last executing test programs: 1m48.730040129s ago: executing program 4 (id=2700): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1m48.72931785s ago: executing program 0 (id=2701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 1m47.463428679s ago: executing program 4 (id=2706): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x40000) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000004c0)='P', 0x1}], 0x1}}], 0x1, 0x8041) 1m45.747973863s ago: executing program 1 (id=2714): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r0 = socket(0x8, 0x3, 0x3) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x42000004, 0x0, 0x0) 1m45.357355523s ago: executing program 4 (id=2715): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x11d, 0x1, 0x0, 0x0) 1m45.267585512s ago: executing program 3 (id=2716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) 1m44.907097146s ago: executing program 0 (id=2717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x30, r1, 0x3, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1m44.897481512s ago: executing program 3 (id=2718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x27, 0x0, 0x1) 1m44.52348582s ago: executing program 3 (id=2719): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) 1m44.508978433s ago: executing program 0 (id=2720): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, 0x0, 0x81) sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x8000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003380), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000003480)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008880}, 0x4c000) 1m44.230706723s ago: executing program 4 (id=2721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1m44.21126742s ago: executing program 0 (id=2722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff0011223344554305000f32000300000030112233445500112233445500ff0000", 0x26) 1m43.725619814s ago: executing program 1 (id=2723): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1m43.184716793s ago: executing program 3 (id=2724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x78bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf2}}]}, 0x90}}, 0x0) 1m42.813179773s ago: executing program 1 (id=2725): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 1m42.770754279s ago: executing program 3 (id=2727): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0x9, 0x6c8) 1m42.5440432s ago: executing program 2 (id=2728): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001000050000000000000000007f0000010000000000000000000000007f0000010000000000000000000000001f90ffff1f", @ANYRES32=0x0, @ANYBLOB], 0xf0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fddbdf253900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000080140005"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m42.535373767s ago: executing program 3 (id=2729): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005000)=[{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000023c0)="512c0a8d", 0x4}], 0x1, 0x0, 0x0, 0x10010}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2988a80c0081004c0086dd6d00200810082fff"], 0x104a) 1m42.53269303s ago: executing program 1 (id=2730): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r1, 0x24, 0x0, 0xffff, &(0x7f0000000580)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m42.326329402s ago: executing program 2 (id=2731): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m42.244101379s ago: executing program 2 (id=2732): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) 1m42.151478643s ago: executing program 1 (id=2733): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x80, 0x0}, 0x0) 1m41.258875761s ago: executing program 2 (id=2734): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x104a8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x1}, 0x80) 1m41.084804639s ago: executing program 1 (id=2735): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m41.067680342s ago: executing program 2 (id=2736): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffdf3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) 1m40.840705464s ago: executing program 2 (id=2737): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1m40.785025116s ago: executing program 4 (id=2738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, r1, 0x703, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x26040000}, 0x4) 1m40.772845747s ago: executing program 0 (id=2739): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(0x4) pipe(&(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r0}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m40.317739812s ago: executing program 4 (id=2740): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x176}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb1", 0xf}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000180)="228b0a3652", 0x5}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fad535a4", 0x5d}, {&(0x7f0000000540)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2ac84a402a80df00cf64b156defd33afafab5c8a40dd0f79d03bf481fd2bf7c4c084227a9b3951d6e23156c58e8ff86f5a6196efc585d57b8fa2abcd7f2952f7dcf21546acf8e7aafc9162ea1db56c850af0a225d919b0120fd83206ccb82f13d5165ffd3fdc07d89b14be9048e81ebb95bce1fb033", 0xac}, {&(0x7f00000002c0)="5fe22bb7bb83f3dce8fa869159ca63aa7fa342c010b43bebd16fd340b362aa61a8cc38e0389b6132aabbca1ba3cdf1205328a48fbe94f750a863619b1e8ec98b60faed078bb15658d50686d5c5b354b08f67723e19676fa7c6386c16af2425b3f00d91dcb9", 0x65}, {&(0x7f0000000340)="fb182126dae81521ece63f19fa9f3b78b6fd6c8104e97a6b259485e6e739d2cc4f14a7105e411bfd924bd8f5fc6edbb4e9e6c46eb0", 0x35}], 0x5) write(r0, &(0x7f0000001e00)="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", 0x407) 1m40.07673927s ago: executing program 0 (id=2741): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0x36, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0x800000000004, 0x80, 0xffffffffffffffc0, 0x1000000000fff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) 0s ago: executing program 32 (id=2741): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0x36, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0x800000000004, 0x80, 0xffffffffffffffc0, 0x1000000000fff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) kernel console output (not intermixed with test programs): 3.220'. [ 87.618393][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 87.951591][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 87.951613][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 87.951637][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 88.019544][ T85] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.019590][ T85] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.019626][ T85] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.019663][ T85] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.407147][ T6358] netlink: 'syz.4.245': attribute type 4 has an invalid length. [ 88.420759][ T6358] netlink: 'syz.4.245': attribute type 4 has an invalid length. [ 89.101332][ T6392] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 89.122246][ T6392] geneve2: entered promiscuous mode [ 89.122261][ T6392] geneve2: entered allmulticast mode [ 89.481362][ T6409] syzkaller1: entered promiscuous mode [ 89.481386][ T6409] syzkaller1: entered allmulticast mode [ 90.036648][ T6437] bond0: invalid NS target :: specified for addition [ 90.036679][ T6437] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 90.139219][ T6442] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 90.737996][ T6470] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 90.763735][ T6470] bond1: entered promiscuous mode [ 90.767469][ T6470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.797696][ T6470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.798069][ T6470] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 90.798090][ T6470] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 90.802720][ T6470] bond1: (slave xfrm1): making interface the new active one [ 90.802741][ T6470] xfrm1: entered promiscuous mode [ 90.804711][ T6470] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 91.490047][ T6505] netlink: 'syz.0.308': attribute type 4 has an invalid length. [ 91.546544][ T6505] netlink: 'syz.0.308': attribute type 4 has an invalid length. [ 92.457268][ T6552] netlink: 'syz.3.328': attribute type 13 has an invalid length. [ 92.457292][ T6552] __nla_validate_parse: 10 callbacks suppressed [ 92.457304][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 92.495849][ T6552] netlink: 'syz.3.328': attribute type 13 has an invalid length. [ 92.495870][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 92.520170][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.529591][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.530427][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.530460][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.865292][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 93.013843][ T6572] netlink: 'syz.2.338': attribute type 7 has an invalid length. [ 93.014076][ T6572] netlink: 'syz.2.338': attribute type 7 has an invalid length. [ 93.440450][ T6595] ip_tables: iptables: counters copy to user failed while replacing table [ 93.442441][ T6595] ip_tunnel: non-ECT from 172.30.1.4 with TOS=0x1 [ 93.511695][ T6594] netlink: 6 bytes leftover after parsing attributes in process `syz.4.348'. [ 93.841585][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 93.869357][ T6611] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 93.877680][ T31] audit: type=1800 audit(1789518856.571:4): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.359" name=0A dev="tmpfs" ino=383 res=0 errno=0 [ 94.392644][ T6637] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 94.755661][ T6656] netlink: 'syz.2.375': attribute type 2 has an invalid length. [ 94.755684][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.375'. [ 94.806480][ T6656] : entered promiscuous mode [ 94.885714][ T6663] veth0: entered promiscuous mode [ 94.901112][ T6659] veth0: left promiscuous mode [ 95.627058][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'. [ 95.640266][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'. [ 96.001004][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 96.001026][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 96.105060][ T6724] syzkaller1: entered promiscuous mode [ 96.105082][ T6724] syzkaller1: entered allmulticast mode [ 96.127307][ T6724] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 96.127328][ T6724] syzkaller1: Linktype set failed because interface is up [ 97.336744][ T6779] nbd: nbd64 already in use [ 97.622897][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 97.690540][ T6803] __nla_validate_parse: 3 callbacks suppressed [ 97.690559][ T6803] netlink: 64 bytes leftover after parsing attributes in process `syz.0.442'. [ 97.741609][ T6804] tipc: Started in network mode [ 97.741643][ T6804] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 97.958659][ T6814] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 98.128746][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 98.332698][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 98.333258][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 98.384026][ T6820] team0: Port device team_slave_0 removed [ 98.535076][ T6837] netlink: 68 bytes leftover after parsing attributes in process `syz.2.456'. [ 98.636809][ T6844] vcan0: tx address claim with dest, not broadcast [ 98.785178][ T6851] xt_hashlimit: size too large, truncated to 1048576 [ 99.393435][ T6879] syzkaller1: entered promiscuous mode [ 99.393459][ T6879] syzkaller1: entered allmulticast mode [ 99.421060][ T6873] xt_CT: No such helper "snmp_trap" [ 99.619233][ T6890] macvlan0: entered promiscuous mode [ 100.851179][ T6948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.505'. [ 101.675901][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.524'. [ 101.744080][ T6991] netlink: 11 bytes leftover after parsing attributes in process `syz.3.528'. [ 101.949209][ T7002] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.301976][ T7020] block nbd0: not configured, cannot reconfigure [ 102.515839][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 102.530360][ T5620] block nbd0: Receive control failed (result -107) [ 102.924465][ T7046] team0 (unregistering): Port device team_slave_0 removed [ 102.927236][ T7046] team0 (unregistering): Port device team_slave_1 removed [ 103.492248][ T7075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.567'. [ 103.773011][ T7089] netlink: 'syz.4.572': attribute type 2 has an invalid length. [ 104.156213][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 104.156237][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 104.178384][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 104.178405][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 104.637370][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 104.945154][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.4.596'. [ 104.950538][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.4.596'. [ 104.952291][ T7151] netlink: 'syz.4.596': attribute type 32 has an invalid length. [ 104.952309][ T7151] netlink: 500 bytes leftover after parsing attributes in process `syz.4.596'. [ 105.004574][ T7155] netlink: 'syz.2.598': attribute type 15 has an invalid length. [ 105.004595][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 105.004804][ T7155] netlink: 'syz.2.598': attribute type 15 has an invalid length. [ 105.540070][ T7177] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.987047][ T7200] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 106.693032][ T7205] Bluetooth: MGMT ver 1.23 [ 107.793471][ T7143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.038323][ T7219] netlink: 'syz.4.623': attribute type 39 has an invalid length. [ 108.294031][ T7230] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 108.612434][ T7247] __nla_validate_parse: 1 callbacks suppressed [ 108.612455][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 108.664231][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 108.667871][ T3772] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.686015][ T3772] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.686441][ T3772] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.686475][ T3772] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.095394][ T7361] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 111.113082][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 111.220094][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 111.220131][ T7367] netlink: 'syz.2.686': attribute type 1 has an invalid length. [ 111.220144][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 111.220352][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 111.220371][ T7367] netlink: 'syz.2.686': attribute type 1 has an invalid length. [ 111.220382][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 111.294826][ T7361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.414598][ T7365] bond1: (slave geneve2): making interface the new active one [ 111.433349][ T7365] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 112.569682][ T7420] ip_tables: iptables: counters copy to user failed while replacing table [ 112.723618][ T7429] block nbd0: Unsupported socket: should be TCP or UNIX. [ 113.221687][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 113.273164][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.724'. [ 113.335161][ T7460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.725'. [ 113.335201][ T7460] netlink: 'syz.3.725': attribute type 7 has an invalid length. [ 113.335240][ T7460] netlink: 'syz.3.725': attribute type 8 has an invalid length. [ 114.651814][ T7522] __nla_validate_parse: 2 callbacks suppressed [ 114.651836][ T7522] netlink: 27 bytes leftover after parsing attributes in process `syz.4.752'. [ 114.729714][ T7524] syzkaller1: entered promiscuous mode [ 114.729737][ T7524] syzkaller1: entered allmulticast mode [ 114.818582][ T7528] netlink: 'syz.1.755': attribute type 15 has an invalid length. [ 