last executing test programs: 3.079592092s ago: executing program 2 (id=10651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(0x0, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 2.067846626s ago: executing program 2 (id=10668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d7033", 0x7b}], 0x1}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="03c886dd0100000000001400000060000000040488"], 0xfdef) 1.679829308s ago: executing program 2 (id=10678): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) 1.659624072s ago: executing program 1 (id=10680): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCSFLAGS(r4, 0x40047459, 0x0) 1.571169305s ago: executing program 1 (id=10681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.481544977s ago: executing program 4 (id=10682): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 1.411773069s ago: executing program 2 (id=10683): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x14, 0x2, 0x4) listen(r0, 0xfffff800) close(0x4) 1.362666067s ago: executing program 1 (id=10685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) 1.291878652s ago: executing program 0 (id=10686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd00000a000000740000006809c2b400143aff00000000000020000000000000000000ff020000000000000000000000000001"], 0x9e) 1.243419096s ago: executing program 3 (id=10687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad0601", 0x6c}, {&(0x7f0000004480)="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", 0xda9}, {&(0x7f0000001040)="65f1fb1a78c7208104e561957164c4cb38edf4d2681ed8a273aa1547cd372536a9941f061d40bd54b2ef467436d8d884ed28cf2ec696717ca21ca217d08653731e88443af8825c7121b5f5d5968b532d3b43888304e84a036af507c157155a19fea0483cdf210968fcaa2f7019c677e6015d365fef54f858d3d6982bed510a0cefef18c7aaf9e7b1faa23648b6edb22fde5eb84afd46282fd14358571d6071c2bbeef0eae77a3bffeff9012aa34644428fabce65f24b3ebba184f5d4cf769d982c378b03f4213d1f9d3183a7da412096663d49c592bb0778794791e02e4daf3fbee0720565ada5af7c3a1f12", 0xec}], 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x1c75}], 0x1) 1.188601661s ago: executing program 1 (id=10688): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, r1, {0x10, 0xffe0}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x6}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004081}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.114267242s ago: executing program 3 (id=10689): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={r4, 0x2, 0x1, 'L'}, 0x9) 1.086086994s ago: executing program 4 (id=10690): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687"], 0x3c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="060043076003008cb89e08f086dd", 0x0, 0x6, 0x60000000, 0xfffffffffffffee5, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 943.659536ms ago: executing program 1 (id=10691): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) 923.305828ms ago: executing program 3 (id=10692): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x34008085}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 738.786018ms ago: executing program 2 (id=10693): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x0, @local}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x2b, 0x1}) 678.427211ms ago: executing program 3 (id=10694): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 620.019215ms ago: executing program 0 (id=10695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 619.838483ms ago: executing program 4 (id=10696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000006c0)="89e7ee2c21fe62a3b47380c988ca4b5e00281ad251f9f989d3ec4e52915652d8796bc371b80a26e5100821f63bb54b9a0ebbc94028bb", 0x36}], 0x1) 575.770243ms ago: executing program 3 (id=10697): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 571.595791ms ago: executing program 0 (id=10698): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 463.667386ms ago: executing program 2 (id=10699): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000811, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="30a03a94a14f9b90d403b1c320bebbeeceb5eef5f3ed5cf895a0449e63500ea78d1eee6465c74930f40ffd0d42cfc0b1191ba4", 0x33}], 0x1}, 0x48890) 463.42197ms ago: executing program 0 (id=10700): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x12c, &(0x7f0000000400)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xf6, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0xf6, 0x0, @gue={{0x2, 0x1, 0x1, 0x2, 0x100, @val=0x80}, "2bac20af85b2dd7868321994735f732494e7431fbcf4fe9133a213660ac4ec73d7517f0bae9fa5df5f2001fb63e3f6b22d94ce9b99bf15f5de0fd7a29a1bcb5fa84e60fb512f45c22e2a714c29fcb3b75b0bc2190bfc53425609c3371c2a55590cce82528e923721bfcf0aa641490e77d8b821a636b70640a3cac57e7f7090b5dc144af0fa9ef3d48b5b70114f92dc4911c5179ef8b115282b5e643c89cb3bec3af93dd4d0781e04f1919b7a1c0afab35c964431dfd1f1568b0ae59c9b29af6b5163f48cf7608f11e35020ce094502018c7ae75d1e06218635c8e028fcb870178ce31b172ff6"}}}}}}}, 0x0) 460.158555ms ago: executing program 3 (id=10701): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64000102}, 0x10) 420.711958ms ago: executing program 4 (id=10702): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xdfdddf82bb4cc70c, 0x28011, r1, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x2689e000) 315.879264ms ago: executing program 0 (id=10703): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 231.490557ms ago: executing program 4 (id=10704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x1, 0x2070bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0x2}, {0xfff1, 0x1}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 135.04598ms ago: executing program 0 (id=10705): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="476d0000eafb", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @broadcast, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @multicast1}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.068265ms ago: executing program 1 (id=10706): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 4 (id=10707): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74", 0x83}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b116d2249a8746d54c19d053605f35cb085edc1b1df8f487d1e1835a9037d94fdb5777403217fb9cd018ee14185b10e413a1095995d75f8c23e88f9e6026228f9516745e87f63b7cc0f59573b3fd06bd33f1879451a9d20e0832163bcdfa", 0xc5}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): `syz.3.4743'. [ 285.684856][T15784] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4743'. [ 285.699173][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4743'. [ 285.922677][T15799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4748'. [ 286.121183][T15808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4753'. [ 286.264014][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4758'. [ 287.078507][T15863] netlink: 'syz.3.4779': attribute type 1 has an invalid length. [ 287.266480][T15870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4782'. [ 287.473931][T15882] netlink: 'syz.4.4789': attribute type 1 has an invalid length. [ 287.693184][T15897] nbd: must specify a device to reconfigure [ 287.842799][T15903] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 287.899216][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4802'. [ 288.230341][T15927] netlink: 'syz.4.4810': attribute type 1 has an invalid length. [ 288.258356][T15927] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4810'. [ 288.555407][T15944] veth0_to_bond: entered allmulticast mode [ 288.764160][T15957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4824'. [ 289.347246][T15982] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 289.701527][T15998] lo: left promiscuous mode [ 289.730365][T15998] tunl0: left promiscuous mode [ 289.757296][T15998] gre0: left promiscuous mode [ 289.766588][T15998] gretap0: left promiscuous mode [ 289.787989][T15998] erspan0: left promiscuous mode [ 289.797336][T15998] ip_vti0: left promiscuous mode [ 289.968630][T15998] batadv0: left allmulticast mode [ 289.986603][T15998] batadv0: left promiscuous mode [ 289.992035][T15998] bridge0: port 3(batadv0) entered disabled state [ 290.102208][T15998] bridge_slave_0: left allmulticast mode [ 290.127119][T15998] bridge_slave_0: left promiscuous mode [ 290.133072][T15998] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.181534][T15998] bridge_slave_1: left allmulticast mode [ 290.189511][T15998] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.213323][T15998] `: (slave bond_slave_0): Releasing backup interface [ 290.233912][T15998] `: (slave bond_slave_1): Releasing backup interface [ 290.270334][T15998] team0: Port device C removed [ 290.295286][T15998] team0: Port device team_slave_1 removed [ 290.309654][T15998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.320952][T15998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.335073][T15998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.347186][T15998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.374435][T15998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.423591][T12119] wg1 speed is unknown, defaulting to 1000 [ 290.445837][T12119] syz2: Port: 1 Link DOWN [ 291.008618][T16048] __nla_validate_parse: 2 callbacks suppressed [ 291.008638][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4867'. [ 291.044784][T16048] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4867'. [ 291.086179][T16048] netlink: 'syz.1.4867': attribute type 5 has an invalid length. [ 291.784493][T16091] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4888'. [ 292.200754][T16107] vlan2: entered promiscuous mode [ 292.210726][T16107] geneve1: entered promiscuous mode [ 292.223194][T16107] vlan2: entered allmulticast mode [ 292.244230][T16107] geneve1: entered allmulticast mode [ 292.287859][T16109] sctp: [Deprecated]: syz.3.4897 (pid 16109) Use of int in maxseg socket option. [ 292.287859][T16109] Use struct sctp_assoc_value instead [ 293.499328][T16144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.041232][T16174] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4924'. [ 295.295231][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4951'. [ 295.913016][T16257] Bluetooth: MGMT ver 1.23 [ 296.177068][T16270] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4972'. [ 296.257153][T16270] ksmbd: Unknown IPC event: 3, ignore. [ 296.324155][T16279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.502063][T16284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.538080][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4979'. [ 296.870197][T16303] tipc: Started in network mode [ 296.884138][T16303] tipc: Node identity ac14144, cluster identity 4711 [ 296.892101][T16303] tipc: Enabling of bearer rejected, failed to enable media [ 298.234519][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5024'. [ 299.534996][T16444] xt_time: unknown flags 0xf4 [ 299.949449][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5067'. [ 300.305353][T16486] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5075'. [ 300.375504][T16491] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5078'. [ 300.395866][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 300.521833][T16497] macsec1: entered promiscuous mode [ 300.715985][ T5833] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 300.775098][T16512] atomic_op ffff888020f28998 conn xmit_atomic 0000000000000000 [ 300.799654][T16511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5089'. [ 301.143987][T16531] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 301.291622][T16540] nbd: couldn't find device at index 61440 [ 301.406295][T16543] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5102'. [ 301.586987][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5108'. [ 302.002557][T16572] net veth1_virt_wifi .: renamed from virt_wifi0 [ 302.144193][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5121'. [ 302.157256][T16579] bridge_slave_0: default FDB implementation only supports local addresses [ 302.361278][T16591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5123'. [ 302.465105][T16590] wg1 speed is unknown, defaulting to 1000 [ 302.880282][T16617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.044655][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5139'. [ 303.521219][T16637] netlink: 'syz.1.5149': attribute type 1 has an invalid length. [ 303.823186][T16652] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5155'. [ 303.884037][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5158'. [ 304.059778][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5162'. [ 304.331485][T16679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5168'. [ 304.366267][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5168'. [ 305.274087][T16729] xt_l2tp: missing protocol rule (udp|l2tpip) [ 305.463557][T16737] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 305.501994][T16737] tipc: Enabled bearer , priority 10 [ 305.927335][T16761] syz.0.5209 (16761) used obsolete PPPIOCDETACH ioctl [ 306.297701][T16785] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 306.621936][ T3197] tipc: Node number set to 2886997056 [ 307.075560][T16828] __nla_validate_parse: 2 callbacks suppressed [ 307.075582][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5241'. [ 307.108117][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5238'. [ 307.132256][T16824] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5238'. [ 307.142634][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5238'. [ 309.270843][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5296'. [ 309.280316][T16940] netlink: 'syz.4.5296': attribute type 3 has an invalid length. [ 309.338938][T16942] xt_policy: too many policy elements [ 310.049635][T16978] syz.3.5315: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 310.129548][T16978] CPU: 1 UID: 0 PID: 16978 Comm: syz.3.5315 Not tainted syzkaller #0 PREEMPT(full) [ 310.129578][T16978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.129601][T16978] Call Trace: [ 310.129610][T16978] [ 310.129620][T16978] dump_stack_lvl+0x189/0x250 [ 310.129673][T16978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.129706][T16978] ? __pfx__printk+0x10/0x10 [ 310.129730][T16978] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 310.129760][T16978] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 310.129792][T16978] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 310.129825][T16978] warn_alloc+0x214/0x310 [ 310.129859][T16978] ? stack_depot_save_flags+0x41b/0x860 [ 310.129899][T16978] ? __pfx_warn_alloc+0x10/0x10 [ 310.129935][T16978] ? kasan_save_track+0x3e/0x80 [ 310.129964][T16978] ? __kasan_kmalloc+0x93/0xb0 [ 310.129997][T16978] ? xsk_setsockopt+0x4dc/0x8d0 [ 310.130022][T16978] ? do_sock_setsockopt+0x17c/0x1b0 [ 310.130042][T16978] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 310.130063][T16978] ? do_syscall_64+0xfa/0xfa0 [ 310.130091][T16978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.130122][T16978] __vmalloc_node_range_noprof+0x125/0x12d0 [ 310.130191][T16978] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 310.130226][T16978] ? __kasan_kmalloc+0x93/0xb0 [ 310.130264][T16978] vmalloc_user_noprof+0xad/0xf0 [ 310.130307][T16978] ? xskq_create+0xbf/0x170 [ 310.130339][T16978] xskq_create+0xbf/0x170 [ 310.130371][T16978] xsk_init_queue+0xb0/0x110 [ 310.130401][T16978] xsk_setsockopt+0x4dc/0x8d0 [ 310.130433][T16978] ? __pfx_xsk_setsockopt+0x10/0x10 [ 310.130464][T16978] ? __pfx_aa_sk_perm+0x10/0x10 [ 310.130497][T16978] ? aa_sock_opt_perm+0xff/0x1b0 [ 310.130533][T16978] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 310.130554][T16978] ? __pfx_xsk_setsockopt+0x10/0x10 [ 310.130583][T16978] do_sock_setsockopt+0x17c/0x1b0 [ 310.130612][T16978] __x64_sys_setsockopt+0x13f/0x1b0 [ 310.130640][T16978] do_syscall_64+0xfa/0xfa0 [ 310.130669][T16978] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.130699][T16978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.130720][T16978] ? clear_bhb_loop+0x60/0xb0 [ 310.130746][T16978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.130768][T16978] RIP: 0033:0x7f283538f6c9 [ 310.130801][T16978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.130819][T16978] RSP: 002b:00007f283621c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 310.130843][T16978] RAX: ffffffffffffffda RBX: 00007f28355e5fa0 RCX: 00007f283538f6c9 [ 310.130859][T16978] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 310.130872][T16978] RBP: 00007f2835411f91 R08: 0000000000000004 R09: 0000000000000000 [ 310.130886][T16978] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.130898][T16978] R13: 00007f28355e6038 R14: 00007f28355e5fa0 R15: 00007ffe132ad058 [ 310.130936][T16978] [ 310.130951][T16978] Mem-Info: [ 310.451697][T16978] active_anon:5844 inactive_anon:0 isolated_anon:0 [ 310.451697][T16978] active_file:3081 inactive_file:39963 isolated_file:0 [ 310.451697][T16978] unevictable:768 dirty:252 writeback:0 [ 310.451697][T16978] slab_reclaimable:10799 slab_unreclaimable:99240 [ 310.451697][T16978] mapped:29195 shmem:1363 pagetables:1530 [ 310.451697][T16978] sec_pagetables:0 bounce:0 [ 310.451697][T16978] kernel_misc_reclaimable:0 [ 310.451697][T16978] free:1327046 free_pcp:14059 free_cma:0 [ 310.591329][T16978] Node 0 active_anon:23276kB inactive_anon:0kB active_file:12324kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116780kB dirty:1004kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13168kB pagetables:5688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 310.677366][T16978] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 310.760900][T16978] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.845825][T16978] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 310.851884][T16978] Node 0 DMA32 free:1400292kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23376kB inactive_anon:0kB active_file:12324kB inactive_file:159652kB unevictable:1536kB writepending:1004kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:38888kB local_pcp:18220kB free_cma:0kB [ 311.000160][T16978] lowmem_reserve[]: 0 0 0 0 0 [ 311.005624][T16978] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.065861][T16978] lowmem_reserve[]: 0 0 0 0 0 [ 311.100127][T16978] Node 1 Normal free:3893968kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15936kB local_pcp:6716kB free_cma:0kB [ 311.171499][T16978] lowmem_reserve[]: 0 0 0 0 0 [ 311.176498][T16978] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 311.192574][T16978] Node 0 DMA32: 201*4kB (UM) 1108*8kB (UME) 812*16kB (UME) 979*32kB (UME) 706*64kB (UM) 531*128kB (UME) 403*256kB (UM) 255*512kB (UM) 136*1024kB (UME) 4*2048kB (U) 208*4096kB (UM) = 1400292kB [ 311.254042][T16978] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.268921][T16978] Node 1 Normal: 212*4kB (UME) 58*8kB (UME) 51*16kB (UME) 116*32kB (UME) 36*64kB (UME) 8*128kB (UME) 7*256kB (UME) 2*512kB (M) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3893968kB [ 311.361547][T16978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.396292][T16978] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.421426][T16978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.437960][T17029] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 311.441389][T16978] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.446678][ T3197] IPVS: starting estimator thread 0... [ 311.495779][T16978] 44403 total pagecache pages [ 311.522235][T16978] 0 pages in swap cache [ 311.544193][T16978] Free swap = 124996kB [ 311.555866][T17032] IPVS: using max 28 ests per chain, 67200 per kthread [ 311.562963][T16978] Total swap = 124996kB [ 311.574130][T16978] 2097051 pages RAM [ 311.584277][T16978] 0 pages HighMem/MovableOnly [ 311.613058][T16978] 424119 pages reserved [ 311.628031][T16978] 0 pages cma reserved [ 312.467305][T17088] vlan3: entered promiscuous mode [ 312.474708][T17088] bridge0: entered promiscuous mode [ 312.697981][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5372'. [ 313.393967][T17136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5391'. [ 314.633360][T17210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5421'. [ 315.231274][T17240] macsec0: entered promiscuous mode [ 315.258620][T17240] macsec0: entered allmulticast mode [ 315.279397][T17240] veth1_macvtap: entered allmulticast mode [ 315.306082][T17240] macsec0: left promiscuous mode [ 315.311381][T17240] macsec0: left allmulticast mode [ 315.357459][T17240] veth1_macvtap: left allmulticast mode [ 316.666001][T17321] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5474'. [ 316.679194][T17323] tipc: MTU too low for tipc bearer [ 316.721108][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 317.310067][T17357] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5491'. [ 317.336026][T17357] xt_policy: neither incoming nor outgoing policy selected [ 317.585063][T17371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5498'. [ 317.894820][T17387] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5506'. [ 317.925805][T17387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5506'. [ 318.096307][T17398] vlan2: entered promiscuous mode [ 318.106411][T17398] gretap0: entered promiscuous mode [ 318.344207][T17410] netlink: 'syz.0.5517': attribute type 18 has an invalid length. [ 318.364565][ T61] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.396770][ T61] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.420855][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.445828][ T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.106348][T17440] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 319.121162][T17440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.290991][T17450] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5537'. [ 319.546430][T17465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5544'. [ 320.316901][T17505] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5563'. [ 321.453898][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5588'. [ 321.645929][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5591'. [ 321.651570][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5592'. [ 322.559809][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.565986][T17602] netlink: 'syz.2.5610': attribute type 1 has an invalid length. [ 322.567040][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.593041][T17602] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5610'. [ 322.882379][T17613] tipc: Started in network mode [ 322.895913][T17613] tipc: Node identity aaaaaaaaaa32, cluster identity 1 [ 322.926840][T17613] tipc: Enabled bearer , priority 10 [ 323.214589][T17626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5622'. [ 323.563189][T17640] "syz.4.5628" (17640) uses obsolete ecb(arc4) skcipher [ 323.858964][T17662] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5637'. [ 324.016066][ T5890] tipc: Node number set to 10005162 [ 324.053975][T17672] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5644'. [ 324.093101][T17675] netlink: 'syz.0.5643': attribute type 1 has an invalid length. [ 324.114848][T17676] netlink: 'syz.4.5645': attribute type 1 has an invalid length. [ 324.225293][T17678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.297043][T17686] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 324.400674][T17689] netlink: 'syz.0.5652': attribute type 11 has an invalid length. [ 324.410164][T17692] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5651'. [ 325.202861][T17736] sctp: [Deprecated]: syz.1.5675 (pid 17736) Use of int in max_burst socket option deprecated. [ 325.202861][T17736] Use struct sctp_assoc_value instead [ 325.350252][T17742] netlink: 'syz.0.5678': attribute type 1 has an invalid length. [ 326.214917][T17789] netlink: 'syz.3.5700': attribute type 4 has an invalid length. [ 326.287745][T17789] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5700'. [ 326.290827][T17793] sit3: entered promiscuous mode [ 326.304519][T17793] sit3: entered allmulticast mode [ 326.388801][T17798] netlink: 'syz.1.5704': attribute type 32 has an invalid length. [ 326.426091][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5704'. [ 326.491973][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5705'. [ 326.512456][T17798] bond5: Setting coupled_control to off (0) [ 326.978626][T17831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.770473][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5731'. [ 327.782676][T17856] netlink: 'syz.2.5731': attribute type 5 has an invalid length. [ 327.793028][T17856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5731'. [ 329.884355][T17975] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.5790'. [ 329.927343][T17975] openvswitch: netlink: Message has 6 unknown bytes. [ 330.292714][T17991] netem: change failed [ 331.432522][T18055] nbd: socks must be embedded in a SOCK_ITEM attr [ 331.789198][T18077] netlink: 'syz.0.5838': attribute type 3 has an invalid length. [ 334.114008][T18199] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5897'. [ 334.779111][T18241] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5919'. [ 336.155220][T18322] IPVS: Error connecting to the multicast addr [ 336.819500][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5977'. [ 337.537520][T18403] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5997'. [ 337.731838][T18411] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6002'. [ 337.808312][T18411] bond2 (unregistering): Released all slaves [ 338.621636][T18468] netlink: 18 bytes leftover after parsing attributes in process `syz.0.6028'. [ 338.896686][T18483] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6036'. [ 339.639520][T18528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6057'. [ 339.689862][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6057'. [ 339.747985][T18531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6057'. [ 340.551153][T18581] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6082'. [ 340.661916][T18585] netlink: 'syz.3.6083': attribute type 1 has an invalid length. [ 340.832888][T18594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6089'. [ 340.863397][T18599] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 340.991538][T18606] tipc: Enabling of bearer rejected, failed to enable media [ 342.908819][T18710] __nla_validate_parse: 1 callbacks suppressed [ 342.908839][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6140'. [ 342.941696][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6140'. [ 343.067769][T18720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6146'. [ 343.836481][T18764] netlink: 'syz.3.6165': attribute type 29 has an invalid length. [ 343.899678][T18767] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6168'. [ 344.880287][T18814] xt_l2tp: invalid flags combination: 0 [ 345.410063][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6209'. [ 345.569217][T18860] IPVS: ip_vs_edit_dest(): server weight less than zero [ 345.576956][T18858] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 345.577322][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'. [ 345.635476][T18863] netlink: 'syz.3.6215': attribute type 1 has an invalid length. [ 345.743326][T18869] netlink: 'syz.3.6218': attribute type 3 has an invalid length. [ 345.781322][T18871] netlink: 'syz.0.6219': attribute type 1 has an invalid length. [ 346.623595][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6235'. [ 347.737814][T18965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6261'. [ 347.785856][T18965] tipc: Invalid UDP bearer configuration [ 347.785920][T18965] tipc: Enabling of bearer rejected, failed to enable media [ 347.977309][T18977] netlink: 'syz.4.6266': attribute type 1 has an invalid length. [ 347.997732][T18977] netlink: 'syz.4.6266': attribute type 3 has an invalid length. [ 348.008595][T18977] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6266'. [ 348.858044][T19029] vlan3: entered allmulticast mode [ 348.863466][T19029] bridge_slave_0: entered allmulticast mode [ 349.127238][T19046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6300'. [ 349.587396][T19078] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.595564][T19078] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.603619][T19078] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.612000][T19078] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.620027][T19078] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.628036][T19078] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.636494][T19078] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.644465][T19078] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.652581][T19078] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.941452][T19095] netlink: 'syz.2.6322': attribute type 3 has an invalid length. [ 350.298690][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6333'. [ 350.316513][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6333'. [ 350.509891][T19124] tipc: Enabled bearer , priority 2 [ 350.510798][T19128] netlink: 'syz.0.6340': attribute type 1 has an invalid length. [ 350.631125][T19134] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6342'. [ 351.105410][T19164] net_ratelimit: 46 callbacks suppressed [ 351.105432][T19164] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 351.127846][T19164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.728601][T19190] netlink: 'syz.1.6370': attribute type 1 has an invalid length. [ 351.767916][T19190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6370'. [ 352.165003][T19219] sock: sock_set_timeout: `syz.3.6383' (pid 19219) tries to set negative timeout [ 352.372913][T19228] netlink: zone id is out of range [ 352.390862][T19228] netlink: zone id is out of range [ 352.399165][T19228] netlink: set zone limit has 8 unknown bytes [ 352.462482][T19234] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6390'. [ 352.553745][T19237] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6391'. [ 352.733914][T19244] xt_l2tp: missing protocol rule (udp|l2tpip) [ 354.147142][T19311] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6421'. [ 354.173890][T19311] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6421'. [ 354.212952][T19311] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6421'. [ 354.263091][T19311] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6421'. [ 354.315863][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 354.623106][T19339] netlink: 'syz.4.6432': attribute type 83 has an invalid length. [ 356.322955][T19435] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6468'. [ 357.118731][T19477] netlink: 