last executing test programs: 9.651212132s ago: executing program 3 (id=2889): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c855, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000640)=ANY=[], 0x9) 9.536585924s ago: executing program 3 (id=2894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x10000, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x5, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0xc}, {0x9a, 0x0, 0x9, 0x5, 0x400}, 0x5, 0x0, 0x81}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0xc0) 9.442736998s ago: executing program 3 (id=2896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000"], 0x44}}, 0x20008000) 9.266521418s ago: executing program 3 (id=2900): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r4, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8985b0808aa", 0x13}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) 9.161647447s ago: executing program 3 (id=2902): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) gettid() r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000100)=0xfff, 0x4) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 8.10333049s ago: executing program 3 (id=2915): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb1000011", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x401}, 0x1c) shutdown(r4, 0x1) 4.040386887s ago: executing program 1 (id=2985): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 3.867024864s ago: executing program 4 (id=2987): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000f40000000000000600000018110000f879b69320533cb87437c57bef4c95d881d69a1feb0cbdb2952892ac765120735553c3db441e309080fa75220ba02852893de1b335afc4541b94cf14e69c1d53b5db21f402a593b0823486083a56e1509fdd29f7a3464fd89785b98122fb084ced246b08b08a738b8a01f28ef8bf7b26ae78785180ed46953608a1", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000000095000000000700005e9200000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 3.69939415s ago: executing program 4 (id=2989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000110001002cbd7000fedbdf25fe8000000000000000000000000000bb000004d308003c000c0015108a7c35000500000014000d"], 0x48}}, 0x40) 3.573485303s ago: executing program 4 (id=2992): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000940)="cedd58d33155c2282718421d8a7f2c9fc0e9f67215bc2fa3be1778c6505a45e10a0c45b5502a8eccbc26cb3fd967b930842e300eb1d7aa377188a753b91b4d497aeb4d7547a3768d45fa27", 0x4b}, {0x0}, {&(0x7f0000000c80)}], 0x3, &(0x7f0000000200)=ANY=[], 0x18}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 3.0569092s ago: executing program 0 (id=2999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2.983386772s ago: executing program 1 (id=3000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfef}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000000140)={'syz_tun\x00', @ifru_addrs=@in={0x2, 0x4e23, @multicast1}}) 2.480650788s ago: executing program 1 (id=3001): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 2.312375767s ago: executing program 2 (id=3004): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 651.843146ms ago: executing program 1 (id=3005): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000001000000000c"], 0x24}}, 0x0) 587.328436ms ago: executing program 0 (id=3006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 587.000067ms ago: executing program 2 (id=3007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000fffffe7e8ae000"/24, 0x18) 500.775424ms ago: executing program 0 (id=3008): sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x49}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 493.409912ms ago: executing program 2 (id=3009): unshare(0x22020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) 444.307173ms ago: executing program 4 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002048000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 368.669675ms ago: executing program 1 (id=3011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x11, &(0x7f00000003c0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x30}, 0x80) 367.864795ms ago: executing program 0 (id=3012): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="9020f2f9924c"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) 291.336563ms ago: executing program 2 (id=3013): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 271.403828ms ago: executing program 0 (id=3014): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) 240.369949ms ago: executing program 4 (id=3015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xa86, 0x0) 118.99761ms ago: executing program 0 (id=3016): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 118.701024ms ago: executing program 1 (id=3017): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='cubic', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 118.433683ms ago: executing program 2 (id=3018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000001b280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @empty}, {0x22, 0x7c, 0x0, @multicast2}}}}}, 0x0) 77.156776ms ago: executing program 4 (id=3019): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)='D', 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 0s ago: executing program 2 (id=3020): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$nci(0xffffffffffffffff, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x9b, {0x5, [{0x4, 0x5}, {0x1, 0xf7}, {0x0, 0xe}, {0x2, 0x80}, {0x2, 0x9}]}}, 0xe) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000017c0)=ANY=[@ANYBLOB="020400000a000000000000000000000003b782f10913bc590006000000000002000000ac14140000000000000000000200010000000000000000000000122003000500"/80], 0x50}, 0x1, 0x7}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001400120c0001006d6163766c616e00040002b966e9c326741e8008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x0) kernel console output (not intermixed with test programs): 0xb0 [ 185.045786][ T8388] ? do_syscall_64+0xbe/0x3b0 [ 185.045808][ T8388] do_syscall_64+0xfa/0x3b0 [ 185.045823][ T8388] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.045840][ T8388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.045856][ T8388] ? clear_bhb_loop+0x60/0xb0 [ 185.045876][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.045891][ T8388] RIP: 0033:0x7f2509b8d8dc [ 185.045905][ T8388] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.045918][ T8388] RSP: 002b:00007f250aa5e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.045935][ T8388] RAX: ffffffffffffffda RBX: 00007f2509de5fa0 RCX: 00007f2509b8d8dc [ 185.045948][ T8388] RDX: 000000000000000f RSI: 00007f250aa5e0a0 RDI: 0000000000000004 [ 185.045957][ T8388] RBP: 00007f250aa5e090 R08: 0000000000000000 R09: 0000000000000000 [ 185.045974][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.045984][ T8388] R13: 00007f2509de6038 R14: 00007f2509de5fa0 R15: 00007ffda28332e8 [ 185.046012][ T8388] [ 185.755819][ T8424] ip6gre1: entered allmulticast mode [ 187.997587][ T8477] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 188.017545][ T8477] __nla_validate_parse: 15 callbacks suppressed [ 188.017565][ T8477] netlink: 224 bytes leftover after parsing attributes in process `syz.1.679'. [ 188.080094][ T8477] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 188.136388][ T8498] sctp: [Deprecated]: syz.2.687 (pid 8498) Use of int in maxseg socket option. [ 188.136388][ T8498] Use struct sctp_assoc_value instead [ 188.150190][ T8499] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 188.242506][ T8503] netlink: 'syz.2.687': attribute type 24 has an invalid length. [ 188.330489][ T8510] bridge: RTM_NEWNEIGH with invalid ether address [ 188.363557][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'. [ 188.468860][ T8514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.692'. [ 188.609334][ T8523] netlink: 44 bytes leftover after parsing attributes in process `syz.1.696'. [ 188.656282][ T8529] netlink: 'syz.3.698': attribute type 3 has an invalid length. [ 188.700692][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'. [ 188.741610][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.698'. [ 189.156910][ T8555] netlink: 'syz.0.706': attribute type 10 has an invalid length. [ 189.183086][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 189.207040][ T8554] delete_channel: no stack [ 189.286001][ T8558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.871701][ T8594] netlink: 'syz.3.716': attribute type 83 has an invalid length. [ 189.932489][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 190.524030][ T8629] veth1_macvtap: left promiscuous mode [ 190.707799][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 190.835936][ T8648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.729'. [ 190.976127][ T8650] bond0: entered promiscuous mode [ 190.987137][ T8650] bond_slave_0: entered promiscuous mode [ 191.000882][ T8650] bond_slave_1: entered promiscuous mode [ 191.024630][ T8650] bond0: left promiscuous mode [ 191.038655][ T8650] bond_slave_0: left promiscuous mode [ 191.049131][ T8650] bond_slave_1: left promiscuous mode [ 192.258762][ T8723] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 192.336445][ T8723] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 192.377621][ T8723] gretap3: entered promiscuous mode [ 192.393601][ T8723] gretap3: entered allmulticast mode [ 192.586510][ T8741] tipc: Enabled bearer , priority 0 [ 192.603678][ T8741] syzkaller0: entered promiscuous mode [ 192.628161][ T8741] syzkaller0: entered allmulticast mode [ 192.691535][ T8741] tipc: Resetting bearer [ 192.731371][ T8737] tipc: Resetting bearer [ 192.820091][ T8737] tipc: Disabling bearer [ 193.356469][ T8773] __nla_validate_parse: 7 callbacks suppressed [ 193.356485][ T8773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 193.441405][ T8781] netlink: 72 bytes leftover after parsing attributes in process `syz.3.768'. [ 193.467758][ T8783] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.762'. [ 193.734930][ T8795] syzkaller0: entered promiscuous mode [ 193.750571][ T8795] syzkaller0: entered allmulticast mode [ 193.779259][ T8794] tipc: Enabled bearer , priority 0 [ 193.833572][ T8790] tipc: Resetting bearer [ 193.880694][ T8790] tipc: Disabling bearer [ 193.899483][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 193.919578][ T8806] team0: Device vti0 is of different type [ 194.006572][ T8812] netlink: 'syz.4.776': attribute type 5 has an invalid length. [ 194.089387][ T8818] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 194.135270][ T8818] netlink: 224 bytes leftover after parsing attributes in process `syz.4.776'. [ 194.471785][ T8833] netlink: 76 bytes leftover after parsing attributes in process `syz.1.780'. [ 194.735599][ T8857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.036292][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'. [ 195.066422][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.794'. [ 195.234964][ T8878] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 195.243909][ T8878] netlink: 224 bytes leftover after parsing attributes in process `syz.0.797'. [ 195.258235][ T8878] openvswitch: netlink: Flow actions attr not present in new flow. [ 195.419955][ T8885] netlink: 48 bytes leftover after parsing attributes in process `syz.0.797'. [ 195.997314][ T8921] netlink: 'syz.4.809': attribute type 10 has an invalid length. [ 196.059706][ T8927] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 196.059851][ T8921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.095556][ T8921] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 196.120419][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.140810][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.169417][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.178345][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.206044][ T8926] bond0: (slave batadv0): Releasing backup interface [ 196.459684][ T8929] af_packet: tpacket_rcv: packet too big, clamped from 408 to 4294967272. macoff=96 [ 196.579808][ T8941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.901182][ T8981] netlink: 'syz.3.823': attribute type 6 has an invalid length. [ 196.931135][ T8981] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 197.160437][ T8990] netlink: 'syz.2.828': attribute type 39 has an invalid length. [ 197.344381][ T9004] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 197.399853][ T9000] lo speed is unknown, defaulting to 1000 [ 197.439536][ T9000] hsr0 speed is unknown, defaulting to 1000 [ 198.569170][ T9086] __nla_validate_parse: 8 callbacks suppressed [ 198.569189][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 198.641876][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 198.898994][ T9104] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.993640][ T9111] netlink: 'syz.1.846': attribute type 9 has an invalid length. [ 199.141022][ T9076] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.167829][ T9076] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 199.260361][ T9076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.282375][ T9076] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 199.323518][ T9076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.359219][ T9076] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 199.467768][ T9130] lo speed is unknown, defaulting to 1000 [ 199.475620][ T9130] hsr0 speed is unknown, defaulting to 1000 [ 200.206532][ T9170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.856'. [ 200.273788][ T9172] netlink: 64 bytes leftover after parsing attributes in process `syz.1.855'. [ 200.489717][ T9182] netlink: 200 bytes leftover after parsing attributes in process `syz.3.858'. [ 200.563629][ T9187] netlink: 165 bytes leftover after parsing attributes in process `syz.1.860'. [ 200.575112][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 200.769848][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 200.845740][ T9201] netlink: 'syz.4.862': attribute type 15 has an invalid length. [ 200.873607][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 200.922940][ T9013] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 200.951203][ T9013] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 200.985826][ T9013] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 200.996941][ T9013] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 201.569694][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 201.583280][ T9076] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.590901][ T9076] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 201.610013][ T9076] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.627727][ T9076] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 202.323399][ T9263] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 202.336125][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 202.563798][ T9278] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 202.738535][ T9282] bond6: (slave gretap1): making interface the new active one [ 202.747054][ T9282] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 202.841149][ T9284] syzkaller1: entered promiscuous mode [ 202.846672][ T9284] syzkaller1: entered allmulticast mode [ 203.083143][ T9306] netlink: 44 bytes leftover after parsing attributes in process `syz.2.881'. [ 203.755192][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.892'. [ 203.881209][ T9355] netlink: 'syz.0.893': attribute type 4 has an invalid length. [ 204.266396][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 204.277438][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'. [ 204.307032][ T9373] netlink: 232 bytes leftover after parsing attributes in process `syz.1.896'. [ 204.327502][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'. [ 204.375191][ T9384] veth9: entered promiscuous mode [ 204.393395][ T9384] veth9: entered allmulticast mode [ 204.692425][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 204.713864][ T9404] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.904'. [ 204.731593][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 204.743068][ T9404] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 204.755731][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 204.770977][ T9404] openvswitch: netlink: Message has 6332 unknown bytes. [ 204.788541][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.904'. [ 205.245068][ T9414] vlan2: entered promiscuous mode [ 205.739781][ T9447] IPv4: Oversized IP packet from 127.202.26.0 [ 205.861670][ T9455] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.969123][ T9455] netlink: 'syz.3.914': attribute type 9 has an invalid length. [ 206.198869][ T9469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.268956][ T9471] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 206.426067][ T9476] netlink: 'syz.1.919': attribute type 2 has an invalid length. [ 207.256973][ T9519] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 207.360613][ T9533] netlink: 'syz.3.933': attribute type 5 has an invalid length. [ 207.649845][ T9548] netlink: 'syz.2.936': attribute type 17 has an invalid length. [ 208.298808][ T9581] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 208.367050][ T9581] bridge0: port 3(batadv0) entered disabled state [ 208.416796][ T9581] batadv0: left allmulticast mode [ 208.455338][ T9581] batadv0: left promiscuous mode [ 208.471955][ T9581] bridge0: port 3(batadv0) entered disabled state [ 208.549267][ T9597] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 208.628207][ T9581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.646954][ T9581] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 208.712109][ T9597] batadv0: entered promiscuous mode [ 208.720666][ T9597] batadv0: entered allmulticast mode [ 208.738675][ T9597] bond0: (slave batadv0): Releasing backup interface [ 208.763131][ T9597] bridge0: port 3(batadv0) entered blocking state [ 208.770767][ T9597] bridge0: port 3(batadv0) entered disabled state [ 209.149081][ T9044] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 209.158866][ T9044] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 209.159011][ T9618] syzkaller0: entered promiscuous mode [ 209.186198][ T9633] __nla_validate_parse: 20 callbacks suppressed [ 209.186216][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 209.234617][ T9618] syzkaller0: entered allmulticast mode [ 209.449534][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 209.473188][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 209.522009][ T9622] netlink: 'syz.0.954': attribute type 3 has an invalid length. [ 209.665553][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 210.174331][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 210.191412][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 210.945124][ T9700] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 211.231201][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.971'. [ 212.559458][ T9696] tipc: Enabled bearer , priority 0 [ 212.582023][ T9713] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.971'. [ 212.598060][ T9697] syzkaller0: entered promiscuous mode [ 212.613366][ T9697] syzkaller0: entered allmulticast mode [ 212.666236][ T9717] bridge0: port 3(batadv0) entered disabled state [ 212.692002][ T9717] bridge_slave_0: left allmulticast mode [ 212.699616][ T9717] bridge_slave_0: left promiscuous mode [ 212.705507][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.724933][ T9717] bridge_slave_1: left allmulticast mode [ 212.731164][ T9717] bridge_slave_1: left promiscuous mode [ 212.736963][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.751249][ T9717] bond0: (slave bond_slave_0): Releasing backup interface [ 212.766623][ T9717] bond0: (slave bond_slave_1): Releasing backup interface [ 212.786988][ T9717] team0: Port device team_slave_0 removed [ 212.802672][ T9717] team0: Port device team_slave_1 removed [ 212.812575][ T9717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.820603][ T9717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.843528][ T9697] tipc: Resetting bearer [ 212.943858][ T9697] tipc: Disabling bearer [ 212.984683][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 213.017054][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 213.049859][ T9758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 213.118441][ T9758] bridge_slave_1: entered promiscuous mode [ 213.124586][ T9758] bridge_slave_1: entered allmulticast mode [ 213.740637][ T9796] netlink: 'syz.4.988': attribute type 21 has an invalid length. [ 213.764342][ T9796] netlink: 128 bytes leftover after parsing attributes in process `syz.4.988'. [ 213.789237][ T9796] netlink: 'syz.4.988': attribute type 5 has an invalid length. [ 213.884576][ T9805] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 214.099129][ T9805] 8021q: adding VLAN 0 to HW filter on device bond7 [ 214.213445][ T9811] bond7: (slave gretap2): making interface the new active one [ 214.246591][ T9811] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 214.326668][ T9815] vlan3: entered allmulticast mode [ 214.349338][ T9815] bond7: entered allmulticast mode [ 214.360323][ T9815] gretap2: entered allmulticast mode [ 214.386832][ T9815] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 214.421711][ T9836] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 214.453987][ T9836] netlink: 'syz.1.1001': attribute type 4 has an invalid length. [ 214.481490][ T9836] __nla_validate_parse: 2 callbacks suppressed [ 214.481507][ T9836] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1001'. [ 214.502280][ T9840] openvswitch: netlink: Key type 268 is out of range max 32 [ 214.739463][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 214.875776][ T9853] tipc: Enabled bearer , priority 0 [ 214.885390][ T9853] syzkaller0: entered promiscuous mode [ 214.921255][ T9853] syzkaller0: entered allmulticast mode [ 214.982758][ T9853] tipc: Resetting bearer [ 215.012369][ T9850] tipc: Resetting bearer [ 215.035816][ T9850] tipc: Disabling bearer [ 215.165561][ T9866] syzkaller0: entered promiscuous mode [ 215.196839][ T9866] syzkaller0: entered allmulticast mode [ 215.403394][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 215.421917][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'. [ 216.789469][ T9875] tipc: Enabled bearer , priority 0 [ 217.034104][ T9905] netlink: 'syz.4.1023': attribute type 21 has an invalid length. [ 217.177149][ T9875] tipc: Disabling bearer [ 217.194898][ T9905] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 217.214985][ T9914] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1026'. [ 217.397115][ T9922] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 217.424448][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 217.445924][ T9931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1027'. [ 217.499795][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'. [ 217.526171][ T9934] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1026'. [ 217.592302][ T9922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.615712][ T9936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1026'. [ 217.674606][ T9933] bond1: (slave gretap1): making interface the new active one [ 217.684416][ T9933] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 217.896243][ T9945] lo speed is unknown, defaulting to 1000 [ 217.930724][ T9945] hsr0 speed is unknown, defaulting to 1000 [ 217.948558][ T9949] nbd: must specify an index to disconnect [ 218.582858][ T9981] bridge0: port 3(team_slave_0) entered blocking state [ 218.602368][ T9981] bridge0: port 3(team_slave_0) entered disabled state [ 218.621111][ T9981] team_slave_0: entered allmulticast mode [ 218.631004][ T9981] team_slave_0: entered promiscuous mode [ 218.685689][ T9945] netlink: 'syz.4.1033': attribute type 13 has an invalid length. [ 218.718914][ T9945] netlink: 'syz.4.1033': attribute type 17 has an invalid length. [ 218.786209][ T9945] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 219.294018][T10010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.357887][ T9019] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.384111][ T9019] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.419066][ T9019] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.429887][ T9019] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.443854][ T9019] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.467979][T10025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.476980][ T9019] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.495361][ T9019] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.506985][ T9019] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.522868][T10025] bridge0: port 1(gretap0) entered blocking state [ 219.529945][T10025] bridge0: port 1(gretap0) entered disabled state [ 219.538014][T10025] gretap0: entered allmulticast mode [ 219.545290][T10025] bridge0: port 1(gretap0) entered blocking state [ 219.552022][T10025] bridge0: port 1(gretap0) entered forwarding state [ 219.704132][T10033] __nla_validate_parse: 4 callbacks suppressed [ 219.704151][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 219.722912][T10033] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1058'. [ 219.824975][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'. [ 220.031341][T10047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.076538][T10051] veth0: entered promiscuous mode [ 220.116158][T10050] veth0: left promiscuous mode [ 220.126705][T10048] lo speed is unknown, defaulting to 1000 [ 220.165073][T10048] hsr0 speed is unknown, defaulting to 1000 [ 220.216317][T10060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1069'. [ 221.170493][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 221.269235][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1084'. [ 221.747007][T10149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1086'. [ 222.188977][T10165] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1094'. [ 222.222129][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1093'. [ 222.233208][T10166] netlink: 'syz.3.1093': attribute type 21 has an invalid length. [ 222.278994][T10166] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.286467][T10169] pim6reg: entered allmulticast mode [ 222.305243][T10169] pim6reg: left allmulticast mode [ 222.334921][T10166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.342646][T10166] IPv6: NLM_F_CREATE should be set when creating new route [ 222.350052][T10166] IPv6: NLM_F_CREATE should be set when creating new route [ 222.357508][T10166] IPv6: NLM_F_CREATE should be set when creating new route [ 222.463591][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1098'. [ 222.686211][T10186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.725586][T10193] netlink: 'syz.3.1102': attribute type 2 has an invalid length. [ 222.732711][T10182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.745088][T10182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.796205][T10199] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 222.804648][T10189] tipc: Invalid UDP bearer configuration [ 222.804704][T10189] tipc: Enabling of bearer rejected, failed to enable media [ 222.849695][T10182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.865547][T10182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.089578][T10182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.139112][T10182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.349510][T10226] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 223.376775][T10182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.402420][T10182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.567028][T10243] netlink: 'syz.3.1114': attribute type 4 has an invalid length. [ 223.627902][ T9011] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.636647][ T9011] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.720855][ T9011] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.745591][ T9011] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.769312][ T9011] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.787880][ T9011] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.825398][ T3446] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.834167][ T3446] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.047788][T10269] netlink: 'syz.1.1122': attribute type 5 has an invalid length. [ 224.171605][T10276] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 224.272807][T10278] syz_tun: entered allmulticast mode [ 224.326297][T10282] netlink: 'syz.4.1127': attribute type 8 has an invalid length. [ 224.363635][T10286] mroute: pending queue full, dropping entries [ 224.380721][ C1] mroute: pending queue full, dropping entries [ 224.395215][T10287] openvswitch: netlink: Flow key attr not present in new flow. [ 224.446225][T10284] tipc: Started in network mode [ 224.456133][T10284] tipc: Node identity , cluster identity 4711 [ 224.464829][T10284] tipc: Failed to obtain node identity [ 224.473348][T10284] tipc: Enabling of bearer rejected, failed to enable media [ 224.502129][T10289] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 224.880999][T10310] __nla_validate_parse: 5 callbacks suppressed [ 224.881015][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1136'. [ 224.911130][T10314] 8021q: VLANs not supported on wg0 [ 224.916811][T10313] 8021q: VLANs not supported on wg0 [ 225.159617][T10277] syz_tun: left allmulticast mode [ 225.173703][T10325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.188781][T10326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.473955][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1145'. [ 225.660678][T10350] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1147'. [ 225.765611][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 225.807165][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 225.855680][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 225.902446][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 226.175907][T10378] netlink: 'syz.1.1156': attribute type 11 has an invalid length. [ 226.186604][T10378] netlink: 'syz.1.1156': attribute type 11 has an invalid length. [ 226.197033][T10378] netlink: 'syz.1.1156': attribute type 11 has an invalid length. [ 226.336454][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 226.403951][T10392] openvswitch: netlink: IP tunnel dst address not specified [ 226.529381][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 226.615380][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 226.625784][T10403] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 226.644540][T10403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.214719][T10431] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 227.962530][T10469] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 228.054214][T10469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.164525][T10478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.201113][T10478] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 228.222042][T10478] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 228.264119][T10469] vlan0: entered allmulticast mode [ 228.270945][T10469] bond1: entered allmulticast mode [ 228.368560][T10495] tipc: Enabled bearer , priority 0 [ 228.383733][T10471] veth0_macvtap: entered allmulticast mode [ 228.439005][T10487] lo speed is unknown, defaulting to 1000 [ 228.512490][T10487] hsr0 speed is unknown, defaulting to 1000 [ 228.840233][T10470] tipc: Disabling bearer [ 229.043174][T10527] netlink: 'syz.2.1203': attribute type 10 has an invalid length. [ 229.188575][T10527] team0: Device veth0_vlan failed to register rx_handler [ 229.750858][T10569] netlink: 'syz.2.1216': attribute type 64 has an invalid length. [ 229.931507][T10578] __nla_validate_parse: 11 callbacks suppressed [ 229.931525][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 229.950863][T10579] netlink: zone id is out of range [ 230.531970][T10611] netlink: 'syz.4.1225': attribute type 12 has an invalid length. [ 230.829512][T10624] macvtap1: entered promiscuous mode [ 230.834848][T10624] vlan0: entered promiscuous mode [ 230.843676][T10624] macvtap1: entered allmulticast mode [ 230.854371][T10624] vlan0: entered allmulticast mode [ 230.863122][T10624] veth0_vlan: entered allmulticast mode [ 230.936818][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 230.937593][T10632] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.1232'. [ 