115.208878][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.762'. [ 115.209875][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.762'. [ 115.409216][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.766'. [ 115.436599][ T7550] netlink: 'syz.3.765': attribute type 21 has an invalid length. [ 115.436619][ T7550] netlink: 'syz.3.765': attribute type 22 has an invalid length. [ 115.436632][ T7550] netlink: 'syz.3.765': attribute type 23 has an invalid length. [ 115.436644][ T7550] netlink: 'syz.3.765': attribute type 25 has an invalid length. [ 115.436658][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 115.547882][ T52] Bluetooth: hci0: command 0x0c3a tx timeout [ 115.554758][ T5620] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 115.765022][ T7533] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 115.765155][ T7533] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 115.862293][ T7565] ip_tables: iptables: counters copy to user failed while replacing table [ 116.947468][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 116.947491][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 116.947517][ T7602] validate_nla: 1 callbacks suppressed [ 116.947529][ T7602] netlink: 'syz.3.786': attribute type 15 has an invalid length. [ 117.046447][ T7604] netlink: 'syz.1.789': attribute type 12 has an invalid length. [ 117.046469][ T7604] netlink: 'syz.1.789': attribute type 29 has an invalid length. [ 117.046481][ T7604] netlink: 148 bytes leftover after parsing attributes in process `syz.1.789'. [ 117.046498][ T7604] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 117.046511][ T7604] netlink: 'syz.1.789': attribute type 2 has an invalid length. [ 117.046522][ T7604] netlink: 11 bytes leftover after parsing attributes in process `syz.1.789'. [ 117.053008][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 117.053040][ T7602] netlink: 'syz.3.786': attribute type 15 has an invalid length. [ 117.065227][ T3802] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 117.065270][ T3802] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 117.065302][ T3802] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 117.065333][ T3802] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 117.349669][ T12] IPVS: starting estimator thread 0... [ 117.351141][ T7617] IPVS: rr: UDP [::1]:8080 - no destination available [ 117.449814][ T7618] IPVS: using max 34 ests per chain, 81600 per kthread [ 118.712101][ T7662] netdevsim netdevsim4 netdevsim2: IPsec offload requires 128 bit authentication [ 118.949806][ T7675] netlink: 'syz.3.820': attribute type 21 has an invalid length. [ 118.967020][ T7675] netlink: 'syz.3.820': attribute type 21 has an invalid length. [ 120.116472][ T7732] netlink: 'syz.2.840': attribute type 2 has an invalid length. [ 120.127037][ T7732] netlink: 'syz.2.840': attribute type 2 has an invalid length. [ 120.127058][ T7732] __nla_validate_parse: 7 callbacks suppressed [ 120.127068][ T7732] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.840'. [ 122.212964][ T7782] syzkaller1: entered allmulticast mode [ 122.543551][ T7792] netlink: Unknown NAT attribute (type=16383, max=9) [ 122.543575][ T7792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.618514][ T7712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.884566][ T7805] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 122.926067][ T7805] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 123.538220][ T7834] tipc: Failed to remove unknown binding: 66,1,1/0:1589494382/1589494384 [ 123.538251][ T7834] tipc: Failed to remove unknown binding: 66,1,1/0:1589494382/1589494384 [ 123.677100][ T7838] netlink: 'syz.0.874': attribute type 4 has an invalid length. [ 123.687036][ T7838] netlink: 'syz.0.874': attribute type 4 has an invalid length. [ 123.821325][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 123.891015][ T7848] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 124.089086][ T7848] bond1: entered promiscuous mode [ 124.106729][ T7848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.237500][ T7857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.238096][ T7857] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 124.238116][ T7857] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 124.279766][ T7857] bond1: (slave ip6gre1): making interface the new active one [ 124.279792][ T7857] ip6gre1: entered promiscuous mode [ 124.283503][ T7857] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 124.535506][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 124.761783][ T7889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.896'. [ 124.761835][ T7889] netlink: 'syz.3.896': attribute type 7 has an invalid length. [ 124.761847][ T7889] netlink: 'syz.3.896': attribute type 8 has an invalid length. [ 124.761858][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 124.824090][ T7889] erspan0: entered promiscuous mode [ 124.825776][ T7889] gretap0: entered promiscuous mode [ 124.839442][ T7889] erspan0: left promiscuous mode [ 124.846492][ T7889] gretap0: left promiscuous mode [ 124.896809][ T7893] netlink: 'syz.4.897': attribute type 20 has an invalid length. [ 124.896832][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 124.897074][ T7893] netlink: 'syz.4.897': attribute type 20 has an invalid length. [ 124.897088][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 125.256133][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 125.331789][ T7908] netlink: 'syz.3.904': attribute type 16 has an invalid length. [ 125.660776][ T7923] bond2: entered promiscuous mode [ 125.660802][ T7923] bond2: entered allmulticast mode [ 125.661163][ T7923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.712460][ T7926] erspan1: entered allmulticast mode [ 125.716638][ T7926] bond2: (slave erspan1): making interface the new active one [ 125.716663][ T7926] erspan1: entered promiscuous mode [ 125.742161][ T7926] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 126.611499][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 128.661775][ T8076] syzkaller1: entered promiscuous mode [ 128.661796][ T8076] syzkaller1: entered allmulticast mode [ 128.695703][ T8083] syzkaller1: entered promiscuous mode [ 128.695726][ T8083] syzkaller1: entered allmulticast mode [ 129.043065][ T8095] syzkaller1: entered promiscuous mode [ 129.043087][ T8095] syzkaller1: entered allmulticast mode [ 129.092408][ T8099] Bluetooth: ISO socket layer initialized [ 130.266111][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 130.324884][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 130.325260][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 130.344038][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 130.344293][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 130.564627][ T8159] validate_nla: 1 callbacks suppressed [ 130.564645][ T8159] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 130.564658][ T8159] netlink: 'syz.1.997': attribute type 4 has an invalid length. [ 130.564670][ T8159] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.997'. [ 130.999437][ T8174] bridge0: port 3(vlan2) entered blocking state [ 130.999576][ T8174] bridge0: port 3(vlan2) entered disabled state [ 130.999738][ T8174] vlan2: entered allmulticast mode [ 130.999754][ T8174] geneve0: entered allmulticast mode [ 131.007368][ T8174] vlan2: entered promiscuous mode [ 131.007388][ T8174] geneve0: entered promiscuous mode [ 131.019937][ T8177] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1005'. [ 131.240388][ T8185] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 131.256524][ T8182] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1008'. [ 131.271452][ T8189] GUP no longer grows the stack in syz.2.1011 (8189): 200000003000-20000000a000 (200000001000) [ 131.271503][ T8189] CPU: 1 UID: 0 PID: 8189 Comm: syz.2.1011 Not tainted syzkaller #0 PREEMPT(full) [ 131.271525][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.271543][ T8189] Call Trace: [ 131.271555][ T8189] [ 131.271564][ T8189] dump_stack_lvl+0xe8/0x150 [ 131.271608][ T8189] __get_user_pages+0x23b6/0x2750 [ 131.271638][ T8189] ? lock_acquire+0x115/0x350 [ 131.271685][ T8189] ? __gup_longterm_locked+0xc3b/0x15c0 [ 131.271720][ T8189] __gup_longterm_locked+0xd52/0x15c0 [ 131.271750][ T8189] ? lock_acquire+0x115/0x350 [ 131.271786][ T8189] gup_fast_fallback+0x1d92/0x20e0 [ 131.271843][ T8189] ? __pfx_gup_fast_fallback+0x10/0x10 [ 131.271871][ T8189] ? lock_acquire+0x115/0x350 [ 131.271893][ T8189] ? is_valid_gup_args+0x11f/0x200 [ 131.271922][ T8189] ? get_user_pages_fast+0x4d/0xb0 [ 131.271950][ T8189] __iov_iter_get_pages_alloc+0x378/0xa40 [ 131.271982][ T8189] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 131.272007][ T8189] iov_iter_get_pages2+0x5e/0xa0 [ 131.272035][ T8189] __se_sys_vmsplice+0x7b5/0x1660 [ 131.272094][ T8189] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 131.272125][ T8189] ? __pfx_futex_wait+0x10/0x10 [ 131.272224][ T8189] do_syscall_64+0x166/0x520 [ 131.272249][ T8189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.272268][ T8189] ? clear_bhb_loop+0x70/0xc0 [ 131.272293][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.272313][ T8189] RIP: 0033:0x7f6a76d9e159 [ 131.272338][ T8189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.272358][ T8189] RSP: 002b:00007f6a77d20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 131.272385][ T8189] RAX: ffffffffffffffda RBX: 00007f6a77025fa0 RCX: 00007f6a76d9e159 [ 131.272402][ T8189] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 131.272415][ T8189] RBP: 00007f6a76e3503b R08: 0000000000000000 R09: 0000000000000000 [ 131.272427][ T8189] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 131.272439][ T8189] R13: 00007f6a77026038 R14: 00007f6a77025fa0 R15: 00007ffeb2c62768 [ 131.272472][ T8189] [ 131.530445][ T8190] bond1: (slave geneve2): making interface the new active one [ 131.533424][ T8190] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 131.547940][ T1111] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.549216][ T1111] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.549253][ T1111] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.549285][ T1111] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.808378][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1014'. [ 131.898855][ T8207] batman_adv: batadv0: Adding interface: syzkaller0 [ 131.898873][ T8207] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.898903][ T8207] batman_adv: batadv0: Interface activated: syzkaller0 [ 131.947082][ T8203] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 132.015716][ T8203] batman_adv: batadv0: Removing interface: syzkaller0 [ 132.096863][ T8210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.135434][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 132.756092][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.756149][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.661682][ T8267] veth0: entered promiscuous mode [ 133.699304][ T8267] veth0: left promiscuous mode [ 133.855782][ T8275] netlink: 'syz.0.1048': attribute type 8 has an invalid length. [ 134.000219][ T8281] syzkaller1: entered promiscuous mode [ 134.000243][ T8281] syzkaller1: entered allmulticast mode [ 135.250836][ T8326] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 135.651139][ T8343] geneve3: entered promiscuous mode [ 136.931247][ T8399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.130537][ T8408] netlink: 'syz.2.1099': attribute type 21 has an invalid length. [ 137.130568][ T8408] netlink: 'syz.2.1099': attribute type 22 has an invalid length. [ 137.130581][ T8408] netlink: 'syz.2.1099': attribute type 23 has an invalid length. [ 137.130593][ T8408] netlink: 'syz.2.1099': attribute type 25 has an invalid length. [ 137.130605][ T8408] __nla_validate_parse: 4 callbacks suppressed [ 137.130615][ T8408] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1099'. [ 137.827174][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 137.992734][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'. [ 138.481189][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 138.767462][ T8481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1131'. [ 138.813028][ T8481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1131'. [ 139.174765][ T8499] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1138'. [ 139.229731][ T8502] netlink: 'syz.4.1140': attribute type 15 has an invalid length. [ 139.255613][ T8502] netlink: 'syz.4.1140': attribute type 15 has an invalid length. [ 140.836178][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1164'. [ 140.836324][ T8573] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1164'. [ 140.957260][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 142.556986][ T8620] netlink: 'syz.2.1184': attribute type 12 has an invalid length. [ 142.914706][ T8634] __nla_validate_parse: 3 callbacks suppressed [ 142.914727][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1188'. [ 143.363181][ T8652] netlink: 'syz.1.1193': attribute type 5 has an invalid length. [ 143.504633][ T8660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.601315][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 143.601353][ T8663] netlink: 'syz.4.1198': attribute type 29 has an invalid length. [ 143.601368][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 143.604491][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 143.604530][ T8663] netlink: 'syz.4.1198': attribute type 29 has an invalid length. [ 143.604543][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 144.532648][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 144.535965][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 144.535991][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 144.546864][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 144.810286][ T8700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.851226][ T8710] netlink: 'syz.4.1220': attribute type 15 has an invalid length. [ 145.025367][ T8718] Set syz1 is full, maxelem 2076 reached [ 145.222496][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880790f9400: rx timeout, send abort [ 145.305248][ T8727] v: renamed from veth0_vlan (while UP) [ 145.576257][ T8736] batman_adv: batadv0: Adding interface: syzkaller0 [ 145.576276][ T8736] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.576314][ T8736] batman_adv: batadv0: Interface activated: syzkaller0 [ 145.646931][ T8735] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 145.693098][ T8735] batman_adv: batadv0: Removing interface: syzkaller0 [ 145.722543][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880790f9400: abort rx timeout. Force session deactivation [ 145.723742][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807a7adc00: rx timeout, send abort [ 146.223784][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807a7adc00: abort rx timeout. Force session deactivation [ 147.410285][ T8818] netlink: 'syz.0.1264': attribute type 1 has an invalid length. [ 147.439200][ T8818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.520261][ T8818] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 147.548468][ T163] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 148.100641][ T8823] netlink: 'syz.4.1266': attribute type 4 has an invalid length. [ 148.373363][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1274'. [ 148.576608][ T85] IPVS: starting estimator thread 0... [ 148.657707][ T8862] IPVS: using max 27 ests per chain, 64800 per kthread [ 148.824791][ T8750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.014630][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'. [ 149.191164][ T8879] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 149.849923][ T8901] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 149.966311][ T8907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1295'. [ 150.483384][ T8895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.501343][ T8914] l2tp_ppp: sess 2/0: no socket in recv [ 150.869683][ T8924] syz.4.1301 (8924) used greatest stack depth: 18088 bytes left [ 150.875954][ T3802] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 151.596702][ T8956] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 