'syz.4.6484': attribute type 1 has an invalid length. [ 357.146708][T19477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.252009][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6503'. [ 358.628753][T19548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6511'. [ 358.918136][T19567] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6519'. [ 358.954817][T19567] erspan0: entered promiscuous mode [ 359.215103][T19583] netlink: 'syz.3.6524': attribute type 1 has an invalid length. [ 359.226678][T19583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6524'. [ 359.387807][T19589] sctp: [Deprecated]: syz.4.6526 (pid 19589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.387807][T19589] Use struct sctp_sack_info instead [ 359.857712][T19607] nbd0: detected capacity change from 0 to 127 [ 359.898085][ T5847] block nbd0: Receive control failed (result -104) [ 360.754775][T19670] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6556'. [ 360.808914][T19670] netem: invalid attributes len -24 [ 360.814535][T19670] netem: change failed [ 361.143724][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6565'. [ 361.155225][T19689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6565'. [ 361.733626][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6580'. [ 361.891069][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6586'. [ 362.301447][T19761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6596'. [ 362.333378][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6596'. [ 362.829445][T19784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.843614][T19784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 363.009137][T19784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.024999][T19784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 363.159703][T19784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.184380][T19784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 363.289665][T19811] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6620'. [ 363.303698][T19784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.315690][T19784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 363.443309][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.474838][ T61] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.543239][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.562170][ T61] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.579605][T19822] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6624'. [ 363.610521][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.635800][ T61] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.687636][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.709735][ T37] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 364.249168][T19858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6643'. [ 364.322040][T19854] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.329526][T19854] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.369226][T19854] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 364.694731][T19877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6652'. [ 364.890657][T19884] netlink: 'syz.0.6657': attribute type 83 has an invalid length. [ 365.554367][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6676'. [ 365.918496][T19946] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6685'. [ 365.960700][T19950] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6688'. [ 366.640535][T19991] block nbd2: not configured, cannot reconfigure [ 366.644016][T19992] netlink: 'syz.0.6709': attribute type 9 has an invalid length. [ 366.676433][T19992] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6709'. [ 367.332726][T20026] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6725'. [ 367.355992][T20026] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6725'. [ 367.506847][T20037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6731'. [ 367.909901][T20054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6739'. [ 369.854435][T20159] netlink: 'syz.3.6785': attribute type 8 has an invalid length. [ 370.205104][T20172] __nla_validate_parse: 4 callbacks suppressed [ 370.205123][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6792'. [ 370.304002][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6795'. [ 371.098770][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6815'. [ 371.622117][T20253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6831'. [ 371.699805][T20256] bridge3: entered promiscuous mode [ 371.720405][T20256] bridge3: entered allmulticast mode [ 372.287865][T20289] netlink: 'syz.2.6846': attribute type 58 has an invalid length. [ 372.307183][T20290] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6847'. [ 372.317556][T20289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6846'. [ 372.917015][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6864'. [ 372.935514][T20324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6864'. [ 373.183608][T20340] ªªªªªªZ7nz>RAÌ: renamed from lo (while UP) [ 373.414496][T20350] netlink: 'syz.2.6875': attribute type 83 has an invalid length. [ 373.608082][T20360] team0: Mode changed to "activebackup" [ 374.287012][T20404] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6900'. [ 375.058076][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6921'. [ 376.681295][T20544] bridge_slave_0: invalid flags given to default FDB implementation [ 377.847324][T20613] netlink: 'syz.3.6996': attribute type 83 has an invalid length. [ 377.853433][T20616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6994'. [ 377.895091][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6998'. [ 378.735233][T20674] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7017'. [ 381.098111][T20779] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 381.136443][T20779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.211698][T20787] netlink: 'syz.4.7069': attribute type 2 has an invalid length. [ 381.220037][T20787] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7069'. [ 381.761144][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7085'. [ 381.775312][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7085'. [ 381.816222][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7085'. [ 381.830199][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7085'. [ 382.280927][T20851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7099'. [ 383.953108][T20932] netlink: 'syz.4.7137': attribute type 18 has an invalid length. [ 384.000674][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.009745][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.010871][T20937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7139'. [ 384.213833][T20949] netlink: 'syz.1.7145': attribute type 4 has an invalid length. [ 384.327063][T20957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7148'. [ 384.543043][T20967] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7154'. [ 384.575177][T20967] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7154'. [ 384.702675][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7156'. [ 384.886799][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7164'. [ 385.197327][T21004] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 385.397660][T21016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7178'. [ 386.244620][T21063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7202'. [ 386.345127][T21072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7206'. [ 386.625057][T21090] netlink: 'syz.2.7215': attribute type 29 has an invalid length. [ 386.637537][T21090] netlink: 'syz.2.7215': attribute type 29 has an invalid length. [ 386.668748][T21090] netlink: 'syz.2.7215': attribute type 29 has an invalid length. [ 386.678303][T21090] netlink: 'syz.2.7215': attribute type 29 has an invalid length. [ 387.602690][T21129] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7232'. [ 388.169398][T21162] netlink: 'syz.0.7245': attribute type 6 has an invalid length. [ 389.383251][T21230] netlink: 'syz.2.7279': attribute type 5 has an invalid length. [ 389.667183][T21238] __nla_validate_parse: 5 callbacks suppressed [ 389.667207][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7281'. [ 389.698953][T21238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7281'. [ 390.130161][T21268] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7296'. [ 390.195580][T21270] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7297'. [ 390.283891][T21277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7301'. [ 390.350085][T21278] erspan0: entered promiscuous mode [ 390.378518][T21281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7303'. [ 390.680626][T21298] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7311'. [ 390.954134][T21317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7320'. [ 391.069109][T21322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7322'. [ 392.390559][T21400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7357'. [ 393.804047][T21476] netlink: 'syz.4.7391': attribute type 32 has an invalid length. [ 394.005285][T21483] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 394.022489][T21494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.029867][T21494] IPv6: NLM_F_CREATE should be set when creating new route [ 394.037176][T21494] IPv6: NLM_F_CREATE should be set when creating new route [ 394.047861][T21494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.060141][T21483] bond0 (unregistering): Released all slaves [ 395.007289][T21536] netem: unknown loss type 0 [ 395.026641][T21536] netem: change failed [ 395.239469][T21546] __nla_validate_parse: 1 callbacks suppressed [ 395.239492][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7423'. [ 395.617841][T21572] tun0: tun_chr_ioctl cmd 1074025675 [ 395.623404][T21572] tun0: persist disabled [ 395.821258][T21584] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 395.972367][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7444'. [ 396.074103][T21594] macvtap1: entered promiscuous mode [ 396.082723][T21594] vlan0: entered promiscuous mode [ 396.094197][T21594] macvtap1: entered allmulticast mode [ 396.101705][T21594] vlan0: entered allmulticast mode [ 396.107461][T21594] veth0_vlan: entered allmulticast mode [ 396.130810][T21599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7446'. [ 396.794823][T21633] macvtap1: entered allmulticast mode [ 396.805458][T21633] veth0_macvtap: entered allmulticast mode [ 397.142581][T21651] netlink: 340 bytes leftover after parsing attributes in process `syz.2.7472'. [ 397.179530][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7474'. [ 397.189613][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7474'. [ 397.349398][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7477'. [ 397.449764][T21667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7480'. [ 397.589647][T21675] veth0: entered promiscuous mode [ 397.609571][T21674] veth0: left promiscuous mode [ 397.959511][T21694] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7491'. [ 398.102328][T21707] netlink: 'syz.3.7498': attribute type 21 has an invalid length. [ 398.115824][T21707] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7498'. [ 398.138114][T21707] netlink: 'syz.3.7498': attribute type 4 has an invalid length. [ 398.169545][T21707] netlink: 'syz.3.7498': attribute type 5 has an invalid length. [ 398.179160][T21711] netlink: 'syz.3.7498': attribute type 21 has an invalid length. [ 398.188055][T21711] netlink: 'syz.3.7498': attribute type 4 has an invalid length. [ 398.196966][T21711] netlink: 'syz.3.7498': attribute type 5 has an invalid length. [ 398.378256][T21722] Cannot find del_set index 49151 as target [ 399.141907][T21716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.153431][T21716] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 399.210906][T21716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 399.246417][T21716] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 399.277224][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 399.334188][T21716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.350514][T21716] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 399.390117][T21716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.429050][T21716] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 399.449938][T21768] tap0: tun_chr_ioctl cmd 2148553947 [ 399.505366][T21716] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 399.524062][T21716] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 400.091629][T21798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.370794][T21814] sch_fq: defrate 0 ignored. [ 400.973389][T21849] __nla_validate_parse: 5 callbacks suppressed [ 400.973409][T21849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7548'. [ 401.272279][T21860] sctp: [Deprecated]: syz.3.7552 (pid 21860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.272279][T21860] Use struct sctp_sack_info instead [ 403.171367][T21952] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7587'. [ 403.214607][T21952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 403.716753][T21984] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7597'. [ 404.818569][T22048] netlink: 'syz.1.7623': attribute type 5 has an invalid length. [ 405.485844][T22086] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7639'. [ 405.687679][T22100] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7645'. [ 406.447214][T22145] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7661'. [ 407.681818][T22205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7682'. [ 407.691035][T22205] block nbd1: Unsupported socket: should be TCP or UNIX. [ 408.181581][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7694'. [ 408.248657][T22233] netlink: 'syz.3.7694': attribute type 30 has an invalid length. [ 408.272986][T22235] bridge0: port 3(batadv1) entered blocking state [ 408.283503][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7694'. [ 408.299716][T22235] bridge0: port 3(batadv1) entered disabled state [ 408.310292][T22235] batadv1: entered allmulticast mode [ 408.324252][T22235] batadv1: entered promiscuous mode [ 408.564355][T22249] tap0: tun_chr_ioctl cmd 1074025678 [ 408.578379][T22254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7702'. [ 408.598560][T22249] tap0: group set to 0 [ 408.758427][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 408.767857][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 409.359329][T22294] netem: incorrect gi model size [ 409.379784][T22294] netem: change failed [ 409.763160][T22316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7723'. [ 409.891816][T22325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7726'. [ 411.317423][T22399] netlink: 165 bytes leftover after parsing attributes in process `syz.4.7752'. [ 412.049627][T22448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7772'. [ 413.224535][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7799'. [ 414.364158][T22566] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7828'. [ 414.956831][T22594] netlink: 'syz.4.7842': attribute type 9 has an invalid length. [ 416.289971][T22645] netlink: 'syz.1.7866': attribute type 83 has an invalid length. [ 