.300809][T16203] PKCS7: Only support pkcs7_signedData type [ 1018.318136][T16178] lo speed is unknown, defaulting to 1000 [ 1018.454254][T16209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19589'. [ 1018.881458][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19596'. [ 1022.305037][T16274] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19600'. [ 1022.343138][T16268] vlan3: entered allmulticast mode [ 1022.353430][T16268] bond0: entered allmulticast mode [ 1022.362504][T16268] ÿ: entered allmulticast mode [ 1022.445937][T16274] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 1022.468349][T16274] ÿ: left allmulticast mode [ 1022.485705][T16274] bond0 (unregistering): Released all slaves [ 1022.924419][T16278] syzkaller1: entered promiscuous mode [ 1022.972099][T16278] syzkaller1: entered allmulticast mode [ 1023.021444][T16289] [ 1023.023816][T16289] ====================================================== [ 1023.030877][T16289] WARNING: possible circular locking dependency detected [ 1023.038017][T16289] syzkaller #0 Not tainted [ 1023.042474][T16289] ------------------------------------------------------ [ 1023.049560][T16289] syz.1.19608/16289 is trying to acquire lock: [ 1023.055723][T16289] ffff88809ea2ee68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 1023.067477][T16289] [ 1023.067477][T16289] but task is already holding lock: [ 1023.074845][T16289] ffff88809ea2f2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1023.083953][T16289] [ 1023.083953][T16289] which lock already depends on the new lock. [ 1023.083953][T16289] [ 1023.094357][T16289] [ 1023.094357][T16289] the existing dependency chain (in reverse order) is: [ 1023.103504][T16289] [ 1023.103504][T16289] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1023.111337][T16289] lock_sock_nested+0x41/0x100 [ 1023.116716][T16289] smc_listen_out+0x105/0x3c0 [ 1023.121940][T16289] smc_listen_work+0x81d/0x1410 [ 1023.127320][T16289] process_scheduled_works+0xa8e/0x14e0 [ 1023.133400][T16289] worker_thread+0xa47/0xfb0 [ 1023.138534][T16289] kthread+0x389/0x470 [ 1023.143135][T16289] ret_from_fork+0x514/0xb70 [ 1023.148293][T16289] ret_from_fork_asm+0x1a/0x30 [ 1023.153592][T16289] [ 1023.153592][T16289] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1023.163770][T16289] __lock_acquire+0x1520/0x2cd0 [ 1023.169160][T16289] lock_acquire+0x106/0x350 [ 1023.174222][T16289] __flush_work+0x74c/0xca0 [ 1023.179264][T16289] __cancel_work_sync+0xbe/0x110 [ 1023.184734][T16289] smc_clcsock_release+0x60/0xf0 [ 1023.190257][T16289] __smc_release+0x64e/0x7c0 [ 1023.195399][T16289] smc_close_non_accepted+0xd5/0x1f0 [ 1023.201216][T16289] smc_close_active+0xb42/0xf30 [ 1023.206599][T16289] __smc_release+0x9c/0x7c0 [ 1023.211658][T16289] smc_release+0x2c5/0x550 [ 1023.216625][T16289] sock_close+0xad/0x220 [ 1023.221402][T16289] __fput+0x418/0xa50 [ 1023.225942][T16289] task_work_run+0x1d9/0x270 [ 1023.231074][T16289] exit_to_user_mode_loop+0x193/0x6b0 [ 1023.236978][T16289] do_syscall_64+0x353/0x580 [ 1023.242107][T16289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.248529][T16289] [ 1023.248529][T16289] other info that might help us debug this: [ 1023.248529][T16289] [ 1023.258758][T16289] Possible unsafe locking scenario: [ 1023.258758][T16289] [ 1023.266288][T16289] CPU0 CPU1 [ 1023.271775][T16289] ---- ---- [ 1023.277185][T16289] lock(sk_lock-AF_SMC/1); [ 1023.281710][T16289] lock((work_completion)(&new_smc->smc_listen_work)); [ 1023.291172][T16289] lock(sk_lock-AF_SMC/1); [ 1023.298217][T16289] lock((work_completion)(&new_smc->smc_listen_work)); [ 1023.305160][T16289] [ 1023.305160][T16289] *** DEADLOCK *** [ 1023.305160][T16289] [ 1023.313366][T16289] 3 locks held by syz.1.19608/16289: [ 1023.318688][T16289] #0: ffff8880403c7b00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1023.329066][T16289] #1: ffff88809ea2f2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1023.338531][T16289] #2: ffffffff8e958780 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 1023.347773][T16289] [ 1023.347773][T16289] stack backtrace: [ 1023.353671][T16289] CPU: 0 UID: 0 PID: 16289 Comm: syz.1.19608 Not tainted syzkaller #0 PREEMPT(full) [ 1023.353690][T16289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1023.353701][T16289] Call Trace: [ 1023.353708][T16289] [ 1023.353717][T16289] dump_stack_lvl+0xe8/0x150 [ 1023.353736][T16289] print_circular_bug+0x2e1/0x300 [ 1023.353760][T16289] check_noncircular+0x12e/0x150 [ 1023.353783][T16289] __lock_acquire+0x1520/0x2cd0 [ 1023.353804][T16289] ? __pfx___schedule+0x10/0x10 [ 1023.353820][T16289] ? irqentry_exit+0x218/0x8e0 [ 1023.353838][T16289] ? irqentry_exit+0x218/0x8e0 [ 1023.353855][T16289] ? trace_irq_disable+0x3b/0x140 [ 1023.353881][T16289] ? __flush_work+0x101/0xca0 [ 1023.353897][T16289] lock_acquire+0x106/0x350 [ 1023.353912][T16289] ? __flush_work+0x101/0xca0 [ 1023.353931][T16289] ? preempt_schedule_thunk+0x16/0x30 [ 1023.353955][T16289] ? __flush_work+0x101/0xca0 [ 1023.353973][T16289] __flush_work+0x74c/0xca0 [ 1023.353989][T16289] ? __flush_work+0x101/0xca0 [ 1023.354007][T16289] ? __flush_work+0x101/0xca0 [ 1023.354025][T16289] ? __pfx___flush_work+0x10/0x10 [ 1023.354043][T16289] ? __pfx_wq_barrier_func+0x10/0x10 [ 1023.354074][T16289] ? __cancel_work_sync+0x5c/0x110 [ 1023.354093][T16289] __cancel_work_sync+0xbe/0x110 [ 1023.354112][T16289] smc_clcsock_release+0x60/0xf0 [ 1023.354133][T16289] __smc_release+0x64e/0x7c0 [ 1023.354160][T16289] smc_close_non_accepted+0xd5/0x1f0 [ 1023.354177][T16289] smc_close_active+0xb42/0xf30 [ 1023.354196][T16289] ? __pfx_sock_def_readable+0x10/0x10 [ 1023.354218][T16289] __smc_release+0x9c/0x7c0 [ 1023.354241][T16289] ? __local_bh_enable_ip+0xd0/0x130 [ 1023.354258][T16289] smc_release+0x2c5/0x550 [ 1023.354283][T16289] sock_close+0xad/0x220 [ 1023.354302][T16289] ? __pfx_sock_close+0x10/0x10 [ 1023.354321][T16289] __fput+0x418/0xa50 [ 1023.354343][T16289] task_work_run+0x1d9/0x270 [ 1023.354366][T16289] ? __pfx_task_work_run+0x10/0x10 [ 1023.354392][T16289] exit_to_user_mode_loop+0x193/0x6b0 [ 1023.354407][T16289] ? rcu_is_watching+0x15/0xb0 [ 1023.354426][T16289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.354445][T16289] do_syscall_64+0x353/0x580 [ 1023.354465][T16289] ? trace_irq_disable+0x3b/0x140 [ 1023.354488][T16289] ? clear_bhb_loop+0x40/0x90 [ 1023.354506][T16289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.354522][T16289] RIP: 0033:0x7f3a2f99ce59 [ 1023.354537][T16289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.354550][T16289] RSP: 002b:00007ffc2d99c0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1023.354567][T16289] RAX: 0000000000000000 RBX: 00007f3a2fc17da0 RCX: 00007f3a2f99ce59 [ 1023.354579][T16289] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1023.354588][T16289] RBP: 00007f3a2fc17da0 R08: 00007f3a2fc16038 R09: 0000000000000000 [ 1023.354599][T16289] R10: 00000000005f39b4 R11: 0000000000000246 R12: 00000000000f9ede [ 1023.354609][T16289] R13: 00007f3a2fc15fac R14: 00000000000f9be7 R15: 00007ffc2d99c200 [ 1023.354628][T16289] [ 1024.582334][ T1125] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.630098][ T1125] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.699692][ T1125] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.749596][ T1125] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.823101][ T1125] bridge_slave_1: left allmulticast mode [ 1024.828904][ T1125] bridge_slave_1: left promiscuous mode [ 1024.836791][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.852552][ T1125] bridge_slave_0: left allmulticast mode [ 1024.858712][ T1125] bridge_slave_0: left promiscuous mode [ 1024.864485][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.930512][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.941889][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.952614][ T1125] bond0 (unregistering): Released all slaves [ 1025.240520][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1025.431135][ T1125] hsr_slave_0: left promiscuous mode [ 1025.437816][ T1125] hsr_slave_1: left promiscuous mode [ 1025.443670][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.451491][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.462675][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.470871][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.485968][ T1125] veth1_macvtap: left promiscuous mode [ 1025.491477][ T1125] veth0_macvtap: left promiscuous mode [ 1025.497233][ T1125] veth1_vlan: left promiscuous mode [ 1025.502524][ T1125] veth0_vlan: left promiscuous mode [ 1025.678640][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 1025.706593][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 1025.770249][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1025.990496][ T1125] IPVS: stop unused estimator thread 0... [ 1026.064227][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1026.340346][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1028.655026][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!