151.596732][ T8956] netlink: 'syz.3.1311': attribute type 4 has an invalid length. [ 151.596744][ T8956] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1311'. [ 151.597587][ T8956] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 151.597605][ T8956] netlink: 'syz.3.1311': attribute type 4 has an invalid length. [ 151.647553][ T8956] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1311'. [ 152.182458][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 152.184364][ T8974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.184375][ T8974] IPv6: NLM_F_CREATE should be set when creating new route [ 152.184538][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 153.524988][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'. [ 153.577529][ T9016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1335'. [ 153.649524][ T9018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.691389][ T8926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.220991][ T5620] Bluetooth: hci4: link tx timeout [ 154.239314][ T5620] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 154.241886][ T5620] Bluetooth: hci4: link tx timeout [ 154.241902][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.524842][ T9049] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 154.542546][ T9049] xt_hashlimit: size too large, truncated to 1048576 [ 155.156828][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 155.270841][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 155.372199][ T9070] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 156.267755][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 156.318961][ T9092] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 156.350258][ T9092] batman_adv: batadv0: Adding interface: gretap2 [ 156.350275][ T9092] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.350314][ T9092] batman_adv: batadv0: Interface activated: gretap2 [ 156.498857][ T9100] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 156.549031][ T9104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 156.583175][ T9100] bond2: entered promiscuous mode [ 156.583566][ T9100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.641837][ T9100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.642263][ T9100] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 156.642283][ T9100] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 156.676948][ T9100] bond2: (slave xfrm1): making interface the new active one [ 156.676971][ T9100] xfrm1: entered promiscuous mode [ 156.700567][ T9100] xfrm1: left promiscuous mode [ 157.200158][ T9127] syzkaller1: entered promiscuous mode [ 157.200180][ T9127] syzkaller1: entered allmulticast mode [ 157.328275][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1376'. [ 157.574073][ T9139] xt_hashlimit: size too large, truncated to 1048576 [ 158.144134][ T9160] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1387'. [ 158.165715][ T9160] gretap0: entered promiscuous mode [ 158.223608][ T9160] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1387'. [ 158.223789][ T9160] 0ªî{X¹¦: renamed from gretap0 [ 158.255378][ T9160] 0ªî{X¹¦: left promiscuous mode [ 158.255399][ T9160] 0ªî{X¹¦: entered allmulticast mode [ 158.283919][ T9160] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 158.427879][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 160.143917][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 160.308728][ T9226] syzkaller1: entered promiscuous mode [ 160.308753][ T9226] syzkaller1: entered allmulticast mode [ 160.436351][ T9230] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 160.536397][ T9230] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.614238][ T9230] netlink: 'syz.4.1413': attribute type 10 has an invalid length. [ 160.614261][ T9230] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1413'. [ 160.639217][ T9232] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 160.641124][ T9230] dummy0: entered promiscuous mode [ 160.645977][ T9230] bond3: (slave dummy0): Releasing backup interface [ 160.735420][ T9238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1415'. [ 160.742877][ T9234] ip_tables: iptables: counters copy to user failed while replacing table [ 161.022115][ T9244] syzkaller0: entered promiscuous mode [ 161.022138][ T9244] syzkaller0: entered allmulticast mode [ 161.024292][ T9244] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 162.742730][ T9208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.056681][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.123850][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.176666][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 163.202658][ T9314] erspan0: entered promiscuous mode [ 163.218679][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 163.220970][ T9318] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1439'. [ 163.359545][ T9327] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1447'. [ 163.621492][ T9338] batman_adv: batadv0: Adding interface: syzkaller0 [ 163.621514][ T9338] batman_adv: batadv0: Interface activated: syzkaller0 [ 163.665977][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 163.848437][ T9345] bridge0: port 3(syz_tun) entered blocking state [ 163.848547][ T9345] bridge0: port 3(syz_tun) entered disabled state [ 163.848712][ T9345] syz_tun: entered allmulticast mode [ 163.853871][ T9345] syz_tun: entered promiscuous mode [ 163.892012][ T9345] bridge0: port 3(syz_tun) entered blocking state [ 163.892129][ T9345] bridge0: port 3(syz_tun) entered forwarding state [ 163.965682][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'. [ 164.623644][ T9390] sctp: [Deprecated]: syz.3.1472 (pid 9390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.623644][ T9390] Use struct sctp_sack_info instead [ 164.772694][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 165.182179][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1480'. [ 165.234444][ T9413] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1480'. [ 165.370783][ T9417] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 165.538079][ T9417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.621514][ T9422] bond3: (slave veth0_to_bond): making interface the new active one [ 165.640051][ T9422] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 165.688394][ T9425] bond3: entered promiscuous mode [ 165.688418][ T9425] veth0_to_bond: entered promiscuous mode [ 165.688636][ T9425] bond3: entered allmulticast mode [ 165.688650][ T9425] veth0_to_bond: entered allmulticast mode [ 166.067243][ T9439] ipvlan2: entered allmulticast mode [ 166.067267][ T9439] virt_wifi0: entered allmulticast mode [ 166.081416][ T9439] batman_adv: batadv0: Adding interface: ipvlan2 [ 166.081432][ T9439] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.081462][ T9439] batman_adv: batadv0: Interface activated: ipvlan2 [ 166.211783][ T9443] ipvlan3: entered allmulticast mode [ 166.213196][ T9443] batman_adv: batadv0: Adding interface: ipvlan3 [ 166.213210][ T9443] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.214118][ T9443] batman_adv: The newly added mac address (da:47:96:1a:b8:49) already exists on: ipvlan2 [ 166.214136][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.214150][ T9443] batman_adv: batadv0: Interface activated: ipvlan3 [ 166.315082][ T9428] netlink: 'syz.4.1484': attribute type 4 has an invalid length. [ 166.545811][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1491'. [ 167.163509][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1502'. [ 167.627338][ T9496] xt_hashlimit: size too large, truncated to 1048576 [ 167.891173][ T9401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.562941][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 168.645003][ T9527] syzkaller1: entered promiscuous mode [ 168.645025][ T9527] syzkaller1: entered allmulticast mode [ 168.970041][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1523'. [ 168.995830][ T9534] netlink: 193 bytes leftover after parsing attributes in process `syz.2.1522'. [ 169.182905][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 169.186194][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'. [ 169.187160][ T1111] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb [ 169.366570][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1527'. [ 169.435961][ T9551] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106 [ 170.244364][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 170.249120][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'. [ 170.471953][ T9598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1543'. [ 170.471982][ T9598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1543'. [ 170.471997][ T9598] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1543'. [ 170.640090][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 170.661365][ T9588] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 171.151844][ T9619] netlink: 'syz.3.1551': attribute type 4 has an invalid length. [ 171.319061][ T9627] batadv_slave_0: entered promiscuous mode [ 171.325250][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 171.325380][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.366011][ T9627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.604178][ T9633] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1556'. [ 171.623012][ T9633] syzkaller1: entered promiscuous mode [ 171.623033][ T9633] syzkaller1: entered allmulticast mode [ 173.982018][ T9715] netlink: 'syz.0.1582': attribute type 19 has an invalid length. [ 173.982034][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 174.038762][ T9715] netlink: 'syz.0.1582': attribute type 19 has an invalid length. [ 174.038778][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 174.902301][ T9645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.489215][ T9748] tipc: Enabled bearer , priority 0 [ 175.574727][ T9748] syzkaller0: entered promiscuous mode [ 175.574752][ T9748] syzkaller0: entered allmulticast mode [ 175.575351][ T9748] tipc: Resetting bearer [ 175.628682][ T9747] tipc: Resetting bearer [ 175.647326][ T9754] netlink: 15051 bytes leftover after parsing attributes in process `syz.1.1597'. [ 176.255078][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 177.351950][ T9747] tipc: Disabling bearer [ 177.373241][ T1221] tipc: Node number set to 2035774871 [ 177.768673][ T9794] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1609'. [ 177.776830][ T9794] gretap0: entered promiscuous mode [ 177.787857][ T5620] Bluetooth: hci0: command 0x0c3a tx timeout [ 177.812035][ T9795] ip_tables: iptables: counters copy to user failed while replacing table [ 177.816071][ T9794] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1609'. [ 177.816183][ T9794] 0ªî{X¹¦: renamed from gretap0 [ 177.824241][ T9794] 0ªî{X¹¦: left promiscuous mode [ 177.824261][ T9794] 0ªî{X¹¦: entered allmulticast mode [ 177.831443][ T9794] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 178.354753][ T9822] ip_tables: iptables: counters copy to user failed while replacing table [ 178.682775][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 178.682800][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 178.752648][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 178.752671][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 178.806021][ T9804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.334461][ T9856] tls_set_device_offload_rx: netdev not found [ 179.474384][ T9862] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1635'. [ 179.474431][ T9862] openvswitch: netlink: Message has 512 unknown bytes. [ 179.595411][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 179.595434][ T9866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.595452][ T9866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.598415][ T9866] batman_adv: batadv0: Interface deactivated: gretap2 [ 179.598434][ T9866] batman_adv: batadv0: Removing interface: gretap2 [ 179.639087][ T9866] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 179.639109][ T9866] batman_adv: batadv0: Removing interface: ipvlan2 [ 179.641828][ T9866] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 179.641847][ T9866] batman_adv: batadv0: Removing interface: ipvlan3 [ 180.264326][ T9885] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 180.767437][ T9907] netlink: 'syz.4.1653': attribute type 5 has an invalid length. [ 181.751576][ T9840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.769992][ T9832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.983030][ T9935] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1663'. [ 182.176784][ T9940] syzkaller1: entered promiscuous mode [ 182.176807][ T9940] syzkaller1: entered allmulticast mode [ 182.335014][ T9954] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1668'. [ 182.535475][ T9955] syzkaller1: entered promiscuous mode [ 182.535498][ T9955] syzkaller1: entered allmulticast mode [ 182.684764][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 182.684788][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 182.717240][ T9964] bond2: entered promiscuous mode [ 182.909633][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 183.279262][ T9991] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 183.395825][ T9991] macvlan2: entered promiscuous mode [ 183.395848][ T9991] macvlan2: entered allmulticast mode [ 183.396931][ T9991] bond2: entered promiscuous mode [ 183.417889][ T9991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.425918][ T9991] bond2: left promiscuous mode [ 183.737143][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1690'. [ 183.741012][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 183.853379][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1692'. [ 184.344844][T10034] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1697'. [ 184.395043][T10034] syzkaller1: entered promiscuous mode [ 184.395059][T10034] syzkaller1: entered allmulticast mode [ 184.611742][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 184.849326][T10058] netlink: 'syz.4.1707': attribute type 1 has an invalid length. [ 184.894588][T10058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.928108][T10058] bond4: (slave geneve4): making interface the new active one [ 184.930027][T10058] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 184.932669][T10062] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 185.820018][T10082] syzkaller1: entered promiscuous mode [ 185.820040][T10082] syzkaller1: entered allmulticast mode [ 187.142125][T10121] __nla_validate_parse: 4 callbacks suppressed [ 187.142145][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 188.178210][T10071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.874686][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'. [ 188.874711][T10172] netlink: 'syz.4.1747': attribute type 3 has an invalid length. [ 188.874732][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'. [ 188.874977][T10172] netlink: 'syz.4.1747': attribute type 3 has an invalid length. [ 189.296705][T10190] syzkaller0: Caught tx_queue_len zero misconfig [ 189.300294][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'. [ 189.373709][T10190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1754'. [ 189.373734][T10190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1754'. [ 189.373760][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'. [ 189.687944][T10208] syzkaller1: entered promiscuous mode [ 189.687967][T10208] syzkaller1: entered allmulticast mode [ 189.808895][T10215] syzkaller0: entered promiscuous mode [ 189.808918][T10215] syzkaller0: entered allmulticast mode [ 189.869407][T10215] tipc: Started in network mode [ 189.869440][T10215] tipc: Node identity fe05b2bafa78, cluster identity 4711 [ 189.869636][T10215] tipc: Enabled bearer , priority 0 [ 189.874317][T10210] tipc: Resetting bearer [ 189.915788][T10210] tipc: Disabling bearer [ 189.978138][T10227] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 190.078771][T10227] bond4: entered promiscuous mode [ 190.080669][T10227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.137148][T10235] xt_hashlimit: size too