416.443706][T22650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7867'. [ 416.597454][T22658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7871'. [ 416.683350][T22664] tap0: tun_chr_ioctl cmd 1074025676 [ 416.702294][T22664] tap0: owner set to 0 [ 416.937617][T22678] syz.3.7881: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.953932][T22678] CPU: 0 UID: 0 PID: 22678 Comm: syz.3.7881 Not tainted syzkaller #0 PREEMPT(full) [ 416.953975][T22678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.953990][T22678] Call Trace: [ 416.953999][T22678] [ 416.954009][T22678] dump_stack_lvl+0x189/0x250 [ 416.954051][T22678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.954082][T22678] ? __pfx__printk+0x10/0x10 [ 416.954106][T22678] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.954136][T22678] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.954169][T22678] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 416.954203][T22678] warn_alloc+0x214/0x310 [ 416.954235][T22678] ? stack_depot_save_flags+0x40/0x860 [ 416.954287][T22678] ? __pfx_warn_alloc+0x10/0x10 [ 416.954321][T22678] ? kasan_save_track+0x3e/0x80 [ 416.954351][T22678] ? __kasan_kmalloc+0x93/0xb0 [ 416.954384][T22678] ? xsk_setsockopt+0x4dc/0x8d0 [ 416.954410][T22678] ? do_sock_setsockopt+0x17c/0x1b0 [ 416.954430][T22678] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 416.954450][T22678] ? do_syscall_64+0xfa/0xfa0 [ 416.954480][T22678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.954512][T22678] __vmalloc_node_range_noprof+0x125/0x12d0 [ 416.954585][T22678] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 416.954622][T22678] ? __kasan_kmalloc+0x93/0xb0 [ 416.954662][T22678] vmalloc_user_noprof+0xad/0xf0 [ 416.954695][T22678] ? xskq_create+0xbf/0x170 [ 416.954725][T22678] xskq_create+0xbf/0x170 [ 416.954758][T22678] xsk_init_queue+0xb0/0x110 [ 416.954790][T22678] xsk_setsockopt+0x4dc/0x8d0 [ 416.954820][T22678] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.954850][T22678] ? __pfx_aa_sk_perm+0x10/0x10 [ 416.954884][T22678] ? aa_sock_opt_perm+0xff/0x1b0 [ 416.954922][T22678] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 416.954943][T22678] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.954972][T22678] do_sock_setsockopt+0x17c/0x1b0 [ 416.954999][T22678] __x64_sys_setsockopt+0x13f/0x1b0 [ 416.955029][T22678] do_syscall_64+0xfa/0xfa0 [ 416.955058][T22678] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.955088][T22678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.955109][T22678] ? clear_bhb_loop+0x60/0xb0 [ 416.955136][T22678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.955157][T22678] RIP: 0033:0x7f283538f6c9 [ 416.955178][T22678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.955198][T22678] RSP: 002b:00007f283621c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.955222][T22678] RAX: ffffffffffffffda RBX: 00007f28355e5fa0 RCX: 00007f283538f6c9 [ 416.955238][T22678] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 416.955251][T22678] RBP: 00007f2835411f91 R08: 0000000000000004 R09: 0000000000000000 [ 416.955273][T22678] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.955286][T22678] R13: 00007f28355e6038 R14: 00007f28355e5fa0 R15: 00007ffe132ad058 [ 416.955324][T22678] [ 416.955417][T22678] Mem-Info: [ 417.260276][T22678] active_anon:5566 inactive_anon:0 isolated_anon:0 [ 417.260276][T22678] active_file:3081 inactive_file:40006 isolated_file:0 [ 417.260276][T22678] unevictable:768 dirty:301 writeback:0 [ 417.260276][T22678] slab_reclaimable:11399 slab_unreclaimable:102486 [ 417.260276][T22678] mapped:29099 shmem:1364 pagetables:1493 [ 417.260276][T22678] sec_pagetables:0 bounce:0 [ 417.260276][T22678] kernel_misc_reclaimable:0 [ 417.260276][T22678] free:1321300 free_pcp:14417 free_cma:0 [ 417.341451][T22678] Node 0 active_anon:22464kB inactive_anon:0kB active_file:12324kB inactive_file:159824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116296kB dirty:1204kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13196kB pagetables:5644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.415549][T22678] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.458368][T22678] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.535718][T22678] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 417.541569][T22678] Node 0 DMA32 free:1374752kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22364kB inactive_anon:0kB active_file:12324kB inactive_file:159824kB unevictable:1536kB writepending:1204kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:43116kB local_pcp:21180kB free_cma:0kB [ 417.626610][T22678] lowmem_reserve[]: 0 0 0 0 0 [ 417.648005][T22678] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.666961][T22706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7893'. [ 417.703054][T22678] lowmem_reserve[]: 0 0 0 0 0 [ 417.709101][T22678] Node 1 Normal free:3895532kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14376kB local_pcp:8448kB free_cma:0kB [ 417.757496][T22678] lowmem_reserve[]: 0 0 0 0 0 [ 417.762410][T22678] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 417.815762][T22678] Node 0 DMA32: 887*4kB (UME) 555*8kB (UME) 789*16kB (UME) 479*32kB (UME) 771*64kB (UME) 529*128kB (UME) 407*256kB (UME) 259*512kB (UM) 127*1024kB (UM) 3*2048kB (UME) 207*4096kB (UM) = 1373860kB [ 417.882444][T22678] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 417.951903][T22678] Node 1 Normal: 213*4kB (UME) 59*8kB (UME) 52*16kB (UME) 148*32kB (UME) 42*64kB (UME) 9*128kB (UME) 7*256kB (UME) 2*512kB (M) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3895532kB [ 417.984983][T22678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.013780][T22678] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.044529][T22678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.087714][T22678] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.110554][T22678] 44447 total pagecache pages [ 418.115317][T22678] 0 pages in swap cache [ 418.122164][T22678] Free swap = 124996kB [ 418.127482][T22678] Total swap = 124996kB [ 418.131792][T22678] 2097051 pages RAM [ 418.136405][T22678] 0 pages HighMem/MovableOnly [ 418.141212][T22678] 424119 pages reserved [ 418.145525][T22678] 0 pages cma reserved [ 418.326995][T22733] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7906'. [ 418.493482][T22743] netlink: 284 bytes leftover after parsing attributes in process `syz.4.7912'. [ 418.654001][T22749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7914'. [ 418.701758][T22754] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7915'. [ 418.989287][T22772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7925'. [ 419.111843][T22779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7928'. [ 419.131455][T22780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7926'. [ 419.181883][T22779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7928'. [ 419.507022][T22803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7939'. [ 419.606693][ T30] audit: type=1107 audit(1762823625.274:2): pid=22804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 419.724468][T22812] netlink: 'syz.3.7941': attribute type 10 has an invalid length. [ 421.506408][T22910] raw_sendmsg: syz.0.7988 forgot to set AF_INET. Fix it! [ 421.588312][T22912] block nbd1: server does not support multiple connections per device. [ 421.602118][T22912] block nbd1: shutting down sockets [ 422.633706][T22976] gtp0: entered promiscuous mode [ 422.658631][T22976] gtp0: entered allmulticast mode [ 422.918589][T22988] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.989609][T23001] __nla_validate_parse: 5 callbacks suppressed [ 422.989632][T23001] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8030'. [ 423.145372][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8031'. [ 423.188709][T23005] vlan4: entered allmulticast mode [ 423.193908][T23005] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 423.227157][T23012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8032'. [ 423.270924][T23014] syzkaller1: entered promiscuous mode [ 423.294642][T23014] syzkaller1: entered allmulticast mode [ 423.890795][T23038] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 424.607183][T23078] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8061'. [ 424.681849][ T5200] udevd[5200]: worker [19613] /devices/virtual/block/nbd0 is taking a long time [ 424.974031][T23096] bond0: entered promiscuous mode [ 425.001784][T23096] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 425.048860][T23096] bond0: left promiscuous mode [ 425.075341][T23096] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 425.252878][T23099] syzkaller1: entered promiscuous mode [ 425.260982][T23099] syzkaller1: entered allmulticast mode [ 425.303136][T23117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8078'. [ 425.334391][T23117] netlink: 'syz.4.8078': attribute type 7 has an invalid length. [ 425.350315][T23117] netlink: 'syz.4.8078': attribute type 8 has an invalid length. [ 425.366531][T23117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8078'. [ 425.611010][T23129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8086'. [ 425.635913][T23129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8086'. [ 426.006983][T23154] syzkaller1: entered promiscuous mode [ 426.012648][T23154] syzkaller1: entered allmulticast mode [ 426.022744][T23154] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 426.134731][T23157] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.8097'. [ 426.363416][T23169] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.8102'. [ 426.642221][T23185] syzkaller1: entered promiscuous mode [ 426.648558][T23185] syzkaller1: entered allmulticast mode [ 426.874108][T23194] bond0: entered promiscuous mode [ 426.890324][T23194] batadv0: entered promiscuous mode [ 426.899274][T23194] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 426.909690][T23194] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 426.921167][T23194] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 427.069313][T23203] tipc: Started in network mode [ 427.079207][T23203] tipc: Node identity e0000001, cluster identity 4711 [ 427.088432][T23203] tipc: Enabling of bearer rejected, failed to enable media [ 427.357228][T23220] smc: net device gre0 applied user defined pnetid SYZ1 [ 427.384722][T23220] smc: net device gre0 erased user defined pnetid SYZ1 [ 427.418442][T23223] batadv_slave_0: entered allmulticast mode [ 427.445604][T23223] batadv_slave_0: left allmulticast mode [ 427.498203][T23227] syzkaller1: entered promiscuous mode [ 427.516126][T23227] syzkaller1: entered allmulticast mode [ 427.605326][T23230] veth0: entered promiscuous mode [ 427.613371][T23229] veth0: left promiscuous mode [ 428.246126][T23269] netlink: 'syz.2.8149': attribute type 11 has an invalid length. [ 429.204426][T23330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8175'. [ 429.468182][T23347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8181'. [ 429.653749][T23352] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8183'. [ 429.781653][T23356] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8184'. [ 430.389868][T23382] netlink: 'syz.1.8197': attribute type 29 has an invalid length. [ 430.399074][T23382] netlink: 'syz.1.8197': attribute type 29 has an invalid length. [ 430.417440][T23382] netlink: 500 bytes leftover after parsing attributes in process `syz.1.8197'. [ 430.457932][T23384] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8198'. [ 430.610191][T23396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8199'. [ 431.480991][ T30] audit: type=1800 audit(1762823637.164:3): pid=23425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8212" name="memory.events" dev="tmpfs" ino=8278 res=0 errno=0 [ 431.682703][T23440] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 432.247603][T23471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8237'. [ 432.276658][T23477] vxcan1: tx address claim with different name [ 432.394058][T23484] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 432.515559][T23488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8244'. [ 432.600607][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8246'. [ 433.088500][T23522] batadv_slave_1: entered promiscuous mode [ 433.123905][T23516] batadv_slave_1: left promiscuous mode [ 433.436421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.448950][T12117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.636349][T23547] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 433.796539][T23557] netlink: 'syz.2.8276': attribute type 7 has an invalid length. [ 433.814854][T23557] netlink: 'syz.2.8276': attribute type 8 has an invalid length. [ 433.837274][T23555] netlink: 'syz.3.8277': attribute type 1 has an invalid length. [ 433.852435][T23555] netlink: 'syz.3.8277': attribute type 2 has an invalid length. [ 433.908123][T23557] gretap0: entered promiscuous mode [ 433.922363][T23557] batadv_slave_1: entered promiscuous mode [ 433.956734][T23557] gretap0: left promiscuous mode [ 433.991892][T23557] batadv_slave_1: left promiscuous mode [ 434.303558][T23577] __nla_validate_parse: 7 callbacks suppressed [ 434.303578][T23577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8286'. [ 434.476373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.484615][T12117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.627882][T23598] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8296'. [ 435.106247][T23623] netlink: 'syz.2.8308': attribute type 12 has an invalid length. [ 435.118772][T23623] netlink: 'syz.2.8308': attribute type 29 has an invalid length. [ 435.128410][T23623] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8308'. [ 435.141352][T23623] netlink: 'syz.2.8308': attribute type 2 has an invalid length. [ 435.152485][T23623] netlink: 23 bytes leftover after parsing attributes in process `syz.2.8308'. [ 435.300680][T23632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8312'. [ 435.310930][T23632] netlink: 'syz.3.8312': attribute type 7 has an invalid length. [ 435.319873][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8312'. [ 435.433477][T23637] validate_nla: 1 callbacks suppressed [ 435.433497][T23637] netlink: 'syz.3.8314': attribute type 63 has an invalid length. [ 435.483330][T23637] netlink: 'syz.3.8314': attribute type 63 has an invalid length. [ 435.516467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.526433][T12117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.830083][T23657] bridge3: entered promiscuous mode [ 435.839654][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.848976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.857867][T23657] bridge3: entered allmulticast mode [ 435.869753][T23657] team0: Port device bridge3 added [ 435.879088][T23659] bridge0: port 1(team0) entered blocking state [ 435.899956][T23659] bridge0: port 1(team0) entered disabled state [ 435.909672][T23659] team0: entered allmulticast mode [ 435.921481][T23659] team0: entered promiscuous mode [ 435.927392][T23659] veth0_virt_wifi: entered promiscuous mode [ 436.166548][T23675] sctp: [Deprecated]: syz.3.8329 (pid 23675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.166548][T23675] Use struct sctp_sack_info instead [ 436.441338][T23689] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8333'. [ 