last executing test programs: 7.762301102s ago: executing program 1 (id=2891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) 7.686274174s ago: executing program 1 (id=2893): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x8004) 7.534727046s ago: executing program 1 (id=2894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}]}, 0x3c}}, 0x0) 7.429009054s ago: executing program 1 (id=2896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4074, 0xfea, 0x40010000, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a", 0x71}, {&(0x7f0000000440)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a534960500707e01ccfb826f2e95230862e11d56c19af139de912ac5e68a99080e428443fcfba8b046021dc6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85562804230489274831b2c17dccccc523ada66a460000004389e17863500d872800f37561dede5c72f3", 0xb1}, {&(0x7f0000001340)="63e73686513c53aec098be4b2dfc27b5be1f3e85f54c24efb8fc94ccaac29f13cc2dfc850ac0f146b04d91a069e89878e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df134ef700cd146f2b1d9a80af70fb82462587487d09c300af3bef017fde1fd8ce505cd4849549192a95e00000000c676a7cbb41230e4e4fb23e9662bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53", 0x61d}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 6.30255632s ago: executing program 1 (id=2911): sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x800, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x3}, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x140c, 0x20, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000300)=0x7ff, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2d0, 0x14, 0x300, 0x70bd29, 0x25dfdbff, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0xba, 0x1, "0b5e8fc800c5297370a8cff9b0129c4dd81ef9531110f3c0716dc48b8543fa883739b5c29133febe793bae9723bd30fecbe79721fb56419b3d001034c3c6c382968356c157dd1f1ca9ce0eeefeeadd0aa6d1266e2442dd8cb0a549457a1f8a2ea42114a8756c20f13eab3e6cc6c86a59d7a56d6c28ae51931bc57231baa284ef4c4abcf666b89ad40951843fb33f6e53038635423191e7ef45ee9030ca0e1c7671aa394e539c7e891db45ea507b1a0c5fa0fbc840a98"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "e80e816a3e0e92b5a83d682e56742013d030d1f6a3aa5a20064c0b85068741b697203911b10e5b3a8353c501cfb9601ba67b363c9336d799c9fc442ddd8a0955b80963e6eb878f17ee548d04de96090c88374291ba11feb628e8145cd70ad56fb068f93ab03ef3e0cc0588094758d864f055e40597f9f7cb"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "ecbb9b37acc37ed3832faf165343bc1814e21ba17fdae467917813"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "404f9668b828f8c86a1104190d4d3b6d6a657034d760b0d51ede06221b84784e0f46ea4de714810d7a663fc7abcea1b769f181d7edd889d3d182053ab3cb968f4b43a66b6cb3b7b13165a8ed9387adb35fb8448a827ab88f887d660f10f6"}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008004) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0xe, 0xfcb8, 0x50, @local, @mcast2, 0x700, 0x40, 0x7d84cbab, 0x3}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x44050) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r7) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r8, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r9) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000d40)={r0, &(0x7f0000000c40)='\x00', 0x250000, &(0x7f0000000c80)={@align=0x8, {0x200, 0x8, 0x6, 0xffffffff}}, 0x401, &(0x7f0000000cc0)={@_ha_fsid}, &(0x7f0000000d00)=0x5}) sendmsg$NL80211_CMD_STOP_AP(r11, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, r10, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2fe3, 0x57}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x4040000) ioctl$XFS_IOC_GOINGDOWN(r11, 0x8004587d, &(0x7f0000000e80)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r12, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x15}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r12, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040000) socket$inet(0x2, 0x80000, 0x300000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x40, r10, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x101, 0x73}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 5.898947305s ago: executing program 3 (id=2915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xfa1bc92ec92dabfb}, @TCA_TBF_PARMS={0x28, 0x1, {{0x37, 0x1, 0x0, 0x105a, 0xb, 0x2}, {0x4f, 0x1, 0x1, 0x0, 0x6, 0x5}, 0x1227, 0x3, 0x18b2}}, @TCA_TBF_RATE64={0xc, 0x4, 0xab3ead24ee5f40eb}]}}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf252400"/26], 0x20}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4) 5.882131884s ago: executing program 1 (id=2916): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000040)="0200000bcdb7f681", 0x8) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r2, 0x1) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = gettid() (async) r6 = gettid() (async) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x15, 0x0, @val=@iter={&(0x7f00000001c0)=@task={r5, r6, r7}, 0x10}}, 0x20) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={r8}, &(0x7f0000000100)=0x8) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e21, 0x7f, @loopback, 0xfffffffb}}, 0x5, 0xa9, 0xb0a, 0xcb, 0x84, 0x3, 0xe}, 0x9c) r9 = socket$inet6(0xa, 0x5, 0x3) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r10}) 5.375457553s ago: executing program 3 (id=2921): bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x32, 0x10}, 0x20) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x722}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0xfffffffffffffe53, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x5, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x66}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28}]}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x14) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000600)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x38, 0x4855}, 0x24000052) 5.206134288s ago: executing program 3 (id=2923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffc, 0x2344edab, 0x8000, 0x4, 0x6, 0xe8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x100, 0xd, 0xfffffff6, 0x0, 0xffffffffffffc148}}]}}}]}, 0x78}}, 0x20000040) r3 = socket(0x2a, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x14, 0x31, 0x901}, 0x14}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.258635591s ago: executing program 3 (id=2931): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) socket$kcm(0xa, 0x3, 0x87) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000800008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xfea1, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_deladdr={0x5, 0x15, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x8, 0x82, 0xfe}, [@IFA_LOCAL={0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004001) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000120060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) 3.33002455s ago: executing program 3 (id=2940): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {}, {0x0, 0xfff2}, {0x10, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 3.048547847s ago: executing program 3 (id=2946): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48070) 1.786072286s ago: executing program 0 (id=2963): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x2e544078631dff64}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 1.45798466s ago: executing program 0 (id=2967): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) 1.295666741s ago: executing program 4 (id=2969): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f901", 0x39}, {&(0x7f0000000440)="63f805d7649496db729598", 0xb}], 0x2}, 0x0) 1.171304897s ago: executing program 2 (id=2970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x11}, 0x94) 975.282144ms ago: executing program 2 (id=2971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000600)='syzkaller\x00', 0x6, 0x7e, &(0x7f0000000640)=""/126, 0x41100, 0x35, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 828.047371ms ago: executing program 4 (id=2972): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x84) 810.400859ms ago: executing program 0 (id=2973): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, &(0x7f0000000200), 0x4) 730.604963ms ago: executing program 2 (id=2974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ce12159}]}]}], {0x14}}, 0x94}}, 0x0) 579.00338ms ago: executing program 4 (id=2975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000020000810000000000000000850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 578.76717ms ago: executing program 0 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "902922"}]}], {0x14}}, 0x7c}}, 0x0) 496.599764ms ago: executing program 2 (id=2977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffffb00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 382.078044ms ago: executing program 4 (id=2978): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000440)=""/229, 0xe5}], 0x1}, 0x2022) 327.519555ms ago: executing program 0 (id=2979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="54000000090601080000000000000000070000000900020073797a310000000005000100070000002c0007801800018014000240fe800000000000000000d500000000bb060004400e1f00000500078088"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 313.731027ms ago: executing program 2 (id=2980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x1b, 0x5, 0x3eff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 204.594537ms ago: executing program 4 (id=2981): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000002740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x5, 0x1, 0x0, 0x5, 0x0, 0xff, [{0x2, 0x1, 0x95}]}]}, {0x0, [0x0, 0x2e, 0x1f, 0x0, 0x2e]}}, 0x0, 0x37, 0x0, 0x1, 0x3}, 0x28) 82.837275ms ago: executing program 0 (id=2982): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000002700090025bd7000fddbc3251100000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 82.498489ms ago: executing program 4 (id=2983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000300)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=2984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000030a03000004000000000000050000000900010073797a30000000000900030073797a3000000000180004801400030074656187f3736c6176655f3100000000280008806800024000000000000000050c00024000000000000004120c0001400000000000000005140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x24048840}, 0x802) kernel console output (not intermixed with test programs): cuous mode [ 148.305053][ T8143] netlink: 'syz.4.658': attribute type 1 has an invalid length. [ 148.321039][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 148.339410][ T8143] netlink: 16070 bytes leftover after parsing attributes in process `syz.4.658'. [ 148.586857][ T8160] x_tables: duplicate underflow at hook 2 [ 148.594820][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 148.610762][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.663'. [ 148.647272][ T8160] netlink: 92 bytes leftover after parsing attributes in process `syz.3.663'. [ 148.764235][ T8161] team0: Port device team_slave_0 removed [ 148.830317][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'. [ 149.023077][ T8181] xt_recent: Unsupported userspace flags (000000b1) [ 149.307077][ T8199] netlink: 156 bytes leftover after parsing attributes in process `syz.3.672'. [ 149.430105][ T8210] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 149.850462][ T8239] set match dimension is over the limit! [ 149.873864][ T8236] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.936036][ T8236] bond0: (slave lo): Enslaving as an active interface with an up link [ 149.970416][ T8236] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 150.536416][ T8273] veth0_to_bond: entered allmulticast mode [ 153.372937][ T8264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.620805][ T8319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.628130][ T8319] IPv6: NLM_F_CREATE should be set when creating new route [ 153.638292][ T8321] netlink: 'syz.0.709': attribute type 2 has an invalid length. [ 153.651382][ T8313] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 153.665697][ T8313] bond5 (unregistering): Released all slaves [ 153.698691][ T8321] : entered promiscuous mode [ 153.778095][ T8325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.066014][ T8336] __nla_validate_parse: 8 callbacks suppressed [ 154.066030][ T8336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 154.101060][ T7599] IPVS: starting estimator thread 0... [ 154.112334][ T8336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.714'. [ 154.187294][ T8341] IPVS: using max 24 ests per chain, 57600 per kthread [ 154.339264][ T8349] netlink: 256 bytes leftover after parsing attributes in process `syz.4.719'. [ 154.377604][ T8349] netlink: 'syz.4.719': attribute type 9 has an invalid length. [ 154.672687][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 154.770042][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'. [ 154.801309][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 154.816123][ T8373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.043618][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.730'. [ 155.143807][ T8386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.730'. [ 155.313047][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 155.358267][ T8403] netlink: 'syz.1.734': attribute type 2 has an invalid length. [ 155.371193][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 155.451830][ T8408] netlink: zone id is out of range [ 155.674327][ T8415] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 155.820293][ T8423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.835066][ T8415] bond4: entered promiscuous mode [ 155.856841][ T8415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.435109][ T8458] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 156.464681][ T8459] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 156.562911][ T8461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.644177][ T8465] IPv6: sit1: Disabled Multicast RS [ 156.706049][ T8465] sit1: entered allmulticast mode [ 156.851923][ T8476] netlink: 'syz.3.757': attribute type 1 has an invalid length. [ 156.908303][ T8476] netlink: 'syz.3.757': attribute type 3 has an invalid length. [ 157.116433][ T8493] netlink: 'syz.3.762': attribute type 19 has an invalid length. [ 157.515688][ T8501] netlink: 'syz.2.766': attribute type 16 has an invalid length. [ 157.532937][ T8509] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 157.551748][ T8509] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 157.581736][ T8509] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 157.862027][ T8522] syzkaller0: entered promiscuous mode [ 157.871345][ T8522] syzkaller0: entered allmulticast mode [ 157.886460][ T8524] sctp: [Deprecated]: syz.0.772 (pid 8524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.886460][ T8524] Use struct sctp_sack_info instead [ 157.920260][ T8526] unsupported nlmsg_type 40 [ 157.944597][ T8524] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003 [ 158.829761][ T8578] validate_nla: 1 callbacks suppressed [ 158.829779][ T8578] netlink: 'syz.4.785': attribute type 2 has an invalid length. [ 159.134825][ T8591] __nla_validate_parse: 12 callbacks suppressed [ 159.134843][ T8591] netlink: 284 bytes leftover after parsing attributes in process `syz.3.789'. [ 159.183559][ T8596] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 159.249782][ T8605] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 159.249897][ T8596] team0: Port device dummy0 added [ 159.329532][ T8605] team0: Port device dummy0 removed [ 159.897687][ T8644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.151758][ T8654] netlink: 'syz.2.809': attribute type 29 has an invalid length. [ 160.174223][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 160.196420][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 160.228723][ T8653] netlink: 'syz.3.810': attribute type 13 has an invalid length. [ 160.254885][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 160.349566][ T8659] netlink: 220 bytes leftover after parsing attributes in process `syz.4.812'. [ 160.364801][ T8659] netlink: 220 bytes leftover after parsing attributes in process `syz.4.812'. [ 160.579693][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 160.593473][ T8675] ip6gre0: Master is either lo or non-ether device [ 160.613674][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 160.861792][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'. [ 160.940283][ T8691] bond2: Unable to set down delay as MII monitoring is disabled [ 160.954668][ T8691] bond2 (unregistering): Released all slaves [ 161.185178][ T8698] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 161.213292][ T8698] bond1 (unregistering): Released all slaves [ 161.361917][ T8701] netlink: 'syz.0.827': attribute type 11 has an invalid length. [ 161.407040][ T8701] netlink: 224 bytes leftover after parsing attributes in process `syz.0.827'. [ 161.590400][ T8718] syzkaller0: entered promiscuous mode [ 161.618183][ T8718] syzkaller0: entered allmulticast mode [ 162.102976][ T8746] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 162.215923][ T8746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.314605][ T8742] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 163.130192][ T8786] netlink: 'syz.0.844': attribute type 4 has an invalid length. [ 163.140796][ T8788] xt_TCPMSS: Only works on TCP SYN packets [ 163.188004][ T8791] netlink: 'syz.0.844': attribute type 4 has an invalid length. [ 163.650586][ T8819] syzkaller0: entered promiscuous mode [ 163.670445][ T8819] syzkaller0: entered allmulticast mode [ 163.966255][ T8838] xfrm1: entered promiscuous mode [ 164.234340][ T8857] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 164.246905][ T8858] xt_l2tp: invalid flags combination: 8 [ 164.249655][ T8857] netlink: 'syz.4.863': attribute type 2 has an invalid length. [ 164.263820][ T8857] __nla_validate_parse: 7 callbacks suppressed [ 164.263835][ T8857] netlink: 168 bytes leftover after parsing attributes in process `syz.4.863'. [ 164.421840][ T8864] netlink: 216 bytes leftover after parsing attributes in process `syz.0.866'. [ 164.484377][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 164.594856][ T8872] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 164.686515][ T8872] netlink: 'syz.4.869': attribute type 10 has an invalid length. [ 164.703249][ T8872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.745830][ T8872] : (slave batadv0): Enslaving as an active interface with an up link [ 164.856117][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.874'. [ 164.930318][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.876'. [ 165.460613][ T8919] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 165.486105][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 165.518899][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 165.554497][ T8925] netlink: 'syz.2.885': attribute type 5 has an invalid length. [ 165.683238][ T8930] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 165.720287][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'. [ 165.805958][ T8932] bond5: (slave ip6erspan0): making interface the new active one [ 165.818086][ T8932] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 165.979609][ T8940] netlink: 'syz.2.891': attribute type 30 has an invalid length. [ 166.038180][ T8943] netlink: 'syz.2.891': attribute type 13 has an invalid length. [ 166.350214][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 166.534705][ T8958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.895'. [ 166.959030][ T8983] netlink: 'syz.0.902': attribute type 13 has an invalid length. [ 166.990288][ T8986] netlink: 'syz.3.901': attribute type 5 has an invalid length. [ 168.061100][ T9040] bridge4: entered promiscuous mode [ 168.067939][ T9040] bridge4: entered allmulticast mode [ 168.454316][ T9067] C: Caught tx_queue_len zero misconfig [ 168.475408][ T9059] Unsupported xt match [ 168.475424][ T9059] unable to load match [ 168.620459][ T9074] bridge3: entered promiscuous mode [ 168.668022][ T9079] netlink: 'syz.2.926': attribute type 10 has an invalid length. [ 168.759189][ T9079] bond0 (unregistering): (slave lo): Releasing backup interface [ 168.775984][ T9079] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 168.789241][ T9079] bond0 (unregistering): Released all slaves [ 168.814012][ T29] audit: type=1800 audit(1784501722.017:3): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.927" name=02 dev="tmpfs" ino=901 res=0 errno=0 [ 168.859351][ T29] audit: type=1800 audit(1784501722.057:4): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.927" name=02 dev="tmpfs" ino=901 res=0 errno=0 [ 169.496463][ T9106] __nla_validate_parse: 6 callbacks suppressed [ 169.496485][ T9106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.935'. [ 169.530663][ T9106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.935'. [ 170.344265][ T9152] validate_nla: 2 callbacks suppressed [ 170.344284][ T9152] netlink: 'syz.2.945': attribute type 2 has an invalid length. [ 171.034237][ T9194] netlink: 'syz.1.958': attribute type 3 has an invalid length. [ 171.042379][ T9194] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 171.170192][ T9197] netlink: 'syz.1.959': attribute type 14 has an invalid length. [ 171.418886][ T9208] netlink: 'syz.2.964': attribute type 6 has an invalid length. [ 171.444878][ T9210] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 171.460120][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 171.733734][ T9225] netlink: 'syz.3.968': attribute type 4 has an invalid length. [ 171.769539][ T9224] netlink: 'syz.3.968': attribute type 4 has an invalid length. [ 172.184616][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 172.231394][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 172.273075][ T9250] sctp: [Deprecated]: syz.3.976 (pid 9250) Use of int in maxseg socket option. [ 172.273075][ T9250] Use struct sctp_assoc_value instead [ 172.424176][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'. [ 172.484016][ T9261] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 172.538419][ T9271] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 172.570938][ T9261] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.578712][ T9271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.980'. [ 172.640163][ T9270] syzkaller0: entered promiscuous mode [ 172.653437][ T9270] syzkaller0: entered allmulticast mode [ 172.902286][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 173.123133][ T9296] bond3: entered promiscuous mode [ 173.141403][ T9296] bond3: entered allmulticast mode [ 173.272541][ T9310] syzkaller0: entered promiscuous mode [ 173.288115][ T9310] syzkaller0: entered allmulticast mode [ 173.385417][ T9318] netlink: 244 bytes leftover after parsing attributes in process `syz.0.996'. [ 173.869387][ T9343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 173.956147][ T9353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.024347][ T9358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.068401][ T9344] bond0: option coupled_control: invalid value (192) [ 174.102504][ T9344] bond0 (unregistering): Released all slaves [ 174.233013][ T9350] bond0: option coupled_control: invalid value (192) [ 174.242862][ T9350] bond0 (unregistering): Released all slaves [ 174.574839][ T9381] __nla_validate_parse: 4 callbacks suppressed [ 174.574857][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1014'. [ 174.649258][ T9381] team0: entered allmulticast mode [ 174.660771][ T9381] xfrm0: entered allmulticast mode [ 174.679683][ T9381] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 175.211706][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1021'. [ 175.260558][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 175.607047][ T3303] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.649674][ T3303] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.669531][ T3303] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.683323][ T3303] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.882898][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 175.908089][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 176.011142][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 176.052632][ T29] audit: type=1107 audit(1784501729.257:5): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Zg͸J mS#?lK?HiV8xEP NZڅvN`)𜈹7a' [ 176.204959][ T9449] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20003 [ 176.434824][ T9467] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1035'. [ 176.474150][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'. [ 176.623770][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1034'. [ 176.653190][ T9469] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1034'. [ 176.745654][ T9482] validate_nla: 7 callbacks suppressed [ 176.745672][ T9482] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 176.923903][ T9498] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.943412][ T9482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.058239][ T9489] bond1: (slave gretap3): making interface the new active one [ 177.079235][ T9489] bond1: (slave gretap3): Enslaving as an active interface with an up link [ 177.331803][ T9522] netlink: 'syz.3.1051': attribute type 11 has an invalid length. [ 177.390231][ T9528] openvswitch: netlink: IP tunnel dst address not specified [ 177.511629][ T9520] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR [ 177.540346][ T9531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.072544][ T29] audit: type=1804 audit(1784501731.277:6): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1061" name="/newroot/214/cgroup.controllers" dev="tmpfs" ino=1105 res=1 errno=0 [ 178.128375][ T29] audit: type=1800 audit(1784501731.307:7): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1061" name="cgroup.controllers" dev="tmpfs" ino=1105 res=0 errno=0 [ 178.513490][ T9585] bond2: option fail_over_mac: invalid value (64) [ 178.532867][ T9585] bond2 (unregistering): Released all slaves [ 178.574636][ T9596] erspan0: entered promiscuous mode [ 178.581848][ T9596] erspan0: entered allmulticast mode [ 178.705073][ T9602] lo: entered allmulticast mode [ 178.716046][ T9602] lo: left allmulticast mode [ 178.871704][ T9608] xt_hl: Unknown TTL match mode: 255 [ 179.375492][ T9636] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20003 [ 179.403445][ T9636] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20001 [ 179.504645][ T7572] IPVS: starting estimator thread 0... [ 179.608953][ T9644] IPVS: using max 30 ests per chain, 72000 per kthread [ 179.895139][ T9661] ip6tnl0: Caught tx_queue_len zero misconfig [ 180.782522][ T9684] bond0: Caught tx_queue_len zero misconfig [ 180.863301][ T9699] __nla_validate_parse: 7 callbacks suppressed [ 180.863319][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'. [ 180.884742][ T9699] block nbd0: not configured, cannot reconfigure [ 180.896250][ T9699] netlink: 'syz.3.1102': attribute type 2 has an invalid length. [ 181.031430][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1103'. [ 181.196870][ T9708] netlink: 'syz.0.1105': attribute type 3 has an invalid length. [ 181.451973][ T9727] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1110'. [ 181.455530][ T9725] x_tables: duplicate entry at hook 1 [ 181.508756][ T9727] netlink: 'syz.1.1110': attribute type 11 has an invalid length. [ 181.718338][ T9731] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1111'. [ 182.100925][ T9753] bond_slave_0: Caught tx_queue_len zero misconfig [ 182.235109][ T9756] syzkaller0: entered promiscuous mode [ 182.247750][ T9756] syzkaller0: entered allmulticast mode [ 182.373830][ T9765] netlink: 'syz.0.1120': attribute type 178 has an invalid length. [ 182.388965][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 182.529145][ T9768] macvtap0: entered allmulticast mode [ 182.543583][ T9768] veth0_macvtap: entered allmulticast mode [ 182.931282][ T9793] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.941653][ T9792] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1129'. [ 182.951294][ T9792] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1129'. [ 182.962065][ T9793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.969371][ T9793] IPv6: NLM_F_CREATE should be set when creating new route [ 182.981164][ T9792] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 183.040422][ T9792] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 183.325056][ T29] audit: type=1804 audit(1784501736.527:8): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1135" name="/newroot/206/cgroup.controllers" dev="tmpfs" ino=1068 res=1 errno=0 [ 183.388670][ T29] audit: type=1800 audit(1784501736.567:9): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1135" name="cgroup.controllers" dev="tmpfs" ino=1068 res=0 errno=0 [ 183.955041][ T9848] netlink: 'syz.4.1144': attribute type 6 has an invalid length. [ 184.005606][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 184.037615][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1144'. [ 184.413372][ T9870] netlink: 'syz.4.1149': attribute type 16 has an invalid length. [ 184.425540][ T9870] netlink: 'syz.4.1149': attribute type 3 has an invalid length. [ 184.434013][ T9870] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1149'. [ 184.640531][ T9876] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 184.677478][ T1350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.702864][ T1350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.939676][ T9886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.950748][ T9887] openvswitch: netlink: Missing key (keys=40, expected=100) [ 185.341793][ T9915] netlink: 'syz.3.1165': attribute type 1 has an invalid length. [ 186.087705][ T9953] __nla_validate_parse: 4 callbacks suppressed [ 186.087723][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1180'. [ 186.153882][ T9953] netlink: 'syz.0.1180': attribute type 10 has an invalid length. [ 186.206662][ T9953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.240058][ T9953] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 186.262877][ T9961] netlink: 'syz.2.1183': attribute type 21 has an invalid length. [ 186.274418][ T9961] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.321918][ T9961] netlink: 'syz.2.1183': attribute type 21 has an invalid length. [ 186.553293][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 186.589233][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 186.663618][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 186.701918][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 186.730314][ T9991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1190'. [ 186.780936][ T9989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1190'. [ 186.869072][T10001] netlink: 'syz.1.1193': attribute type 83 has an invalid length. [ 187.038283][ T29] audit: type=1107 audit(1784501740.237:10): pid=10005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/a&U[.t;rsK ʥ*C%Εk^Jђ O)7ƭ_sn1J݅EN' [ 187.063602][T10004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1194'. [ 187.083408][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'. [ 187.600570][T10029] macvtap1: entered promiscuous mode [ 187.622336][T10029] macvtap1: entered allmulticast mode [ 187.634693][T10029] veth1_vlan: entered allmulticast mode [ 187.924748][T10048] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 187.934466][T10052] xt_NFQUEUE: number of total queues is 0 [ 187.984588][T10054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1209'. [ 188.109855][T10054] macvtap0: entered allmulticast mode [ 188.123304][T10054] veth0_macvtap: entered allmulticast mode [ 188.191536][T10054] team0 (unregistering): Port device team_slave_0 removed [ 188.271572][T10054] team0 (unregistering): Port device team_slave_1 removed [ 188.417043][T10070] bridge3: entered promiscuous mode [ 188.449184][T10070] bridge3: entered allmulticast mode [ 188.788820][T10096] bridge_slave_1: left allmulticast mode [ 188.815972][T10096] bridge_slave_1: left promiscuous mode [ 188.841877][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.951678][T10096] bridge_slave_0: left allmulticast mode [ 188.970677][T10096] bridge_slave_0: left promiscuous mode [ 188.988915][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.176148][T10117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.035088][T10160] netlink: 'syz.0.1236': attribute type 39 has an invalid length. [ 190.044360][T10160] hsr_slave_0: left