large, truncated to 1048576 [ 190.152057][T10227] bond4: (slave bridge3): making interface the new active one [ 190.152082][T10227] bridge3: entered promiscuous mode [ 190.154334][T10227] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 190.218387][T10237] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.265237][T10237] bridge_slave_0 (unregistering): left allmulticast mode [ 190.265272][T10237] bridge_slave_0 (unregistering): left promiscuous mode [ 190.265358][T10237] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.442654][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'. [ 190.633841][T10219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.124373][T10272] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.148411][ T5631] Bluetooth: hci0: command 0x0c3a tx timeout [ 191.148447][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 191.149332][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 191.149551][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 191.565659][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 191.577090][ T163] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.577280][ T163] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.577335][ T163] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.577367][ T163] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.591343][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 193.714781][T10256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.728476][T10251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.005483][T10310] vlan3: entered promiscuous mode [ 194.005508][T10310] hsr0: entered promiscuous mode [ 194.005902][T10310] vlan3: entered allmulticast mode [ 194.005918][T10310] hsr0: entered allmulticast mode [ 194.005930][T10310] hsr_slave_0: entered allmulticast mode [ 194.005945][T10310] hsr_slave_1: entered allmulticast mode [ 194.208958][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209015][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.433287][T10339] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 194.611423][T10345] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.614551][T10345] bond4: (slave bond5): making interface the new active one [ 194.615047][T10345] bond4: (slave bond5): Enslaving as an active interface with an up link [ 194.615337][T10350] __nla_validate_parse: 2 callbacks suppressed [ 194.615351][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1805'. [ 194.617500][T10350] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.663742][T10339] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 194.664255][T10348] syzkaller0: entered promiscuous mode [ 194.664273][T10348] syzkaller0: entered allmulticast mode [ 194.674843][T10352] tipc: Enabled bearer , priority 0 [ 194.712488][T10340] tipc: Resetting bearer [ 194.772112][T10340] tipc: Disabling bearer [ 194.848187][T10357] bond1: entered allmulticast mode [ 194.848211][T10357] ip6gre1: entered allmulticast mode [ 194.918756][T10357] dvmrp8: entered allmulticast mode [ 194.960484][T10356] bond1: left allmulticast mode [ 194.963676][T10356] ip6gre1: left allmulticast mode [ 195.053810][T10369] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 195.116564][T10369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.186166][T10369] bond5: (slave bridge4): making interface the new active one [ 195.201843][T10369] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 195.752999][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 195.842560][T10404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1831'. [ 195.993752][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 196.193541][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.195009][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.300656][T10415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.510310][T10415] bond1: left promiscuous mode [ 196.510334][T10415] ip6gre1: left promiscuous mode [ 196.556511][T10415] bond3: left promiscuous mode [ 196.556534][T10415] veth0_to_bond: left promiscuous mode [ 196.556896][T10415] bond3: left allmulticast mode [ 196.556912][T10415] veth0_to_bond: left allmulticast mode [ 196.587184][T10415] bond4: left promiscuous mode [ 196.587205][T10415] bridge3: left promiscuous mode [ 196.612808][T10424] batadv_slave_1: entered allmulticast mode [ 196.979719][ T59] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.979754][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.979789][ T59] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.979813][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.981009][ T59] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.981042][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.010877][ T59] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.010910][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.116972][ T4936] Bluetooth: hci2: SCO packet too small [ 197.172761][T10447] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 197.246614][T10444] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 197.246728][T10444] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 197.944626][T10445] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 197.997536][T10449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.091407][T10500] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 200.751950][T10536] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 200.788163][T10536] bond5: entered promiscuous mode [ 200.788665][T10536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.813959][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1869'. [ 201.195262][T10536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.196390][T10536] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 201.196411][T10536] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 201.273679][T10536] bond5: (slave wireguard0): making interface the new active one [ 201.273704][T10536] wireguard0: entered promiscuous mode [ 201.291833][T10536] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 201.432404][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 201.461220][T10548] netlink: 'syz.2.1873': attribute type 8 has an invalid length. [ 202.330652][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1887'. [ 202.506242][T10602] netlink: 'syz.4.1892': attribute type 2 has an invalid length. [ 202.656827][T10609] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 202.683540][T10609] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.801509][T10609] bond6: (slave ip6erspan0): making interface the new active one [ 202.852085][T10609] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 203.099018][T10623] netlink: 'syz.0.1899': attribute type 4 has an invalid length. [ 203.102231][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 203.102252][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 203.102264][T10615] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 203.255275][T10627] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 203.327431][T10627] bond3: entered promiscuous mode [ 203.329897][T10627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.410309][T10627] macvtap1: entered allmulticast mode [ 203.501240][T10627] bond3: (slave bridge6): making interface the new active one [ 203.501265][T10627] bridge6: entered promiscuous mode [ 203.504731][T10627] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 203.613622][T10635] TC_ACT_REPEAT abuse ? [ 203.892700][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1908'. [ 204.069776][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 204.169816][ T163] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.169838][ T163] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.449268][T10672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1921'. [ 204.451132][T10670] vlan3: entered promiscuous mode [ 204.451153][T10670] hsr0: entered promiscuous mode [ 204.451399][T10670] vlan3: entered allmulticast mode [ 204.451413][T10670] hsr0: entered allmulticast mode [ 204.451425][T10670] hsr_slave_0: entered allmulticast mode [ 204.451440][T10670] hsr_slave_1: entered allmulticast mode [ 204.462544][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 204.521861][T10670] hsr_slave_0: left promiscuous mode [ 204.522726][T10670] hsr_slave_1: left promiscuous mode [ 204.647210][T10675] bridge_slave_0: left allmulticast mode [ 204.647237][T10675] bridge_slave_0: left promiscuous mode [ 204.653111][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.680312][T10675] bridge_slave_1: left allmulticast mode [ 204.680338][T10675] bridge_slave_1: left promiscuous mode [ 204.680542][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.736768][T10675] bond0: (slave bond_slave_0): Releasing backup interface [ 204.836730][T10675] bond0: (slave bond_slave_1): Releasing backup interface [ 204.870592][T10675] team0: Port device team_slave_0 removed [ 204.895352][T10675] team0: Port device team_slave_1 removed [ 204.896305][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.896324][T10675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.928152][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.928175][T10675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.931045][T10675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.487517][ T4936] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 205.794491][T10718] syzkaller0: entered promiscuous mode [ 205.794515][T10718] syzkaller0: entered allmulticast mode [ 206.002188][T10721] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1935'. [ 206.003338][T10721] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1935'. [ 206.612197][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1940'. [ 206.633409][T10735] bond4: entered promiscuous mode [ 206.633426][T10735] bond4: entered allmulticast mode [ 206.709238][T10740] ip_tables: iptables: counters copy to user failed while replacing table [ 206.820761][T10746] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 208.032884][T10761] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 208.207983][T10769] syzkaller0: entered promiscuous mode [ 208.208006][T10769] syzkaller0: entered allmulticast mode [ 208.237799][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1955'. [ 208.237841][T10770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1955'. [ 208.338274][T10692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.463699][T10774] netlink: 'syz.2.1957': attribute type 39 has an invalid length. [ 208.581339][T10779] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1959'. [ 208.601521][T10708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.741810][T10781] netlink: 'syz.2.1960': attribute type 1 has an invalid length. [ 208.852672][T10781] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.859989][T10794] netlink: 'syz.2.1960': attribute type 10 has an invalid length. [ 208.860008][T10794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1960'. [ 208.930024][T10787] bond6: (slave dummy0): making interface the new active one [ 208.930833][T10787] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 208.933824][T10794] dummy0: entered promiscuous mode [ 208.950389][T10794] bond6: (slave dummy0): Releasing active interface [ 209.467598][T10820] tipc: Failed to remove unknown binding: 66,0,0/0:3252754823/3252754825 [ 209.469872][T10820] tipc: Failed to remove unknown binding: 66,0,0/0:3252754823/3252754824 [ 209.470431][T10820] tipc: Failed to remove unknown binding: 66,0,0/0:3252754823/3252754825 [ 209.470455][T10820] tipc: Failed to remove unknown binding: 66,0,0/0:3252754823/3252754824 [ 209.561207][ T4936] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 209.561271][ T4936] Bluetooth: hci4: Injecting HCI hardware error event [ 209.562534][ T4936] Bluetooth: hci4: hardware error 0x00 [ 209.889902][ T31] audit: type=1804 audit(1789518972.591:5): pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1976" name="/newroot/385/cgroup.controllers" dev="tmpfs" ino=1980 res=1 errno=0 [ 209.890991][ T31] audit: type=1800 audit(1789518972.591:6): pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1976" name="cgroup.controllers" dev="tmpfs" ino=1980 res=0 errno=0 [ 209.951709][T10828] syzkaller0: entered promiscuous mode [ 209.951731][T10828] syzkaller0: entered allmulticast mode [ 210.284708][T10848] syzkaller0: entered promiscuous mode [ 210.284730][T10848] syzkaller0: entered allmulticast mode [ 210.356464][T10856] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 210.520563][T10856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.597917][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1981'. [ 210.598904][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1981'. [ 210.645896][T10859] bond3: (slave veth7): Enslaving as an active interface with a down link [ 210.706299][T10860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.714507][T10860] bond3: (slave batadv0): making interface the new active one [ 210.717559][T10860] batadv0: entered promiscuous mode [ 210.730926][T10860] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 210.870499][T10856] bond3: (slave veth9): Enslaving as an active interface with a down link [ 211.044035][T10888] netlink: 'syz.1.1994': attribute type 1 has an invalid length. [ 211.081951][T10888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.200533][T10888] bond4: (slave veth11): Enslaving as an active interface with a down link [ 211.216847][T10893] bond4: (slave dummy0): making interface the new active one [ 211.218023][T10893] dummy0: entered promiscuous mode [ 211.227592][T10893] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 211.236361][T10888] netlink: 'syz.1.1994': attribute type 10 has an invalid length. [ 211.236382][T10888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1994'. [ 211.266074][T10888] bond4: (slave dummy0): Releasing active interface [ 211.291555][T10881] syzkaller0: entered promiscuous mode [ 211.291577][T10881] syzkaller0: entered allmulticast mode [ 211.520889][T10905] syzkaller0: entered promiscuous mode [ 211.520911][T10905] syzkaller0: entered allmulticast mode [ 211.568705][T10907] netlink: 'syz.3.2002': attribute type 8 has an invalid length. [ 211.568725][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'. [ 211.629044][ T4936] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 211.748476][T10914] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 211.846015][T10918] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 211.866490][T10914] bond5: entered promiscuous mode [ 211.866779][T10914] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.885484][T10916] ipvlan4: entered allmulticast mode [ 211.885498][T10916] bond5: entered allmulticast mode [ 211.912120][T10920] bond5: entered allmulticast mode [ 211.912141][T10920] wireguard0: entered allmulticast mode [ 211.934998][T10922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.944655][T10922] bond5: (slave bond6): making interface the new active one [ 211.952708][T10922] bond5: (slave bond6): Enslaving as an active interface with an up link [ 211.985799][T10914] bond5: (slave bridge4): making interface the new active one [ 211.985820][T10914] bridge4: entered promiscuous mode [ 211.985958][T10914] bridge4: entered allmulticast mode [ 212.000667][T10914] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 212.006220][T10919] bond5: left allmulticast mode [ 212.006241][T10919] wireguard0: left allmulticast mode [ 212.073806][T10918] bond5: (slave gretap0): Enslaving as a backup interface with an up link [ 212.183076][T10927] syzkaller0: entered promiscuous mode [ 212.183098][T10927] syzkaller0: entered allmulticast mode [ 212.362674][T10935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2012'. [ 212.362706][T10935] netlink: 'syz.3.2012': attribute type 7 has an invalid length. [ 212.362719][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 212.367787][T10935] ip6gretap0: entered promiscuous mode [ 212.369647][T10935] syz_tun: entered promiscuous mode [ 212.371137][T10935] 0ªî{X¹¦: entered promiscuous mode [ 212.858727][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2018'. [ 213.157035][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2020'. [ 