436.454932][T23689] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8333'. [ 436.556240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.564396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.155300][T23729] netlink: 'syz.1.8353': attribute type 4 has an invalid length. [ 437.591056][T23760] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8366'. [ 437.806906][T23772] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8374'. [ 438.533620][T23816] gretap2: left promiscuous mode [ 438.561109][T23816] bond1: left promiscuous mode [ 438.636311][ C0] net_ratelimit: 5 callbacks suppressed [ 438.636334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.650340][T12117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.249301][T23853] IPVS: sh: FWM 3 0x00000003 - no destination available [ 439.284462][T23853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.293939][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 439.573091][T23872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.589821][T23872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.606632][T23872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.616866][T23872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.628171][T23872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.780754][T23883] sctp: [Deprecated]: syz.1.8420 (pid 23883) Use of int in max_burst socket option. [ 439.780754][T23883] Use struct sctp_assoc_value instead [ 439.897848][T23889] bridge0: port 1(syz_tun) entered blocking state [ 439.904570][T23889] bridge0: port 1(syz_tun) entered disabled state [ 439.917285][T23889] syz_tun: entered allmulticast mode [ 439.937041][T23889] syz_tun: entered promiscuous mode [ 439.943962][T23893] nbd: device at index 1 is going down [ 440.192392][T20192] udevd[20192]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 440.284197][T23909] __nla_validate_parse: 2 callbacks suppressed [ 440.284219][T23909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8431'. [ 440.369809][T23906] syzkaller1: entered promiscuous mode [ 440.382247][T23906] syzkaller1: entered allmulticast mode [ 441.298423][T23965] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.8456'. [ 441.452897][T23971] bridge_slave_0: left allmulticast mode [ 441.474523][T23971] bridge_slave_0: left promiscuous mode [ 441.491906][T23971] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.587145][T23971] bridge_slave_1: left allmulticast mode [ 441.596350][T23971] bridge_slave_1: left promiscuous mode [ 441.602228][T23971] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.620272][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8466'. [ 441.637134][T23971] bond0: (slave bond_slave_0): Releasing backup interface [ 441.664313][T23971] bond0: (slave bond_slave_1): Releasing backup interface [ 441.698078][T23971] team0: Port device team_slave_0 removed [ 441.727753][T23971] team0: Port device team_slave_1 removed [ 441.734017][T23971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.750991][T23971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.232113][T24016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8481'. [ 442.452048][T24027] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8479'. [ 442.575226][T24037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8488'. [ 443.333358][T24083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8510'. [ 443.611657][T24098] syzkaller1: entered promiscuous mode [ 443.617833][T24098] syzkaller1: entered allmulticast mode [ 443.836463][ C0] net_ratelimit: 17 callbacks suppressed [ 443.836484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.851488][T24103] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.851604][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.821385][T24159] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 444.876418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.884606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.959336][T24168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8548'. [ 444.969747][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8548'. [ 445.441321][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.454063][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.726912][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8567'. [ 445.791159][ T5847] block nbd2: Receive control failed (result -107) [ 445.821755][T24216] syzkaller1: entered promiscuous mode [ 445.827858][T24216] syzkaller1: entered allmulticast mode [ 445.916292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.925323][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.965188][T24221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8573'. [ 445.976786][T24221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8573'. [ 446.023252][T24224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8574'. [ 446.046934][T24224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8574'. [ 446.470066][T24252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.511698][T24252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.526980][T24252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.031035][T24280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8600'. [ 447.521616][T24309] netlink: 'syz.3.8613': attribute type 1 has an invalid length. [ 447.545777][T24309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8613'. [ 447.812833][T24325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8621'. [ 448.009628][T24341] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8629'. [ 448.317681][T24360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8638'. [ 449.228343][T24414] tunl0: entered promiscuous mode [ 449.314650][T24418] dvmrp6: entered allmulticast mode [ 449.322493][T24420] sctp: [Deprecated]: syz.4.8664 (pid 24420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.322493][T24420] Use struct sctp_sack_info instead [ 449.793784][T24442] xt_CT: No such helper "pptp" [ 449.800279][T24448] gretap0: entered promiscuous mode [ 449.862632][T24449] syzkaller1: entered promiscuous mode [ 449.894868][T24449] syzkaller1: entered allmulticast mode [ 449.957068][T24451] 0ªî{X¹¦: renamed from gretap0 [ 449.966358][T24451] 0ªî{X¹¦: left promiscuous mode [ 449.978782][T24451] net_ratelimit: 12 callbacks suppressed [ 449.978800][T24451] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 450.372132][T24479] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 450.412509][T24479] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 450.434870][T24479] gretap1: entered promiscuous mode [ 450.453616][T24479] gretap1: entered allmulticast mode [ 451.403806][T24537] __nla_validate_parse: 6 callbacks suppressed [ 451.403830][T24537] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8717'. [ 451.522676][T24543] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8719'. [ 452.472529][T24601] syzkaller1: entered promiscuous mode [ 452.479549][T24601] syzkaller1: entered allmulticast mode [ 453.252111][T24638] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.500581][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8756'. [ 453.936721][T24678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8767'. [ 454.531734][T24716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8784'. [ 454.542478][T24716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8784'. [ 454.549194][T24718] netlink: 71 bytes leftover after parsing attributes in process `syz.3.8785'. [ 454.564482][T24716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8784'. [ 454.574058][T24716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8784'. [ 454.732068][T24724] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8788'. [ 455.528044][T24775] netlink: 'syz.0.8813': attribute type 4 has an invalid length. [ 455.650030][T24780] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 455.691110][T24780] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.763555][T24783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.820453][T24780] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 455.849002][T24780] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.970023][T24780] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 456.015880][T24780] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 456.097873][T24799] pim6reg1: entered promiscuous mode [ 456.128650][T24799] pim6reg1: entered allmulticast mode [ 456.168686][T24801] netlink: 'syz.1.8825': attribute type 1 has an invalid length. [ 456.196438][T24801] netlink: 'syz.1.8825': attribute type 2 has an invalid length. [ 456.220667][T24780] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 456.237876][T24780] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 456.403647][T24811] netlink: 'syz.1.8830': attribute type 39 has an invalid length. [ 456.534274][T24817] __nla_validate_parse: 2 callbacks suppressed [ 456.534298][T24817] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8833'. [ 456.577967][T24817] gretap0: entered promiscuous mode [ 456.644577][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 456.661114][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.689060][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 456.701688][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.779886][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 456.790018][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.808578][T24828] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.8838'. [ 456.827488][ T1335] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 456.836445][ T1335] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 457.377753][T24859] syzkaller1: entered promiscuous mode [ 457.383446][T24859] syzkaller1: entered allmulticast mode [ 457.694242][T24879] netlink: 'syz.4.8859': attribute type 4 has an invalid length. [ 457.770771][T24879] netlink: 'syz.4.8859': attribute type 4 has an invalid length. [ 458.269995][T24913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8874'. [ 458.279687][T24913] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8874'. [ 458.344638][T24915] team0 (unregistering): Port device team_slave_0 removed [ 458.398466][T24915] team0 (unregistering): Port device team_slave_1 removed [ 458.600121][T24924] nbd3: detected capacity change from 0 to 63 [ 458.609634][ T5847] block nbd3: Receive control failed (result -104) [ 459.245592][T24966] netlink: 'syz.3.8898': attribute type 1 has an invalid length. [ 459.358588][T24970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.369271][T24970] bond2: (slave bond3): making interface the new active one [ 459.378372][T24970] bond2: (slave bond3): Enslaving as an active interface with an up link [ 459.521778][T24977] netlink: 'syz.0.8902': attribute type 4 has an invalid length. [ 460.018683][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8914'. [ 460.046143][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8914'. [ 460.867530][T25053] trusted_key: syz.3.8932 sent an empty control message without MSG_MORE. [ 461.103259][T25067] netlink: 'syz.4.8936': attribute type 11 has an invalid length. [ 461.532249][T25093] pim6reg1: entered promiscuous mode [ 461.538476][T25093] pim6reg1: entered allmulticast mode [ 463.455527][T25164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8975'. [ 463.469389][T25166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8976'. [ 463.485827][T25164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8975'. [ 463.494856][T25164] netlink: 'syz.4.8975': attribute type 20 has an invalid length. [ 463.524762][T25166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8976'. [ 463.533675][T25164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8975'. [ 463.542943][T25164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8975'. [ 463.593565][T25164] netlink: 'syz.4.8975': attribute type 20 has an invalid length. [ 464.043481][T25198] pim6reg1: entered promiscuous mode [ 464.053830][T25198] pim6reg1: entered allmulticast mode [ 464.493107][T25220] macvtap2: entered promiscuous mode [ 464.501288][T25220] vlan0: entered promiscuous mode [ 464.507823][T25220] macvtap2: entered allmulticast mode [ 464.513406][T25220] vlan0: entered allmulticast mode [ 464.520306][T25220] veth0_vlan: entered allmulticast mode [ 464.553627][T25220] macvtap3: entered promiscuous mode [ 464.559298][T25220] macvtap3: entered allmulticast mode [ 464.605591][T25224] batadv_slave_1: entered promiscuous mode [ 464.617251][T25223] batadv_slave_1: left promiscuous mode [ 464.947471][T25244] netlink: 'syz.0.9010': attribute type 10 has an invalid length. [ 464.966652][T25243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.787902][T25287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9030'. [ 465.797846][T25287] syz_tun: left allmulticast mode [ 465.803046][T25287] syz_tun: left promiscuous mode [ 465.816199][T25287] bridge0: port 1(syz_tun) entered disabled state [ 465.826773][T25294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9032'. [ 465.879189][T25298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9034'. [ 465.912038][T25298] ip6gre1: entered promiscuous mode [ 465.919050][T25298] ip6gre1: entered allmulticast mode [ 467.121011][T25363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9064'. [ 467.383772][T25380] netlink: 'syz.0.9072': attribute type 29 has an invalid length. [ 467.396803][T25380] netlink: 'syz.0.9072': attribute type 29 has an invalid length. [ 468.825126][T25442] netlink: 'syz.1.9095': attribute type 10 has an invalid length. [ 468.833362][T25442] __nla_validate_parse: 1 callbacks suppressed [ 468.833388][T25442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9095'. [ 468.866358][T25442] dummy0: entered promiscuous mode [ 468.901742][T25442] team0: Port device dummy0 removed [ 468.913361][T25442] bridge0: port 4(dummy0) entered blocking state [ 468.921453][T25442] bridge0: port 4(dummy0) entered disabled state [ 468.928793][T25442] dummy0: entered allmulticast mode [ 469.130429][T25452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9098'. [ 469.299771][T25449] syzkaller1: entered promiscuous mode [ 469.306010][T25449] syzkaller1: entered allmulticast mode [ 469.603307][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9107'. [ 469.871249][T25489] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 469.942493][T25496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9116'. [ 472.029115][T25562] netlink: 'syz.0.9142': attribute type 1 has an invalid length. [ 472.046919][T25562] netlink: 'syz.0.9142': attribute type 2 has an invalid length. [ 472.100118][T25563] netlink: 'syz.0.9142': attribute type 1 has an invalid length. [ 472.137318][T25563] netlink: 'syz.0.9142': attribute type 2 has an invalid length. [ 472.493955][T25569] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 472.524161][T25577] xt_bpf: check failed: parse error [ 472.735554][T25584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9150'. [ 472.770660][T25584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9150'. [ 472.775752][ T1335] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.807152][ T1335] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.828018][ T1335] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.854904][ T1335] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.075535][T25604] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9158'. [ 