230.967064][T10632] openvswitch: netlink: Message has 5 unknown bytes. [ 230.969685][T10629] macvtap2: entered promiscuous mode [ 231.001552][T10629] macvtap2: entered allmulticast mode [ 231.166816][T10642] tipc: Enabling of bearer rejected, failed to enable media [ 231.700395][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1243'. [ 231.705505][T10672] lo speed is unknown, defaulting to 1000 [ 231.742810][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1245'. [ 231.905757][T10690] sctp: [Deprecated]: syz.0.1244 (pid 10690) Use of int in max_burst socket option. [ 231.905757][T10690] Use struct sctp_assoc_value instead [ 231.906350][T10672] hsr0 speed is unknown, defaulting to 1000 [ 232.119661][T10701] Unsupported ieee802154 address type: 0 [ 232.154870][T10703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1252'. [ 232.201495][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'. [ 232.415304][T10706] syzkaller1: entered promiscuous mode [ 232.426511][T10706] syzkaller1: entered allmulticast mode [ 232.471657][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 232.504699][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 232.714956][T10735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1258'. [ 232.884749][T10747] netlink: 'syz.0.1261': attribute type 3 has an invalid length. [ 232.938683][T10747] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 232.966795][T10751] netlink: 'syz.0.1261': attribute type 3 has an invalid length. [ 232.985942][T10751] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 233.191104][T10762] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 295.526720][T10785] tipc: Enabling of bearer rejected, failed to enable media [ 295.545132][T10788] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.563202][T10790] __nla_validate_parse: 2 callbacks suppressed [ 295.563219][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 295.588183][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 295.596555][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 295.614496][T10785] openvswitch: netlink: IP tunnel dst address not specified [ 295.624330][T10785] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1274'. [ 295.628634][T10791] bridge_slave_1: left allmulticast mode [ 295.659655][T10791] bridge_slave_1: left promiscuous mode [ 295.675816][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.712548][T10791] bridge_slave_0: left allmulticast mode [ 295.721690][T10791] bridge_slave_0: left promiscuous mode [ 295.738618][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.901924][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 296.152943][T10822] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1278'. [ 296.280458][T10828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1280'. [ 296.499026][T10839] tipc: Enabled bearer , priority 0 [ 296.526391][T10839] syzkaller0: entered promiscuous mode [ 296.554711][T10839] syzkaller0: entered allmulticast mode [ 296.558924][T10847] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1286'. [ 296.580658][T10845] netlink: 'syz.3.1285': attribute type 6 has an invalid length. [ 296.612393][T10839] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.710797][T10839] tipc: Resetting bearer [ 296.741686][T10838] tipc: Resetting bearer [ 296.800014][T10838] tipc: Disabling bearer [ 296.831787][T10859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1287'. [ 296.856768][T10859] openvswitch: netlink: Flow key attr not present in new flow. [ 296.913828][T10865] netlink: 'syz.4.1290': attribute type 4 has an invalid length. [ 297.415848][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 298.064853][T10922] macvtap2: entered promiscuous mode [ 298.110156][T10922] macvtap2: entered allmulticast mode [ 298.138343][T10926] netlink: 'syz.2.1301': attribute type 64 has an invalid length. [ 298.221496][T10923] ip6tnl2: entered promiscuous mode [ 298.390730][T10927] bridge0: entered promiscuous mode [ 298.437248][T10927] ip6gretap0: entered promiscuous mode [ 298.448947][T10927] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 298.865762][T10966] syz_tun: entered allmulticast mode [ 299.030619][T10972] siw: device registration error -23 [ 299.155987][T10984] netlink: 'syz.3.1320': attribute type 1 has an invalid length. [ 299.348788][T10984] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.837063][T11016] netlink: 'syz.4.1329': attribute type 29 has an invalid length. [ 299.851463][T10965] syz_tun: left allmulticast mode [ 299.859501][T11016] netlink: 'syz.4.1329': attribute type 29 has an invalid length. [ 299.909096][T11016] netlink: 'syz.4.1329': attribute type 29 has an invalid length. [ 299.943300][T11016] netlink: 'syz.4.1329': attribute type 29 has an invalid length. [ 300.166758][T11029] bridge_slave_0: left allmulticast mode [ 300.202987][T11029] bridge_slave_0: left promiscuous mode [ 300.209510][T11029] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.264999][T11029] bridge_slave_1: left allmulticast mode [ 300.265617][T11040] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 300.270948][T11029] bridge_slave_1: left promiscuous mode [ 300.271249][T11029] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.299356][T11029] bond0: (slave bond_slave_0): Releasing backup interface [ 300.311061][T11029] bond0: (slave bond_slave_1): Releasing backup interface [ 300.325164][T11029] team0: Port device team_slave_0 removed [ 300.335590][T11029] team0: Port device team_slave_1 removed [ 300.581570][T11053] __nla_validate_parse: 15 callbacks suppressed [ 300.581590][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 300.668707][T11057] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1338'. [ 300.783915][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 300.815010][T11062] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 301.004708][T11068] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 301.231681][T11079] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1347'. [ 301.267807][T11085] netlink: 'syz.1.1349': attribute type 4 has an invalid length. [ 301.464613][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 301.602333][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 301.681040][T11107] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 301.694291][T11112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1357'. [ 301.710197][T11115] netlink: 'syz.4.1358': attribute type 10 has an invalid length. [ 301.742967][T11115] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 301.754902][T11115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.849147][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 301.952094][T11124] veth9: entered allmulticast mode [ 301.960642][T11133] veth0: entered promiscuous mode [ 301.969307][T11130] tipc: Enabled bearer , priority 0 [ 301.981652][T11130] syzkaller0: entered promiscuous mode [ 301.998774][T11130] syzkaller0: entered allmulticast mode [ 302.009776][T11126] veth0: left promiscuous mode [ 302.032121][T11130] tipc: Resetting bearer [ 302.067934][T11129] tipc: Resetting bearer [ 302.122299][T11129] tipc: Disabling bearer [ 302.397628][T11156] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 302.528502][T11166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1373'. [ 302.758224][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1377'. [ 302.862572][T11173] lo speed is unknown, defaulting to 1000 [ 302.904036][T11173] hsr0 speed is unknown, defaulting to 1000 [ 302.921253][T11187] tipc: Enabling of bearer rejected, failed to enable media [ 303.030946][T11187] macsec1: entered promiscuous mode [ 303.060738][T11187] bridge0: entered promiscuous mode [ 303.066255][T11187] macsec1: entered allmulticast mode [ 303.073589][T11187] bridge0: entered allmulticast mode [ 303.081438][T11187] bridge0: port 1(macsec1) entered blocking state [ 303.089476][T11187] bridge0: port 1(macsec1) entered disabled state [ 303.134846][T11187] bridge0: left allmulticast mode [ 303.150852][T11187] bridge0: left promiscuous mode [ 303.242614][T11207] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 303.370072][T11217] macsec0: entered promiscuous mode [ 303.396634][T11217] macsec0: entered allmulticast mode [ 303.440830][T11217] veth1_macvtap: entered allmulticast mode [ 303.451282][T11217] macsec0: left promiscuous mode [ 303.467712][T11217] macsec0: left allmulticast mode [ 303.492904][T11217] veth1_macvtap: left allmulticast mode [ 303.772847][T11244] netlink: 'syz.1.1395': attribute type 33 has an invalid length. [ 303.952716][T11241] syzkaller1: entered promiscuous mode [ 303.960644][T11241] syzkaller1: entered allmulticast mode [ 304.121420][T11259] syzkaller0: entered promiscuous mode [ 304.135284][T11259] syzkaller0: entered allmulticast mode [ 304.149672][T11270] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 304.164909][T11259] tipc: Enabled bearer , priority 0 [ 304.603319][T11255] tipc: Resetting bearer [ 305.197086][ T5958] tipc: Node number set to 1167670543 [ 306.122350][T11255] tipc: Disabling bearer [ 306.334339][T11292] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 306.743861][T11317] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 306.745799][T11318] netlink: 'syz.3.1413': attribute type 1 has an invalid length. [ 306.767923][T11318] __nla_validate_parse: 11 callbacks suppressed [ 306.767943][T11318] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1413'. [ 306.812001][T11322] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 306.818270][T11318] netlink: 'syz.3.1413': attribute type 1 has an invalid length. [ 307.201474][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 307.433383][T11351] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 307.525078][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'. [ 307.546177][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 307.566794][T11361] pim6reg: entered allmulticast mode [ 307.571120][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 307.617026][T11364] pim6reg: left allmulticast mode [ 307.659985][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1426'. [ 307.678909][T11363] xfrm1: entered promiscuous mode [ 307.684103][T11363] xfrm1: entered allmulticast mode [ 307.974762][T11380] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1433'. [ 307.980812][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 308.014531][T11376] netlink: 'syz.1.1432': attribute type 16 has an invalid length. [ 308.033535][T11376] netlink: 'syz.1.1432': attribute type 17 has an invalid length. [ 308.111949][T11376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.122137][T11376] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.153776][T11376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.228109][ T5958] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.588267][ T5955] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.920829][T11450] delete_channel: no stack [ 308.926248][T11450] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1453'. [ 308.938215][ T9019] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.230743][T11470] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1460'. [ 309.281824][T11470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.394091][T11478] IPVS: set_ctl: invalid protocol: 46 172.30.1.5:20000 [ 309.415591][T11480] netlink: 'syz.2.1463': attribute type 11 has an invalid length. [ 309.667411][T11495] veth1_macvtap: left promiscuous mode [ 309.687653][T11495] macsec0: entered promiscuous mode [ 309.716977][T11495] macsec0: entered allmulticast mode [ 309.761456][T11498] veth1_macvtap: entered promiscuous mode [ 309.768696][T11498] veth1_macvtap: entered allmulticast mode [ 309.774959][T11498] macsec0: left promiscuous mode [ 309.780305][T11498] macsec0: left allmulticast mode [ 309.785658][T11498] veth1_macvtap: left allmulticast mode [ 309.968370][ T9019] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.008713][ T9019] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.109082][ T5928] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.165527][T11522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.326960][T11529] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 310.656954][T11540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.669049][T11553] netlink: 'syz.3.1485': attribute type 2 has an invalid length. [ 310.669196][T11552] netlink: 'syz.0.1484': attribute type 10 has an invalid length. [ 310.712084][T11540] bond2: (slave bond3): making interface the new active one [ 310.749544][T11540] bond2: (slave bond3): Enslaving as an active interface with an up link [ 310.796400][T11543] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 310.829319][T11529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.868740][T11552] team0: Port device geneve0 added [ 311.066184][T11568] macvtap1: entered allmulticast mode [ 311.123356][T11575] syzkaller0: entered promiscuous mode [ 311.134380][T11575] syzkaller0: entered allmulticast mode [ 311.147147][T11580] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 311.450143][T11606] netlink: 'syz.0.1498': attribute type 5 has an invalid length. [ 311.599016][T11613] openvswitch: netlink: Message has 4 unknown bytes. [ 311.616440][T11614] openvswitch: netlink: Message has 4 unknown bytes. [ 311.799940][T11621] sctp: [Deprecated]: syz.1.1503 (pid 11621) Use of int in max_burst socket option. [ 311.799940][T11621] Use struct sctp_assoc_value instead [ 311.826422][T11624] __nla_validate_parse: 22 callbacks suppressed [ 311.826440][T11624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'. [ 311.830804][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1505'. [ 311.991604][T11630] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1507'. [ 312.014863][T11632] netlink: 'syz.1.1508': attribute type 33 has an invalid length. [ 312.168759][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 312.190673][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 312.363390][T11658] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 312.381535][T11657] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1514'. [ 312.401472][T11658] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 312.426678][T11658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1513'. [ 312.871940][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 312.904777][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 312.974003][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'. [ 313.366409][T11726] veth0: entered promiscuous mode [ 313.389121][T11721] tipc: Enabled bearer , priority 0 [ 313.404746][T11721] lo: entered allmulticast mode [ 313.461976][T11727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.487558][T11726] veth0: left promiscuous mode [ 313.511062][T11721] syzkaller0: entered promiscuous mode [ 313.539588][T11721] syzkaller0: entered allmulticast mode [ 313.629281][T11721] tipc: Resetting bearer [ 313.820685][T11748] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 313.941211][T11748] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.044914][T11748] veth15: entered promiscuous mode [ 314.047578][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 314.064371][T11748] bond9: (slave veth15): Enslaving as an active interface with a down link [ 314.081472][T11717] tipc: Resetting bearer [ 314.115755][T11717] tipc: Disabling bearer [ 314.159549][T11768] netlink: 'syz.4.1545': attribute type 7 has an invalid length. [ 314.167623][T11768] netlink: 'syz.4.1545': attribute type 8 has an invalid length. [ 314.321983][ T5955] IPVS: starting estimator thread 0... [ 314.448907][T11776] IPVS: using max 34 ests per chain, 81600 per kthread [ 314.458788][T11780] macvtap3: entered promiscuous mode [ 314.464125][T11780] macvtap3: entered allmulticast mode [ 314.551999][T11783] macvtap3: entered promiscuous mode [ 314.572053][T11783] macvtap3: entered allmulticast mode [ 314.918995][T11811] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 316.253041][T11837] bond0: Error: Cannot enslave bond to itself. [ 316.298149][T11849] macvtap3: entered promiscuous mode [ 316.303501][T11849] macvtap3: entered allmulticast mode [ 316.424297][T11852] macvtap3: entered promiscuous mode [ 316.447611][T11852] macvtap3: entered allmulticast mode [ 316.472966][T11861] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 316.487915][T11856] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 316.560591][ T9044] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 316.616015][ T9044] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 316.689890][T11868] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 316.726804][ T3526] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 316.752737][ T3526] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 316.769363][T11877] netlink: 'syz.4.1578': attribute type 2 has an invalid length. [ 316.777724][T11877] nbd: must specify a device to reconfigure [ 316.779792][T11874] veth0_to_bond: entered allmulticast mode [ 317.069394][T11902] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 317.185464][T11909] __nla_validate_parse: 27 callbacks suppressed [ 317.185480][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1588'. [ 317.210841][T11910] gre1: entered promiscuous mode [ 317.221803][T11910] gre1: entered allmulticast mode [ 317.371022][T11915] macvtap2: entered promiscuous mode [ 317.376817][T11915] vlan0: entered promiscuous mode [ 317.384543][T11915] macvtap2: entered allmulticast mode [ 317.390634][T11915] vlan0: entered allmulticast mode [ 317.397096][T11915] veth0_vlan: entered allmulticast mode [ 317.404446][T11921] netlink: 'syz.1.1592': attribute type 4 has an invalid length. [ 317.410549][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 317.442626][T11920] macvtap3: entered promiscuous mode [ 317.448559][T11920] macvtap3: entered allmulticast mode [ 318.103071][T11954] netlink: 'syz.1.1599': attribute type 9 has an invalid length. [ 318.122441][T11952] netlink: 'syz.1.1599': attribute type 9 has an invalid length. [ 318.154126][T11953] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 318.182535][T11958] netlink: 'syz.4.1602': attribute type 10 has an invalid length. [ 318.333742][T11962] macvtap3: entered promiscuous mode [ 318.347168][T11962] macvtap3: entered allmulticast mode [ 318.385260][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 318.443172][T11971] macvtap3: entered promiscuous mode [ 318.461812][T11971] macvtap3: entered allmulticast mode [ 318.742798][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1610'. [ 318.760256][T11995] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 318.793890][T11991] openvswitch: netlink: Flow key attr not present in new flow. [ 319.156677][T12020] netlink: 'syz.1.1617': attribute type 7 has an invalid length. [ 319.181390][T12020] netlink: 'syz.1.1617': attribute type 8 has an invalid length. [ 319.223006][T12020] Bluetooth: MGMT ver 1.23 [ 319.294009][T12024] tipc: Started in network mode [ 319.312581][T12024] tipc: Node identity ea88d715760e, cluster identity 4711 [ 319.377546][T12024] tipc: Enabled bearer , priority 0 [ 319.421422][T12031] syzkaller0: entered promiscuous mode [ 319.430685][T12031] syzkaller0: entered allmulticast mode [ 319.467561][T12032] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 319.515937][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 319.533222][T12037] netlink: 'syz.3.1621': attribute type 30 has an invalid length. [ 319.543417][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 319.568140][T12031] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 319.602178][T12032] tipc: Resetting bearer [ 319.642981][T12024] macvtap4: entered promiscuous mode [ 319.668591][T12024] macvtap4: entered allmulticast mode [ 319.747869][T12045] 8021q: VLANs not supported on ip_vti0 [ 319.800124][T12031] macvtap4: entered promiscuous mode [ 319.805465][T12031] macvtap4: entered allmulticast mode [ 319.971945][T12023] tipc: Resetting bearer [ 320.038315][T12023] tipc: Disabling bearer [ 320.116805][T12066] syzkaller0: entered promiscuous mode [ 320.143825][T12066] syzkaller0: entered allmulticast mode [ 320.194171][T12066] syzkaller0: mtu less than device minimum [ 320.239491][T12077] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1632'. [ 320.336513][T12077] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1632'. [ 320.444782][T12094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.464613][T12095] nftables ruleset with unbound chain [ 320.516883][T12098] openvswitch: netlink: Multiple metadata blocks provided [ 320.811303][T12112] macvtap4: entered promiscuous mode [ 320.817192][T12112] macvtap4: entered allmulticast mode [ 320.879709][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 320.885066][T12127] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1647'. [ 320.935705][T12121] macvtap4: entered promiscuous mode [ 320.944652][T12121] macvtap4: entered allmulticast mode [ 322.015354][T12186] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20000 [ 322.102978][T12190] macvtap4: entered promiscuous mode [ 322.137921][T12190] macvtap4: entered allmulticast mode [ 322.233386][T12196] macvtap4: entered promiscuous mode [ 322.254146][T12196] macvtap4: entered allmulticast mode [ 322.371342][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.397468][T12203] __nla_validate_parse: 1 callbacks suppressed [ 322.397484][T12203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1665'. [ 322.473843][T12198] lo speed is unknown, defaulting to 1000 [ 322.570296][T12198] hsr0 speed is unknown, defaulting to 1000 [ 322.708753][T12218] pim6reg: entered allmulticast mode [ 322.804652][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 322.810372][T12218] pim6reg: left allmulticast mode [ 322.813874][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1671'. [ 322.881974][T12231] bridge_slave_0: default FDB implementation only supports local addresses [ 322.893492][T12235] netlink: 'syz.1.1673': attribute type 10 has an invalid length. [ 322.910711][T12235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1673'. [ 322.959702][T12235] team0: Port device geneve0 added [ 322.966254][ T9034] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.976764][ T9034] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.001506][ T9034] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.018749][ T9034] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.125330][T12246] sock: sock_set_timeout: `syz.3.1674' (pid 12246) tries to set negative timeout [ 323.179466][T12246] tipc: Enabled bearer , priority 0 [ 323.202358][T12249] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1678'. [ 323.242273][T12236] tipc: Disabling bearer [ 323.449486][T12260] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 323.581046][T12268] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1681'. [ 323.753139][T12273] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1687'. [ 323.948537][T12282] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 323.995262][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'. [ 324.021412][T12282] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 324.214099][T12298] netlink: 'syz.0.1692': attribute type 1 has an invalid length. [ 324.363074][T12298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.372048][T12307] syzkaller0: entered promiscuous mode [ 324.417030][T12307] syzkaller0: entered allmulticast mode [ 324.466722][T12303] tipc: Enabled bearer , priority 0 [ 324.501382][T12302] tipc: Resetting bearer [ 324.535398][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 324.690289][T12323] bridge0: port 1(gretap0) entered disabled state [ 324.793958][T12325] pim6reg1: entered allmulticast mode [ 324.858670][T12299] tipc: Resetting bearer [ 324.898115][T12299] tipc: Disabling bearer [ 325.138840][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 325.666381][T12387] openvswitch: netlink: nsh attr 1024 is out of range max 3 [ 325.674517][T12387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.309497][T12409] netlink: 'syz.3.1726': attribute type 1 has an invalid length. [ 326.323167][T12409] netlink: 'syz.3.1726': attribute type 1 has an invalid length. [ 326.914322][T12442] netlink: 'syz.4.1735': attribute type 5 has an invalid length. [ 326.932054][T12439] macvtap4: entered promiscuous mode [ 326.963930][T12439] macvtap4: entered allmulticast mode [ 326.991891][T12445] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 327.164826][T12452] bond4: (slave bridge4): making interface the new active one [ 327.180622][T12452] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 327.209036][T12463] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 327.247097][T12453] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 327.310821][T12453] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 327.328039][T12453] gretap3: entered promiscuous mode [ 327.345640][T12453] gretap3: entered allmulticast mode [ 327.516835][T12483] __nla_validate_parse: 9 callbacks suppressed [ 327.516854][T12483] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1748'. [ 327.553859][T12482] netlink: 'syz.0.1747': attribute type 12 has an invalid length. [ 327.582972][T12485] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1748'. [ 327.632768][T12485] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 327.671023][T12485] 0ªî{X¹¦: entered allmulticast mode [ 327.682990][T12485] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 327.764682][T12483] 0ªî{X¹¦: entered promiscuous mode [ 327.796990][T12483] 0ªî{X¹¦: left allmulticast mode [ 327.827520][T12501] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:0 [ 327.980362][T12507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1751'. [ 328.079457][T12512] netlink: 'syz.4.1753': attribute type 10 has an invalid length. [ 328.112852][T12512] bridge0: port 1(team0) entered blocking state [ 328.137517][T12512] bridge0: port 1(team0) entered disabled state [ 328.144026][T12512] team0: entered allmulticast mode [ 328.182247][T12512] team0: entered promiscuous mode [ 328.724613][T12543] netlink: 'syz.4.1761': attribute type 7 has an invalid length. [ 328.726438][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 329.402246][T12565] IPVS: length: 157 != 24 [ 329.404769][T12561] pimreg: entered allmulticast mode [ 329.552019][T12576] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1773'. [ 329.570121][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 329.581296][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1769'. [ 329.638306][T12577] !: renamed from dummy0 (while UP) [ 329.908208][T12595] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1778'. [ 329.986152][T12600] netlink: 'syz.1.1779': attribute type 13 has an invalid length. [ 330.134904][T12600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.166671][ T5928] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 330.251748][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1784'. [ 330.365255][T12623] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1787'. [ 330.626972][T12642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.928346][ T5928] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.004815][T12658] netlink: 'syz.0.1799': attribute type 7 has an invalid length. [ 331.515159][T12698] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 332.072716][T12742] netlink: 'syz.4.1824': attribute type 58 has an invalid length. [ 332.369857][T12739] bond0: (slave team0): Releasing backup interface [ 332.382868][T12739] team0 (unregistering): Port device team_slave_0 removed [ 332.393315][T12739] team0 (unregistering): Port device team_slave_1 removed [ 332.529685][T12762] __nla_validate_parse: 11 callbacks suppressed [ 332.529705][T12762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1830'. [ 332.558345][T12762] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1830'. [ 332.582869][T12768] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 332.588476][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 332.596205][T12762] netlink: 'syz.0.1830': attribute type 4 has an invalid length. [ 332.606767][T12767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1833'. [ 332.780776][T12780] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 332.833766][T12784] netlink: 'syz.0.1836': attribute type 1 has an invalid length. [ 332.855260][T12783] netlink: 'syz.4.1837': attribute type 21 has an invalid length. [ 332.867557][T12780] netlink: 'syz.1.1835': attribute type 21 has an invalid length. [ 332.867742][T12783] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.890889][T12780] netlink: 'syz.1.1835': attribute type 22 has an invalid length. [ 332.917974][T12780] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1835'. [ 332.942426][T12783] "syz.4.1837" (12783) uses obsolete ecb(arc4) skcipher [ 333.178973][T12797] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULDŒw˜zR3âëp(@Ož>ÆÀ [ 333.223578][T12805] validate_nla: 2 callbacks suppressed [ 333.223598][T12805] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 333.334844][T12815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1847'. [ 333.374169][T12819] netlink: 'syz.4.1849': attribute type 5 has an invalid length. [ 333.381571][T12805] bond1: entered promiscuous mode [ 333.389838][T12805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.431826][T12813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.448661][T12813] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 333.472506][T12813] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 333.488471][T12815] IPVS: set_ctl: invalid protocol: 17139 172.30.0.1:20000 [ 333.510975][T12813] bond1: (slave wireguard0): making interface the new active one [ 333.522606][T12813] wireguard0: entered promiscuous mode [ 333.551068][T12813] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 333.563257][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1847'. [ 333.604098][T12811] lo speed is unknown, defaulting to 1000 [ 333.609242][T12826] ip6gretap0: entered promiscuous mode [ 333.639619][T12826] ip6gretap0: entered allmulticast mode [ 333.654715][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1851'. [ 333.665623][T12811] hsr0 speed is unknown, defaulting to 1000 [ 333.944499][T12842] syz_tun: entered allmulticast mode [ 333.984905][T12845] netlink: 'syz.2.1856': attribute type 2 has an invalid length. [ 334.058641][T12845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1856'. [ 334.513815][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 334.568261][ T9015] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.654743][ T9015] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.691920][ T9015] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.797724][ T3498] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.246338][T12970] netlink: 'syz.1.1879': attribute type 5 has an invalid length. [ 336.918197][T13001] netlink: 'syz.4.1886': attribute type 5 has an invalid length. [ 337.916246][T13050] __nla_validate_parse: 4 callbacks suppressed [ 337.916265][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1895'. [ 337.953441][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 337.976550][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1895'. [ 338.234261][T13059] ip6gretap0: left promiscuous mode [ 338.251859][T13059] ip6gretap0: left allmulticast mode [ 338.392573][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 338.413601][T13067] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1901'. [ 338.457927][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1900'. [ 338.489170][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 338.769191][T13087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1907'. [ 338.893709][T13096] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1908'. [ 338.904722][T13095] netlink: 'syz.1.1908': attribute type 10 has an invalid length. [ 338.926131][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 338.975898][T13099] netlink: 'syz.3.1909': attribute type 2 has an invalid length. [ 339.045260][T13101] tipc: Enabled bearer , priority 0 [ 339.055859][T13101] syzkaller0: entered promiscuous mode [ 339.063307][T13101] syzkaller0: entered allmulticast mode [ 339.103874][T13101] tipc: Resetting bearer [ 339.116400][T13100] tipc: Resetting bearer [ 339.143137][T13100] tipc: Disabling bearer [ 339.283698][T13106] netlink: 'syz.2.1912': attribute