213.515299][T10971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2026'. [ 213.531389][T10971] ip6gre1: entered promiscuous mode [ 213.531411][T10971] ip6gre1: entered allmulticast mode [ 213.536890][T10971] validate_nla: 1 callbacks suppressed [ 213.536909][T10971] netlink: 'syz.4.2026': attribute type 6 has an invalid length. [ 213.536923][T10971] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2026'. [ 213.732591][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2029'. [ 213.923845][T10877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.938899][T10976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.544991][T10988] syzkaller1: entered promiscuous mode [ 214.545016][T10988] syzkaller1: entered allmulticast mode [ 214.641181][T11006] ip_tables: iptables: counters copy to user failed while replacing table [ 214.673665][T11007] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 214.805754][T11007] 8021q: adding VLAN 0 to HW filter on device bond6 [ 214.823016][T11013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.881154][T11012] bond6: (slave gretap1): making interface the new active one [ 214.887149][T11010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.910390][T11012] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 214.950246][T11010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.097214][T11024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.097234][T11024] IPv6: NLM_F_CREATE should be set when creating new route [ 215.189239][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 215.535596][T11034] netlink: 'syz.3.2048': attribute type 11 has an invalid length. [ 215.705709][T11034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.746639][T11034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.774983][T11034] bond3: entered allmulticast mode [ 215.775007][T11034] bridge6: entered allmulticast mode [ 215.793416][T11034] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 215.812077][T11034] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.816571][T11034] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.851518][T11034] 8021q: adding VLAN 0 to HW filter on device bond7 [ 216.067135][T11050] netlink: 'syz.4.2053': attribute type 3 has an invalid length. [ 216.259587][T11057] bond8: entered promiscuous mode [ 216.259611][T11057] bond8: entered allmulticast mode [ 216.471024][T11069] __nla_validate_parse: 6 callbacks suppressed [ 216.471044][T11069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2060'. [ 216.499725][T11069] netlink: 'syz.2.2060': attribute type 4 has an invalid length. [ 216.499749][T11069] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.2060'. [ 216.544103][ T85] IPVS: starting estimator thread 0... [ 216.627737][T11071] IPVS: using max 35 ests per chain, 84000 per kthread [ 216.650099][T11073] IPVS: sh: FWM 3 0x00000003 - no destination available [ 216.671360][T11075] xt_hashlimit: size too large, truncated to 1048576 [ 217.118903][ T4936] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3 [ 217.149342][T11087] syzkaller0: entered promiscuous mode [ 217.149364][T11087] syzkaller0: entered allmulticast mode [ 217.541450][ T85] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 217.597776][T11099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.895568][ T85] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 217.921472][T11114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.561603][T11149] sch_tbf: burst 4095 is lower than device syzkaller0 mtu (65589) ! [ 218.642520][T11149] syzkaller0: entered promiscuous mode [ 218.642541][T11149] syzkaller0: entered allmulticast mode [ 218.666138][T11149] tipc: Started in network mode [ 218.666168][T11149] tipc: Node identity ce049ed08b1a, cluster identity 4711 [ 218.666425][T11149] tipc: Enabled bearer , priority 0 [ 218.711768][T11151] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2086'. [ 218.712848][T11151] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 219.054591][ T3772] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 219.229776][T11179] syzkaller0: entered promiscuous mode [ 219.229800][T11179] syzkaller0: entered allmulticast mode [ 219.456040][T11182] syzkaller0: entered promiscuous mode [ 219.456063][T11182] syzkaller0: entered allmulticast mode [ 219.657901][ T5789] tipc: Node number set to 1159634640 [ 219.766015][T11196] syzkaller0: entered promiscuous mode [ 219.766030][T11196] syzkaller0: entered allmulticast mode [ 220.007128][T11204] syzkaller0: entered promiscuous mode [ 220.007150][T11204] syzkaller0: entered allmulticast mode [ 220.930902][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2108'. [ 221.177705][T11219] syzkaller0: left promiscuous mode [ 221.177726][T11219] syzkaller0: left allmulticast mode [ 221.301491][T11223] syzkaller0: entered promiscuous mode [ 221.301506][T11223] syzkaller0: entered allmulticast mode [ 221.347503][T11225] netlink: 'syz.3.2113': attribute type 6 has an invalid length. [ 221.347525][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 221.677865][T11233] syzkaller0: entered promiscuous mode [ 221.677886][T11233] syzkaller0: entered allmulticast mode [ 221.719310][ T85] batadv0: left promiscuous mode [ 221.880761][T11162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.991451][T11239] veth1_to_bond: entered allmulticast mode [ 221.996927][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'. [ 222.029620][T11239] veth1_to_bond (unregistering): left allmulticast mode [ 222.080603][T11239] bond0: (slave bond_slave_1): Releasing backup interface [ 222.112739][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2120'. [ 222.129278][T11246] veth0_to_bond: entered allmulticast mode [ 222.149061][T11240] syzkaller0: entered promiscuous mode [ 222.149083][T11240] syzkaller0: entered allmulticast mode [ 222.176358][T11247] 0: reclassify loop, rule prio 0, protocol 03 [ 222.426475][T11258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.566905][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'. [ 222.601597][T11266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.607540][T11266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.634664][T11266] bond0 (unregistering): Released all slaves [ 222.650125][T11261] raw_sendmsg: syz.1.2126 forgot to set AF_INET. Fix it! [ 223.593990][T11308] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 223.794030][T11317] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 223.813870][T11313] syzkaller0: entered promiscuous mode [ 223.813891][T11313] syzkaller0: entered allmulticast mode [ 224.119542][T11325] netlink: 550 bytes leftover after parsing attributes in process `syz.3.2151'. [ 224.482764][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 224.511049][ T1111] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 224.545044][T11341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.559486][T11338] batadv_slave_1 (unregistering): left allmulticast mode [ 224.902840][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 225.067244][T11359] hsr_slave_1 (unregistering): left promiscuous mode [ 225.082201][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 225.082224][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2162'. [ 225.243579][T11362] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.307428][T11365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.322724][T11365] bond7: (slave bond0): making interface the new active one [ 225.324330][T11365] bond7: (slave bond0): Enslaving as an active interface with an up link [ 225.602997][T11387] syzkaller0: entered promiscuous mode [ 225.603028][T11387] syzkaller0: entered allmulticast mode [ 226.017555][ T31] audit: type=1804 audit(1789518988.711:7): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2178" name="/newroot/422/cgroup.controllers" dev="tmpfs" ino=2170 res=1 errno=0 [ 226.017603][ T31] audit: type=1800 audit(1789518988.711:8): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2178" name="cgroup.controllers" dev="tmpfs" ino=2170 res=0 errno=0 [ 226.031630][T11409] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 226.251469][T11413] syzkaller0: entered promiscuous mode [ 226.251489][T11413] syzkaller0: entered allmulticast mode [ 226.270847][T11413] simple: /dev/video#_3 [ 226.274496][T11418] ip_tables: iptables: counters copy to user failed while replacing table [ 226.352943][T11421] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2184'. [ 226.416881][T11423] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 226.635154][T11423] bridge3: entered promiscuous mode [ 226.645429][T11423] bond8: (slave bridge3): making interface the new active one [ 226.646494][T11423] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 226.676779][T11428] bridge4: entered promiscuous mode [ 226.689792][T11428] bond8: (slave bridge4): Enslaving as a backup interface with an up link [ 226.863677][T11446] syzkaller0: entered promiscuous mode [ 226.863700][T11446] syzkaller0: entered allmulticast mode [ 227.175039][T11455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.310973][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 227.311000][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'. [ 227.360625][T11467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.366184][T11467] bond7: (slave bond0): making interface the new active one [ 227.366858][T11471] netlink: 'syz.4.2197': attribute type 4 has an invalid length. [ 227.366877][T11471] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2197'. [ 227.409534][T11467] bond7: (slave bond0): Enslaving as an active interface with an up link [ 227.428852][T11471] .`: renamed from bond0 (while UP) [ 227.489094][T11475] syzkaller0: entered promiscuous mode [ 227.489123][T11475] syzkaller0: entered allmulticast mode [ 227.500839][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2198'. [ 227.500864][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2198'. [ 228.008848][T11497] syzkaller0: left promiscuous mode [ 228.008871][T11497] syzkaller0: left allmulticast mode [ 228.030914][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.030934][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.030943][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.030952][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.030960][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.030969][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.030978][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.030986][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.030996][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.031004][T11497] tc action pedit offset must be on 32 bit boundaries [ 228.031025][T11497] 0: reclassify loop, rule prio 0, protocol 800 [ 228.260335][T11507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.300182][T11505] syzkaller0: entered promiscuous mode [ 228.300203][T11505] syzkaller0: entered allmulticast mode [ 228.310972][T11505] tipc: Started in network mode [ 228.310999][T11505] tipc: Node identity e23dfb1dab8b, cluster identity 4711 [ 228.311243][T11505] tipc: Enabled bearer , priority 0 [ 228.320441][T11505] tipc: Resetting bearer [ 228.339367][T11504] tipc: Resetting bearer [ 228.391225][T11504] tipc: Disabling bearer [ 228.462944][T11512] 0: reclassify loop, rule prio 0, protocol 800 [ 228.673593][T11514] syzkaller0: entered promiscuous mode [ 228.673614][T11514] syzkaller0: entered allmulticast mode [ 228.834081][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2219'. [ 229.106144][T11533] syzkaller0: left promiscuous mode [ 229.106166][T11533] syzkaller0: left allmulticast mode [ 229.430316][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'. [ 229.455100][T11548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.545012][T11551] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 229.978170][T11569] syzkaller0: entered promiscuous mode [ 229.978192][T11569] syzkaller0: entered allmulticast mode [ 230.894246][T11614] syzkaller1: entered promiscuous mode [ 230.894338][T11614] syzkaller1: entered allmulticast mode [ 231.153474][T11637] netlink: 'syz.4.2260': attribute type 1 has an invalid length. [ 231.412292][T11615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.592461][T11628] syzkaller1: entered promiscuous mode [ 231.592482][T11628] syzkaller1: entered allmulticast mode [ 231.960854][T11669] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 231.992304][T11669] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2265'. [ 232.086752][T11675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.369963][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'. [ 232.495591][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2272'. [ 232.531503][T11694] team0: No ports can be present during mode change [ 232.558219][T11694] vlan0: entered promiscuous mode [ 232.609597][T11694] team0: Port device vlan0 added [ 232.624772][T11699] tipc: Enabled bearer , priority 0 [ 233.015220][T11707] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 233.071652][T11714] tipc: Enabling of bearer rejected, failed to enable media [ 233.242811][T11728] netlink: 'syz.1.2284': attribute type 10 has an invalid length. [ 233.330812][T11734] ip_tables: iptables: counters copy to user failed while replacing table [ 233.374798][T11728] syz_tun: entered promiscuous mode [ 233.444859][T11739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2286'. [ 233.526609][T11743] ip_tables: iptables: counters copy to user failed while replacing table [ 233.663210][T11739] bond_slave_0: entered promiscuous mode [ 233.663233][T11739] bond_slave_0: entered allmulticast mode [ 233.962006][T11763] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 234.356362][T11775] syzkaller0: entered promiscuous mode [ 234.356384][T11775] syzkaller0: entered allmulticast mode [ 235.334254][T11818] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 235.389681][T11819] netlink: 'syz.0.2314': attribute type 16 has an invalid length. [ 235.389701][T11819] netlink: 'syz.0.2314': attribute type 17 has an invalid length. [ 235.571868][T11819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.586262][T11819] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.596895][T11819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.635715][T11842] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2314'. [ 235.671431][T11819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.689171][T11819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.689197][T11819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.696928][T11819] veth1_vlan: left promiscuous mode [ 235.727048][T11819] veth0_vlan: left promiscuous mode [ 235.736323][T11819] veth0_vlan: entered promiscuous mode [ 235.744323][T11819] veth1_vlan: entered promiscuous mode [ 235.758498][T11819] veth1_macvtap: left promiscuous mode [ 235.759603][T11819] veth0_macvtap: left promiscuous mode [ 235.781354][T11819] veth0_macvtap: entered promiscuous mode [ 235.784425][T11819] veth1_macvtap: entered promiscuous mode [ 235.813052][T11819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.814794][T11819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.817560][T11819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.820790][T11819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.871860][T11819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.885187][T11819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.890263][T11541] bond2: (slave gretap1): link status up again after 0 ms [ 235.908099][T11541] bond2: (slave gretap1): link status up again after 0 ms [ 235.928190][T11541] bond2: (slave gretap1): link status up again after 0 ms [ 235.949759][T11541] bond2: (slave gretap1): link status up again after 0 ms [ 235.959849][T11819] A link change request failed with some changes committed already. Interface geneve may have been left with an inconsistent configuration, please check. [ 235.968099][ T50] bond2: (slave gretap1): link status up again after 0 ms [ 235.975072][T11537] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.975207][T11537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.989525][ T50] bond2: (slave gretap1): link status up again after 0 