promiscuous mode [ 190.052825][T10160] hsr_slave_1: left promiscuous mode [ 190.183837][T10160] veth0: entered promiscuous mode [ 190.263121][T10127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.846755][T10187] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 190.858399][T10159] veth0: left promiscuous mode [ 191.149288][T10208] netlink: 'syz.4.1253': attribute type 1 has an invalid length. [ 191.200304][T10214] __nla_validate_parse: 6 callbacks suppressed [ 191.200324][T10214] netlink: 808 bytes leftover after parsing attributes in process `syz.3.1254'. [ 191.305006][T10215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1255'. [ 191.321727][T10224] veth0_to_team: Caught tx_queue_len zero misconfig [ 191.525585][T10239] netlink: 'syz.0.1261': attribute type 13 has an invalid length. [ 191.594540][T10239] tipc: Started in network mode [ 191.603317][T10239] tipc: Node identity 1656e638bff5, cluster identity 4711 [ 191.615891][T10239] tipc: Enabled bearer , priority 0 [ 191.625401][T10239] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 191.679901][T10241] tipc: Disabling bearer [ 191.698496][T10245] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.846566][T10249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.956055][T10252] xt_CT: No such helper "snmp_trap" [ 192.201526][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 192.235492][T10261] hsr_slave_0: left promiscuous mode [ 192.259512][T10261] hsr_slave_1: left promiscuous mode [ 192.310852][T10266] syzkaller0: entered promiscuous mode [ 192.316467][T10266] syzkaller0: entered allmulticast mode [ 192.512763][T10268] netlink: 'syz.3.1271': attribute type 16 has an invalid length. [ 192.532568][T10268] netlink: 'syz.3.1271': attribute type 17 has an invalid length. [ 192.723774][T10268] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 193.441158][T10301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1279'. [ 193.571560][T10307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.632705][T10307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.043875][T10341] x_tables: unsorted entry at hook 3 [ 194.196150][T10348] openvswitch: netlink: Message has 1 unknown bytes. [ 194.208188][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214669][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.230415][T10348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.338926][T10357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1296'. [ 194.360957][T10358] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1296'. [ 194.454809][T10355] syzkaller0: entered promiscuous mode [ 194.460671][T10355] syzkaller0: entered allmulticast mode [ 194.490734][T10362] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 194.606968][T10362] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 194.734818][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 195.253630][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 197.234947][T10404] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 197.329576][T10407] syzkaller0: entered promiscuous mode [ 197.350700][T10407] syzkaller0: entered allmulticast mode [ 197.445408][T10416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1309'. [ 197.555843][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 197.572348][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 197.810135][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 197.835722][T10432] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1316'. [ 197.905425][T10437] netlink: 'syz.2.1318': attribute type 49 has an invalid length. [ 197.922909][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1317'. [ 197.947631][T10430] bond8: option xmit_hash_policy: invalid value (64) [ 197.975575][T10430] bond8 (unregistering): Released all slaves [ 198.153518][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 198.359743][T10461] IPVS: length: 9 != 8 [ 198.364003][T10462] IPVS: length: 9 != 8 [ 198.485758][T10465] netlink: 'syz.3.1321': attribute type 1 has an invalid length. [ 198.499726][T10469] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1324'. [ 198.564842][T10465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.604828][T10474] vlan2: entered promiscuous mode [ 198.619220][T10474] bond2: entered promiscuous mode [ 198.631270][T10474] vlan2: entered allmulticast mode [ 198.655352][T10474] bond2: entered allmulticast mode [ 198.731067][T10448] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 198.747784][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 199.012328][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 199.043122][T10484] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 199.058937][T10484] bond8: (slave vti0): Error -95 calling set_mac_address [ 199.133402][T10503] tunl0: Caught tx_queue_len zero misconfig [ 199.181850][T10503] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 199.474517][T10514] netlink: 'syz.1.1338': attribute type 2 has an invalid length. [ 199.715119][T10528] x_tables: duplicate underflow at hook 3 [ 199.785894][T10535] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 200.047516][ T50] Bluetooth: hci1: command 0x0401 tx timeout [ 200.056261][T10552] tipc: Enabled bearer , priority 0 [ 200.085524][T10539] tipc: Resetting bearer [ 200.092751][T10539] tipc: Resetting bearer [ 200.405024][T10558] netlink: 'syz.4.1349': attribute type 10 has an invalid length. [ 200.698163][T10568] block nbd0: server does not support multiple connections per device. [ 200.726304][T10568] block nbd0: shutting down sockets [ 201.159348][T10584] IPVS: length: 8 != 1152 [ 201.927219][T10539] tipc: Disabling bearer [ 202.156640][T10592] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 202.265168][T10592] bond4: option mode: invalid value (8) [ 202.349926][T10592] bond4 (unregistering): Released all slaves [ 202.487762][T10606] : renamed from dummy0 [ 202.706486][T10628] __nla_validate_parse: 8 callbacks suppressed [ 202.706502][T10628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 202.756788][T10631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 203.102105][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1368'. [ 203.529726][T10691] x_tables: duplicate underflow at hook 2 [ 205.892635][T10644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.092540][T10708] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1381'. [ 206.106244][T10708] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1381'. [ 206.132098][T10708] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1381'. [ 206.172729][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'. [ 206.280628][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1386'. [ 206.350876][T10723] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1388'. [ 206.364095][T10726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'. [ 206.521677][ T50] Bluetooth: hci1: command 0x0401 tx timeout [ 206.523899][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 206.527759][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 206.697041][T10749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.734607][T10751] netlink: 'syz.0.1396': attribute type 11 has an invalid length. [ 206.750665][T10738] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 206.777564][T10738] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 206.810631][T10738] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 206.890851][T10755] tipc: Enabled bearer , priority 0 [ 206.965030][T10755] syzkaller0: entered promiscuous mode [ 206.970693][T10755] syzkaller0: entered allmulticast mode [ 206.979610][T10738] syz.3.1393 (10738) used greatest stack depth: 18536 bytes left [ 206.992752][T10755] tipc: Resetting bearer [ 207.038283][T10754] tipc: Resetting bearer [ 208.574677][T10754] tipc: Disabling bearer [ 208.585842][T10770] __nla_validate_parse: 1 callbacks suppressed [ 208.585859][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 208.825754][T10790] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1407'. [ 208.901507][T10796] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 208.914497][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 208.939923][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 209.042851][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'. [ 209.092404][T10803] smc: removing net device team0 with user defined pnetid SYZ2 [ 209.135244][T10803] team0 (unregistering): Port device team_slave_0 removed [ 209.186397][T10811] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 209.197527][T10803] team0 (unregistering): Port device team_slave_1 removed [ 209.218888][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 209.239961][T10806] syzkaller1: entered promiscuous mode [ 209.246156][T10806] syzkaller1: entered allmulticast mode [ 209.263627][T10800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.416635][T10817] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.446420][T10817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1415'. [ 209.469164][T10819] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1416'. [ 209.830606][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1421'. [ 210.032277][T10830] bond7: option resend_igmp: invalid value (18446744071791968262) [ 210.058441][T10830] bond7: option resend_igmp: allowed values 0 - 255 [ 210.088960][T10830] bond7 (unregistering): Released all slaves [ 210.248059][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 210.505916][T10871] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 210.633336][T10875] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.732129][T10882] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 210.844079][T10877] gretap1: left promiscuous mode [ 210.865892][T10877] bridge3: left promiscuous mode [ 210.874461][T10877] bond3: left promiscuous mode [ 210.881797][T10877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.905411][T10865] syzkaller1: entered promiscuous mode [ 210.911460][T10865] syzkaller1: entered allmulticast mode [ 211.008791][T10886] bond4: (slave veth0_to_bond): making interface the new active one [ 211.028437][T10886] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 211.041079][ T1132] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 211.054263][ T1132] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 211.130629][ T1132] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 211.169763][ T1132] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 211.250981][T10895] syzkaller0: entered promiscuous mode [ 211.273243][T10895] syzkaller0: entered allmulticast mode [ 212.001334][T10948] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 212.028496][T10956] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 212.244153][T10964] netlink: 'syz.2.1459': attribute type 3 has an invalid length. [ 212.467621][T10986] xt_hashlimit: size too large, truncated to 1048576 [ 212.844827][T11002] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 212.890553][T11007] veth0_to_bond: default FDB implementation only supports local addresses [ 213.378470][T11035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 213.738131][T11060] ip6t_rpfilter: unknown options [ 214.055166][T11074] netlink: 'syz.2.1490': attribute type 9 has an invalid length. [ 214.185195][T11083] __nla_validate_parse: 16 callbacks suppressed [ 214.185214][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1493'. [ 214.354907][T11087] lo: Caught tx_queue_len zero misconfig [ 214.365059][T11090] netlink: 'syz.4.1497': attribute type 20 has an invalid length. [ 214.374178][T11090] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.585469][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 214.783139][T11116] sctp: [Deprecated]: syz.0.1505 (pid 11116) Use of int in max_burst socket option deprecated. [ 214.783139][T11116] Use struct sctp_assoc_value instead [ 214.870080][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1503'. [ 214.964271][T11132] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 214.998754][T11132] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1507'. [ 215.035545][T11132] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1507'. [ 215.055298][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1507'. [ 215.082902][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1507'. [ 215.116497][T11137] syzkaller0: entered promiscuous mode [ 215.123767][T11137] syzkaller0: entered allmulticast mode [ 215.143394][T11137] tipc: Enabled bearer , priority 0 [ 215.179424][T11136] tipc: Resetting bearer [ 215.226393][T11136] tipc: Disabling bearer [ 215.405561][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 215.710711][T11162] netlink: 'syz.3.1518': attribute type 11 has an invalid length. [ 215.720798][ T4943] block nbd0: Receive control failed (result -32) [ 215.747131][T11162] netlink: 'syz.3.1518': attribute type 11 has an invalid length. [ 215.768175][T11162] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1518'. [ 215.823516][T11176] x_tables: duplicate underflow at hook 3 [ 216.006306][T11188] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 216.020527][T11188] bond4 (unregistering): Released all slaves [ 216.031086][T11191] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1525'. [ 216.155989][T11193] bond0 (unregistering): Released all slaves [ 216.191441][T11198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.367384][T11201] bond5: Unable to set up delay as MII monitoring is disabled [ 216.410251][T11201] bond5 (unregistering): Released all slaves [ 216.499111][T11213] netlink: 'syz.1.1535': attribute type 8 has an invalid length. [ 216.629668][T11225] syzkaller0: entered promiscuous mode [ 216.641524][T11225] syzkaller0: entered allmulticast mode [ 216.892375][T11238] netlink: 'syz.2.1541': attribute type 10 has an invalid length. [ 216.905071][T11239] netlink: 'syz.2.1541': attribute type 10 has an invalid length. [ 217.059322][T11246] netlink: 'syz.2.1545': attribute type 12 has an invalid length. [ 217.330327][T11269] smc: net device team0 applied user defined pnetid SYZ2 [ 217.708733][T11288] syzkaller0: entered promiscuous mode [ 217.739521][T11288] syzkaller0: entered allmulticast mode [ 218.318691][ T3303] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 218.385927][T11337] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 218.426982][T11319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.542422][T11340] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.332149][T11371] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 219.345817][T11376] netlink: 'syz.0.1585': attribute type 83 has an invalid length. [ 219.372891][T11365] macvlan2: entered promiscuous mode [ 219.378971][T11365] macvlan2: entered allmulticast mode [ 219.385239][T11365] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 219.482485][T11380] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 219.484325][T11368] __nla_validate_parse: 10 callbacks suppressed [ 219.484343][T11368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1581'. [ 219.674557][T11397] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1589'. [ 219.731987][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1591'. [ 219.864484][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1592'. [ 219.964775][T11410] veth5: entered allmulticast mode [ 220.270146][T11416] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 220.302076][T11447] openvswitch: netlink: Unknown key attributes 20 [ 220.306276][T11416] netlink: 'syz.0.1592': attribute type 4 has an invalid length. [ 220.361132][T11416] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1592'. [ 220.415268][T11447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.484025][T11447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.542148][T11455] openvswitch: netlink: IP tunnel dst address not specified [ 220.851352][ T7580] IPVS: starting estimator thread 0... [ 220.857724][T11476] IPVS: ip_vs_add_dest(): server weight less than zero [ 220.959565][T11477] IPVS: using max 27 ests per chain, 64800 per kthread [ 221.113219][T11489] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1612'. [ 221.159681][T11489] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1612'. [ 221.520182][T11511] vlan1: entered promiscuous mode [ 221.573435][T11511] vlan1: entered allmulticast