type 21 has an invalid length. [ 339.308470][T13106] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 339.743617][T13127] netlink: 'syz.0.1918': attribute type 4 has an invalid length. [ 339.792239][T13130] netlink: 'syz.2.1920': attribute type 1 has an invalid length. [ 339.882864][T13133] netlink: 'syz.0.1921': attribute type 10 has an invalid length. [ 339.992335][T13130] veth5: entered promiscuous mode [ 340.732273][T13197] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 341.779264][T13269] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 342.010574][T13279] tipc: Enabled bearer , priority 0 [ 342.022152][T13279] syzkaller0: entered allmulticast mode [ 342.030254][T13279] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 342.045756][T13279] tipc: Resetting bearer [ 342.067104][T13278] tipc: Disabling bearer [ 342.139504][T13285] netlink: 'syz.3.1955': attribute type 3 has an invalid length. [ 342.150452][T13285] netlink: 'syz.3.1955': attribute type 3 has an invalid length. [ 342.942638][T13333] __nla_validate_parse: 11 callbacks suppressed [ 342.942657][T13333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1968'. [ 342.999032][T13333] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1968'. [ 343.133138][T13333] gretap0: entered promiscuous mode [ 343.183818][T13333] gretap0: entered allmulticast mode [ 343.196085][T13339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1970'. [ 343.291619][T13346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1970'. [ 343.366818][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'. [ 343.558316][T13355] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1973'. [ 343.780413][T13368] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 343.869855][T13374] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 343.941445][T13368] bond11: entered promiscuous mode [ 343.952202][T13368] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.995485][T13386] netlink: 'syz.4.1983': attribute type 4 has an invalid length. [ 344.025566][T13375] bond11: (slave bridge3): making interface the new active one [ 344.056457][T13375] bridge3: entered promiscuous mode [ 344.063604][T13375] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 344.085360][T13388] tipc: Enabled bearer , priority 0 [ 344.094519][T13399] netlink: 'syz.4.1983': attribute type 4 has an invalid length. [ 344.176061][T13384] syzkaller0: entered promiscuous mode [ 344.188446][T13384] syzkaller0: entered allmulticast mode [ 344.212337][T13401] netlink: 'syz.4.1983': attribute type 5 has an invalid length. [ 344.244655][T13384] tipc: Resetting bearer [ 344.324201][T13383] tipc: Resetting bearer [ 344.361637][T13410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1990'. [ 344.387733][T13383] tipc: Disabling bearer [ 344.430677][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'. [ 344.612251][T13419] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 344.627075][T13419] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 344.690730][T13424] macvlan0: entered promiscuous mode [ 344.696077][T13424] macvlan0: entered allmulticast mode [ 344.703028][T13424] bond3: (slave macvlan0): Error -98 calling set_mac_address [ 345.706225][T13468] syzkaller1: entered promiscuous mode [ 345.713135][T13468] syzkaller1: entered allmulticast mode [ 345.852018][T13482] macvtap1: entered allmulticast mode [ 345.871830][T13482] veth0_macvtap: entered allmulticast mode [ 346.036085][T13488] syzkaller1: entered promiscuous mode [ 346.052875][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 346.077424][T13488] syzkaller1: entered allmulticast mode [ 346.500597][T13516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2016'. [ 347.609438][T13565] netlink: 'syz.2.2030': attribute type 3 has an invalid length. [ 347.980539][T13579] __nla_validate_parse: 8 callbacks suppressed [ 347.980559][T13579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2033'. [ 348.117931][T13584] syzkaller1: entered promiscuous mode [ 348.123734][T13584] syzkaller1: entered allmulticast mode [ 348.324689][T13599] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2039'. [ 348.472882][T13604] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 348.513120][T13606] netlink: 'syz.3.2041': attribute type 24 has an invalid length. [ 348.779542][T13613] lo speed is unknown, defaulting to 1000 [ 348.790415][T13613] hsr0 speed is unknown, defaulting to 1000 [ 349.433180][T13644] sit0: entered allmulticast mode [ 349.439406][T13648] sock: sock_timestamping_bind_phc: sock not bind to device [ 349.603612][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2057'. [ 349.614047][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2057'. [ 349.874679][T13677] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2061'. [ 349.951809][T13682] netlink: 'syz.0.2062': attribute type 33 has an invalid length. [ 349.997199][T13682] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 350.168661][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2063'. [ 350.296486][T13695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2063'. [ 350.316625][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 350.419297][T13695] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2063'. [ 350.443156][T13695] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2063'. [ 350.741081][T13734] netlink: 'syz.3.2074': attribute type 2 has an invalid length. [ 350.769579][T13734] netlink: 'syz.3.2074': attribute type 8 has an invalid length. [ 351.219094][T13750] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 351.227884][T13750] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 352.888355][T13846] netlink: 'syz.0.2098': attribute type 9 has an invalid length. [ 353.407912][T13846] __nla_validate_parse: 10 callbacks suppressed [ 353.407933][T13846] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2098'. [ 353.431102][T13860] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2104'. [ 353.499532][T13848] netlink: 'syz.0.2098': attribute type 10 has an invalid length. [ 353.717381][T13877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2107'. [ 353.916256][T13877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2107'. [ 354.079391][T13901] netlink: 'syz.0.2110': attribute type 1 has an invalid length. [ 354.095404][T13901] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2110'. [ 354.376352][T13920] netlink: 'syz.1.2115': attribute type 1 has an invalid length. [ 354.616302][T13941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.648720][T13929] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 354.723258][T13933] veth11: entered promiscuous mode [ 354.736663][T13933] bond6: (slave veth11): Enslaving as a backup interface with a down link [ 355.185284][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2126'. [ 355.430589][T13980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2125'. [ 355.523180][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'. [ 355.551720][T13988] netlink: 'syz.3.2129': attribute type 39 has an invalid length. [ 355.701636][T13996] netlink: 'syz.2.2134': attribute type 83 has an invalid length. [ 355.868416][T14006] lo speed is unknown, defaulting to 1000 [ 355.887184][T14006] hsr0 speed is unknown, defaulting to 1000 [ 355.904707][T14005] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2136'. [ 356.109458][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 356.260548][T14027] veth1_to_bond: entered allmulticast mode [ 356.488676][T14016] veth1_to_bond: left allmulticast mode [ 356.754514][T14057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.077769][ T30] audit: type=1800 audit(1758541573.817:4): pid=14077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2154" name="memory.events" dev="tmpfs" ino=1947 res=0 errno=0 [ 359.170393][T14076] lo: entered promiscuous mode [ 359.183560][T14076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.514693][T14108] __nla_validate_parse: 3 callbacks suppressed [ 359.514711][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 359.686648][T14121] Bluetooth: MGMT ver 1.23 [ 359.879847][T14133] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 359.907619][T14133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2171'. [ 359.919548][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 359.930928][T14133] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 360.017109][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2171'. [ 360.058666][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2174'. [ 360.235101][T14147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2176'. [ 360.249645][T14147] netlink: 'syz.4.2176': attribute type 7 has an invalid length. [ 360.268857][T14147] netlink: 'syz.4.2176': attribute type 8 has an invalid length. [ 360.276707][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2176'. [ 360.339292][T14157] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 360.516669][T14163] netlink: 'syz.3.2180': attribute type 3 has an invalid length. [ 360.586378][T14172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2182'. [ 360.627017][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 360.699617][T14177] tipc: Enabled bearer , priority 0 [ 360.717186][T14177] syzkaller0: entered promiscuous mode [ 360.727374][T14177] syzkaller0: entered allmulticast mode [ 360.834378][T14184] tipc: Resetting bearer [ 360.893715][T14184] tipc: Resetting bearer [ 360.972192][T14184] tipc: Disabling bearer [ 360.993416][T14192] netlink: 'syz.4.2187': attribute type 12 has an invalid length. [ 361.001933][T14192] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2187'. [ 361.199712][T14204] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 361.225649][T14204] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 361.392365][T14212] netlink: 'syz.0.2192': attribute type 1 has an invalid length. [ 361.401270][T14212] netlink: 'syz.0.2192': attribute type 2 has an invalid length. [ 361.433798][T14214] netlink: 'syz.2.2193': attribute type 23 has an invalid length. [ 361.566421][T14218] netlink: 'syz.0.2194': attribute type 6 has an invalid length. [ 361.568708][T14219] netlink: 'syz.1.2195': attribute type 1 has an invalid length. [ 361.983148][T14219] bond7: entered promiscuous mode [ 361.991843][T14219] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.050386][T14233] bond7: (slave bridge8): making interface the new active one [ 362.059358][T14233] bridge8: entered promiscuous mode [ 362.065708][T14233] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 362.362138][T14261] tipc: Failed to remove unknown binding: 66,1,1/0:2080117809/2080117811 [ 362.405951][T14262] netlink: 'syz.3.2205': attribute type 10 has an invalid length. [ 362.430499][T14261] : renamed from bridge_slave_0 (while UP) [ 362.443329][T14262] bridge_slave_1: left allmulticast mode [ 362.492649][T14262] bridge_slave_1: left promiscuous mode [ 362.513945][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.587071][T14262] bridge_slave_1: entered promiscuous mode [ 362.619953][T14262] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 362.921852][T14290] netlink: 'syz.4.2213': attribute type 33 has an invalid length. [ 363.079100][T14292] openvswitch: netlink: Flow key attr not present in new flow. [ 363.300510][T14295] lo speed is unknown, defaulting to 1000 [ 363.313271][T14295] hsr0 speed is unknown, defaulting to 1000 [ 363.844518][T14314] sock: sock_timestamping_bind_phc: sock not bind to device [ 363.896899][T14316] tipc: Enabling of bearer rejected, failed to enable media [ 364.425481][T14343] IPVS: set_ctl: invalid protocol: 136 172.30.1.1:20004 [ 364.561279][T14351] __nla_validate_parse: 15 callbacks suppressed [ 364.561299][T14351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2229'. [ 364.696175][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2234'. [ 364.764857][T14363] netlink: 'syz.1.2232': attribute type 12 has an invalid length. [ 364.778775][T14359] netlink: 'syz.1.2232': attribute type 12 has an invalid length. [ 364.816369][T14373] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2232'. [ 364.946697][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 365.072302][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 365.193927][T14388] veth19: entered allmulticast mode [ 365.203492][T14393] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 365.233679][T14393] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 365.252921][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2243'. [ 365.375254][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'. [ 365.580411][T14425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2248'. [ 365.841226][T14432] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2250'. [ 365.981940][T14446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.997182][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2253'. [ 366.015780][T14446] vlan2: entered allmulticast mode [ 366.021254][T14446] bond1: entered allmulticast mode [ 366.482081][T14472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.511188][T14473] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 366.561343][T14477] validate_nla: 1 callbacks suppressed [ 366.561364][T14477] netlink: 'syz.3.2263': attribute type 5 has an invalid length. [ 366.599159][T14482] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 366.624100][T14482] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 366.794636][T14492] netlink: 'syz.1.2267': attribute type 1 has an invalid length. [ 367.600143][T14496] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 367.615892][T14496] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 367.653018][T14499] vlan3: entered allmulticast mode [ 367.659257][T14499] bridge0: entered allmulticast mode [ 367.669676][T14499] bond8: (slave vlan3): Opening slave failed [ 367.687005][ T9013] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.714407][ T9013] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.736901][ T9013] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.766747][ T9013] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.828533][T14518] netlink: 'syz.0.2272': attribute type 8 has an invalid length. [ 368.217749][T14540] nbd0: detected capacity change from 0 to 127 [ 368.372991][ T5879] block nbd0: Receive control failed (result -104) [ 369.652866][T14606] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 369.805806][T14595] lo speed is unknown, defaulting to 1000 [ 369.844618][T14595] hsr0 speed is unknown, defaulting to 1000 [ 370.103854][T14629] __nla_validate_parse: 12 callbacks suppressed [ 370.103876][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'. [ 370.123152][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 370.132764][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2296'. [ 370.311129][T14648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2305'. [ 370.472037][T14654] tipc: Enabling of bearer rejected, failed to enable media [ 370.485906][T14657] netlink: 'syz.4.2309': attribute type 39 has an invalid length. [ 370.586555][T14667] syz.2.2310: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 370.606481][T14667] CPU: 1 UID: 0 PID: 14667 Comm: syz.2.2310 Not tainted syzkaller #0 PREEMPT(full) [ 370.606508][T14667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.606524][T14667] Call Trace: [ 370.606531][T14667] [ 370.606539][T14667] dump_stack_lvl+0x189/0x250 [ 370.606569][T14667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.606590][T14667] ? __pfx__printk+0x10/0x10 [ 370.606613][T14667] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 370.606633][T14667] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 370.606655][T14667] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 370.606677][T14667] warn_alloc+0x214/0x310 [ 370.606703][T14667] ? stack_depot_save_flags+0x40/0x860 [ 370.606729][T14667] ? __pfx_warn_alloc+0x10/0x10 [ 370.606751][T14667] ? kasan_save_track+0x4f/0x80 [ 370.606768][T14667] ? xskq_create+0x56/0x170 [ 370.606781][T14667] ? xsk_init_queue+0xb0/0x110 [ 370.606794][T14667] ? xsk_setsockopt+0x4dc/0x8d0 [ 370.606817][T14667] ? do_sock_setsockopt+0x17c/0x1b0 [ 370.606834][T14667] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 