ms [ 235.994045][T11537] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.994175][T11537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.228938][T11537] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.228973][T11537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.230380][T11537] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.230410][T11537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.245941][T11537] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.245976][T11537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.298643][T11840] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 236.304567][T11840] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 236.357735][T11537] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.357769][T11537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.521720][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2318'. [ 237.365579][T11897] lo: entered promiscuous mode [ 238.086188][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2346'. [ 238.343716][T11391] net_ratelimit: 32 callbacks suppressed [ 238.343748][T11391] bond2: (slave gretap1): failed to get link speed/duplex [ 238.449859][T11952] netlink: 'syz.0.2352': attribute type 10 has an invalid length. [ 238.476268][T11952] team0: Device veth0_macvtap failed to register rx_handler [ 238.533266][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 238.638697][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 238.753318][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 238.859716][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 238.970100][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 239.081019][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 239.208664][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 239.378055][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 239.423948][T11997] netlink: 'syz.2.2371': attribute type 7 has an invalid length. [ 239.489823][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 239.924629][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 239.972361][T12022] : renamed from bond0 (while UP) [ 239.981681][T12022] bond7: Primary slave changed to , reselecting active slave [ 240.641446][T12041] syzkaller1: entered promiscuous mode [ 240.641469][T12041] syzkaller1: entered allmulticast mode [ 240.923567][T12074] IPVS: length: 8 != 1152 [ 241.062039][T12065] syzkaller1: entered promiscuous mode [ 241.062062][T12065] syzkaller1: entered allmulticast mode [ 241.220639][T12084] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.227161][T12084] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.250887][T12086] netlink: 'syz.0.2408': attribute type 16 has an invalid length. [ 241.250908][T12086] netlink: 'syz.0.2408': attribute type 17 has an invalid length. [ 241.354364][T12091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2411'. [ 241.354394][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'. [ 241.448030][T12086] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.448150][T12086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.450247][T12086] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.450364][T12086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.697515][T12091] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 241.710670][T12091] bond8 (unregistering): Released all slaves [ 242.311139][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.313502][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.348439][T12130] netlink: 'syz.0.2427': attribute type 16 has an invalid length. [ 242.348461][T12130] netlink: 'syz.0.2427': attribute type 17 has an invalid length. [ 242.434168][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.434290][T12130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.437200][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.437311][T12130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.202956][T12155] bridge0: port 3(syz_tun) entered disabled state [ 243.207740][T12155] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.213892][T12155] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.254584][T12155] netlink: 'syz.4.2440': attribute type 16 has an invalid length. [ 243.254606][T12155] netlink: 'syz.4.2440': attribute type 17 has an invalid length. [ 243.277853][T12155] bridge0: port 3(syz_tun) entered blocking state [ 243.277979][T12155] bridge0: port 3(syz_tun) entered forwarding state [ 243.293124][T12155] 8021q: adding VLAN 0 to HW filter on device .` [ 243.298969][T12155] dummy0: left promiscuous mode [ 243.338871][T12155] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.339014][T12155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.342883][T12155] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.342965][T12155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.344183][T12155] veth0_to_bond: left allmulticast mode [ 243.392221][T12155] v: left promiscuous mode [ 243.393810][T12155] v: entered promiscuous mode [ 243.575294][T12155] geneve3: left promiscuous mode [ 243.586745][T12155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.614529][T12155] bond5: left promiscuous mode [ 243.614553][T12155] wireguard0: left promiscuous mode [ 243.638932][T12155] ip6gre1: left promiscuous mode [ 243.638957][T12155] ip6gre1: left allmulticast mode [ 243.674163][T12155] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.692702][T12155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.697070][ T5720] gretap1: entered promiscuous mode [ 243.830956][T12171] net_ratelimit: 59 callbacks suppressed [ 243.830977][T12171] ip_tables: iptables: counters copy to user failed while replacing table [ 243.865328][T12174] ip_tables: iptables: counters copy to user failed while replacing table [ 243.888341][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 243.888386][ T85] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 243.919082][ T50] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 243.920496][ T50] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 244.000289][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 244.112159][T11391] bond2: (slave gretap1): failed to get link speed/duplex [ 244.277932][T11392] bond2: (slave gretap1): failed to get link speed/duplex [ 244.388678][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 244.499015][T11391] bond2: (slave gretap1): failed to get link speed/duplex [ 244.607788][T11391] bond2: (slave gretap1): failed to get link speed/duplex [ 244.718432][T11391] bond2: (slave gretap1): failed to get link speed/duplex [ 245.379852][T12249] netlink: 'syz.2.2475': attribute type 16 has an invalid length. [ 245.379874][T12249] netlink: 'syz.2.2475': attribute type 17 has an invalid length. [ 245.393309][T12249] erspan0: left promiscuous mode [ 245.452033][T12249] dummy0: left promiscuous mode [ 245.613264][T12249] vlan0: left promiscuous mode [ 245.686369][T12249] bridge0: port 3(geneve2) entered blocking state [ 245.686496][T12249] bridge0: port 3(geneve2) entered forwarding state [ 245.716283][T12249] bond1: left promiscuous mode [ 245.716308][T12249] xfrm1: left promiscuous mode [ 245.869497][ T5789] openvswitch: cpu_id mismatch with handler threads [ 246.093867][T11536] openvswitch: cpu_id mismatch with handler threads [ 246.658692][T12298] netlink: 'syz.2.2490': attribute type 16 has an invalid length. [ 246.658717][T12298] netlink: 'syz.2.2490': attribute type 17 has an invalid length. [ 246.758386][ T991] openvswitch: cpu_id mismatch with handler threads [ 246.789744][ T991] openvswitch: cpu_id mismatch with handler threads [ 247.150209][ T50] openvswitch: cpu_id mismatch with handler threads [ 247.150595][ T50] openvswitch: cpu_id mismatch with handler threads [ 247.432508][T12327] tipc: Resetting bearer [ 247.433323][T12327] tipc: Resetting bearer [ 247.456892][T12329] netlink: 'syz.2.2503': attribute type 16 has an invalid length. [ 247.456912][T12329] netlink: 'syz.2.2503': attribute type 17 has an invalid length. [ 247.465871][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.470752][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.616511][T12327] bridge0: port 3(geneve2) entered disabled state [ 247.629658][ T5741] openvswitch: cpu_id mismatch with handler threads [ 247.687091][T12327] tipc: Resetting bearer [ 247.687452][T12327] tipc: Resetting bearer [ 247.723502][T11536] tipc: Resetting bearer [ 247.796102][T12329] tipc: Resetting bearer [ 247.802471][T12327] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2503'. [ 247.815649][T12329] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.815797][T12329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.823281][T12329] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.823393][T12329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.995236][T12329] bridge0: port 3(geneve2) entered blocking state [ 247.995350][T12329] bridge0: port 3(geneve2) entered forwarding state [ 248.116948][T12356] batman_adv: batadv0: Adding interface: wlan1 [ 248.116967][T12356] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.116997][T12356] batman_adv: batadv0: Interface activated: wlan1 [ 248.806766][T12387] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 248.888622][T11392] net_ratelimit: 37 callbacks suppressed [ 248.888643][T11392] bond2: (slave gretap1): failed to get link speed/duplex [ 248.997866][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 249.109904][T11392] bond2: (slave gretap1): failed to get link speed/duplex [ 249.283130][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 249.390678][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 249.497030][T12415] ip_tables: iptables: counters copy to user failed while replacing table [ 249.678676][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 249.700444][T12419] bond0: entered promiscuous mode [ 249.700467][T12419] bond_slave_0: entered promiscuous mode [ 249.705883][T12419] batadv0: entered promiscuous mode [ 249.706704][T12419] debugfs: 'hsr1' already exists in 'hsr' [ 249.706738][T12419] Cannot create hsr debugfs directory [ 249.735312][T12431] ip_tables: iptables: counters copy to user failed while replacing table [ 249.756138][T12419] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 249.793113][T11391] bond2: (slave gretap1): failed to get link speed/duplex [ 249.898431][T11391] bond2: (slave gretap1): failed to get link speed/duplex [ 250.153722][T12450] netlink: 'syz.1.2552': attribute type 28 has an invalid length. [ 250.153746][T12450] netlink: 'syz.1.2552': attribute type 3 has an invalid length. [ 250.153759][T12450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2552'. [ 250.707601][T12483] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2565'. [ 250.753112][T12481] syzkaller0: entered promiscuous mode [ 250.753137][T12481] syzkaller0: entered allmulticast mode [ 251.237898][ C1] openvswitch: cpu_id mismatch with handler threads [ 252.826617][T12506] syzkaller0: entered promiscuous mode [ 252.826668][T12506] syzkaller0: entered allmulticast mode [ 252.827063][T12506] tipc: Resetting bearer [ 253.562293][T12548] netlink: 'syz.3.2583': attribute type 16 has an invalid length. [ 253.562316][T12548] netlink: 'syz.3.2583': attribute type 17 has an invalid length. [ 253.736271][T12541] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2583'. [ 253.738492][T12548] lo: left promiscuous mode [ 253.802459][T12548] 0ªî{X¹¦: left allmulticast mode [ 253.986775][T12548] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 254.013974][T12548] syzkaller0: left promiscuous mode [ 254.013998][T12548] syzkaller0: left allmulticast mode [ 254.052873][T12548] vlan3: left promiscuous mode [ 254.052890][T12548] hsr0: left promiscuous mode [ 254.053309][T12548] vlan3: left allmulticast mode [ 254.053320][T12548] hsr0: left allmulticast mode [ 254.053327][T12548] hsr_slave_0: left allmulticast mode [ 254.054260][T12548] bond3: left promiscuous mode [ 254.055261][T12548] macvtap1: left allmulticast mode [ 254.055277][T12548] bond3: left allmulticast mode [ 254.055289][T12548] bridge6: left allmulticast mode [ 254.056859][T12548] bond4: left promiscuous mode [ 254.056870][T12548] bond4: left allmulticast mode [ 254.077227][T12548] bond8: left promiscuous mode [ 254.077250][T12548] bond8: left allmulticast mode [ 254.079781][T12548] 8021q: adding VLAN 0 to HW filter on device bond8 [ 254.139202][T11537] net_ratelimit: 16 callbacks suppressed [ 254.139224][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 254.223853][T12557] syzkaller0: entered promiscuous mode [ 254.223886][T12557] syzkaller0: entered allmulticast mode [ 254.248191][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 256.418125][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 256.529799][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 256.587522][T12609] ip_tables: iptables: counters copy to user failed while replacing table [ 256.638662][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 256.729483][T12621] tipc: Resetting bearer [ 256.729970][T12621] tipc: Resetting bearer [ 256.736498][T12621] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.757573][T12621] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.776548][T12622] netlink: 'syz.2.2603': attribute type 16 has an invalid length. [ 256.776569][T12622] netlink: 'syz.2.2603': attribute type 17 has an invalid length. [ 256.811691][T12621] bridge0: port 3(geneve2) entered disabled state [ 256.827114][T12621] tipc: Resetting bearer [ 256.827301][T12621] tipc: Resetting bearer [ 256.849266][ T1153] tipc: Resetting bearer [ 256.953181][T12622] tipc: Resetting bearer [ 256.965782][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 256.967417][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 256.982413][T12622] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.982526][T12622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.005849][T12622] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.005971][T12622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.081054][T12636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.132889][T12641] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2603'. [ 257.155058][T12622] bridge0: port 3(geneve2) entered blocking state [ 257.155175][T12622] bridge0: port 3(geneve2) entered forwarding state [ 257.165784][T12622] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 257.206724][ T991] openvswitch: cpu_id mismatch with handler threads [ 257.218350][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 257.328161][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 257.590983][T12656] syzkaller0: entered promiscuous mode [ 257.591007][T12656] syzkaller0: entered allmulticast mode [ 257.931754][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 257.931775][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2619'. [ 257.959872][ T991] openvswitch: cpu_id mismatch with handler threads [ 258.006225][T12673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.024121][T12673] bond9: (slave bond0): Enslaving as an active interface with a down link [ 258.024279][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2620'. [ 258.024299][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2620'. [ 258.221944][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 258.346242][T12692] netlink: 'syz.1.2625': attribute type 11 has an invalid length. [ 258.357205][T12687] bridge0: port 3(syz_tun) entered disabled state [ 258.370961][T12687] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.372782][T12687] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.384769][T12694] netlink: 'syz.4.2624': attribute type 16 has an invalid length. [ 258.384789][T12694] netlink: 'syz.4.2624': attribute type 17 has an invalid length. [ 258.481141][T12694] bridge0: port 3(syz_tun) entered blocking state [ 258.481261][T12694] bridge0: port 3(syz_tun) entered forwarding state [ 258.520156][T12694] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.520283][T12694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.561523][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.561661][T12694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.610256][T12705] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2624'. [ 258.899699][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 258.899722][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2633'. [ 258.939658][T12718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.943323][T12718] bond7: (slave bond0): Enslaving as an active interface with a down link [ 258.956125][T12718] netlink: 'syz.4.2633': attribute type 4 has an invalid length. [ 258.956147][T12718] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2633'. [ 259.114019][ T1153] bond7: (slave .