mode [ 221.620581][T11511] veth0_vlan: entered allmulticast mode [ 222.562751][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1629'. [ 222.789914][T11572] syzkaller0: left promiscuous mode [ 222.849401][T11572] syzkaller0: left allmulticast mode [ 222.872741][ T4943] Bluetooth: hci4: link tx timeout [ 222.878951][ T4943] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.081786][T11587] sctp: [Deprecated]: syz.1.1633 (pid 11587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.081786][T11587] Use struct sctp_sack_info instead [ 223.114317][ T5634] Bluetooth: hci4: link tx timeout [ 223.120625][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.148997][ T5634] Bluetooth: hci4: link tx timeout [ 223.154690][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.243932][T11590] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 223.571521][T11604] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1638'. [ 223.607614][T11609] netlink: 'syz.1.1640': attribute type 32 has an invalid length. [ 223.653112][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 223.811205][T11609] bond7: Setting coupled_control to off (0) [ 223.889129][ T5634] Bluetooth: hci4: link tx timeout [ 223.894587][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.037614][ T5634] Bluetooth: hci4: link tx timeout [ 224.042810][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.108638][T11633] netlink: 'syz.1.1643': attribute type 1 has an invalid length. [ 224.125355][T11633] netlink: 'syz.1.1643': attribute type 3 has an invalid length. [ 224.143510][T11633] netlink: 'syz.1.1643': attribute type 7 has an invalid length. [ 224.166556][T11633] netlink: 'syz.1.1643': attribute type 8 has an invalid length. [ 224.206743][T11635] netlink: 'syz.1.1643': attribute type 1 has an invalid length. [ 224.236234][T11633] NCSI netlink: No device for ifindex 131092 [ 224.315742][T11639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.448242][T11639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.489032][ T5634] Bluetooth: hci4: link tx timeout [ 224.494438][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.568605][T11647] __nla_validate_parse: 8 callbacks suppressed [ 224.568631][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 224.635796][T11647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1646'. [ 224.732017][T11654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1649'. [ 224.941334][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 224.947960][ T5634] Bluetooth: hci4: link tx timeout [ 225.140234][T11679] 8021q: VLANs not supported on ip6gre0 [ 225.265870][T11691] netlink: 'syz.4.1659': attribute type 8 has an invalid length. [ 225.297357][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 225.378435][T11689] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 225.384361][T11689] syzkaller1: Refused to change device type [ 225.560926][T11699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.915491][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 226.130699][T11727] bridge0: port 1(ipvlan3) entered blocking state [ 226.138983][T11727] bridge0: port 1(ipvlan3) entered disabled state [ 226.157555][T11727] ipvlan3: entered allmulticast mode [ 226.163962][T11727] bridge0: entered allmulticast mode [ 226.211037][T11727] ipvlan3: left allmulticast mode [ 226.216422][T11727] bridge0: left allmulticast mode [ 226.694163][T11737] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 226.767470][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 227.043158][T11748] vlan2: entered allmulticast mode [ 227.060991][T11748] bridge3: entered allmulticast mode [ 227.245980][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 227.439541][T11771] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1686'. [ 227.492467][T11774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.669682][T11782] xt_nat: multiple ranges no longer supported [ 227.774819][T11508] Set syz1 is full, maxelem 65536 reached [ 227.910040][T11786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1691'. [ 228.019386][T11795] netlink: 'syz.3.1694': attribute type 5 has an invalid length. [ 228.166180][T11802] netlink: 'syz.2.1695': attribute type 11 has an invalid length. [ 228.296474][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 228.464181][T11816] 8021q: adding VLAN 0 to HW filter on device bond9 [ 228.533334][T11827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.559642][T11816] macvlan4: entered promiscuous mode [ 228.570191][T11816] macvlan4: entered allmulticast mode [ 228.578272][T11816] bond9: entered promiscuous mode [ 228.584341][T11816] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 228.600616][T11816] bond9: left promiscuous mode [ 229.282814][T11872] IPVS: ip_vs_add_dest(): server weight less than zero [ 229.473113][T11879] bond10: entered promiscuous mode [ 229.492974][T11875] smc: removing net device team0 with user defined pnetid SYZ2 [ 229.534648][T11875] team0 (unregistering): Port device team_slave_1 removed [ 229.657660][T11888] __nla_validate_parse: 6 callbacks suppressed [ 229.657689][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1721'. [ 229.773372][T11888] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 230.315129][T11923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1733'. [ 230.409226][T11929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1734'. [ 230.531622][T11937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1735'. [ 230.558988][T11937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1735'. [ 230.804685][T11950] netlink: 996 bytes leftover after parsing attributes in process `syz.3.1741'. [ 230.923678][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1743'. [ 231.542994][T11998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.570086][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 231.593410][T12000] pimreg: entered allmulticast mode [ 231.836261][T12016] validate_nla: 1 callbacks suppressed [ 231.836281][T12016] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 232.032231][T12033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1763'. [ 232.105890][ T3303] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 232.161101][T12029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.370316][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 232.379968][T12040] netlink: 'syz.4.1769': attribute type 5 has an invalid length. [ 232.475833][T12024] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.538927][T12024] bond6: (slave bond7): making interface the new active one [ 232.572001][T12024] bond6: (slave bond7): Enslaving as an active interface with an up link [ 232.631971][T12027] bond6: (slave gretap4): Enslaving as a backup interface with an up link [ 232.660337][T12033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.818879][T12063] netlink: 'syz.2.1773': attribute type 3 has an invalid length. [ 233.309163][T12094] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 233.324675][T12094] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 233.616324][T12118] netlink: 'syz.0.1789': attribute type 1 has an invalid length. [ 233.662116][T12118] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.685639][T12118] bond4: (slave veth0_to_bond): Releasing active interface [ 233.705955][T12118] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 233.789964][T12118] macvlan3: entered promiscuous mode [ 233.804703][T12118] macvlan3: entered allmulticast mode [ 233.815141][T12118] bond5: entered promiscuous mode [ 233.821680][T12118] veth0_to_bond: entered promiscuous mode [ 233.832617][T12118] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 233.843219][T12118] bond5: left promiscuous mode [ 233.850061][T12118] veth0_to_bond: left promiscuous mode [ 233.889834][T12127] syzkaller0: entered promiscuous mode [ 233.922519][T12127] syzkaller0: entered allmulticast mode [ 234.128808][T12140] netlink: 'syz.4.1796': attribute type 1 has an invalid length. [ 234.382907][T12158] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.608804][T12169] netlink: 'syz.2.1803': attribute type 13 has an invalid length. [ 234.647139][T12169] netlink: 'syz.2.1803': attribute type 58 has an invalid length. [ 234.987495][T12195] __nla_validate_parse: 18 callbacks suppressed [ 234.987515][T12195] netlink: 808 bytes leftover after parsing attributes in process `syz.4.1810'. [ 235.023548][T12198] netlink: 'syz.1.1811': attribute type 16 has an invalid length. [ 235.037326][T12198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1811'. [ 235.076471][T12194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1809'. [ 235.432722][T12218] syzkaller1: entered promiscuous mode [ 235.457186][T12218] syzkaller1: entered allmulticast mode [ 235.864397][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'. [ 235.980164][T12244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1824'. [ 236.144080][T12258] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1827'. [ 236.165368][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1827'. [ 236.181995][T12260] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1829'. [ 236.191679][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1827'. [ 236.260539][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1827'. [ 236.410814][T12269] erspan0: left promiscuous mode [ 236.436463][T12269] erspan0: left allmulticast mode [ 236.463713][T12269] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 236.723687][T12295] : (slave macsec0): Error -34 calling dev_set_mtu [ 237.011730][T12312] validate_nla: 4 callbacks suppressed [ 237.011750][T12312] netlink: 'syz.4.1845': attribute type 21 has an invalid length. [ 237.030644][T12312] netlink: 'syz.4.1845': attribute type 1 has an invalid length. [ 237.146672][T12325] vlan1: entered promiscuous mode [ 237.152253][T12325] bridge0: entered promiscuous mode [ 237.322475][T12331] tipc: Enabled bearer , priority 0 [ 237.555144][T12331] syzkaller0: entered promiscuous mode [ 237.562622][T12331] syzkaller0: entered allmulticast mode [ 237.570884][T12331] tipc: Resetting bearer [ 237.606134][T12338] ipvlan2: entered promiscuous mode [ 237.614597][T12330] tipc: Resetting bearer [ 239.615667][T12330] tipc: Disabling bearer [ 239.638347][T12378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.703979][T12379] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 239.704875][ T7579] tipc: Node number set to 2846090808 [ 240.124956][T12415] macvlan0: entered promiscuous mode [ 240.127848][T12418] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 240.317014][T12424] netlink: 'syz.3.1872': attribute type 21 has an invalid length. [ 240.332677][T12424] __nla_validate_parse: 5 callbacks suppressed [ 240.332696][T12424] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1872'. [ 240.349078][T12425] syzkaller0: entered promiscuous mode [ 240.371355][T12429] netlink: 'syz.3.1872': attribute type 21 has an invalid length. [ 240.379388][T12425] syzkaller0: entered allmulticast mode [ 240.391661][T12429] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1872'. [ 240.404364][T12424] netlink: 'syz.3.1872': attribute type 4 has an invalid length. [ 240.414519][T12424] netlink: 'syz.3.1872': attribute type 5 has an invalid length. [ 240.422699][T12424] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1872'. [ 240.434854][T12429] netlink: 'syz.3.1872': attribute type 4 has an invalid length. [ 240.444096][T12429] netlink: 'syz.3.1872': attribute type 5 has an invalid length. [ 240.452331][T12429] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1872'. [ 240.781335][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 240.810803][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 240.849927][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 240.907573][T12456] openvswitch: netlink: IP tunnel dst address not specified [ 241.045191][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 241.183336][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1886'. [ 241.820895][T12514] netlink: 'syz.0.1897': attribute type 1 has an invalid length. [ 241.981362][T12520] bond5: (slave veth0_to_bond): Releasing backup interface [ 242.009365][T12520] bond6: (slave veth0_to_bond): making interface the new active one [ 242.023009][T12520] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 242.064655][T12526] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1900'. [ 242.992152][T12565] bridge9: entered promiscuous mode [ 243.627557][T12599] tipc: Enabled bearer , priority 11 [ 243.912174][T12625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.935992][T12625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.993054][T12628] netlink: 'syz.2.1933': attribute type 9 has an invalid length. [ 244.357252][T12652] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 244.385667][T12652] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 244.394372][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.533029][T12663] syzkaller0: entered promiscuous mode [ 244.570804][T12663] syzkaller0: entered allmulticast mode [ 244.681133][T12675] SET target dimension over the limit! [ 244.726609][T12668] veth0_to_bridge: entered promiscuous mode [ 244.746538][T12674] veth0_to_bridge: left promiscuous mode [ 244.902312][T12689] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 244.931509][T12694] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 245.624699][T12712] syzkaller0: entered promiscuous mode [ 245.665154][T12712] syzkaller0: entered allmulticast mode [ 246.044534][T12732] __nla_validate_parse: 8 callbacks suppressed [ 246.044553][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1955'. [ 246.122085][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 246.269879][T12752] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:21 [ 246.395763][T12759] syzkaller0: entered promiscuous mode [ 246.413684][T12759] syzkaller0: entered allmulticast mode [ 246.449141][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 246.729310][T12775] openvswitch: netlink: Duplicate or invalid key (type 0). [ 246.736685][T12775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.821739][T12736] netlink: 'syz.2.1956': attribute type 4 has an invalid length. [ 246.883196][T12783] ip6t_rpfilter: unknown options [ 247.066392][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 247.076877][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1970'. [ 247.092554][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 247.194356][T12800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1972'. [ 247.216894][T12799] netlink: 'syz.4.1971': attribute type 2 has an invalid length. [ 247.225230][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 247.320847][T12806] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1974'. [ 247.529122][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1975'. [ 247.870823][T12836] lo: entered allmulticast mode [ 247.876163][T12836] lo: left allmulticast mode [ 248.143270][T12839] syzkaller0: entered promiscuous mode [ 248.157525][T12839] syzkaller0: entered allmulticast mode [ 248.586473][T12861] vlan3: entered promiscuous mode [ 248.602821][T12861] bridge0: entered promiscuous mode [ 248.799031][T12874] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 250.608612][T12903] syzkaller0: entered promiscuous mode [ 250.633393][T12903] syzkaller0: entered allmulticast mode [ 250.801460][T12920] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 250.882482][T12924] xfrm2: entered promiscuous mode [ 250.913187][T12924] xfrm2: entered allmulticast mode [ 250.952404][T12929] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.079520][T12939] __nla_validate_parse: 6 callbacks suppressed [ 251.079540][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 251.111335][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 251.137291][T12939] netlink: 'syz.1.2004': attribute type 14 has an invalid length. [ 251.160068][T12939] netlink: 'syz.1.2004': attribute type 13 has an invalid length. [ 251.215766][T12943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.292629][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2005'. [ 251.333910][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2007'. [ 251.422029][T12955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.697253][T12970] netlink: 