370.606851][T14667] ? do_syscall_64+0xfa/0x3b0 [ 370.606869][T14667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.606903][T14667] __vmalloc_node_range_noprof+0x125/0x12f0 [ 370.606957][T14667] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 370.606987][T14667] ? __kasan_kmalloc+0x93/0xb0 [ 370.607012][T14667] vmalloc_user_noprof+0xad/0xf0 [ 370.607034][T14667] ? xskq_create+0xbf/0x170 [ 370.607051][T14667] xskq_create+0xbf/0x170 [ 370.607070][T14667] xsk_init_queue+0xb0/0x110 [ 370.607089][T14667] xsk_setsockopt+0x4dc/0x8d0 [ 370.607115][T14667] ? __pfx_xsk_setsockopt+0x10/0x10 [ 370.607138][T14667] ? __pfx_aa_sk_perm+0x10/0x10 [ 370.607166][T14667] ? aa_sock_opt_perm+0xff/0x1b0 [ 370.607187][T14667] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 370.607206][T14667] ? __pfx_xsk_setsockopt+0x10/0x10 [ 370.607230][T14667] do_sock_setsockopt+0x17c/0x1b0 [ 370.607260][T14667] __x64_sys_setsockopt+0x13f/0x1b0 [ 370.607283][T14667] do_syscall_64+0xfa/0x3b0 [ 370.607300][T14667] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.607317][T14667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.607333][T14667] ? clear_bhb_loop+0x60/0xb0 [ 370.607353][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.607376][T14667] RIP: 0033:0x7f3ade78eec9 [ 370.607393][T14667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.607409][T14667] RSP: 002b:00007f3adf637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 370.607428][T14667] RAX: ffffffffffffffda RBX: 00007f3ade9e5fa0 RCX: 00007f3ade78eec9 [ 370.607441][T14667] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 370.607451][T14667] RBP: 00007f3ade811f91 R08: 0000000000000004 R09: 0000000000000000 [ 370.607461][T14667] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.607471][T14667] R13: 00007f3ade9e6038 R14: 00007f3ade9e5fa0 R15: 00007ffc3dc69028 [ 370.607499][T14667] [ 370.607683][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2311'. [ 370.648790][T14667] Mem-Info: [ 370.712418][T14664] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2311'. [ 370.857727][T14667] active_anon:5940 inactive_anon:0 isolated_anon:0 [ 370.857727][T14667] active_file:3280 inactive_file:39982 isolated_file:0 [ 370.857727][T14667] unevictable:768 dirty:86 writeback:0 [ 370.857727][T14667] slab_reclaimable:11359 slab_unreclaimable:115998 [ 370.857727][T14667] mapped:29549 shmem:1429 pagetables:1193 [ 370.857727][T14667] sec_pagetables:0 bounce:0 [ 370.857727][T14667] kernel_misc_reclaimable:0 [ 370.857727][T14667] free:1307453 free_pcp:17167 free_cma:0 [ 370.990979][T14667] Node 0 active_anon:23760kB inactive_anon:0kB active_file:13120kB inactive_file:159724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118196kB dirty:344kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14796kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 371.094928][T14667] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 371.180174][T14667] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 371.212415][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2314'. [ 371.231200][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2314'. [ 371.262033][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 371.282637][T14667] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 371.290219][T14667] Node 0 DMA32 free:1327052kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23464kB inactive_anon:0kB active_file:13120kB inactive_file:158140kB unevictable:1536kB writepending:348kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:49144kB local_pcp:23884kB free_cma:0kB [ 371.394140][T14667] lowmem_reserve[]: 0 0 1 1 1 [ 371.425335][T14667] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1584kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 371.503892][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2320'. [ 371.517382][T14667] lowmem_reserve[]: 0 0 0 0 0 [ 371.524468][T14667] Node 1 Normal free:3887528kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20168kB local_pcp:10840kB free_cma:0kB [ 371.595842][T14667] lowmem_reserve[]: 0 0 0 0 0 [ 371.601725][T14667] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 371.643129][T14667] Node 0 DMA32: 725*4kB (UME) 409*8kB (ME) 105*16kB (ME) 1085*32kB (UME) 252*64kB (UME) 39*128kB (UM) 13*256kB (U) 7*512kB (UM) 1*1024kB (U) 7*2048kB (UME) 303*4096kB (M) = 1327052kB [ 371.676682][T14667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 371.690197][T14667] Node 1 Normal: 208*4kB (UE) 57*8kB (UME) 46*16kB (UME) 70*32kB (UME) 28*64kB (UME) 8*128kB (UME) 2*256kB (M) 2*512kB (M) 4*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3887528kB [ 371.712937][T14667] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.731084][T14712] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 371.762026][T14667] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 371.790075][T14667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 371.829637][T14667] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 371.878755][T14667] 46748 total pagecache pages [ 371.888379][T14667] 0 pages in swap cache [ 371.892858][T14667] Free swap = 124996kB [ 371.917906][T14667] Total swap = 124996kB [ 371.923376][T14667] 2097051 pages RAM [ 371.927210][T14667] 0 pages HighMem/MovableOnly [ 371.938695][T14667] 425672 pages reserved [ 371.948978][T14667] 0 pages cma reserved [ 372.284579][T14739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.812975][T14771] wg1: entered promiscuous mode [ 372.818328][T14771] wg1: entered allmulticast mode [ 374.089599][T14822] netlink: 'syz.4.2348': attribute type 4 has an invalid length. [ 374.525438][T14858] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 375.092198][T14879] netlink: 'syz.2.2362': attribute type 2 has an invalid length. [ 375.559411][ T48] IPVS: starting estimator thread 0... [ 375.561456][T14906] netlink: 'syz.1.2370': attribute type 15 has an invalid length. [ 375.573629][T14906] __nla_validate_parse: 17 callbacks suppressed [ 375.573647][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 375.652658][ T9011] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 375.662047][T14906] netlink: 'syz.1.2370': attribute type 15 has an invalid length. [ 375.667504][T14904] IPVS: using max 37 ests per chain, 88800 per kthread [ 375.676076][ T9011] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 375.685693][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 375.702132][ T9011] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 375.718419][ T9011] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 375.887513][T14917] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 375.990826][T14917] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2373'. [ 376.290967][T14941] netlink: 'syz.3.2383': attribute type 28 has an invalid length. [ 376.316586][T14941] netlink: 'syz.3.2383': attribute type 3 has an invalid length. [ 376.335737][T14941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2383'. [ 376.471371][T14954] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 376.560668][T14948] syzkaller0: entered promiscuous mode [ 376.566221][T14948] syzkaller0: entered allmulticast mode [ 376.611578][T14954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.132373][T14954] tipc: Enabling of bearer rejected, failed to enable media [ 378.247501][T14979] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 378.289756][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'. [ 378.311574][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'. [ 378.815026][T15022] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 378.843236][T15022] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2407'. [ 378.935850][T15031] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 379.576895][T15055] dvmrp1: entered allmulticast mode [ 379.839456][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2418'. [ 379.903381][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2422'. [ 379.931755][T15071] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2421'. [ 380.563359][T15116] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 380.602229][T15120] validate_nla: 1 callbacks suppressed [ 380.602247][T15120] netlink: 'syz.4.2435': attribute type 2 has an invalid length. [ 380.702874][T15133] netlink: 'syz.2.2439': attribute type 4 has an invalid length. [ 380.828596][T15139] __nla_validate_parse: 6 callbacks suppressed [ 380.828617][T15139] netlink: 212388 bytes leftover after parsing attributes in process `syz.1.2441'. [ 380.857484][T15139] openvswitch: netlink: Message has 5 unknown bytes. [ 380.883830][T15139] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 380.933391][T15144] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2443'. [ 380.963595][T15145] veth0_to_team: entered promiscuous mode [ 380.972975][T15145] veth0_to_team: entered allmulticast mode [ 381.112872][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 381.213038][T15158] tipc: Enabled bearer , priority 10 [ 381.293407][T15170] netlink: 'syz.0.2450': attribute type 8 has an invalid length. [ 381.562297][T15188] netlink: 'syz.4.2457': attribute type 30 has an invalid length. [ 381.601766][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'. [ 382.053088][T15230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2469'. [ 382.250683][T15238] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2472'. [ 382.287046][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2472'. [ 382.307036][T15239] bond0: (slave bond_slave_0): Releasing backup interface [ 382.365686][T15239] bond0: (slave bond_slave_1): Releasing backup interface [ 382.395878][T15239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.412303][T15239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.429055][T15239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.441496][T15239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.478759][T15239] bond0: (slave netdevsim0): Releasing backup interface [ 382.516280][T15239] bond1: (slave wireguard0): Releasing backup interface [ 382.524577][T15239] wireguard0: left promiscuous mode [ 382.595346][T15250] netlink: 'syz.3.2477': attribute type 21 has an invalid length. [ 382.683522][T15271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2482'. [ 382.821396][T15283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2487'. [ 382.892468][T15284] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 382.911953][T15284] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 382.943595][T15289] netlink: 'syz.0.2488': attribute type 4 has an invalid length. [ 382.951692][T15289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2488'. [ 383.278829][T15319] netlink: 'syz.0.2496': attribute type 10 has an invalid length. [ 383.285946][T15315] IPv6: sit2: Disabled Multicast RS [ 383.295734][T15318] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20003 [ 383.317557][T15315] sit2: entered allmulticast mode [ 383.471890][T15327] syzkaller0: entered promiscuous mode [ 383.478648][T15327] syzkaller0: entered allmulticast mode [ 383.491030][T15327] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 383.716938][T15354] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 383.795120][T15359] vlan0: entered allmulticast mode [ 383.828126][T15359] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 383.986403][T15375] veth0_to_team: entered promiscuous mode [ 383.994832][T15375] veth0_to_team: entered allmulticast mode [ 384.241053][T15393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.287868][T15396] tipc: Enabled bearer , priority 0 [ 384.334363][T15396] syzkaller0: entered promiscuous mode [ 384.349025][T15403] delete_channel: no stack [ 384.353681][T15396] syzkaller0: entered allmulticast mode [ 384.384963][T15396] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 384.400241][T15403] delete_channel: no stack [ 384.414073][T15410] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 384.441836][T15396] tipc: Resetting bearer [ 384.466331][T15395] tipc: Resetting bearer [ 384.566754][T15395] tipc: Disabling bearer [ 384.579004][T15426] unsupported nlmsg_type 40 [ 384.661332][T15426] syzkaller1: entered promiscuous mode [ 384.676228][T15426] syzkaller1: entered allmulticast mode [ 384.890727][T15443] netlink: 'syz.1.2534': attribute type 18 has an invalid length. [ 385.073496][T15459] netlink: 'syz.0.2536': attribute type 23 has an invalid length. [ 386.100044][T15524] __nla_validate_parse: 23 callbacks suppressed [ 386.100067][T15524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2558'. [ 386.336278][T15532] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 386.346791][T15532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2560'. [ 386.575332][T15553] netlink: 'syz.1.2568': attribute type 13 has an invalid length. [ 386.637377][T15553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.688195][ T5928] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 386.703217][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2566'. [ 386.703222][T15556] tipc: Enabled bearer , priority 0 [ 386.704057][T15556] syzkaller0: entered promiscuous mode [ 386.737170][T15556] syzkaller0: entered allmulticast mode [ 386.743476][ T5928] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 386.758663][T15558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2566'. [ 386.790058][T15556] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.841507][T15556] tipc: Resetting bearer [ 386.885819][T15555] tipc: Resetting bearer [ 386.914682][T15555] tipc: Disabling bearer [ 386.956277][T15573] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 387.015336][T15578] netlink: 'syz.4.2575': attribute type 18 has an invalid length. [ 387.023971][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2575'. [ 387.162665][T15590] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2578'. [ 387.179958][T15594] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 387.263953][T15594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.279610][T15602] vlan3: entered promiscuous mode [ 387.284991][T15602] bond2: entered promiscuous mode [ 387.290157][T15602] vlan3: entered allmulticast mode [ 387.295426][T15602] bond2: entered allmulticast mode [ 387.328061][T15583] bond2: (slave gretap1): making interface the new active one [ 387.335668][T15583] gretap1: entered promiscuous mode [ 387.341671][T15583] gretap1: entered allmulticast mode [ 387.349584][T15583] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 387.567902][ T9009] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 387.765140][T15610] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 387.773161][T15610] netlink: 'syz.1.2582': attribute type 4 has an invalid length. [ 387.783540][T15610] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.2582'. [ 388.037000][T15624] netlink: 'syz.4.2588': attribute type 4 has an invalid length. [ 388.053441][T15626] netlink: 'syz.2.2589': attribute type 13 has an invalid length. [ 388.065306][T15626] netlink: 'syz.2.2589': attribute type 58 has an invalid length. [ 388.073777][T15626] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2589'. [ 388.075902][T15624] netlink: 'syz.4.2588': attribute type 4 has an invalid length. [ 388.117082][T15628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2590'. [ 388.186510][T15624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2588'. [ 388.525422][T15650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.629405][ T9014] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.655472][ T9014] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.685042][T15662] sctp: [Deprecated]: syz.4.2597 (pid 15662) Use of int in maxseg socket option. [ 388.685042][T15662] Use struct sctp_assoc_value instead [ 388.739986][T15668] tipc: Enabled bearer , priority 10 [ 388.752369][T15672] tipc: Enabling of bearer rejected, already enabled [ 389.157455][T14502] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 389.414619][T15692] sctp: [Deprecated]: syz.3.2610 (pid 15692) Use of int in maxseg socket option. [ 389.414619][T15692] Use struct sctp_assoc_value instead [ 389.737456][T14502] tipc: Node number set to 2626082581 [ 389.766042][T15708] ip6gretap0: entered promiscuous mode [ 389.773200][T15708] batadv_slave_1: entered promiscuous