`): link status definitely down, disabling slave [ 259.116156][ T1153] bond7: now running without any active interface! [ 259.190903][ T13] net_ratelimit: 11 callbacks suppressed [ 259.190931][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 259.235223][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'. [ 259.236399][T12731] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.2638'. [ 259.299140][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 259.306152][T12735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2639'. [ 259.408565][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 259.467903][ C1] openvswitch: cpu_id mismatch with handler threads [ 259.524511][T12747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2644'. [ 259.550909][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 259.556717][T12745] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 259.662436][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'. [ 259.719028][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 259.829507][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 259.940588][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 260.058242][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 260.168404][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 260.352521][T12785] syzkaller1: entered promiscuous mode [ 260.352537][T12785] syzkaller1: entered allmulticast mode [ 260.358651][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 260.441825][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2664'. [ 260.831886][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 261.282186][T12830] syzkaller1: entered promiscuous mode [ 261.282210][T12830] syzkaller1: entered allmulticast mode [ 262.083848][T12879] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 262.128129][T12879] 8021q: adding VLAN 0 to HW filter on device bond7 [ 262.290399][T12842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.290426][T12842] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 262.362248][T12842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.362272][T12842] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 262.391065][T12842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.391088][T12842] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 262.728054][T12842] batman_adv: batadv0: Interface deactivated: wlan1 [ 264.287861][ T13] net_ratelimit: 27 callbacks suppressed [ 264.287882][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 264.397976][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 264.512613][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 264.617774][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 264.727849][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 264.837748][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 264.949888][ T1153] bond2: (slave gretap1): failed to get link speed/duplex [ 265.058171][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 265.167816][ T1153] bond2: (slave gretap1): failed to get link speed/duplex [ 265.277816][ T1153] bond2: (slave gretap1): failed to get link speed/duplex [ 265.532610][T12960] __nla_validate_parse: 1 callbacks suppressed [ 265.532631][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2705'. [ 266.153185][T12972] netlink: 'syz.3.2708': attribute type 4 has an invalid length. [ 266.889223][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 267.008789][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 268.099930][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2716'. [ 268.460159][T13022] 8021q: VLANs not supported on syzkaller0 [ 269.257574][T13035] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 269.505017][T13039] batman_adv: batadv0: Adding interface: syzkaller0 [ 269.505036][T13039] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.505067][T13039] batman_adv: batadv0: Interface activated: syzkaller0 [ 269.748343][T13034] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 269.956829][T13034] batman_adv: batadv0: Removing interface: syzkaller0 [ 270.129223][ T85] net_ratelimit: 26 callbacks suppressed [ 270.129246][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 270.237764][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 270.388085][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 270.497833][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 270.607800][ T85] bond2: (slave gretap1): failed to get link speed/duplex [ 270.718620][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 270.758015][T13063] syzkaller1: entered promiscuous mode [ 270.758038][T13063] syzkaller1: entered allmulticast mode [ 270.795297][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 270.914526][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 271.069281][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 271.177814][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 271.288529][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 272.253102][T13082] syzkaller0: entered promiscuous mode [ 272.253125][T13082] syzkaller0: entered allmulticast mode [ 276.113677][ C1] openvswitch: cpu_id mismatch with handler threads [ 282.105594][ C0] sched: DL replenish lagged too much [ 292.939530][ T142] net_ratelimit: 11 callbacks suppressed [ 292.939552][ T142] bond2: (slave gretap1): failed to get link speed/duplex [ 300.203284][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 308.122780][ C1] openvswitch: cpu_id mismatch with handler threads [ 308.313009][T11541] bond2: (slave gretap1): failed to get link speed/duplex [ 313.641503][T11541] bond2: (slave gretap1): failed to get link speed/duplex [ 317.446103][T11388] bond2: (slave gretap1): failed to get link speed/duplex [ 320.230856][ T3802] bond2: (slave gretap1): failed to get link speed/duplex [ 323.053970][ T3802] bond2: (slave gretap1): failed to get link speed/duplex [ 327.327994][ C0] bridge0: received packet on geneve2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.610155][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 333.886012][T11388] bond2: (slave gretap1): failed to get link speed/duplex [ 337.169568][T11389] bond2: (slave gretap1): failed to get link speed/duplex [ 340.206059][T11894] bond2: (slave gretap1): failed to get link speed/duplex [ 343.931833][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 347.903877][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 352.550427][T11536] bond2: (slave gretap1): failed to get link speed/duplex [ 355.972116][T11390] bond2: (slave gretap1): failed to get link speed/duplex [ 359.434058][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 362.349973][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 362.651163][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 362.862428][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 363.036300][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 363.404661][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 364.832438][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 366.585223][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 366.735564][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 367.815738][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 368.099691][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 368.535699][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 369.763735][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 369.978407][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 373.279196][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 373.396154][ C1] openvswitch: cpu_id mismatch with handler threads [ 373.556908][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 373.806252][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 376.468957][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 376.850142][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 377.117351][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 377.455262][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 377.718733][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 379.302874][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 381.810602][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 382.096105][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 382.585314][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 382.836496][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 383.047478][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 383.222926][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 383.521421][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 385.546324][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 387.137601][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 387.362170][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 388.479217][T11538] bond2: (slave gretap1): failed to get link speed/duplex [ 390.757609][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 391.059156][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 392.071874][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 392.339781][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 392.982870][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 393.513068][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 394.034503][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 394.229015][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 396.401201][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 397.133851][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 398.849380][ T3802] bond2: (slave gretap1): failed to get link speed/duplex [ 399.514642][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 400.311018][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 402.149654][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 402.473301][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 404.461853][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 405.298344][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 405.551551][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 405.732409][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 406.214573][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 406.911029][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 407.439574][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 407.692026][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 408.655537][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 408.981856][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 409.730299][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 410.116969][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 410.298033][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 410.708321][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 411.361779][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 413.026857][T11894] bond2: (slave gretap1): failed to get link speed/duplex [ 414.935494][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 415.584992][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 415.938478][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 416.212778][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 416.469204][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 416.701075][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 416.970130][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 417.311945][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 417.585991][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 418.758483][ T8819] net_ratelimit: 1 callbacks suppressed [ 418.758505][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 420.094956][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 420.435264][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 420.645159][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 421.077091][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 421.354037][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 425.664258][T11388] bond2: (slave gretap1): failed to get link speed/duplex [ 427.262451][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 428.007800][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 428.393575][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 428.659621][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 429.110980][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 429.531077][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 430.017237][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 430.643540][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 432.164236][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 433.001409][T11541] bond2: (slave gretap1): failed to get link speed/duplex [ 433.647900][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 434.933260][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 436.319095][T11894] bond2: (slave gretap1): failed to get link speed/duplex [ 440.646379][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 445.763210][ T1111] bond2: (slave gretap1): failed to get link speed/duplex [ 449.505482][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 450.786634][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 451.077133][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 451.515120][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 451.763753][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 451.975531][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 452.217226][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 452.434825][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 452.744468][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 456.725018][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 456.917880][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 457.322806][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 457.591899][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 457.765362][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 458.225600][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 459.359101][T11541] bond2: (slave gretap1): failed to get link speed/duplex [ 459.527131][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 459.793314][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 460.085950][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 461.841065][ T8819] net_ratelimit: 4 callbacks suppressed [ 461.841089][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 462.045560][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 462.546656][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 462.725987][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 464.263370][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 465.627554][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 466.310974][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 466.551338][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 466.919300][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 468.176607][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 468.563975][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 468.842355][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 469.015325][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 469.553577][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 470.307187][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 472.401762][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 474.152621][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 475.855089][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 