'syz.4.2013': attribute type 4 has an invalid length. [ 251.718049][T12970] netlink: 'syz.4.2013': attribute type 4 has an invalid length. [ 254.569508][T12963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.797449][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 254.821351][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'. [ 254.868340][T13005] netlink: 'syz.3.2018': attribute type 12 has an invalid length. [ 254.876662][T13005] netlink: 'syz.3.2018': attribute type 11 has an invalid length. [ 254.942156][T13005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2018'. [ 254.956644][T13017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2021'. [ 255.407642][T13044] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2027'. [ 255.638754][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.750677][T13052] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 255.789764][T13057] xt_hashlimit: size too large, truncated to 1048576 [ 255.810399][T13052] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 255.843865][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 255.859694][T13052] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 255.935710][T13052] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 256.005056][T13052] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 256.115098][T13072] __nla_validate_parse: 1 callbacks suppressed [ 256.115117][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 256.426573][ T1132] smbdirect: ib_dev[syz2] removed [ 256.724611][T13101] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2043'. [ 256.771785][T13101] openvswitch: netlink: Message has 4 unknown bytes. [ 256.801482][T13105] xt_connbytes: Forcing CT accounting to be enabled [ 256.819863][T13105] Cannot find set identified by id 65534 to match [ 257.734325][T13160] netlink: 'syz.1.2060': attribute type 8 has an invalid length. [ 257.755061][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'. [ 259.988723][T13175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2066'. [ 260.116595][T13185] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 260.307737][T13189] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 260.360683][T13189] bond11 (unregistering): Released all slaves [ 260.420085][T13206] xt_socket: unknown flags 0x50 [ 260.482653][T13195] bridge7: entered promiscuous mode [ 260.503590][T13195] bridge7: entered allmulticast mode [ 260.627383][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 260.651261][T13219] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2079'. [ 260.662202][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2078'. [ 260.674162][T13219] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2079'. [ 260.778254][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 260.800509][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2078'. [ 260.851094][T13227] syzkaller0: entered promiscuous mode [ 260.856855][T13227] syzkaller0: entered allmulticast mode [ 261.212741][T13244] __nla_validate_parse: 1 callbacks suppressed [ 261.212760][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 261.264624][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 261.443753][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 261.488980][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 261.579387][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2096'. [ 261.605707][T13262] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2096'. [ 261.697418][T13275] netlink: 'syz.4.2100': attribute type 21 has an invalid length. [ 261.735699][T13275] netlink: 'syz.4.2100': attribute type 21 has an invalid length. [ 261.767812][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 261.782887][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'. [ 261.969500][T13290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2103'. [ 262.013178][T13293] gretap0: entered promiscuous mode [ 262.040871][T13293] vlan2: entered promiscuous mode [ 262.205936][T13308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2109'. [ 262.754343][T13339] IPv6: addrconf: prefix option has invalid lifetime [ 262.992670][T13355] netlink: 'syz.2.2123': attribute type 11 has an invalid length. [ 263.060281][T13357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.473216][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4 [ 263.500151][T13387] syzkaller1: entered promiscuous mode [ 263.508793][T13387] syzkaller1: entered allmulticast mode [ 263.724560][T13400] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 263.889613][T13408] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 264.090594][T13419] netlink: 'syz.3.2143': attribute type 21 has an invalid length. [ 264.101249][T13421] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 264.134887][T13419] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.147303][T13419] openvswitch: netlink: IPv6 tunnel dst address is zero [ 264.402782][T13435] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 264.659543][T13431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.779747][T13431] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.877729][ T1132] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 265.317770][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 265.441627][T13476] xt_policy: neither incoming nor outgoing policy selected [ 265.550508][T13484] openvswitch: netlink: Flow key attr not present in new flow. [ 265.593045][T13487] xt_nat: multiple ranges no longer supported [ 265.736358][T13496] openvswitch: netlink: IPv4 tun info is not correct [ 265.980132][T13504] openvswitch: netlink: Missing key (keys=40, expected=100) [ 266.130146][T13519] C: renamed from lo (while UP) [ 266.141269][T13519] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 266.174959][T13518] sctp: [Deprecated]: syz.1.2168 (pid 13518) Use of int in max_burst socket option deprecated. [ 266.174959][T13518] Use struct sctp_assoc_value instead [ 266.229560][T13526] __nla_validate_parse: 14 callbacks suppressed [ 266.229577][T13526] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2171'. [ 266.553077][T13542] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2176'. [ 266.595799][T13538] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 266.619764][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2174'. [ 266.645514][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2174'. [ 267.024519][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'. [ 267.504265][T13592] netlink: 'syz.3.2193': attribute type 11 has an invalid length. [ 267.540172][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'. [ 267.762075][T13606] syz.2.2198: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.778074][T13606] CPU: 0 UID: 0 PID: 13606 Comm: syz.2.2198 Not tainted syzkaller #0 PREEMPT(full) [ 267.778101][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 267.778123][T13606] Call Trace: [ 267.778133][T13606] [ 267.778143][T13606] dump_stack_lvl+0xe8/0x150 [ 267.778182][T13606] warn_alloc+0x24c/0x270 [ 267.778222][T13606] ? stack_depot_save_flags+0x33/0x800 [ 267.778252][T13606] ? __pfx_warn_alloc+0x10/0x10 [ 267.778283][T13606] ? kasan_save_track+0x3e/0x80 [ 267.778309][T13606] ? __kasan_kmalloc+0x93/0xb0 [ 267.778340][T13606] ? xsk_setsockopt+0x52a/0x960 [ 267.778371][T13606] ? do_sock_setsockopt+0x17c/0x1b0 [ 267.778420][T13606] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 267.778451][T13606] ? do_syscall_64+0x174/0x580 [ 267.778483][T13606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.778518][T13606] __vmalloc_node_range_noprof+0x12c/0x1730 [ 267.778584][T13606] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.778616][T13606] ? __kasan_kmalloc+0x93/0xb0 [ 267.778648][T13606] ? __kmalloc_cache_noprof+0x32d/0x660 [ 267.778677][T13606] ? __kmalloc_cache_noprof+0x150/0x660 [ 267.778709][T13606] vmalloc_user_noprof+0xad/0xe0 [ 267.778735][T13606] ? xskq_create+0xbf/0x170 [ 267.778767][T13606] xskq_create+0xbf/0x170 [ 267.778801][T13606] xsk_init_queue+0x8a/0xe0 [ 267.778833][T13606] xsk_setsockopt+0x52a/0x960 [ 267.778860][T13606] ? __fget_files+0x2a/0x420 [ 267.778892][T13606] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.778922][T13606] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.778960][T13606] ? aa_sock_opt_perm+0xff/0x1a0 [ 267.778987][T13606] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 267.779010][T13606] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.779042][T13606] do_sock_setsockopt+0x17c/0x1b0 [ 267.779081][T13606] __x64_sys_setsockopt+0x13d/0x1b0 [ 267.779118][T13606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.779143][T13606] do_syscall_64+0x174/0x580 [ 267.779175][T13606] ? trace_irq_disable+0x3b/0x140 [ 267.779211][T13606] ? clear_bhb_loop+0x40/0x90 [ 267.779241][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.779263][T13606] RIP: 0033:0x7fb7f8d9de99 [ 267.779292][T13606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.779312][T13606] RSP: 002b:00007fb7f9cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.779335][T13606] RAX: ffffffffffffffda RBX: 00007fb7f9025fa0 RCX: 00007fb7f8d9de99 [ 267.779352][T13606] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 267.779365][T13606] RBP: 00007fb7f8e33eaf R08: 0000000000000004 R09: 0000000000000000 [ 267.779379][T13606] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.779393][T13606] R13: 00007fb7f9026038 R14: 00007fb7f9025fa0 R15: 00007ffd5838e468 [ 267.779429][T13606] [ 267.779521][T13606] Mem-Info: [ 268.093219][T13606] active_anon:6065 inactive_anon:0 isolated_anon:0 [ 268.093219][T13606] active_file:0 inactive_file:42655 isolated_file:0 [ 268.093219][T13606] unevictable:768 dirty:50 writeback:0 [ 268.093219][T13606] slab_reclaimable:11143 slab_unreclaimable:104167 [ 268.093219][T13606] mapped:29309 shmem:1289 pagetables:1238 [ 268.093219][T13606] sec_pagetables:0 bounce:0 [ 268.093219][T13606] kernel_misc_reclaimable:0 [ 268.093219][T13606] free:1316977 free_pcp:11963 free_cma:0 [ 268.194897][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2199'. [ 268.219316][T13606] Node 0 active_anon:24460kB inactive_anon:0kB active_file:0kB inactive_file:170420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117436kB dirty:196kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14164kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.254877][T13610] netlink: 'syz.3.2199': attribute type 2 has an invalid length. [ 268.263390][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2200'. [ 268.272525][T13606] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.370946][T13606] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.432680][T13606] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 268.439538][T13606] Node 0 DMA32 free:1303036kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24260kB inactive_anon:0kB active_file:0kB inactive_file:170420kB unevictable:1536kB writepending:196kB zspages:0kB present:3129332kB managed:2548728kB mlocked:0kB bounce:0kB free_pcp:45864kB local_pcp:19888kB free_cma:0kB [ 268.476050][T13606] lowmem_reserve[]: 0 0 0 0 0 [ 268.481245][T13606] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.526295][T13606] lowmem_reserve[]: 0 0 0 0 0 [ 268.553268][T13606] Node 1 Normal free:3949512kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:0kB free_cma:0kB [ 268.599662][T13606] lowmem_reserve[]: 0 0 0 0 0 [ 268.624306][T13626] Bluetooth: MGMT ver 1.23 [ 268.629285][T13606] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 268.644484][T13626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2203'. [ 268.677628][T13606] Node 0 DMA32: 1097*4kB (U) 363*8kB (U) 114*16kB (UM) 179*32kB (UE) 56*64kB (UM) 26*128kB (UM) 9*256kB (M) 4*512kB (ME) 7*1024kB (UM) 10*2048kB (UME) 305*4096kB (UM) = 1303036kB [ 268.698168][T13606] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 268.771611][T13609] syz.2.2198 (13609) used greatest stack depth: 17376 bytes left [ 268.819388][T13606] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 963*4096kB (UM) = 3949764kB [ 268.909326][T13606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.928994][T13646] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 268.942794][T13606] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.948905][T13646] netlink: 'syz.0.2206': attribute type 2 has an invalid length. [ 268.995362][T13606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.037481][T13606] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.071669][T13606] 43941 total pagecache pages [ 269.094132][T13606] 0 pages in swap cache [ 269.123512][T13606] Free swap = 124996kB [ 269.156211][T13606] Total swap = 124996kB [ 269.184986][T13606] 2097051 pages RAM [ 269.206441][T13606] 0 pages HighMem/MovableOnly [ 269.224900][T13606] 428188 pages reserved [ 269.239652][T13606] 0 pages cma reserved [ 269.318593][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 269.487821][T13676] bond9: entered promiscuous mode [ 269.492997][T13676] bond9: entered allmulticast mode [ 269.563223][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 269.661137][T13685] openvswitch: netlink: IPv4 tunnel dst address is zero [ 269.678337][T13685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.965902][T13756] syzkaller0: entered promiscuous mode [ 270.984440][T13756] syzkaller0: entered allmulticast mode [ 271.034983][T13756] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.323674][T13771] bond0: entered promiscuous mode [ 271.337491][T13771] batadv0: entered promiscuous mode [ 271.550493][T13776] xt_hashlimit: size too large, truncated to 1048576 [ 271.625268][T13780] netlink: zone id is out of range [ 271.652586][T13780] netlink: zone id is out of range [ 271.670472][T13780] netlink: zone id is out of range [ 271.686132][T13780] netlink: zone id is out of range [ 271.704919][T13782] __nla_validate_parse: 2 callbacks suppressed [ 271.704937][T13782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2244'. [ 271.728292][T13780] netlink: zone id is out of range [ 271.737985][T13780] netlink: zone id is out of range [ 271.745757][T13780] netlink: zone id is out of range [ 272.211002][T13806] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 272.263519][T13810] syzkaller0: entered promiscuous mode [ 272.273587][T13810] syzkaller0: entered allmulticast mode [ 272.390739][T13812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.546777][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 272.571069][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 272.584486][T13821] netlink: 'syz.0.2259': attribute type 1 has an invalid length. [ 272.607538][T13812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.622242][T13812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.643021][T13812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.654018][T13812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.673707][T13812] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 272.684159][T13812] veth1_vlan: left promiscuous mode [ 272.694206][T13812] veth0_vlan: left promiscuous mode [ 272.701739][T13812] veth0_vlan: entered promiscuous mode [ 272.711826][T13812] veth1_vlan: entered promiscuous mode [ 272.726934][T13812] veth1_macvtap: left promiscuous mode [ 272.738010][T13812] veth1_macvtap: entered promiscuous mode [ 272.753724][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.765235][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.775171][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.828255][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.835508][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.846403][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.853643][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.935383][T13819] vlan0: entered promiscuous mode [ 272.983761][T13821] bond7: entered promiscuous mode [ 273.007786][T13821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.053466][ T113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.113378][T13834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2261'. [ 273.124487][T13828] ipvlan3: entered promiscuous mode [ 273.136874][T13836] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 273.173229][ T113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.183563][ T113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.204990][T13834] netlink: 