mode [ 389.780117][T15708] debugfs: 'hsr1' already exists in 'hsr' [ 389.786422][T15708] Cannot create hsr debugfs directory [ 389.794780][T15708] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 389.824461][T15708] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.557667][T15761] x_tables: ip_tables: udp match: only valid for protocol 17 [ 391.324513][T15805] __nla_validate_parse: 13 callbacks suppressed [ 391.324532][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2648'. [ 391.369970][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2648'. [ 391.381998][T15807] 8021q: VLANs not supported on sit0 [ 391.400228][T15809] netlink: 'syz.3.2647': attribute type 12 has an invalid length. [ 391.412241][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 391.415882][T15808] 8021q: VLANs not supported on sit0 [ 391.431618][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2648'. [ 391.449528][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2648'. [ 391.677054][T15825] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2652'. [ 391.748015][T15825] (unnamed net_device) (uninitialized): (slave ip6gre0): Device is not bonding slave [ 391.792481][T15842] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 391.829248][T15825] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6gre0) [ 391.858164][T15842] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2652'. [ 392.303036][T15852] veth27: entered promiscuous mode [ 392.540101][T15853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2657'. [ 392.765304][T15874] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2663'. [ 392.777446][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 392.812087][T15874] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2663'. [ 392.901964][T15886] netlink: 'syz.2.2664': attribute type 12 has an invalid length. [ 392.920103][T15886] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 393.842567][T15910] team0 (unregistering): Port device geneve0 removed [ 393.869792][T15915] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 393.909680][ T9014] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.938208][T12879] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.998329][T15934] bridge0: port 1(team0) entered disabled state [ 394.142814][T15934] team0 (unregistering): left allmulticast mode [ 394.150459][T15934] team0 (unregistering): left promiscuous mode [ 394.156770][T15934] bridge0: port 1(team0) entered disabled state [ 394.177759][T12879] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.186600][T12879] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.304283][T15952] netlink: 'syz.3.2683': attribute type 5 has an invalid length. [ 395.308661][T16009] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 395.812461][T16036] netlink: 'syz.1.2705': attribute type 1 has an invalid length. [ 395.821229][T16036] netlink: 'syz.1.2705': attribute type 1 has an invalid length. [ 395.839025][T16036] netlink: 'syz.1.2705': attribute type 1 has an invalid length. [ 396.484986][T16071] netlink: 'syz.4.2714': attribute type 11 has an invalid length. [ 396.500294][T16071] netlink: 'syz.4.2714': attribute type 11 has an invalid length. [ 396.508913][T16071] __nla_validate_parse: 12 callbacks suppressed [ 396.508930][T16071] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2714'. [ 396.547707][T16069] netlink: 'syz.2.2713': attribute type 1 has an invalid length. [ 396.629826][T16079] bond3: (slave gretap2): making interface the new active one [ 396.640441][T16079] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 397.065275][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2721'. [ 397.143232][T16094] netlink: 'syz.3.2721': attribute type 3 has an invalid length. [ 397.404173][T16111] netlink: 'syz.4.2725': attribute type 15 has an invalid length. [ 397.501935][T16123] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2729'. [ 397.650767][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2731'. [ 397.924290][T16148] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2735'. [ 397.940191][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2735'. [ 397.971274][T16148] syz_tun (unregistering): left allmulticast mode [ 398.204457][T16163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2739'. [ 398.236525][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2739'. [ 398.384775][T16171] netlink: 'syz.4.2741': attribute type 1 has an invalid length. [ 398.410566][T16175] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2742'. [ 398.477766][T16171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.503406][T16180] bond3: (slave gretap1): making interface the new active one [ 398.530451][ T25] block nbd0: Possible stuck request ffff888024f4e000: control (read@0,1024B). Runtime 30 seconds [ 398.542668][ T25] block nbd0: Possible stuck request ffff888024f4e1c0: control (read@1024,1024B). Runtime 30 seconds [ 398.544124][T16180] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 398.553973][ T25] block nbd0: Possible stuck request ffff888024f4e380: control (read@2048,1024B). Runtime 30 seconds [ 398.554028][ T25] block nbd0: Possible stuck request ffff888024f4e540: control (read@3072,1024B). Runtime 30 seconds [ 398.624291][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 398.906524][T16208] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 399.052305][T16218] Driver unsupported XDP return value 0 on prog (id 552) dev N/A, expect packet loss! [ 399.339355][T16233] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 399.653619][T16249] syz_tun: entered allmulticast mode [ 400.421490][T16248] syz_tun: left allmulticast mode [ 400.433598][T16298] netlink: 'syz.0.2775': attribute type 4 has an invalid length. [ 400.451121][T16295] netlink: 'syz.1.2776': attribute type 4 has an invalid length. [ 400.584635][T16303] nbd: device at index 4 is going down [ 400.778937][T16310] netlink: 'syz.4.2781': attribute type 1 has an invalid length. [ 400.852338][T16310] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.893537][T16315] 8021q: VLANs not supported on sit0 [ 401.426806][ T5186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.445672][ T5186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.462832][ T5186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.482580][ T5186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.500638][ T5186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.514651][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.527774][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.536830][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.560139][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.572872][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.671659][T16343] lo speed is unknown, defaulting to 1000 [ 401.683335][T16343] hsr0 speed is unknown, defaulting to 1000 [ 401.811807][T16364] __nla_validate_parse: 12 callbacks suppressed [ 401.811825][T16364] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2794'. [ 401.900417][T16369] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 401.913108][T16369] netlink: 'syz.3.2793': attribute type 2 has an invalid length. [ 401.928226][T16369] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 401.970962][T16369] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.2793'. [ 402.036095][T16343] chnl_net:caif_netlink_parms(): no params data found [ 402.334459][T16343] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.351166][T16343] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.361415][T16343] bridge_slave_0: entered allmulticast mode [ 402.370271][T16343] bridge_slave_0: entered promiscuous mode [ 402.381191][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'. [ 402.396211][T16343] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.404045][T16343] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.411478][T16343] bridge_slave_1: entered allmulticast mode [ 402.420081][T16343] bridge_slave_1: entered promiscuous mode [ 402.500937][T16343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.526064][T16343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.694081][T16343] team0: Port device team_slave_0 added [ 402.714976][T16343] team0: Port device team_slave_1 added [ 402.783730][T16420] Unsupported ieee802154 address type: 0 [ 402.823821][T16343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.837327][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.860036][T16428] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2812'. [ 402.877664][T16343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.892366][T16343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.907479][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.935277][T16343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.078891][T16343] hsr_slave_0: entered promiscuous mode [ 403.103725][T16343] hsr_slave_1: entered promiscuous mode [ 403.118497][T16343] debugfs: 'hsr0' already exists in 'hsr' [ 403.135750][T16343] Cannot create hsr debugfs directory [ 403.646436][T16343] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.663344][ T5879] Bluetooth: hci1: command tx timeout [ 403.681603][T16343] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 403.768219][T16463] syzkaller0: entered promiscuous mode [ 403.776080][T16463] syzkaller0: entered allmulticast mode [ 403.790367][T16343] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.817474][T16343] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 404.067043][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'. [ 405.641090][T16343] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.651215][T16343] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 405.687072][T16478] bridge: RTM_NEWNEIGH with invalid ether address [ 405.739037][ T5879] Bluetooth: hci1: command tx timeout [ 405.785491][T16343] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.812975][T16343] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 406.270517][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'. [ 406.282438][T16504] openvswitch: netlink: Flow key attr not present in new flow. [ 406.335839][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2845'. [ 407.605255][T16517] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2849'. [ 407.812390][ T5879] Bluetooth: hci1: command tx timeout [ 408.163038][T16506] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 408.261907][T16343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.309569][T16343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.349975][T16343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.390703][T16343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.983299][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'. [ 409.046060][T16343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.080545][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'. [ 409.162292][T16343] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.198528][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.205906][ T9023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.270893][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.278096][ T9023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.607824][T16575] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2864'. [ 409.888812][ T5879] Bluetooth: hci1: command tx timeout [ 409.911701][T16343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.992063][T16343] veth0_vlan: entered promiscuous mode [ 410.021632][T16343] veth1_vlan: entered promiscuous mode [ 410.070956][T16343] veth0_macvtap: entered promiscuous mode [ 410.085207][T16599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2877'. [ 410.090326][T16343] veth1_macvtap: entered promiscuous mode [ 410.152241][T16343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.203164][T16343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.240607][T12879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.253882][T12879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.272132][T12879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.300910][T12879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.374420][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2882'. [ 410.383783][T16611] openvswitch: netlink: Flow key attr not present in new flow. [ 410.422204][T12879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.435833][T12879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.466685][T16613] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2883'. [ 410.506348][ T9023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.524301][ T9023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.463040][T16667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2904'. [ 412.044052][T16677] netlink: 'syz.4.2908': attribute type 1 has an invalid length. [ 412.104915][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 412.139880][T16677] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.503656][T16681] bond5 (unregistering): Released all slaves [ 412.799975][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 412.816243][T16707] syzkaller1: entered promiscuous mode [ 412.835917][T16707] syzkaller1: entered allmulticast mode [ 412.846357][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 412.888279][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 413.070215][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 413.084077][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 413.108234][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 413.128077][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 413.148433][T16718] openvswitch: netlink: Flow key attr not present in new flow. [ 413.404211][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 413.426064][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 413.463102][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 413.465721][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.482193][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.491853][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.502087][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.510325][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.642217][T16735] lo speed is unknown, defaulting to 1000 [ 413.693434][T16735] hsr0 speed is unknown, defaulting to 1000 [ 413.963531][T16756] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 414.644643][T16735] chnl_net:caif_netlink_parms(): no params data found [ 414.665872][T16778] netlink: 'syz.2.2950': attribute type 1 has an invalid length. [ 415.096786][T16735] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.126858][T16735] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.153514][T16735] bridge_slave_0: entered allmulticast mode [ 415.165770][T16735] bridge_slave_0: entered promiscuous mode [ 415.204023][T16735] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.229345][T16735] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.245875][T16735] bridge_slave_1: entered allmulticast mode [ 415.256096][T16735] bridge_slave_1: entered promiscuous mode [ 415.471922][T16735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.508703][T16735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.567411][ T5186] Bluetooth: hci4: command tx timeout [ 415.719159][T16735] team0: Port device team_slave_0 added [ 415.758703][T16735] team0: Port device team_slave_1 added [ 415.903284][T16735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.926704][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.985545][T16735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.022440][T16735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.030826][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.065464][T16735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.086511][T16849] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 416.266880][T16735] hsr_slave_0: entered promiscuous mode [ 416.287027][T16735] hsr_slave_1: entered promiscuous mode [ 416.308836][T16735] debugfs: 'hsr0' already exists in 'hsr' [ 416.314609][T16735] Cannot create hsr debugfs directory [ 417.129963][T16896] wg2: entered promiscuous mode [ 417.135093][T16896] wg2: entered allmulticast mode [ 