473.317571][T25616] xt_hashlimit: size too large, truncated to 1048576 [ 473.548791][T25631] blkio.reset_stats is deprecated [ 473.778201][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9176'. [ 473.788147][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9176'. [ 474.503406][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9194'. [ 474.513018][T25680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9194'. [ 474.526658][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9194'. [ 474.538072][T25680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9194'. [ 474.915277][T25698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9204'. [ 475.190014][T25714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9210'. [ 475.348438][T25725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9216'. [ 475.477053][T25729] netlink: 'syz.4.9217': attribute type 1 has an invalid length. [ 475.775139][T25748] netlink: 'syz.1.9225': attribute type 25 has an invalid length. [ 475.783321][T25748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9225'. [ 475.862014][T25752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9226'. [ 475.911032][T25755] netlink: 'syz.1.9227': attribute type 30 has an invalid length. [ 476.448400][T25779] netlink: 'syz.0.9237': attribute type 4 has an invalid length. [ 476.458162][T25779] netlink: 'syz.0.9237': attribute type 4 has an invalid length. [ 476.638164][T25786] netlink: 'syz.0.9241': attribute type 21 has an invalid length. [ 476.656591][T25786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9241'. [ 476.692793][T25786] netlink: 'syz.0.9241': attribute type 21 has an invalid length. [ 477.020742][T25811] netlink: 'syz.1.9251': attribute type 7 has an invalid length. [ 477.047818][T25813] tls_set_device_offload: netdev not found [ 477.070134][T25811] netlink: 'syz.1.9251': attribute type 8 has an invalid length. [ 477.093240][T25815] syzkaller1: entered promiscuous mode [ 477.110424][T25815] syzkaller1: entered allmulticast mode [ 477.164998][T25817] netlink: 'syz.4.9254': attribute type 4 has an invalid length. [ 481.512275][T26025] __nla_validate_parse: 10 callbacks suppressed [ 481.512298][T26025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9347'. [ 481.689420][T26028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.758221][T26028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.829811][T26039] validate_nla: 2 callbacks suppressed [ 481.829834][T26039] netlink: 'syz.0.9352': attribute type 21 has an invalid length. [ 481.850594][T26039] netlink: 'syz.0.9352': attribute type 22 has an invalid length. [ 481.859375][T26039] netlink: 'syz.0.9352': attribute type 23 has an invalid length. [ 481.871459][T26039] netlink: 'syz.0.9352': attribute type 25 has an invalid length. [ 481.880913][T26039] netlink: 'syz.0.9352': attribute type 26 has an invalid length. [ 481.889628][T26039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9352'. [ 481.906347][T26028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.941702][T26028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.975476][T26041] ip6gre3: entered promiscuous mode [ 481.994136][T26041] ip6gre3: entered allmulticast mode [ 482.013078][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 482.022127][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 482.036600][T12119] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 482.135982][T12119] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 482.183045][T26028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.214105][T26028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.359563][T26028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.395215][T26028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.448167][T26057] syzkaller1: entered promiscuous mode [ 482.466159][T12119] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 482.484963][T26057] syzkaller1: entered allmulticast mode [ 482.625494][ T37] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.641115][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.671424][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.693848][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.742220][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.775764][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.810806][ T37] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.832348][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.927617][T26085] pim6reg1: entered promiscuous mode [ 482.936597][T26085] pim6reg1: entered allmulticast mode [ 482.960473][T26087] netlink: 'syz.4.9375': attribute type 13 has an invalid length. [ 482.979291][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9375'. [ 482.994123][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9376'. [ 483.012452][T26087] netlink: 'syz.4.9375': attribute type 13 has an invalid length. [ 483.026572][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9375'. [ 483.575417][T26126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9394'. [ 483.597643][T26128] netlink: 'syz.2.9392': attribute type 4 has an invalid length. [ 483.649611][T26131] netlink: 'syz.2.9392': attribute type 4 has an invalid length. [ 483.679464][T26132] netlink: 'syz.4.9395': attribute type 1 has an invalid length. [ 483.763207][T26132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.799608][T26138] bond2: (slave geneve3): making interface the new active one [ 483.810047][T26138] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 484.059292][T26151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9403'. [ 484.134632][T26154] netlink: 500 bytes leftover after parsing attributes in process `syz.3.9404'. [ 484.469997][T26167] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 484.477390][T26169] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 484.503851][T26167] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 484.540092][T26173] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.9414'. [ 485.902527][T26222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9434'. [ 486.155879][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 487.382051][T26287] __nla_validate_parse: 2 callbacks suppressed [ 487.382071][T26287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9460'. [ 488.310553][T26337] validate_nla: 6 callbacks suppressed [ 488.310575][T26337] netlink: 'syz.0.9480': attribute type 21 has an invalid length. [ 488.343249][T26337] netlink: 'syz.0.9480': attribute type 22 has an invalid length. [ 488.353007][T26337] netlink: 'syz.0.9480': attribute type 23 has an invalid length. [ 488.364307][T26337] netlink: 'syz.0.9480': attribute type 25 has an invalid length. [ 488.377397][T26337] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9480'. [ 488.563337][T26354] netlink: 'syz.4.9486': attribute type 13 has an invalid length. [ 488.581336][T26354] netlink: 'syz.4.9486': attribute type 17 has an invalid length. [ 488.642806][T26354] gretap0: left promiscuous mode [ 488.733952][T26368] netlink: 'syz.2.9492': attribute type 15 has an invalid length. [ 488.761800][T26354] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.802814][T26354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.923431][T26379] netlink: 'syz.1.9493': attribute type 29 has an invalid length. [ 488.964074][ T11] block nbd3: Possible stuck request ffff888025050000: control (read@0,1024B). Runtime 30 seconds [ 488.977928][ T11] block nbd3: Possible stuck request ffff8880250501c0: control (read@1024,1024B). Runtime 30 seconds [ 488.989309][ T11] block nbd3: Possible stuck request ffff888025050380: control (read@2048,1024B). Runtime 30 seconds [ 489.000792][ T11] block nbd3: Possible stuck request ffff888025050540: control (read@3072,1024B). Runtime 30 seconds [ 489.021598][T26381] netlink: 'syz.1.9493': attribute type 29 has an invalid length. [ 489.043332][T26379] netlink: 500 bytes leftover after parsing attributes in process `syz.1.9493'. [ 489.147487][T26386] netlink: 'syz.1.9497': attribute type 1 has an invalid length. [ 489.233813][T26386] bond8: (slave ip6gretap1): making interface the new active one [ 489.263398][T26386] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 489.294262][T26386] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 489.307396][T26386] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 490.130364][T26437] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.868766][T26476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9538'. [ 490.885456][T26476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9538'. [ 491.239163][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9547'. [ 491.250812][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9547'. [ 491.422767][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9551'. [ 491.584011][T26511] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9556'. [ 491.661660][T26515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9557'. [ 492.484976][T26564] __nla_validate_parse: 2 callbacks suppressed [ 492.484996][T26564] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9578'. [ 492.510719][T26564] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9578'. [ 492.860138][T26577] bond1: (slave geneve2): making interface the new active one [ 492.869205][T26577] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 492.880251][ T1335] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.911433][ T1335] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.967209][ T1335] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 492.991143][ T1335] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 493.183751][T26598] syzkaller1: entered promiscuous mode [ 493.206384][T26598] syzkaller1: entered allmulticast mode [ 493.512977][T26613] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 493.523917][T26613] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 493.616659][T26623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9603'. [ 493.729342][T26630] macvtap3: entered promiscuous mode [ 493.736199][T26630] macvtap3: entered allmulticast mode [ 493.777276][T26630] macvtap4: entered promiscuous mode [ 493.782878][T26630] macvtap4: entered allmulticast mode [ 494.449230][T26669] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 494.473916][T26671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9627'. [ 494.715899][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 494.730914][T26679] block nbd5: Unsupported socket: should be TCP or UNIX. [ 494.779523][T26682] syzkaller0: entered promiscuous mode [ 494.785089][T26682] syzkaller0: entered allmulticast mode [ 494.812433][T26687] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 494.820744][T26687] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 494.915503][T26692] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9634'. [ 496.249854][T26697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.429019][T26708] netem: change failed [ 496.794416][T26728] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9651'. [ 496.819965][T26728] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9651'. [ 496.964685][T26740] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9655'. [ 497.025539][T26744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9657'. [ 497.070461][T26744] team1: entered promiscuous mode [ 497.075563][T26744] team1: entered allmulticast mode [ 497.578625][T26772] validate_nla: 8 callbacks suppressed [ 497.578645][T26772] netlink: 'syz.3.9670': attribute type 1 has an invalid length. [ 497.603570][T26769] scsi_nl_rcv_msg: discarding partial skb [ 497.729693][T26779] bond4: (slave gretap3): making interface the new active one [ 497.772253][T26779] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 497.923656][T26783] syzkaller1: entered promiscuous mode [ 497.936650][T26783] syzkaller1: entered allmulticast mode [ 498.568088][T26832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9694'. [ 498.821059][T26844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9699'. [ 498.855461][T26847] netlink: 'syz.4.9701': attribute type 1 has an invalid length. [ 498.875101][T26847] netlink: 'syz.4.9701': attribute type 4 has an invalid length. [ 498.888332][T26847] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9701'. [ 499.392880][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9713'. [ 499.402504][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9713'. [ 499.701798][T26888] sctp: [Deprecated]: syz.4.9718 (pid 26888) Use of int in maxseg socket option. [ 499.701798][T26888] Use struct sctp_assoc_value instead [ 499.845826][T26894] netlink: 'syz.2.9721': attribute type 1 has an invalid length. [ 499.902941][T26897] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9722'. [ 499.937622][T26894] bond0: (slave gretap0): making interface the new active one [ 499.957972][T26894] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 500.341577][T26919] vlan3: entered promiscuous mode [ 500.364866][T26919] bridge0: entered promiscuous mode [ 500.391692][T26928] netlink: 'syz.1.9736': attribute type 10 has an invalid length. [ 500.396740][T26917] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 500.450114][T26917] bond2: (slave lo): Enslaving as a backup interface with an up link [ 500.460174][T26917] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 500.467479][T26929] netlink: 'syz.1.9736': attribute type 10 has an invalid length. [ 500.487180][T26928] dummy0: left allmulticast mode [ 500.502837][T26928] dummy0: left promiscuous mode [ 500.527271][T26928] bridge0: port 4(dummy0) entered disabled state [ 500.553808][T26928] team0: Port device dummy0 added [ 500.569584][T26929] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 500.603200][T26929] team0: Failed to send options change via netlink (err -105) [ 500.616823][T26929] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 500.628338][T26929] team0: Port device dummy0 removed [ 500.642829][T26929] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 500.937462][T26956] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9742'. [ 502.284072][T27030] xt_hashlimit: size too large, truncated to 1048576 [ 502.985169][T27054] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9787'. [ 503.028399][T27060] netlink: 'syz.1.9790': attribute type 4 has an invalid length. [ 503.471592][T27091] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9798'. [ 503.486486][ T1335] batman_adv: batadv1: IGMP Querier appeared [ 503.492587][ T1335] batman_adv: batadv1: MLD Querier appeared [ 503.598940][T27084] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.606618][T27084] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.962736][T27084] vlan0: left allmulticast mode [ 503.968521][T27084] veth0_vlan: left allmulticast mode [ 503.973873][T27084] vlan0: left promiscuous mode [ 504.120521][ T145] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 504.130516][ T145] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.141282][ T145] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 504.150678][ T145] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.196454][ T145] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 504.204967][ T145] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.215133][ T145] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 504.256491][ T145] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.496857][T27114] syzkaller1: entered promiscuous mode [ 504.502406][T27114] syzkaller1: entered allmulticast mode [ 504.601711][T27121] netlink: 'syz.3.9812': attribute type 1 has an invalid length. [ 504.654222][T27121] bond5: (slave bridge2): making interface the new active one [ 504.663224][T27121] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 505.082506][T27146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9823'. [ 505.859702][T27181] policy can only be matched on NF_INET_PRE_ROUTING [ 505.859726][T27181] unable to load match [ 506.322870][T27213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9852'. [ 506.378545][T27213] netlink: 'syz.1.9852': attribute type 20 has an invalid length. [ 506.399061][T27213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9852'. [ 506.425790][T27213] netlink: 'syz.1.9852': attribute type 20 has an invalid length. [ 506.531751][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9854'. [ 506.581879][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9854'. [ 506.710332][T27231] netlink: 'syz.3.9859': attribute type 1 has an invalid length. [ 506.834460][T27235] bond6: (slave bridge3): making interface the new active one [ 506.854731][T27235] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 506.890612][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.897912][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.108984][T27250] netlink: 'syz.1.9865': attribute type 1 has an invalid length. [ 507.258750][T27250] bond9: (slave geneve3): making interface the new active one [ 507.277499][T27250] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 507.319917][ T1335] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 507.336375][ T1335] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 507.344750][ T1335] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 507.389150][ T1335] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 507.513941][T27269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9870'. [ 507.881526][T27285] syzkaller0: entered promiscuous mode [ 507.896679][T27285] syzkaller0: entered allmulticast mode [ 508.152973][T27305] tipc: Failed to remove unknown binding: 66,1,1/0:1072346167/1072346169 [ 508.182691][T27305] tipc: Failed to remove unknown binding: 66,1,1/0:1072346167/1072346169 [ 508.216811][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9890'. [ 508.240172][T27307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9890'. [ 508.626706][T27333] netlink: 'syz.4.9902': attribute type 1 has an invalid length. [ 508.640978][T27333] netlink: 'syz.4.9902': attribute type 1 has an invalid length. [ 508.929027][T27349] netlink: 'syz.3.9908': attribute type 1 has an invalid length. [ 509.007663][T27349] 8021q: adding VLAN 0 to HW filter on device bond7 [ 509.028131][T27357] bond7: (slave gretap5): making interface the new active one [ 509.047852][T27357] bond7: (slave gretap5): Enslaving as an active interface with an up link [ 509.291648][T27372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9918'. [ 509.313439][T27372] bridge_slave_1: left allmulticast mode [ 509.342676][T27372] bridge_slave_1: left promiscuous mode [ 509.356886][T27372] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.375139][T27372] bridge_slave_0: left allmulticast mode [ 509.384331][T27372] bridge_slave_0: left promiscuous mode [ 509.392264][T27372] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.481319][T27379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9921'. [ 509.491114][T27383] dvmrp0: entered allmulticast mode [ 509.517224][ T1335] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.530993][ T1335] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.542027][ T1335] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.553513][ T1335] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.187347][T27424] __nla_validate_parse: 4 callbacks suppressed [ 510.187367][T27424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9940'. [ 510.222226][T27427] netlink: 'syz.3.9941': attribute type 1 has an invalid length. [ 510.222875][T27422] syzkaller0: entered promiscuous mode [ 510.239440][T27422] syzkaller0: entered allmulticast mode [ 510.381226][T27434] netlink: 'syz.2.9943': attribute type 29 has an invalid length. [ 510.420006][T27437] netlink: 'syz.2.9943': attribute type 29 has an invalid length. [ 510.459351][T27434] netlink: 500 bytes leftover after parsing attributes in process `syz.2.9943'. [ 510.698122][T27451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9951'. [ 510.997668][T27458] xt_hashlimit: size too large, truncated to 1048576 [ 511.355823][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 511.581203][T27482] netlink: 'syz.4.9962': attribute type 1 has an invalid length. [ 511.599879][T27482] netlink: 'syz.4.9962': attribute type 4 has an invalid length. [ 511.625676][T27482] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9962'. [ 511.865484][T27496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9969'. [ 511.940780][T27496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9969'. [ 512.232571][T27514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.481958][T27527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9981'. [ 512.506292][T27531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9984'. [ 512.533369][T27531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9984'. [ 512.863110][T27544] wg1 speed is unknown, defaulting to 1000 [ 513.031784][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9992'. [ 513.273374][T27559] siw: device registration error -23 [ 513.478435][T27575] only policy match revision 0 supported [ 513.478459][T27575] unable to load match [ 513.537262][T27579] netlink: 'syz.4.10004': attribute type 1 has an invalid length. [ 514.152678][T27616] tipc: Cannot configure node identity twice [ 514.167562][T27616] tipc: Cannot configure node identity twice [ 515.074195][T27649] x_tables: duplicate underflow at hook 4 [ 515.742920][T27676] netlink: 'syz.1.10042': attribute type 13 has an invalid length. [ 516.253397][T27702] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10054'. [ 516.598950][T27723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10062'. [ 516.616485][T27723] Unsupported xt match [ 516.616506][T27723] unable to load match [ 516.744100][T27725] netlink: 'syz.2.10063': attribute type 13 has an invalid length. [ 516.793049][T27733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10067'. [ 516.865173][T27733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10067'. [ 518.054246][T27791] syzkaller1: entered promiscuous mode [ 518.070351][T27791] syzkaller1: entered allmulticast mode [ 519.036971][ T11] block nbd3: Possible stuck request ffff888025050000: control (read@0,1024B). Runtime 60 seconds [ 519.048322][ T11] block nbd3: Possible stuck request ffff8880250501c0: control (read@1024,1024B). Runtime 60 seconds [ 519.061721][ T11] block nbd3: Possible stuck request ffff888025050380: control (read@2048,1024B). Runtime 60 seconds [ 519.076049][ T11] block nbd3: Possible stuck request ffff888025050540: control (read@3072,1024B). Runtime 60 seconds [ 519.728598][T27894] syzkaller0: entered promiscuous mode [ 519.734135][T27894] syzkaller0: entered allmulticast mode [ 519.744720][T27894] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 520.109460][T27913] wg1 speed is unknown, defaulting to 1000 [ 520.250737][T27918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10151'. [ 520.308657][T27918] netlink: 'syz.3.10151': attribute type 7 has an invalid length. [ 520.344166][T27920] netlink: 'syz.4.10152': attribute type 3 has an invalid length. [ 520.365246][T27918] netlink: 'syz.3.10151': attribute type 8 has an invalid length. [ 520.421125][T27918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10151'. [ 521.333083][T27937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.374337][T27937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.493505][T27937] tipc: Resetting bearer [ 521.777140][T27941] geneve4: entered promiscuous mode [ 521.782420][T27941] geneve4: entered allmulticast mode [ 521.856110][ T1335] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.887575][ T1335] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.912696][ T1335] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 521.931741][ T1335] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 521.950399][ T1335] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.966566][ T1335] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.985236][ T1335] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 521.996281][ T1335] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 522.066248][ T1335] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.084299][ T1335] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.106477][ T1335] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 522.125378][ T1335] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 522.148729][T27976] netlink: 'syz.4.10169': attribute type 1 has an invalid length. [ 522.157064][ T1335] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.157099][ T1335] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.157127][ T1335] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 522.157154][ T1335] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 522.313812][T27982] bond3: (slave gretap1): making interface the new active one [ 522.348383][T27982] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 522.382861][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10172'. [ 522.426760][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10172'. [ 522.568133][T27998] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 522.900821][T28010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10183'. [ 522.925280][T28015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10185'. [ 522.988849][T28016] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10184'. [ 523.747561][ T5200] udevd[5200]: worker [20192] /devices/virtual/block/nbd3 is taking a long time [ 524.007353][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10207'. [ 524.287988][T28076] netlink: 'syz.2.10210': attribute type 1 has an invalid length. [ 525.650554][T28076] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 525.811092][T28090] syzkaller1: entered promiscuous mode [ 525.848485][T28090] syzkaller1: entered allmulticast mode [ 526.138855][T28107] tipc: Started in network mode [ 526.148697][T28107] tipc: Node identity ac14140f, cluster identity 4711 [ 526.173211][T28107] tipc: New replicast peer: 255.255.255.255 [ 526.191076][T28107] tipc: Enabled bearer , priority 10 [ 526.459451][T28118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10222'. [ 526.496500][T28118] netlink: 'syz.0.10222': attribute type 11 has an invalid length. [ 526.526208][T28118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10222'. [ 526.534658][T28122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10225'. [ 526.535298][T28118] netlink: 'syz.0.10222': attribute type 11 has an invalid length. [ 526.702913][T28134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10228'. [ 526.712965][T28134] openvswitch: netlink: Flow key attr not present in new flow. [ 527.185979][ T5911] tipc: Node number set to 2886997007 [ 527.318909][T28166] 8021q: adding VLAN 0 to HW filter on device bond10 [ 527.394453][T28175] __nla_validate_parse: 3 callbacks suppressed [ 527.394474][T28175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10246'. [ 527.422931][T28175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10246'. [ 527.503206][T28166] 8021q: adding VLAN 0 to HW filter on device bond10 [ 527.518669][T28166] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 527.535468][T28166] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 528.340434][T28216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10261'. [ 528.528021][T28221] tipc: Failed to remove unknown binding: 66,1,1/2886997007:426304002/426304004 [ 529.318912][T28220] tipc: Failed to remove unknown binding: 66,1,1/2886997007:426304002/426304004 [ 529.340049][T28220] tipc: Failed to remove unknown binding: 66,1,1/2886997007:426304002/426304004 [ 529.367891][T28249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10274'. [ 529.386583][T28249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10274'. [ 529.407773][T28249] netlink: 'syz.2.10274': attribute type 1 has an invalid length. [ 529.884775][T28275] erspan0: left promiscuous mode [ 529.914855][T28275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.046936][T28279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10286'. [ 530.306102][T28294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10291'. [ 530.721566][T28311] ip6gretap0: entered promiscuous mode [ 530.748767][T28311] 8021q: adding VLAN 0 to HW filter on device ` [ 530.763096][T28315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10299'. [ 530.778893][T28311] bridge0: port 1(team0) entered blocking state [ 530.785366][T28311] bridge0: port 1(team0) entered listening state [ 530.793616][T28311] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.805338][T28311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.829941][T28315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10299'. [ 531.105319][T28332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10305'. [ 531.588433][T28352] wg1 speed is unknown, defaulting to 1000 [ 531.785466][T28364] netdevsim netdevsim3: Direct firmware load for lookup_extent_enter failed with error -2 [ 531.816874][T28364] netdevsim netdevsim3: Falling back to sysfs fallback for: lookup_extent_enter [ 532.343171][T28387] syzkaller1: entered promiscuous mode [ 532.360203][T28387] syzkaller1: entered allmulticast mode [ 532.887056][T28411] syzkaller0: entered promiscuous mode [ 532.892822][T28411] syzkaller0: entered allmulticast mode [ 534.400615][T28416] erspan0: entered promiscuous mode [ 534.406348][T28416] erspan0: entered allmulticast mode [ 534.557242][T28440] __nla_validate_parse: 2 callbacks suppressed [ 534.557263][T28440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10346'. [ 534.612227][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.612333][T28440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10346'. [ 534.634390][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.729226][T28442] syzkaller0: entered promiscuous mode [ 534.735009][T28442] syzkaller0: entered allmulticast mode [ 534.743555][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.754148][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.839419][T28450] syzkaller0: entered promiscuous mode [ 534.844961][T28450] syzkaller0: entered allmulticast mode [ 535.864873][T28469] Cannot find del_set index 0 as target [ 539.603272][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10381'. [ 539.934194][T28543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10383'. [ 540.180749][T28561] netlink: 'syz.0.10391': attribute type 1 has an invalid length. [ 540.189263][T28561] netlink: 'syz.0.10391': attribute type 4 has an invalid length. [ 540.200978][T28561] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10391'. [ 