'syz.2.2261': attribute type 1 has an invalid length. [ 273.215357][ T113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.236467][T13834] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2261'. [ 273.426003][T13844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2267'. [ 273.532622][T13848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2268'. [ 273.613345][T13849] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2269'. [ 273.759101][T13864] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 273.883808][T13867] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 273.934338][T13867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2274'. [ 273.979653][T13871] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 273.989041][T13871] bond8: option packets_per_slave: allowed values 0 - 65535 [ 274.004804][T13871] bond8 (unregistering): Released all slaves [ 274.053176][T13879] netlink: 'syz.1.2278': attribute type 61 has an invalid length. [ 274.506958][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2286'. [ 274.841298][T13923] bond10: option xmit_hash_policy: invalid value (64) [ 274.871640][T13923] bond10 (unregistering): Released all slaves [ 275.576151][T13947] : renamed from bond0 [ 275.606067][T13957] : (slave batadv0): Releasing backup interface [ 275.619828][T13957] bridge_slave_0: left allmulticast mode [ 275.628572][T13957] bridge_slave_0: left promiscuous mode [ 275.634703][T13957] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.652531][T13957] bridge_slave_1: left allmulticast mode [ 275.659368][T13957] bridge_slave_1: left promiscuous mode [ 275.667506][T13957] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.680452][T13957] bond6: (slave veth0_to_bond): Releasing active interface [ 275.692612][T13957] : (slave bond_slave_0): Releasing backup interface [ 275.703339][T13957] : (slave bond_slave_1): Releasing backup interface [ 275.711710][T13962] netlink: 'syz.1.2306': attribute type 18 has an invalid length. [ 275.726261][T13957] team0: Port device team_slave_1 removed [ 275.734360][T13957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.743578][T13957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.752911][T13957] net_ratelimit: 20 callbacks suppressed [ 275.752925][T13957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 275.976350][T13976] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 276.448366][T13998] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 276.742357][T14013] __nla_validate_parse: 8 callbacks suppressed [ 276.742376][T14013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2319'. [ 276.816063][T14009] 8021q: adding VLAN 0 to HW filter on device bond12 [ 276.831617][T14025] netlink: 'syz.2.2319': attribute type 2 has an invalid length. [ 276.841311][T14009] bond0: (slave bond12): Enslaving as an active interface with an up link [ 276.874832][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 277.026844][T14028] netlink: 'syz.4.2323': attribute type 1 has an invalid length. [ 277.195191][T14028] syzkaller0: entered promiscuous mode [ 277.203169][T14028] syzkaller0: entered allmulticast mode [ 278.041200][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 279.051220][T14060] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2331'. [ 279.081667][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2333'. [ 279.176787][T14060] xt_CT: No such helper "pptp" [ 279.306784][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2337'. [ 279.314491][T14080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2335'. [ 279.513960][T14095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2343'. [ 279.587736][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 279.598088][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 279.646632][T14101] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2345'. [ 279.713402][T14106] netlink: 'syz.1.2347': attribute type 1 has an invalid length. [ 279.976726][T14116] 8021q: VLANs not supported on wg1 [ 280.389281][T14134] bond0: (slave gre0): refused to change device type [ 280.402624][T14134] bond0: (slave gre0): refused to change device type [ 281.324898][T14183] netlink: 'syz.2.2371': attribute type 12 has an invalid length. [ 281.365665][T14183] netlink: 'syz.2.2371': attribute type 29 has an invalid length. [ 281.403899][T14183] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 281.420999][T14187] netlink: 'syz.4.2373': attribute type 7 has an invalid length. [ 281.514641][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.976261][T14218] __nla_validate_parse: 12 callbacks suppressed [ 281.976281][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2379'. [ 281.995039][T14217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2379'. [ 282.006625][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 282.042666][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 282.474538][T14257] IPVS: ip_vs_edit_dest(): server weight less than zero [ 282.797479][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 282.944154][T14280] macvtap1: entered promiscuous mode [ 282.954143][T14280] vlan0: entered promiscuous mode [ 282.960492][T14280] macvtap1: entered allmulticast mode [ 282.967797][T14280] vlan0: entered allmulticast mode [ 282.986486][T14287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2394'. [ 285.175850][T14233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.514061][T14310] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2401'. [ 285.975487][T14333] can: request_module (can-proto-0) failed. [ 286.492497][T14369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2417'. [ 288.213450][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2453'. [ 288.906036][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2471'. [ 289.010988][T14487] xt_hashlimit: size too large, truncated to 1048576 [ 290.397375][ T5634] Bluetooth: hci4: link tx timeout [ 290.402610][ T5634] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 291.340299][T14597] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 291.506785][T14606] lo: entered allmulticast mode [ 291.527719][T14606] tunl0: entered allmulticast mode [ 291.533693][T14606] gre0: entered allmulticast mode [ 291.548247][T14606] gretap0: entered allmulticast mode [ 291.561560][T14606] erspan0: entered allmulticast mode [ 291.573204][T14606] ip_vti0: entered allmulticast mode [ 291.585178][T14606] ip6_vti0: entered allmulticast mode [ 291.592822][T14606] sit0: entered allmulticast mode [ 291.598497][T14606] ip6tnl0: entered allmulticast mode [ 291.604392][T14606] ip6gre0: entered allmulticast mode [ 291.610593][T14606] syz_tun: entered allmulticast mode [ 291.616435][T14606] ip6gretap0: entered allmulticast mode [ 291.623314][T14606] bridge0: entered allmulticast mode [ 291.636786][T14606] nlmon0: entered allmulticast mode [ 291.649556][T14606] batadv0: entered allmulticast mode [ 291.666478][T14606] vxcan0: entered allmulticast mode [ 291.681800][T14606] vxcan1: entered allmulticast mode [ 291.696521][T14606] veth0: entered allmulticast mode [ 291.717469][T14606] veth1: entered allmulticast mode [ 291.728843][T14606] wg0: entered allmulticast mode [ 291.734406][T14606] wg1: entered allmulticast mode [ 291.740800][T14606] wg2: entered allmulticast mode [ 291.746343][T14606] veth0_to_bridge: entered allmulticast mode [ 291.754847][T14606] veth1_to_bridge: entered allmulticast mode [ 291.762340][T14606] veth0_to_bond: entered allmulticast mode [ 291.769323][T14606] bond_slave_0: entered allmulticast mode [ 291.775641][T14606] veth1_to_bond: entered allmulticast mode [ 291.784045][T14606] bond_slave_1: entered allmulticast mode [ 291.791797][T14606] veth1_to_team: entered allmulticast mode [ 291.800547][T14606] team_slave_1: entered allmulticast mode [ 291.806915][T14606] veth0_to_batadv: entered allmulticast mode [ 291.816003][T14606] batadv_slave_0: entered allmulticast mode [ 291.822863][T14606] veth1_to_batadv: entered allmulticast mode [ 291.832049][T14606] batadv_slave_1: entered allmulticast mode [ 291.844088][T14606] xfrm0: entered allmulticast mode [ 291.850508][T14606] veth0_to_hsr: entered allmulticast mode [ 291.856838][T14606] hsr_slave_0: entered allmulticast mode [ 291.863842][T14606] veth1_to_hsr: entered allmulticast mode [ 291.871465][T14606] hsr_slave_1: entered allmulticast mode [ 291.878357][T14606] hsr0: entered allmulticast mode [ 291.884004][T14606] veth1_virt_wifi: entered allmulticast mode [ 291.891446][T14606] veth0_virt_wifi: entered allmulticast mode [ 291.904426][T14606] virt_wifi0: entered allmulticast mode [ 291.918014][T14606] veth1_vlan: entered allmulticast mode [ 291.925020][T14606] veth0_vlan: entered allmulticast mode [ 291.931573][T14606] vlan0: entered allmulticast mode [ 291.937559][T14606] vlan1: entered allmulticast mode [ 291.943326][T14606] macvlan0: entered allmulticast mode [ 291.953471][T14606] macvlan1: entered allmulticast mode [ 291.960664][T14606] ipvlan0: entered allmulticast mode [ 291.966637][T14606] ipvlan1: entered allmulticast mode [ 291.974872][T14606] veth1_macvtap: entered allmulticast mode [ 291.983319][T14606] macsec0: entered allmulticast mode [ 291.990467][T14606] geneve0: entered allmulticast mode [ 291.996795][T14606] geneve1: entered allmulticast mode [ 292.004533][T14606] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 292.016490][T14606] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 292.025061][T14606] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 292.033320][T14606] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 292.042357][T14606] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 292.050136][T14606] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 292.057527][T14606] ip6tnl1: entered allmulticast mode [ 292.063014][T14606] gretap1: entered allmulticast mode [ 292.068649][T14606] bridge1: entered allmulticast mode [ 292.074335][T14606] vxlan0: entered allmulticast mode [ 292.079992][T14606] geneve1n1: entered allmulticast mode [ 292.085659][T14606] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 292.093591][T14606] bond1: entered allmulticast mode [ 292.098853][T14606] gretap2: entered allmulticast mode [ 292.104705][T14606] ipip0: entered allmulticast mode [ 292.110843][T14606] syztnl0: entered allmulticast mode [ 292.116604][T14606] ipip1: entered allmulticast mode [ 292.122963][T14606] bond3: entered allmulticast mode [ 292.129696][T14606] bond4: left promiscuous mode [ 292.134842][T14606] mac80211_hwsim hwsim2 pim6reg0: entered allmulticast mode [ 292.143184][T14606] syzkaller0: left promiscuous mode [ 292.149361][T14606] gretap3: entered allmulticast mode [ 292.154984][T14606] xfrm1: left promiscuous mode [ 292.160561][T14606] xfrm1: entered allmulticast mode [ 292.166047][T14606] bond5: entered allmulticast mode [ 292.171881][T14606] ip6erspan0: entered allmulticast mode [ 292.178219][T14606] veth2: entered allmulticast mode [ 292.183716][T14606] veth3: entered allmulticast mode [ 292.190226][T14606] ip6tnl2: entered allmulticast mode [ 292.196152][T14606] mac80211_hwsim hwsim21 wlan3: entered allmulticast mode [ 292.203889][T14606] bond0: entered allmulticast mode [ 292.209851][T14606] bridge2: entered allmulticast mode [ 292.216069][T14606] veth4: entered allmulticast mode [ 292.222580][T14606] ip6tnl3: entered allmulticast mode [ 292.236067][T14606] mac80211_hwsim hwsim22 wlan4: entered allmulticast mode [ 292.244946][T14606] sit1: entered allmulticast mode [ 292.250941][T14606] bond6: entered allmulticast mode [ 292.256341][T14606] bond7: entered allmulticast mode [ 292.264651][T14606] gretap4: entered allmulticast mode [ 292.271886][T14606] wireguard0: entered allmulticast mode [ 292.278478][T14606] ipvlan2: left promiscuous mode [ 292.283727][T14606] ipvlan2: entered allmulticast mode [ 292.290702][T14606] ip6gre1: entered allmulticast mode [ 292.296420][T14606] mac80211_hwsim hwsim27 wlan5: entered allmulticast mode [ 292.305316][T14606] xfrm2: left promiscuous mode [ 292.312257][T14606] ip6erspan1: entered allmulticast mode [ 292.318452][T14606] bridge4: entered allmulticast mode [ 292.324541][T14606] sit2: entered allmulticast mode [ 292.334755][T14606] gretap5: entered allmulticast mode [ 292.345516][T14606] bond8: entered allmulticast mode [ 292.352530][T14606] mac80211_hwsim hwsim28 wlan6: entered allmulticast mode [ 292.360666][T14606] mac80211_hwsim hwsim2 rose0: entered allmulticast mode [ 292.369072][T14606] bridge5: entered allmulticast mode [ 292.374870][T14606] ipip2: entered allmulticast mode [ 292.437499][ T4943] Bluetooth: hci4: command 0x0406 tx timeout [ 293.321256][T14661] syzkaller0: left allmulticast mode [ 293.390572][T14667] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2548'. [ 293.804755][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 293.827144][T14685] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2555'. [ 293.859260][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 293.909018][T14685] netlink: 'syz.0.2555': attribute type 11 has an invalid length. [ 293.933625][T14685] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2555'. [ 294.192460][T14703] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.2561'. [ 294.445221][T14722] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2565'. [ 294.470556][T14721] block nbd0: Unsupported socket: should be TCP or UNIX. [ 294.496804][T14720] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2565'. [ 294.679223][T14726] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 294.737317][T14732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2566'. [ 294.800171][T14726] bond0 (unregistering): Released all slaves [ 294.857984][T14740] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 294.873572][T14739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2569'. [ 294.894926][T14742] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 295.317362][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 296.054286][T14804] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 296.068493][T14815] SET target dimension over the limit! [ 296.101687][T14815] SET target dimension over the limit! [ 296.128233][T14815] SET target dimension over the limit! [ 296.327925][T14826] sctp: [Deprecated]: syz.0.2581 (pid 14826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.327925][T14826] Use struct sctp_sack_info instead [ 296.680099][T14845] openvswitch: netlink: Actions may not be safe on all matching packets [ 296.823724][T14852] : renamed from bond_slave_0 (while UP) [ 296.904581][T14858] xt_hashlimit: size too large, truncated to 1048576 [ 298.260939][T14911] nbd: must specify a device to reconfigure [ 298.638825][T14917] syzkaller0: entered promiscuous mode [ 298.656117][T14917] syzkaller0: entered allmulticast mode [ 301.605763][T14997] kthread_run failed with err -4 [ 302.266326][T15043] __nla_validate_parse: 9 callbacks suppressed [ 302.266345][T15043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2636'. [ 302.319009][T15042] netlink: 'syz.2.2635': attribute type 1 has an invalid length. [ 302.356739][T15042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2635'. [ 302.966875][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2634'. [ 303.000571][T15073] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 303.038979][T15073] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2634'. [ 303.113272][T15066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2634'. [ 304.291230][T15135] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 304.306003][T15133] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2670'. [ 304.363120][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'. [ 304.394058][T15139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2672'. [ 304.422423][T15139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2672'. [ 304.447583][T15135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.456757][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'. [ 304.475371][T15131] syzkaller0: entered promiscuous mode [ 304.481105][T15131] syzkaller0: entered allmulticast mode [ 305.166566][T15161] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 305.174474][T15161] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 305.626834][T15176] 0: renamed from bridge0 (while