417.402348][T16735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 417.427493][T16735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 417.647452][ T5186] Bluetooth: hci4: command tx timeout [ 417.882964][T16735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 417.906329][T16908] syz_tun: refused to change device tx_queue_len [ 417.914266][T16913] tipc: Enabled bearer , priority 0 [ 418.040672][T16911] tipc: Resetting bearer [ 418.064010][T16905] tipc: Resetting bearer [ 419.709191][T16905] tipc: Disabling bearer [ 419.718507][T16735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.727983][ T5186] Bluetooth: hci4: command tx timeout [ 419.752114][T16924] netem: change failed [ 419.884438][T16932] __nla_validate_parse: 6 callbacks suppressed [ 419.884458][T16932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3005'. [ 419.946880][T16735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.026225][T16735] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.072697][ T9025] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.079933][ T9025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.139531][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.146851][ T9014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.191999][T16948] netlink: 'syz.2.3013': attribute type 6 has an invalid length. [ 420.446454][T16962] ------------[ cut here ]------------ [ 420.452963][T16962] memcpy: detected field-spanning write (size 56) of single field "&top_iph->saddr" at net/ipv6/ah6.c:439 (size 16) [ 420.473025][T16962] WARNING: CPU: 1 PID: 16962 at net/ipv6/ah6.c:439 ah6_output+0xec3/0x1500 [ 420.481855][T16962] Modules linked in: [ 420.486109][T16962] CPU: 1 UID: 0 PID: 16962 Comm: syz.4.3019 Not tainted syzkaller #0 PREEMPT(full) [ 420.496017][T16962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.506428][T16962] RIP: 0010:ah6_output+0xec3/0x1500 [ 420.511837][T16962] Code: ff e8 81 5f 7c f7 c6 05 8e 52 4a 05 01 90 b9 10 00 00 00 48 c7 c7 60 89 a2 8c 4c 89 f6 48 c7 c2 c0 8b a2 8c e8 2e fc 3f f7 90 <0f> 0b 90 90 e9 ab fe ff ff e8 af 08 37 01 48 8b 4c 24 28 80 e1 07 [ 420.532161][T16962] RSP: 0018:ffffc9000515e3e0 EFLAGS: 00010246 [ 420.538661][T16962] RAX: e505767f91752100 RBX: ffff88802b4ef008 RCX: 0000000000080000 [ 420.546664][T16962] RDX: ffffc9000c6fa000 RSI: 000000000002496e RDI: 000000000002496f [ 420.555018][T16962] RBP: ffffc9000515e570 R08: 0000000000000003 R09: 0000000000000004 [ 420.563484][T16962] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 420.571985][T16962] R13: 1ffff92000a2bc9c R14: 0000000000000038 R15: 0000000000000040 [ 420.575868][T16966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3020'. [ 420.580124][T16962] FS: 00007f5db83b46c0(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 420.580192][T16962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.580207][T16962] CR2: 0000200000003a00 CR3: 0000000077e86000 CR4: 00000000003526f0 [ 420.580225][T16962] Call Trace: [ 420.580233][T16962] [ 420.580269][T16962] ? __pfx_ah6_output+0x10/0x10 [ 420.580306][T16962] xfrm_output_resume+0x2c55/0x6170 [ 420.580326][T16962] ? unwind_get_return_address+0x4d/0x90 [ 420.580347][T16962] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 420.580404][T16962] ? __pfx_xfrm_output_resume+0x10/0x10 [ 420.648422][T16962] ? sctp_v6_xmit+0xa33/0x1300 [ 420.653212][T16962] ? sctp_packet_transmit+0x257e/0x2bb0 [ 420.658820][T16962] ? sctp_packet_singleton+0x233/0x330 [ 420.664323][T16962] ? sctp_outq_flush+0x4f0/0x3140 [ 420.669434][T16962] ? sctp_do_sm+0x5332/0x5a20 [ 420.674139][T16962] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 420.679862][T16962] ? sctp_sendmsg_to_asoc+0x102d/0x1810 [ 420.685472][T16962] ? sctp_sendmsg+0x1941/0x2810 [ 420.690791][T16962] ? __sock_sendmsg+0x19c/0x270 [ 420.695670][T16962] ? xfrm_dev_offload_ok+0x165/0x820 [ 420.701089][T16962] ? xfrm_output+0x9ad/0x1950 [ 420.705817][T16962] __xfrm6_output+0x2ed/0x1070 [ 420.710710][T16962] ? __lock_acquire+0xab9/0xd20 [ 420.716250][T16962] ? __pfx___xfrm6_output+0x10/0x10 [ 420.721805][T16962] ? xfrm6_output+0x258/0x4f0 [ 420.726514][T16962] xfrm6_output+0x1c6/0x4f0 [ 420.731398][T16962] ? xfrm6_output+0x258/0x4f0 [ 420.736107][T16962] ? __pfx_xfrm6_output+0x10/0x10 [ 420.741702][T16962] ? __pfx___xfrm6_output+0x10/0x10 [ 420.747776][T16962] ? ip6_dst_hoplimit+0x96/0x350 [ 420.752941][T16962] ? skb_dst+0x4f/0xd0 [ 420.757031][T16962] ? dst_output+0x17b/0x1c0 [ 420.761741][T16962] ip6_xmit+0x107a/0x1840 [ 420.766202][T16962] ? __pfx_ip6_xmit+0x10/0x10 [ 420.771409][T16962] ? sctp_v6_xmit+0x60f/0x1300 [ 420.776510][T16962] ? sctp_v6_xmit+0x60f/0x1300 [ 420.781709][T16962] sctp_v6_xmit+0xa33/0x1300 [ 420.786346][T16962] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 420.791492][T16962] ? crc32c+0x7e/0x460 [ 420.795600][T16962] ? skb_crc32c+0x765/0x880 [ 420.801284][T16962] ? kmem_cache_free+0x18f/0x400 [ 420.806561][T16962] sctp_packet_transmit+0x257e/0x2bb0 [ 420.812109][T16962] sctp_packet_singleton+0x233/0x330 [ 420.818373][T16962] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 420.824482][T16962] ? sctp_outq_select_transport+0x462/0x570 [ 420.830820][T16962] ? sctp_transport_burst_limited+0x19c/0x280 [ 420.836928][T16962] sctp_outq_flush+0x4f0/0x3140 [ 420.842144][T16962] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 420.848348][T16962] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.854793][T16962] ? rcu_is_watching+0x15/0xb0 [ 420.859746][T16962] ? __pfx_sctp_outq_flush+0x10/0x10 [ 420.865101][T16962] ? sctp_outq_tail+0x612/0x8c0 [ 420.870303][T16962] ? sctp_outq_uncork+0x4d/0xa0 [ 420.875197][T16962] sctp_do_sm+0x5332/0x5a20 [ 420.879794][T16962] ? sctp_stream_init_ext+0x57/0x180 [ 420.885111][T16962] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 420.890822][T16962] ? sctp_sendmsg+0x1941/0x2810 [ 420.895696][T16962] ? __sock_sendmsg+0x19c/0x270 [ 420.900743][T16962] ? __pfx_sctp_do_sm+0x10/0x10 [ 420.905911][T16962] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 420.911824][T16962] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 420.917390][T16962] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 420.922873][T16962] ? __asan_memcpy+0x40/0x70 [ 420.928095][T16962] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 420.933519][T16962] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 420.939758][T16962] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 420.945609][T16962] ? __local_bh_enable_ip+0x12d/0x1c0 [ 420.951300][T16962] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 420.956878][T16962] ? security_sctp_bind_connect+0x7e/0x2e0 [ 420.962792][T16962] sctp_sendmsg+0x1941/0x2810 [ 420.968128][T16962] ? __pfx_sctp_sendmsg+0x10/0x10 [ 420.973185][T16962] ? aa_sk_perm+0x81e/0x950 [ 420.977851][T16962] ? __pfx_aa_sk_perm+0x10/0x10 [ 420.982735][T16962] ? sock_rps_record_flow+0x19/0x410 [ 420.988085][T16962] ? inet_sendmsg+0x2f4/0x370 [ 420.993064][T16962] __sock_sendmsg+0x19c/0x270 [ 420.997819][T16962] ____sys_sendmsg+0x52d/0x830 [ 421.002716][T16962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.008368][T16962] ? import_iovec+0x74/0xa0 [ 421.012912][T16962] ___sys_sendmsg+0x21f/0x2a0 [ 421.017671][T16962] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.022932][T16962] ? __fget_files+0x2a/0x420 [ 421.027791][T16962] ? __fget_files+0x3a0/0x420 [ 421.032761][T16962] __sys_sendmmsg+0x227/0x430 [ 421.037636][T16962] ? __pfx___sys_sendmmsg+0x10/0x10 [ 421.043049][T16962] ? do_futex+0x395/0x420 [ 421.047502][T16962] ? rcu_is_watching+0x15/0xb0 [ 421.052303][T16962] __x64_sys_sendmmsg+0xa0/0xc0 [ 421.057174][T16962] do_syscall_64+0xfa/0x3b0 [ 421.061755][T16962] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.067059][T16962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.073204][T16962] ? clear_bhb_loop+0x60/0xb0 [ 421.077974][T16962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.083986][T16962] RIP: 0033:0x7f5db758eec9 [ 421.088731][T16962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.108564][T16962] RSP: 002b:00007f5db83b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.117007][T16962] RAX: ffffffffffffffda RBX: 00007f5db77e5fa0 RCX: 00007f5db758eec9 [ 421.125216][T16962] RDX: 0000000000000001 RSI: 0000200000003a00 RDI: 0000000000000004 [ 421.133512][T16962] RBP: 00007f5db7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.141838][T16962] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000 [ 421.149974][T16962] R13: 00007f5db77e6038 R14: 00007f5db77e5fa0 R15: 00007ffcec67fe88 [ 421.158119][T16962] [ 421.161170][T16962] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 421.168553][T16962] CPU: 1 UID: 0 PID: 16962 Comm: syz.4.3019 Not tainted syzkaller #0 PREEMPT(full) [ 421.178099][T16962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.188328][T16962] Call Trace: [ 421.191606][T16962] [ 421.194640][T16962] dump_stack_lvl+0x99/0x250 [ 421.199230][T16962] ? __asan_memcpy+0x40/0x70 [ 421.203833][T16962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.209194][T16962] ? __pfx__printk+0x10/0x10 [ 421.213895][T16962] vpanic+0x281/0x750 [ 421.218179][T16962] ? __pfx__printk+0x10/0x10 [ 421.222957][T16962] ? __pfx_vpanic+0x10/0x10 [ 421.227466][T16962] ? is_bpf_text_address+0x26/0x2b0 [ 421.232681][T16962] panic+0xb9/0xc0 [ 421.236394][T16962] ? __pfx_panic+0x10/0x10 [ 421.240814][T16962] __warn+0x31b/0x4b0 [ 421.244788][T16962] ? ah6_output+0xec3/0x1500 [ 421.249377][T16962] ? ah6_output+0xec3/0x1500 [ 421.253954][T16962] report_bug+0x2be/0x4f0 [ 421.258272][T16962] ? ah6_output+0xec3/0x1500 [ 421.262849][T16962] ? ah6_output+0xec3/0x1500 [ 421.267428][T16962] ? ah6_output+0xec5/0x1500 [ 421.272189][T16962] handle_bug+0x84/0x160 [ 421.276423][T16962] exc_invalid_op+0x1a/0x50 [ 421.280940][T16962] asm_exc_invalid_op+0x1a/0x20 [ 421.285795][T16962] RIP: 0010:ah6_output+0xec3/0x1500 [ 421.290986][T16962] Code: ff e8 81 5f 7c f7 c6 05 8e 52 4a 05 01 90 b9 10 00 00 00 48 c7 c7 60 89 a2 8c 4c 89 f6 48 c7 c2 c0 8b a2 8c e8 2e fc 3f f7 90 <0f> 0b 90 90 e9 ab fe ff ff e8 af 08 37 01 48 8b 4c 24 28 80 e1 07 [ 421.310690][T16962] RSP: 0018:ffffc9000515e3e0 EFLAGS: 00010246 [ 421.316944][T16962] RAX: e505767f91752100 RBX: ffff88802b4ef008 RCX: 0000000000080000 [ 421.325024][T16962] RDX: ffffc9000c6fa000 RSI: 000000000002496e RDI: 000000000002496f [ 421.333004][T16962] RBP: ffffc9000515e570 R08: 0000000000000003 R09: 0000000000000004 [ 421.341071][T16962] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 421.349044][T16962] R13: 1ffff92000a2bc9c R14: 0000000000000038 R15: 0000000000000040 [ 421.357088][T16962] ? __pfx_ah6_output+0x10/0x10 [ 421.361945][T16962] xfrm_output_resume+0x2c55/0x6170 [ 421.367142][T16962] ? unwind_get_return_address+0x4d/0x90 [ 421.372852][T16962] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 421.379289][T16962] ? __pfx_xfrm_output_resume+0x10/0x10 [ 421.384867][T16962] ? sctp_v6_xmit+0xa33/0x1300 [ 421.389643][T16962] ? sctp_packet_transmit+0x257e/0x2bb0 [ 421.395269][T16962] ? sctp_packet_singleton+0x233/0x330 [ 421.400738][T16962] ? sctp_outq_flush+0x4f0/0x3140 [ 421.405752][T16962] ? sctp_do_sm+0x5332/0x5a20 [ 421.410435][T16962] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 421.415991][T16962] ? sctp_sendmsg_to_asoc+0x102d/0x1810 [ 421.421525][T16962] ? sctp_sendmsg+0x1941/0x2810 [ 421.426368][T16962] ? __sock_sendmsg+0x19c/0x270 [ 421.431218][T16962] ? xfrm_dev_offload_ok+0x165/0x820 [ 421.436583][T16962] ? xfrm_output+0x9ad/0x1950 [ 421.441257][T16962] __xfrm6_output+0x2ed/0x1070 [ 421.446015][T16962] ? __lock_acquire+0xab9/0xd20 [ 421.450864][T16962] ? __pfx___xfrm6_output+0x10/0x10 [ 421.456069][T16962] ? xfrm6_output+0x258/0x4f0 [ 421.460748][T16962] xfrm6_output+0x1c6/0x4f0 [ 421.465251][T16962] ? xfrm6_output+0x258/0x4f0 [ 421.469924][T16962] ? __pfx_xfrm6_output+0x10/0x10 [ 421.474942][T16962] ? __pfx___xfrm6_output+0x10/0x10 [ 421.480132][T16962] ? ip6_dst_hoplimit+0x96/0x350 [ 421.485147][T16962] ? skb_dst+0x4f/0xd0 [ 421.489214][T16962] ? dst_output+0x17b/0x1c0 [ 421.493758][T16962] ip6_xmit+0x107a/0x1840 [ 421.498112][T16962] ? __pfx_ip6_xmit+0x10/0x10 [ 421.502885][T16962] ? sctp_v6_xmit+0x60f/0x1300 [ 421.507649][T16962] ? sctp_v6_xmit+0x60f/0x1300 [ 421.512424][T16962] sctp_v6_xmit+0xa33/0x1300 [ 421.517016][T16962] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 421.522028][T16962] ? crc32c+0x7e/0x460 [ 421.526090][T16962] ? skb_crc32c+0x765/0x880 [ 421.530586][T16962] ? kmem_cache_free+0x18f/0x400 [ 421.535518][T16962] sctp_packet_transmit+0x257e/0x2bb0 [ 421.540919][T16962] sctp_packet_singleton+0x233/0x330 [ 421.546382][T16962] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 421.552366][T16962] ? sctp_outq_select_transport+0x462/0x570 [ 421.558252][T16962] ? sctp_transport_burst_limited+0x19c/0x280 [ 421.564403][T16962] sctp_outq_flush+0x4f0/0x3140 [ 421.569262][T16962] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 421.575206][T16962] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 421.581632][T16962] ? rcu_is_watching+0x15/0xb0 [ 421.586394][T16962] ? __pfx_sctp_outq_flush+0x10/0x10 [ 421.591690][T16962] ? sctp_outq_tail+0x612/0x8c0 [ 421.596794][T16962] ? sctp_outq_uncork+0x4d/0xa0 [ 421.601639][T16962] sctp_do_sm+0x5332/0x5a20 [ 421.606143][T16962] ? sctp_stream_init_ext+0x57/0x180 [ 421.611425][T16962] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 421.616961][T16962] ? sctp_sendmsg+0x1941/0x2810 [ 421.621796][T16962] ? __sock_sendmsg+0x19c/0x270 [ 421.626644][T16962] ? __pfx_sctp_do_sm+0x10/0x10 [ 421.631517][T16962] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 421.637329][T16962] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 421.642696][T16962] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 421.648057][T16962] ? __asan_memcpy+0x40/0x70 [ 421.652646][T16962] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 421.658023][T16962] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 421.663732][T16962] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 421.669522][T16962] ? __local_bh_enable_ip+0x12d/0x1c0 [ 421.674889][T16962] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 421.680449][T16962] ? security_sctp_bind_connect+0x7e/0x2e0 [ 421.686252][T16962] sctp_sendmsg+0x1941/0x2810 [ 421.690938][T16962] ? __pfx_sctp_sendmsg+0x10/0x10 [ 421.695953][T16962] ? aa_sk_perm+0x81e/0x950 [ 421.700473][T16962] ? __pfx_aa_sk_perm+0x10/0x10 [ 421.705404][T16962] ? sock_rps_record_flow+0x19/0x410 [ 421.710684][T16962] ? inet_sendmsg+0x2f4/0x370 [ 421.715455][T16962] __sock_sendmsg+0x19c/0x270 [ 421.720132][T16962] ____sys_sendmsg+0x52d/0x830 [ 421.724900][T16962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.730184][T16962] ? import_iovec+0x74/0xa0 [ 421.734773][T16962] ___sys_sendmsg+0x21f/0x2a0 [ 421.739445][T16962] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.744685][T16962] ? __fget_files+0x2a/0x420 [ 421.749355][T16962] ? __fget_files+0x3a0/0x420 [ 421.754116][T16962] __sys_sendmmsg+0x227/0x430 [ 421.758789][T16962] ? __pfx___sys_sendmmsg+0x10/0x10 [ 421.763975][T16962] ? do_futex+0x395/0x420 [ 421.768318][T16962] ? rcu_is_watching+0x15/0xb0 [ 421.773081][T16962] __x64_sys_sendmmsg+0xa0/0xc0 [ 421.777932][T16962] do_syscall_64+0xfa/0x3b0 [ 421.782446][T16962] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.787632][T16962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.793691][T16962] ? clear_bhb_loop+0x60/0xb0 [ 421.798446][T16962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.804349][T16962] RIP: 0033:0x7f5db758eec9 [ 421.808773][T16962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.828674][T16962] RSP: 002b:00007f5db83b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.837093][T16962] RAX: ffffffffffffffda RBX: 00007f5db77e5fa0 RCX: 00007f5db758eec9 [ 421.845146][T16962] RDX: 0000000000000001 RSI: 0000200000003a00 RDI: 0000000000000004 [ 421.853640][T16962] RBP: 00007f5db7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.861789][T16962] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000 [ 421.869758][T16962] R13: 00007f5db77e6038 R14: 00007f5db77e5fa0 R15: 00007ffcec67fe88 [ 421.877740][T16962] [ 421.881120][T16962] Kernel Offset: disabled [ 421.885504][T16962] Rebooting in 86400 seconds..