476.271599][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 476.573459][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 478.488693][ T3772] bond2: (slave gretap1): failed to get link speed/duplex [ 479.887020][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 480.544723][ T3802] bond2: (slave gretap1): failed to get link speed/duplex [ 482.340884][T11537] bond2: (slave gretap1): failed to get link speed/duplex [ 482.837257][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 482.981042][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 483.276820][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 483.459052][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 483.677189][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 483.802330][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 483.930800][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 485.680795][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 486.184754][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 486.568430][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 486.826682][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 487.453394][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 487.677781][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 488.188480][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 488.787847][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 489.316937][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 489.715909][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 489.891268][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 490.096313][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 491.473304][T11391] bond2: (slave gretap1): failed to get link speed/duplex [ 493.942211][ T59] bond2: (slave gretap1): failed to get link speed/duplex [ 494.859739][T11539] bond2: (slave gretap1): failed to get link speed/duplex [ 495.244698][T11539] bond2: (slave gretap1): failed to get link speed/duplex [ 495.374779][T11539] bond2: (slave gretap1): failed to get link speed/duplex [ 495.596932][T11894] bond2: (slave gretap1): failed to get link speed/duplex [ 496.195129][T11538] bond2: (slave gretap1): failed to get link speed/duplex [ 496.426813][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 496.640039][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 497.361098][T11539] bond2: (slave gretap1): failed to get link speed/duplex [ 497.738350][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 501.396167][ C1] openvswitch: cpu_id mismatch with handler threads [ 503.829657][T11539] net_ratelimit: 2 callbacks suppressed [ 503.829687][T11539] bond2: (slave gretap1): failed to get link speed/duplex [ 505.004367][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 505.383916][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 505.580450][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 505.852834][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 506.350920][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 506.552415][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 506.775414][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 506.892634][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 507.025519][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 509.828021][ T8819] net_ratelimit: 3 callbacks suppressed [ 509.828045][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 510.103970][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 510.547579][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 510.801825][ T8819] bond2: (slave gretap1): failed to get link speed/duplex [ 510.877649][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 510.898804][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5613/1:b..l [ 510.906717][ C1] rcu: (detected by 1, t=10504 jiffies, g=56341, q=1283168 ncpus=2) [ 510.914796][ C1] task:syz-executor state:R running task stack:22288 pid:5613 tgid:5613 ppid:5610 task_flags:0x400140 flags:0x00080000 [ 510.928362][ C1] Call Trace: [ 510.931698][ C1] [ 510.934637][ C1] __schedule+0x17db/0x58f0 [ 510.939166][ C1] ? __lock_acquire+0x747/0x2de0 [ 510.944120][ C1] ? __lock_acquire+0x747/0x2de0 [ 510.949063][ C1] ? __pfx___schedule+0x10/0x10 [ 510.953929][ C1] ? __lock_acquire+0x747/0x2de0 [ 510.958889][ C1] preempt_schedule_irq+0x4b/0x90 [ 510.963920][ C1] irqentry_exit+0x14f/0x910 [ 510.968513][ C1] ? trace_irq_disable+0x3b/0x140 [ 510.973556][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 510.979541][ C1] RIP: 0010:deref_stack_reg+0x1a2/0x220 [ 510.985095][ C1] Code: 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 12 07 00 00 49 89 c6 48 8b 5c 24 08 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 c4 b0 bf 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4 [ 511.004704][ C1] RSP: 0018:ffffc9000403f0f8 EFLAGS: 00000246 [ 511.010779][ C1] RAX: 1ffff92000807e45 RBX: ffffc9000403f228 RCX: 0000000000000001 [ 511.018760][ C1] RDX: ffffc9000403f228 RSI: dffffc0000000000 RDI: ffffc9000403fe90 [ 511.026737][ C1] RBP: ffffc90004038000 R08: ffffc9000403fe90 R09: 0000000000000000 [ 511.034714][ C1] R10: ffffc9000403f238 R11: fffff52000807e49 R12: 1ffff92000807e3e [ 511.042691][ C1] R13: 1ffff92000807e3f R14: ffffc9000403ff38 R15: dffffc0000000000 [ 511.050685][ C1] ? deref_stack_reg+0x18e/0x220 [ 511.055639][ C1] unwind_next_frame+0x19bd/0x2550 [ 511.060766][ C1] ? do_sys_openat2+0x115/0x200 [ 511.065628][ C1] ? unwind_next_frame+0x8f/0x2550 [ 511.070750][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 511.076910][ C1] arch_stack_walk+0x11b/0x150 [ 511.081695][ C1] ? __x64_sys_openat+0x138/0x170 [ 511.086733][ C1] stack_trace_save+0xa9/0x100 [ 511.091509][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 511.096903][ C1] save_stack+0x122/0x230 [ 511.101245][ C1] ? __pfx_save_stack+0x10/0x10 [ 511.106101][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 511.111399][ C1] ? __slab_free+0x274/0x2c0 [ 511.115993][ C1] ? qlist_free_all+0x99/0x100 [ 511.120765][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 511.126399][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 511.131428][ C1] ? __kmalloc_noprof+0x307/0x720 [ 511.136457][ C1] ? tomoyo_encode+0x2ad/0x570 [ 511.141229][ C1] ? tomoyo_realpath_from_path+0x5fa/0x640 [ 511.147042][ C1] ? tomoyo_check_open_permission+0x229/0x470 [ 511.153114][ C1] ? security_file_open+0xa9/0x240 [ 511.158236][ C1] ? do_dentry_open+0x4a0/0x1380 [ 511.163180][ C1] ? vfs_open+0x3b/0x340 [ 511.167430][ C1] ? path_openat+0x1443/0x1d60 [ 511.172196][ C1] ? do_file_open+0x23e/0x4a0 [ 511.176881][ C1] ? do_sys_openat2+0x115/0x200 [ 511.181754][ C1] ? page_ext_put+0x97/0xc0 [ 511.186314][ C1] __reset_page_owner+0x71/0x1f0 [ 511.191263][ C1] __free_frozen_pages+0xc93/0xd90 [ 511.196405][ C1] __slab_free+0x274/0x2c0 [ 511.200846][ C1] qlist_free_all+0x99/0x100 [ 511.205450][ C1] kasan_quarantine_reduce+0x148/0x160 [ 511.210919][ C1] __kasan_slab_alloc+0x22/0x80 [ 511.215783][ C1] __kmalloc_noprof+0x307/0x720 [ 511.220636][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 511.225663][ C1] ? tomoyo_encode+0x2ad/0x570 [ 511.230447][ C1] ? tomoyo_encode+0x2ad/0x570 [ 511.235238][ C1] tomoyo_encode+0x2ad/0x570 [ 511.239845][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 511.245512][ C1] tomoyo_check_open_permission+0x229/0x470 [ 511.251451][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 511.257526][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 511.263957][ C1] ? __asan_memset+0x22/0x50 [ 511.268607][ C1] ? tomoyo_file_open+0x163/0x220 [ 511.273658][ C1] security_file_open+0xa9/0x240 [ 511.278607][ C1] do_dentry_open+0x4a0/0x1380 [ 511.283390][ C1] vfs_open+0x3b/0x340 [ 511.287467][ C1] ? path_openat+0x1428/0x1d60 [ 511.292235][ C1] path_openat+0x1443/0x1d60 [ 511.296851][ C1] do_file_open+0x23e/0x4a0 [ 511.301367][ C1] ? __pfx_do_file_open+0x10/0x10 [ 511.306427][ C1] ? _raw_spin_unlock+0x28/0x50 [ 511.311301][ C1] ? alloc_fd+0x651/0x6c0 [ 511.315659][ C1] do_sys_openat2+0x115/0x200 [ 511.320352][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.325566][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 511.331311][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 511.337396][ C1] __x64_sys_openat+0x138/0x170 [ 511.342289][ C1] do_syscall_64+0x166/0x520 [ 511.346889][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.352964][ C1] ? clear_bhb_loop+0x70/0xc0 [ 511.357649][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.363549][ C1] RIP: 0033:0x7f6a76d9d47c [ 511.367981][ C1] RSP: 002b:00007ffeb2c62a60 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 511.376397][ C1] RAX: ffffffffffffffda RBX: 00000000000004fe RCX: 00007f6a76d9d47c [ 511.384372][ C1] RDX: 0000000000090800 RSI: 00007f6a76e3497d RDI: 00000000ffffff9c [ 511.392347][ C1] RBP: 00007ffeb2c62b0c R08: 0000000000000000 R09: 0000000000000000 [ 511.400329][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000021f [ 511.408308][ C1] R13: 0000000000000000 R14: 0000000000042885 R15: 00007ffeb2c62b60 [ 511.416303][ C1] [ 511.419325][ C1] rcu: rcu_preempt kthread starved for 313 jiffies! g56341 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 511.430173][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 511.440145][ C1] rcu: RCU grace-period kthread stack dump: [ 511.446031][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 511.459530][ C1] Call Trace: [ 511.462806][ C1] [ 511.465745][ C1] __schedule+0x17db/0x58f0 [ 511.470258][ C1] ? __lock_acquire+0x747/0x2de0 [ 511.475215][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 511.480346][ C1] ? __pfx___schedule+0x10/0x10 [ 511.485207][ C1] ? lock_acquire+0x115/0x350 [ 511.489895][ C1] ? schedule+0x90/0x2b0 [ 511.494148][ C1] schedule+0x164/0x2b0 [ 511.498316][ C1] schedule_timeout+0x152/0x2c0 [ 511.503178][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 511.508563][ C1] ? __pfx_process_timeout+0x10/0x10 [ 511.513869][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 511.519689][ C1] ? prepare_to_swait_event+0x322/0x350 [ 511.525259][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 511.530135][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 511.536297][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 511.541584][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 511.546816][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 511.551418][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 511.556628][ C1] ? __kthread_parkme+0x71/0x1f0 [ 511.561582][ C1] ? __kthread_parkme+0x199/0x1f0 [ 511.566623][ C1] kthread+0x38b/0x480 [ 511.570697][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 511.575893][ C1] ? __pfx_kthread+0x10/0x10 [ 511.580488][ C1] ret_from_fork+0x514/0xb70 [ 511.585089][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 511.590216][ C1] ? __switch_to+0xc89/0x1420 [ 511.594906][ C1] ? __pfx_kthread+0x10/0x10 [ 511.599509][ C1] ret_from_fork_asm+0x1a/0x30 [ 511.604302][ C1] [ 511.607319][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 511.613648][ C1] Sending NMI from CPU 1 to CPUs 0: [ 511.618863][ C0] NMI backtrace for cpu 0 [ 511.618945][ C0] CPU: 0 UID: 0 PID: 11537 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 511.618987][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.618998][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 511.619025][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2e/0x80 [ 511.619053][ C0] Code: 48 8b 04 24 65 48 8b 0d 48 15 cd 11 65 48 8b 15 48 15 cd 11 f7 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 <40> 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 3c 17 [ 511.619069][ C0] RSP: 0018:ffffc90000007938 EFLAGS: 00000246 [ 511.619083][ C0] RAX: ffffffff8a0954fc RBX: 0000000000000001 RCX: ffff8880348b5dc0 [ 511.619095][ C0] RDX: 8000000000000101 RSI: 0000000000000100 RDI: 0000000000000000 [ 511.619107][ C0] RBP: ffffc90000007a68 R08: 0000000000000100 R09: 0000000000000005 [ 511.619118][ C0] R10: 0000000000000004 R11: 8000000000000100 R12: 0000000000000000 [ 511.619129][ C0] R13: ffff88807763ecc0 R14: 1ffff92000000f34 R15: dffffc0000000000 [ 511.619142][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 511.619156][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.619169][ C0] CR2: 00007ffd1f16adc0 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 511.619184][ C0] Call Trace: [ 511.619191][ C0] [ 511.619197][ C0] nf_nat_inet_fn+0x90c/0xb50 [ 511.619226][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 511.619249][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 511.619268][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 511.619289][ C0] nf_nat_ipv4_pre_routing+0x19d/0x3a0 [ 511.619313][ C0] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 511.619338][ C0] nf_hook_slow+0xc5/0x220 [ 511.619357][ C0] NF_HOOK+0x21f/0x3c0 [ 511.619377][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 511.619397][ C0] ? NF_HOOK+0x9e/0x3c0 [ 511.619415][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 511.619434][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 511.619453][ C0] ? ip_rcv_core+0x88d/0xd50 [ 511.619475][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 511.619494][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 511.619513][ C0] process_backlog+0xa6b/0x18b0 [ 511.619534][ C0] ? process_backlog+0x3de/0x18b0 [ 511.619558][ C0] __napi_poll+0xaa/0x330 [ 511.619575][ C0] net_rx_action+0x61d/0xf50 [ 511.619605][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 511.619637][ C0] handle_softirqs+0x226/0x860 [ 511.619660][ C0] ? do_softirq+0x77/0xd0 [ 511.619682][ C0] ? kernel_fpu_end+0x62/0x80 [ 511.619703][ C0] do_softirq+0x77/0xd0 [ 511.619722][ C0] [ 511.619728][ C0] [ 511.619734][ C0] __local_bh_enable_ip+0x100/0x140 [ 511.619755][ C0] blake2s_compress+0xfa/0x1c00 [ 511.619789][ C0] ? __asan_memset+0x22/0x50 [ 511.619814][ C0] ? chacha20poly1305_encrypt+0x347/0x760 [ 511.619840][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 511.619864][ C0] ? __pfx_chacha20poly1305_encrypt+0x10/0x10 [ 511.619893][ C0] ? ktime_get_real_ts64+0x320/0x3d0 [ 511.619915][ C0] blake2s_final+0x10f/0x260 [ 511.619939][ C0] wg_noise_handshake_create_initiation+0x5a4/0x810 [ 511.619966][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 511.620005][ C0] ? lock_acquire+0x115/0x350 [ 511.620025][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 511.620045][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 511.620062][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 511.620081][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 511.620099][ C0] wg_packet_handshake_send_worker+0x18c/0x370 [ 511.620120][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 511.620138][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 511.620170][ C0] ? rcu_is_watching+0x16/0xb0 [ 511.620191][ C0] ? process_scheduled_works+0x97a/0x1630 [ 511.620212][ C0] process_scheduled_works+0xc3d/0x1630 [ 511.620248][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.620273][ C0] ? assign_work+0x3cf/0x5d0 [ 511.620296][ C0] worker_thread+0xa47/0xfb0 [ 511.620330][ C0] kthread+0x38b/0x480 [ 511.620346][ C0] ? __pfx_worker_thread+0x10/0x10 [ 511.620366][ C0] ? __pfx_kthread+0x10/0x10 [ 511.620383][ C0] ret_from_fork+0x514/0xb70 [ 511.620399][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 511.620424][ C0] ? __switch_to+0xc89/0x1420 [ 511.620447][ C0] ? __pfx_kthread+0x10/0x10 [ 511.620463][ C0] ret_from_fork_asm+0x1a/0x30 [ 511.620495][ C0] [ 516.897806][ T32] INFO: task kworker/0:1:10 blocked for more than 144 seconds. [ 516.897832][ T32] Not tainted syzkaller #0 [ 516.897843][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.897852][ T32] task:kworker/0:1 state:D stack:21920 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 516.897902][ T32] Workqueue: events fqdir_free_fn [ 516.897935][ T32] Call Trace: [ 516.897942][ T32] [ 516.897955][ T32] __schedule+0x17db/0x58f0 [ 516.898006][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 516.898040][ T32] ? __pfx___schedule+0x10/0x10 [ 516.898079][ T32] ? schedule+0x90/0x2b0 [ 516.898101][ T32] schedule+0x164/0x2b0 [ 516.898123][ T32] schedule_timeout+0xc0/0x2c0 [ 516.898150][ T32] ? __pfx_schedule_timeout+0x10/0x10