UP) [ 306.324415][T15199] bridge11: entered promiscuous mode [ 306.332806][T15199] bridge11: entered allmulticast mode [ 306.341140][T15199] team0: Device bridge11 is of different type [ 309.367643][T15293] __nla_validate_parse: 2 callbacks suppressed [ 309.367661][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2721'. [ 309.435886][T15294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2721'. [ 309.436421][T15293] bond9: option xmit_hash_policy: invalid value (64) [ 309.456991][T15293] bond9 (unregistering): Released all slaves [ 310.191762][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'. [ 310.290761][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2732'. [ 310.499056][T15361] ip6t_srh: unknown srh invflags 4000 [ 310.505923][T15362] ip6t_srh: unknown srh invflags 4000 [ 310.664509][T15370] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2743'. [ 311.524854][T15416] netlink: 'syz.2.2752': attribute type 1 has an invalid length. [ 311.661034][T15416] 8021q: adding VLAN 0 to HW filter on device bond9 [ 311.680837][T15420] macvlan2: entered promiscuous mode [ 311.686403][T15420] macvlan2: entered allmulticast mode [ 311.694707][T15420] bond9: entered promiscuous mode [ 311.700927][T15420] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.720867][T15420] bond9: left promiscuous mode [ 312.035569][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2754'. [ 312.066068][T15398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.083663][T15416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.275672][T15445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2756'. [ 312.396498][T15452] SET target dimension over the limit! [ 312.782046][T15474] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 312.820522][T15474] C: entered promiscuous mode [ 312.837176][T15474] tunl0: entered promiscuous mode [ 312.874546][T15474] gre0: entered promiscuous mode [ 312.932122][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'. [ 312.941540][T15484] netlink: 'syz.1.2767': attribute type 10 has an invalid length. [ 312.954498][T15480] netlink: 'syz.2.2766': attribute type 1 has an invalid length. [ 312.955685][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2767'. [ 312.982364][T15474] erspan0: entered promiscuous mode [ 313.042625][T15474] ip_vti0: entered promiscuous mode [ 313.236769][T15496] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2771'. [ 313.661609][T15510] macvtap2: entered promiscuous mode [ 313.678830][T15510] macvtap2: entered allmulticast mode [ 313.853662][T15525] syzkaller0: entered promiscuous mode [ 313.876485][T15525] syzkaller0: entered allmulticast mode [ 313.968377][T15543] batadv_slave_1: entered promiscuous mode [ 314.076175][T15542] batadv_slave_1: left promiscuous mode [ 314.339125][ T7577] IPVS: starting estimator thread 0... [ 314.346260][T15563] veth0: entered promiscuous mode [ 314.398075][T15556] veth0: left promiscuous mode [ 314.427306][T15564] IPVS: using max 30 ests per chain, 72000 per kthread [ 314.713865][T15579] netlink: 'syz.1.2795': attribute type 10 has an invalid length. [ 314.732659][T15583] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 314.747994][T15579] openvswitch: netlink: Flow key attr not present in new flow. [ 315.237181][T15605] netlink: 'syz.4.2800': attribute type 4 has an invalid length. [ 315.293633][T15605] netlink: 'syz.4.2800': attribute type 4 has an invalid length. [ 315.634236][T15625] __nla_validate_parse: 5 callbacks suppressed [ 315.634253][T15625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 315.672993][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'. [ 315.721492][T15624] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2804'. [ 315.754861][T15624] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2804'. [ 316.604734][ T4943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.619804][ T4943] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.630696][ T4943] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.640090][ T4943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.650768][ T4943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.085014][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.954301][T15723] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2837'. [ 317.980700][T15723] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2837'. [ 318.000755][T15723] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2837'. [ 318.678499][ T4943] Bluetooth: hci5: command tx timeout [ 318.879474][T15748] 8021q: VLANs not supported on sit0 [ 318.892641][T15753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2849'. [ 318.922455][T15748] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 318.956110][T15755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2846'. [ 319.015975][T15673] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.025408][T15673] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.034267][T15673] bridge_slave_0: entered allmulticast mode [ 319.042850][T15673] bridge_slave_0: entered promiscuous mode [ 319.060372][T15673] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.077568][T15673] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.087378][T15673] bridge_slave_1: entered allmulticast mode [ 319.096350][T15673] bridge_slave_1: entered promiscuous mode [ 319.223259][T15673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.244707][T15673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.314129][T15673] team0: Port device team_slave_0 added [ 319.334526][T15673] team0: Port device team_slave_1 added [ 319.451157][T15673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.467987][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.509569][T15673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.525589][T15673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.533625][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.561488][T15673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.669501][T15673] hsr_slave_0: entered promiscuous mode [ 319.676295][T15673] hsr_slave_1: entered promiscuous mode [ 319.683700][T15673] debugfs: 'hsr0' already exists in 'hsr' [ 319.690389][T15673] Cannot create hsr debugfs directory [ 319.822512][T15781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2856'. [ 319.926458][T15776] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.938159][T15776] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.074335][T15776] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.085124][T15776] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.322258][T15776] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.343707][T15776] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.470383][T15807] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 320.482861][T15807] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 320.509107][T15673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.568758][T15804] syzkaller0: entered promiscuous mode [ 320.576031][T15804] syzkaller0: entered allmulticast mode [ 320.630967][T15776] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.642714][T15776] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.715582][T15673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.757846][ T4943] Bluetooth: hci5: command tx timeout [ 320.895320][T15673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.029532][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.043964][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.067920][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.076907][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.171078][ T1350] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.184983][ T1350] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.304883][T15673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.322280][ T1350] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.330856][ T1350] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.343908][T15832] __nla_validate_parse: 3 callbacks suppressed [ 321.343927][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2869'. [ 321.369137][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2869'. [ 321.416966][T15829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2868'. [ 321.515190][T15834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2868'. [ 321.703313][T15849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2873'. [ 321.900426][T15673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.952899][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.986342][T15673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.038493][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.071250][T15673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.112792][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.147635][T15673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.172362][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.378255][T15885] netlink: 'syz.3.2886': attribute type 1 has an invalid length. [ 322.421240][T15885] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2886'. [ 322.440554][T15885] nbd: couldn't find a device at index 2147483646 [ 322.551765][T15673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.591229][T15673] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.640639][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.647896][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.659820][T15896] netlink: 'syz.3.2890': attribute type 2 has an invalid length. [ 322.669071][T15896] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2890'. [ 322.702780][T10492] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.710129][T10492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.838857][ T4943] Bluetooth: hci5: command tx timeout [ 323.530560][T15930] netlink: 'syz.0.2901': attribute type 2 has an invalid length. [ 323.560691][T15930] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2901'. [ 323.651791][T15673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.843606][T15673] veth0_vlan: entered promiscuous mode [ 323.901291][T15673] veth1_vlan: entered promiscuous mode [ 324.016890][T15673] veth0_macvtap: entered promiscuous mode [ 324.068637][T15673] veth1_macvtap: entered promiscuous mode [ 324.168928][T15947] sctp: [Deprecated]: syz.4.2910 (pid 15947) Use of int in max_burst socket option. [ 324.168928][T15947] Use struct sctp_assoc_value instead [ 324.184896][T15673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.212843][T15673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.262464][ T7747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.280894][ T7747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.296185][ T7747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.328878][ T7747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.742422][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.771179][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.928195][ T4943] Bluetooth: hci5: command tx timeout [ 324.943259][T15983] netlink: 'syz.0.2920': attribute type 3 has an invalid length. [ 324.954843][T10492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.975872][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2919'. [ 324.986485][T10492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.002225][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2919'. [ 325.017104][T15984] netlink: 'syz.4.2919': attribute type 3 has an invalid length. [ 325.293012][T15994] openvswitch: netlink: Multiple metadata blocks provided [ 325.494142][T16005] bond0: (slave gre0): refused to change device type [ 325.684550][T16012] netlink: 'syz.4.2928': attribute type 4 has an invalid length. [ 325.931261][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.952340][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.962504][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.979954][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.989451][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.569648][T16035] syzkaller1: entered promiscuous mode [ 326.583147][T16035] syzkaller1: entered allmulticast mode [ 326.843545][T16030] syzkaller1: left promiscuous mode [ 326.856349][T16030] syzkaller1: left allmulticast mode [ 327.230977][T16060] __nla_validate_parse: 4 callbacks suppressed [ 327.230999][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'. [ 327.459530][T16066] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2944'. [ 327.688417][T16078] netlink: 'syz.0.2949': attribute type 37 has an invalid length. [ 327.706866][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 327.780826][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 327.825592][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 327.863453][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 327.895206][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 327.918966][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 327.934331][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 327.949584][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 327.959795][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 327.982873][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.010731][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.024148][ T13] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.040390][ T4943] Bluetooth: hci1: command tx timeout [ 328.057778][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.097484][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.139383][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.153411][T16094] netlink: 'syz.4.2956': attribute type 1 has an invalid length. [ 328.166637][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'. [ 328.175751][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.177529][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.193232][T16094] netlink: 'syz.4.2956': attribute type 2 has an invalid length. [ 328.209745][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'. [ 328.219990][T16093] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.2955'. [ 328.235005][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.260380][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.297952][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.329992][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.362313][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.380289][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.409986][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.419593][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.428191][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.436353][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.448160][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.456638][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.465281][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.475227][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.496399][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.525662][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.542063][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.582700][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.597570][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 328.635445][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.649906][T16016] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.667926][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.682356][T16016] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.705835][T16016] bridge_slave_0: entered allmulticast mode [ 328.705840][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.730660][T16016] bridge_slave_0: entered promiscuous mode [ 328.748080][T16109] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2961'. [ 328.759840][T16016] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.769419][T16016] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.772450][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.786978][T16016] bridge_slave_1: entered allmulticast mode [ 328.806953][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.815726][T16016] bridge_slave_1: entered promiscuous mode [ 328.828177][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.836365][T16111] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2963'. [ 