540.373932][T28572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10395'. [ 540.600391][T28582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10399'. [ 540.752634][T28590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10402'. [ 541.018093][T28599] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10405'. [ 541.521605][T28619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10411'. [ 542.570606][T28659] gretap2: left allmulticast mode [ 542.577536][T28659] bond1: left allmulticast mode [ 542.884396][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.969845][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.988073][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.998518][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.636334][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 544.746342][T28704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10441'. [ 544.830039][ T5200] udevd[5200]: worker [19613] /devices/virtual/block/nbd0 timeout; kill it [ 544.847099][ T5200] udevd[5200]: seq 16513 '/devices/virtual/block/nbd0' killed [ 547.195364][T28706] netlink: 'syz.2.10441': attribute type 1 has an invalid length. [ 547.513717][T28729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10450'. [ 548.377288][T28769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10470'. [ 548.441050][T28771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10471'. [ 548.498064][T28774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10472'. [ 548.665947][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10475'. [ 548.684855][T28783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10476'. [ 549.065490][T28795] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10481'. [ 549.116266][ T11] block nbd3: Possible stuck request ffff888025050000: control (read@0,1024B). Runtime 90 seconds [ 549.127185][ T11] block nbd3: Possible stuck request ffff8880250501c0: control (read@1024,1024B). Runtime 90 seconds [ 549.140563][ T11] block nbd3: Possible stuck request ffff888025050380: control (read@2048,1024B). Runtime 90 seconds [ 549.152299][ T11] block nbd3: Possible stuck request ffff888025050540: control (read@3072,1024B). Runtime 90 seconds [ 549.609251][T28818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10488'. [ 549.940319][T28832] syzkaller1: entered promiscuous mode [ 549.956151][T28832] syzkaller1: entered allmulticast mode [ 550.032834][T28838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10498'. [ 550.326702][T28848] sctp: [Deprecated]: syz.1.10501 (pid 28848) Use of int in maxseg socket option. [ 550.326702][T28848] Use struct sctp_assoc_value instead [ 550.373576][T28850] tipc: Cannot configure node identity twice [ 550.491216][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805700f400: rx timeout, send abort [ 550.676402][T28865] netlink: 'syz.1.10510': attribute type 1 has an invalid length. [ 550.708239][T28865] bond11: entered promiscuous mode [ 550.713475][T28865] bond11: entered allmulticast mode [ 550.720089][T28865] 8021q: adding VLAN 0 to HW filter on device bond11 [ 550.751059][T28865] macvlan3: entered promiscuous mode [ 550.757340][T28865] macvlan3: entered allmulticast mode [ 550.765285][T28865] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 550.840901][T28869] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 550.864293][T28871] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 551.000833][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805700f400: abort rx timeout. Force session deactivation [ 551.234277][T28891] clip:clip_setentry: non-CLIP VCC [ 551.361301][T28901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10522'. [ 551.804994][T28908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10525'. [ 552.929265][T28925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10531'. [ 553.189693][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10538'. [ 553.278030][T28946] vlan3: entered promiscuous mode [ 553.286776][T28946] vlan3: entered allmulticast mode [ 553.295047][T28946] hsr_slave_1: entered allmulticast mode [ 553.495356][T28956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10543'. [ 553.734203][T28971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10549'. [ 554.129359][T28980] syzkaller0: entered promiscuous mode [ 554.146481][T28980] syzkaller0: entered allmulticast mode [ 554.180198][T28983] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10554'. [ 555.099147][T29029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10572'. [ 555.117715][T29024] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.409823][T29049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10578'. [ 555.806560][T29067] wg2: entered promiscuous mode [ 555.812435][T29067] wg2: entered allmulticast mode [ 556.427591][T29093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10595'. [ 556.500843][T29095] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.511903][T29095] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 556.611498][T29101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10595'. [ 556.614737][T29103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10598'. [ 556.653983][T29095] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.664892][T29095] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 556.778024][T29108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10600'. [ 556.817984][T29095] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.877651][T29095] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 556.907134][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10601'. [ 556.943013][T29095] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.980828][T29095] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 557.143623][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.182443][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 557.358817][ T145] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.384586][ T145] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 557.415212][ T145] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.426825][ T145] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 557.476336][ T145] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.484574][ T145] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 557.582320][T29145] tipc: Enabled bearer , priority 0 [ 558.291384][T29178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10627'. [ 558.301861][T29178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10627'. [ 558.341334][T29180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10626'. [ 559.461524][T29231] netlink: 'syz.3.10648': attribute type 13 has an invalid length. [ 559.499150][T29231] eql: remember to turn off Van-Jacobson compression on your slave devices [ 559.690914][T29231] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 559.831097][T29244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.977347][T29260] tipc: Enabling of bearer rejected, already enabled [ 560.169150][T29273] __nla_validate_parse: 2 callbacks suppressed [ 560.169173][T29273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10661'. [ 560.507867][T29291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10670'. [ 560.672309][T29298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10675'. [ 560.858601][T29307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10678'. [ 560.896895][T29312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10680'. [ 560.999310][T29309] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10679'. [ 561.277719][ C0] bridge0: port 1(team0) entered learning state [ 561.475346][T29335] sctp: [Deprecated]: syz.3.10689 (pid 29335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.475346][T29335] Use struct sctp_sack_info instead [ 561.658970][T29343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10692'. [ 561.879216][T29348] batadv_slave_0: entered promiscuous mode [ 561.920133][T29347] batadv_slave_0: left promiscuous mode [ 562.003387][T29355] tipc: Enabled bearer , priority 0 [ 562.409215][T29375] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10704'. [ 562.622988][T29384] [ 562.625391][T29384] ====================================================== [ 562.632475][T29384] WARNING: possible circular locking dependency detected [ 562.639725][T29384] syzkaller #0 Not tainted [ 562.644181][T29384] ------------------------------------------------------ [ 562.651234][T29384] syz.1.10706/29384 is trying to acquire lock: [ 562.657512][T29384] ffffffff8f426338 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 562.667085][T29384] [ 562.667085][T29384] but task is already holding lock: [ 562.674484][T29384] ffffffff8f4262d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 562.684120][T29384] [ 562.684120][T29384] which lock already depends on the new lock. [ 562.684120][T29384] [ 562.694543][T29384] [ 562.694543][T29384] the existing dependency chain (in reverse order) is: [ 562.703641][T29384] [ 562.703641][T29384] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 562.711580][T29384] lock_acquire+0x120/0x360 [ 562.716619][T29384] _raw_spin_lock_bh+0x36/0x50 [ 562.721950][T29384] nr_rt_ioctl+0x390/0xd50 [ 562.726901][T29384] sock_do_ioctl+0xdc/0x300 [ 562.731949][T29384] sock_ioctl+0x576/0x790 [ 562.736815][T29384] __se_sys_ioctl+0xfc/0x170 [ 562.741937][T29384] do_syscall_64+0xfa/0xfa0 [ 562.746981][T29384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.753406][T29384] [ 562.753406][T29384] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 562.761441][T29384] lock_acquire+0x120/0x360 [ 562.766481][T29384] _raw_spin_lock_bh+0x36/0x50 [ 562.771896][T29384] nr_rt_ioctl+0x193/0xd50 [ 562.776951][T29384] sock_do_ioctl+0xdc/0x300 [ 562.782000][T29384] sock_ioctl+0x576/0x790 [ 562.786880][T29384] __se_sys_ioctl+0xfc/0x170 [ 562.792005][T29384] do_syscall_64+0xfa/0xfa0 [ 562.797047][T29384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.803494][T29384] [ 562.803494][T29384] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 562.811362][T29384] validate_chain+0xb9b/0x2140 [ 562.816660][T29384] __lock_acquire+0xab9/0xd20 [ 562.821966][T29384] lock_acquire+0x120/0x360 [ 562.827005][T29384] _raw_spin_lock_bh+0x36/0x50 [ 562.832312][T29384] nr_rt_device_down+0xa9/0x720 [ 562.837706][T29384] nr_device_event+0x137/0x150 [ 562.843000][T29384] notifier_call_chain+0x1b6/0x3e0 [ 562.848643][T29384] __dev_notify_flags+0x18d/0x2e0 [ 562.854198][T29384] netif_change_flags+0xe8/0x1a0 [ 562.859668][T29384] dev_change_flags+0x130/0x260 [ 562.865050][T29384] dev_ioctl+0x7b4/0x1150 [ 562.869920][T29384] sock_do_ioctl+0x22c/0x300 [ 562.875046][T29384] sock_ioctl+0x576/0x790 [ 562.879913][T29384] __se_sys_ioctl+0xfc/0x170 [ 562.885043][T29384] do_syscall_64+0xfa/0xfa0 [ 562.890081][T29384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.896508][T29384] [ 562.896508][T29384] other info that might help us debug this: [ 562.896508][T29384] [ 562.906744][T29384] Chain exists of: [ 562.906744][T29384] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 562.906744][T29384] [ 562.920579][T29384] Possible unsafe locking scenario: [ 562.920579][T29384] [ 562.928043][T29384] CPU0 CPU1 [ 562.933414][T29384] ---- ---- [ 562.938787][T29384] lock(nr_neigh_list_lock); [ 562.943475][T29384] lock(&nr_node->node_lock); [ 562.950774][T29384] lock(nr_neigh_list_lock); [ 562.957982][T29384] lock(nr_node_list_lock); [ 562.962583][T29384] [ 562.962583][T29384] *** DEADLOCK *** [ 562.962583][T29384] [ 562.970731][T29384] 2 locks held by syz.1.10706/29384: [ 562.976023][T29384] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 562.984859][T29384] #1: ffffffff8f4262d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 562.994892][T29384] [ 562.994892][T29384] stack backtrace: [ 563.000920][T29384] CPU: 1 UID: 0 PID: 29384 Comm: syz.1.10706 Not tainted syzkaller #0 PREEMPT(full) [ 563.000941][T29384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 563.000955][T29384] Call Trace: [ 563.000964][T29384] [ 563.000973][T29384] dump_stack_lvl+0x189/0x250 [ 563.001001][T29384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.001024][T29384] ? __pfx__printk+0x10/0x10 [ 563.001042][T29384] ? print_lock_name+0xde/0x100 [ 563.001059][T29384] print_circular_bug+0x2ee/0x310 [ 563.001083][T29384] check_noncircular+0x134/0x160 [ 563.001107][T29384] validate_chain+0xb9b/0x2140 [ 563.001130][T29384] ? rt6_disable_ip+0x6b3/0x720 [ 563.001159][T29384] ? __lock_acquire+0xab9/0xd20 [ 563.001176][T29384] __lock_acquire+0xab9/0xd20 [ 563.001194][T29384] ? nr_rt_device_down+0xa9/0x720 [ 563.001213][T29384] lock_acquire+0x120/0x360 [ 563.001228][T29384] ? nr_rt_device_down+0xa9/0x720 [ 563.001252][T29384] ? nr_rt_device_down+0xa9/0x720 [ 563.001271][T29384] _raw_spin_lock_bh+0x36/0x50 [ 563.001293][T29384] ? nr_rt_device_down+0xa9/0x720 [ 563.001312][T29384] nr_rt_device_down+0xa9/0x720 [ 563.001332][T29384] ? do_raw_spin_unlock+0x122/0x240 [ 563.001356][T29384] nr_device_event+0x137/0x150 [ 563.001374][T29384] notifier_call_chain+0x1b6/0x3e0 [ 563.001397][T29384] __dev_notify_flags+0x18d/0x2e0 [ 563.001416][T29384] ? __pfx___dev_notify_flags+0x10/0x10 [ 563.001431][T29384] ? __dev_change_flags+0x4cc/0x6d0 [ 563.001449][T29384] ? __pfx___dev_change_flags+0x10/0x10 [ 563.001466][T29384] ? full_name_hash+0x92/0xe0 [ 563.001487][T29384] netif_change_flags+0xe8/0x1a0 [ 563.001506][T29384] dev_change_flags+0x130/0x260 [ 563.001524][T29384] dev_ioctl+0x7b4/0x1150 [ 563.001554][T29384] sock_do_ioctl+0x22c/0x300 [ 563.001578][T29384] ? __pfx_sock_do_ioctl+0x10/0x10 [ 563.001607][T29384] sock_ioctl+0x576/0x790 [ 563.001628][T29384] ? __pfx_sock_ioctl+0x10/0x10 [ 563.001650][T29384] ? __fget_files+0x3a0/0x420 [ 563.001664][T29384] ? __fget_files+0x2a/0x420 [ 563.001680][T29384] ? bpf_lsm_file_ioctl+0x9/0x20 [ 563.001699][T29384] ? __pfx_sock_ioctl+0x10/0x10 [ 563.001719][T29384] __se_sys_ioctl+0xfc/0x170 [ 563.001741][T29384] do_syscall_64+0xfa/0xfa0 [ 563.001764][T29384] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.001786][T29384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.001803][T29384] ? clear_bhb_loop+0x60/0xb0 [ 563.001821][T29384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.001841][T29384] RIP: 0033:0x7f8ca6d8f6c9 [ 563.001857][T29384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.001873][T29384] RSP: 002b:00007f8ca7c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.001891][T29384] RAX: ffffffffffffffda RBX: 00007f8ca6fe5fa0 RCX: 00007f8ca6d8f6c9 [ 563.001904][T29384] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 563.001915][T29384] RBP: 00007f8ca6e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 563.001926][T29384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.001936][T29384] R13: 00007f8ca6fe6038 R14: 00007f8ca6fe5fa0 R15: 00007ffdffba7708 [ 563.001957][T29384] [ 563.450338][T29361] lec:lec_atm_send: lec0: Unknown message type -1808097232 [ 563.464301][T29359] lec:lec_atm_close: lec0: Shut down! [ 563.686540][T12100] lec:lec_start_xmit: lec0:No lecd attached [ 568.318408][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.324777][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.595628][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5910 ms [ 569.603804][ C0] lec:lec_tx_timeout: lec0 [ 569.608930][ C0] lec:lec_start_xmit: lec0:No lecd attached