328.840648][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.874562][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.890653][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.907775][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.939279][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.963638][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.978820][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 328.988206][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.009090][T16016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.009764][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.043798][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.053576][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.054137][T16016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.093098][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.111057][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.127630][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.143421][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.193371][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.208602][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.225698][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.244739][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.261004][T16016] team0: Port device team_slave_0 added [ 329.269086][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.280839][T16016] team0: Port device team_slave_1 added [ 329.299017][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.314975][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.334099][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.352735][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.364219][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.381960][T16016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.390902][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.401982][T16016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.403685][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.447454][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.458427][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.459439][T16016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.476914][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.481292][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.494876][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.505015][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.516314][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.532581][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.555208][T16016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.568649][T16016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.580082][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.627314][T16016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.670708][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.710359][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.720911][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.741288][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.754240][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.785032][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.824521][T10492] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.859078][ T7747] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.889907][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.909075][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.926681][T16016] hsr_slave_0: entered promiscuous mode [ 329.940038][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.949137][T16016] hsr_slave_1: entered promiscuous mode [ 329.958954][T16016] debugfs: 'hsr0' already exists in 'hsr' [ 329.964743][T16016] Cannot create hsr debugfs directory [ 329.973681][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 329.988286][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.007425][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.019713][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.036037][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.061750][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.086940][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.104044][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.118206][ T4943] Bluetooth: hci1: command tx timeout [ 330.123930][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.137788][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.160964][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.188105][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.213304][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.238766][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.270515][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.305586][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.313945][T16146] netlink: 'syz.2.2980': attribute type 5 has an invalid length. [ 330.332032][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.353087][ T12] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.378779][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.406726][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.426209][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.439888][T16152] INFO: trying to register non-static key. [ 330.445741][T16152] The code is fine but needs lockdep annotation, or maybe [ 330.452871][T16152] you didn't initialize this object before use? [ 330.459170][T16152] turning off the locking correctness validator. [ 330.460986][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.465520][T16152] CPU: 1 UID: 0 PID: 16152 Comm: syz.0.2982 Not tainted syzkaller #0 PREEMPT(full) [ 330.465574][T16152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 330.465623][T16152] Call Trace: [ 330.465651][T16152] [ 330.465679][T16152] dump_stack_lvl+0xe8/0x150 [ 330.465785][T16152] assign_lock_key+0x133/0x150 [ 330.465893][T16152] register_lock_class+0xcc/0x2e0 [ 330.465971][T16152] __lock_acquire+0xab/0x2cf0 [ 330.466054][T16152] ? kmem_cache_free+0x182/0x650 [ 330.466127][T16152] ? kern_path+0xd1/0x150 [ 330.466190][T16152] ? nfsd_nl_unlock_filesystem_doit+0x189/0x370 [ 330.466262][T16152] ? genl_family_rcv_msg_doit+0x233/0x340 [ 330.466334][T16152] ? genl_rcv_msg+0x614/0x7a0 [ 330.466397][T16152] ? netlink_rcv_skb+0x226/0x4a0 [ 330.466481][T16152] ? genl_rcv+0x28/0x40 [ 330.466544][T16152] ? netlink_unicast+0x7bb/0x940 [ 330.466605][T16152] ? netlink_sendmsg+0x813/0xb40 [ 330.466656][T16152] ? sock_sendmsg_nosec+0x13a/0x180 [ 330.466720][T16152] ? ____sys_sendmsg+0x54e/0x850 [ 330.466802][T16152] ? ___sys_sendmsg+0x2a5/0x360 [ 330.466879][T16152] ? __x64_sys_sendmsg+0x1b1/0x290 [ 330.466955][T16152] ? do_syscall_64+0x174/0x580 [ 330.467058][T16152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.467155][T16152] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 330.467228][T16152] lock_acquire+0x106/0x350 [ 330.467303][T16152] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 330.467379][T16152] ? net_generic+0x1e/0x240 [ 330.467449][T16152] ? net_generic+0x1e/0x240 [ 330.467506][T16152] ? net_generic+0x1e/0x240 [ 330.467572][T16152] _raw_spin_lock+0x2e/0x40 [ 330.467637][T16152] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 330.467715][T16152] nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 330.467787][T16152] ? kasan_quarantine_put+0xbb/0x1f0 [ 330.467853][T16152] ? lockdep_hardirqs_on+0x7a/0x110 [ 330.467939][T16152] ? kern_path+0xd1/0x150 [ 330.468010][T16152] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 330.468099][T16152] ? kern_path+0xd1/0x150 [ 330.468172][T16152] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 330.468237][T16152] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 330.468298][T16152] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 330.468364][T16152] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 330.468470][T16152] genl_family_rcv_msg_doit+0x233/0x340 [ 330.468569][T16152] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 330.468662][T16152] ? bpf_lsm_capable+0x9/0x20 [ 330.468729][T16152] ? security_capable+0x7e/0x2c0 [ 330.468826][T16152] genl_rcv_msg+0x614/0x7a0 [ 330.468903][T16152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.468967][T16152] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 330.469030][T16152] ? __pfx_ref_tracker_free+0x10/0x10 [ 330.469124][T16152] netlink_rcv_skb+0x226/0x4a0 [ 330.469207][T16152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.469279][T16152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.469387][T16152] ? down_read+0x2be/0x330 [ 330.469442][T16152] genl_rcv+0x28/0x40 [ 330.469503][T16152] netlink_unicast+0x7bb/0x940 [ 330.469590][T16152] netlink_sendmsg+0x813/0xb40 [ 330.469655][T16152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.469717][T16152] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.469786][T16152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.469844][T16152] sock_sendmsg_nosec+0x13a/0x180 [ 330.469936][T16152] ____sys_sendmsg+0x54e/0x850 [ 330.470024][T16152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.470113][T16152] ? import_iovec+0x73/0xa0 [ 330.470196][T16152] ___sys_sendmsg+0x2a5/0x360 [ 330.470279][T16152] ? __lock_acquire+0x683/0x2cf0 [ 330.470361][T16152] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.470448][T16152] ? futex_wait+0x2a2/0x390 [ 330.470558][T16152] ? __fget_files+0x2a/0x420 [ 330.470629][T16152] ? __fget_files+0x3a2/0x420 [ 330.470713][T16152] __x64_sys_sendmsg+0x1b1/0x290 [ 330.470798][T16152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.470904][T16152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.470966][T16152] do_syscall_64+0x174/0x580 [ 330.471057][T16152] ? trace_irq_disable+0x3b/0x140 [ 330.471125][T16152] ? clear_bhb_loop+0x40/0x90 [ 330.471203][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.471279][T16152] RIP: 0033:0x7f03c2f9de99 [ 330.471349][T16152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.471394][T16152] RSP: 002b:00007f03c11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.471458][T16152] RAX: ffffffffffffffda RBX: 00007f03c3225fa0 RCX: 00007f03c2f9de99 [ 330.471507][T16152] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 330.471542][T16152] RBP: 00007f03c3033eaf R08: 0000000000000000 R09: 0000000000000000 [ 330.471585][T16152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.471605][T16152] R13: 00007f03c3226038 R14: 00007f03c3225fa0 R15: 00007ffe5f5efc58 [ 330.471669][T16152] [ 330.472083][T16152] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 330.509078][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.512919][T16152] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 330.512951][T16152] CPU: 1 UID: 0 PID: 16152 Comm: syz.0.2982 Not tainted syzkaller #0 PREEMPT(full) [ 330.512980][T16152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 330.535345][ T1350] xs_tcp_setup_socket: connect returned unhandled error -13 [ 330.538916][T16152] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 330.538957][T16152] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 330.538978][T16152] RSP: 0018:ffffc900059e7280 EFLAGS: 00010246 [ 330.539000][T16152] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff110067ff00d [ 330.539016][T16152] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900059e7200 [ 330.539031][T16152] RBP: ffffc900059e7370 R08: 0000000000000003 R09: 0000000000000004 [ 331.050790][T16152] R10: dffffc0000000000 R11: fffff52000b3ce40 R12: ffffc900059e7300 [ 331.058779][T16152] R13: 1ffff92000b3ce98 R14: dffffc0000000000 R15: 1ffff92000b3ce5c [ 331.066772][T16152] FS: 00007f03c11f66c0(0000) GS:ffff888125057000(0000) knlGS:0000000000000000 [ 331.075723][T16152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.082327][T16152] CR2: 0000200000000100 CR3: 000000007409c000 CR4: 00000000003526f0 [ 331.090329][T16152] Call Trace: [ 331.093639][T16152] [ 331.096598][T16152] ? kasan_quarantine_put+0xbb/0x1f0 [ 331.101930][T16152] ? kern_path+0xd1/0x150 [ 331.106317][T16152] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 331.112335][T16152] ? kern_path+0xd1/0x150 [ 331.116692][T16152] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 331.122783][T16152] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 331.129391][T16152] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 331.135744][T16152] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 331.142094][T16152] genl_family_rcv_msg_doit+0x233/0x340 [ 331.147666][T16152] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 331.153757][T16152] ? bpf_lsm_capable+0x9/0x20 [ 331.158487][T16152] ? security_capable+0x7e/0x2c0 [ 331.163473][T16152] genl_rcv_msg+0x614/0x7a0 [ 331.168011][T16152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.173070][T16152] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 331.179675][T16152] ? __pfx_ref_tracker_free+0x10/0x10 [ 331.185070][T16152] netlink_rcv_skb+0x226/0x4a0 [ 331.189857][T16152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.194895][T16152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.200220][T16152] ? down_read+0x2be/0x330 [ 331.204655][T16152] genl_rcv+0x28/0x40 [ 331.208661][T16152] netlink_unicast+0x7bb/0x940 [ 331.213462][T16152] netlink_sendmsg+0x813/0xb40 [ 331.218245][T16152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.223546][T16152] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.228508][T16152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.233813][T16152] sock_sendmsg_nosec+0x13a/0x180 [ 331.238850][T16152] ____sys_sendmsg+0x54e/0x850 [ 331.243683][T16152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.248992][T16152] ? import_iovec+0x73/0xa0 [ 331.253517][T16152] ___sys_sendmsg+0x2a5/0x360 [ 331.258208][T16152] ? __lock_acquire+0x683/0x2cf0 [ 331.263169][T16152] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.268389][T16152] ? futex_wait+0x2a2/0x390 [ 331.272945][T16152] ? __fget_files+0x2a/0x420 [ 331.277552][T16152] ? __fget_files+0x3a2/0x420 [ 331.282261][T16152] __x64_sys_sendmsg+0x1b1/0x290 [ 331.287228][T16152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.292730][T16152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.298811][T16152] do_syscall_64+0x174/0x580 [ 331.303439][T16152] ? trace_irq_disable+0x3b/0x140 [ 331.308483][T16152] ? clear_bhb_loop+0x40/0x90 [ 331.313187][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.319096][T16152] RIP: 0033:0x7f03c2f9de99 [ 331.323532][T16152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.343149][T16152] RSP: 002b:00007f03c11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.351574][T16152] RAX: ffffffffffffffda RBX: 00007f03c3225fa0 RCX: 00007f03c2f9de99 [ 331.359566][T16152] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 331.367580][T16152] RBP: 00007f03c3033eaf R08: 0000000000000000 R09: 0000000000000000 [ 331.375574][T16152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.383576][T16152] R13: 00007f03c3226038 R14: 00007f03c3225fa0 R15: 00007ffe5f5efc58 [ 331.391582][T16152] [ 331.394626][T16152] Modules linked in: [ 331.400101][T16152] ---[ end trace 0000000000000000 ]--- [ 331.406696][T16152] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 331.413046][T16152] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.433054][T16152] RSP: 0018:ffffc900059e7280 EFLAGS: 00010246 [ 331.439375][T16152] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff110067ff00d [ 331.447428][T16152] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900059e7200 [ 331.455439][T16152] RBP: ffffc900059e7370 R08: 0000000000000003 R09: 0000000000000004 [ 331.463494][T16152] R10: dffffc0000000000 R11: fffff52000b3ce40 R12: ffffc900059e7300 [ 331.471794][T16152] R13: 1ffff92000b3ce98 R14: dffffc0000000000 R15: 1ffff92000b3ce5c [ 331.479930][T16152] FS: 00007f03c11f66c0(0000) GS:ffff888125057000(0000) knlGS:0000000000000000 [ 331.488931][T16152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.495554][T16152] CR2: 0000200000000100 CR3: 000000007409c000 CR4: 00000000003526f0 [ 331.503594][T16152] Kernel panic - not syncing: Fatal exception [ 331.509857][T16152] Kernel Offset: disabled [ 331.514190][T16152] Rebooting in 86400 seconds..