last executing test programs: 5.271340651s ago: executing program 4 (id=5796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000180)="0c0248", 0x3, 0x4000000, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) 4.117898884s ago: executing program 4 (id=5809): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 3.764414219s ago: executing program 1 (id=5812): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/52, 0x1d}, 0x1}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 3.543224255s ago: executing program 4 (id=5813): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604", 0x43}, {&(0x7f0000000f00)="ec75d081fcb70000000000000000bb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d5761910df91e34b3b98e2f71054226c3b00b9ee6ae29f0b07bc6fe7981126ca8e32b991faed3b0293e4004c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d401fe", 0x99}], 0x2}}], 0x1, 0x20008000) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 2.791730029s ago: executing program 1 (id=5826): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) 2.66096064s ago: executing program 4 (id=5830): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$alg(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004011}, 0x4c040) 1.570196666s ago: executing program 1 (id=5832): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r3) 1.555093746s ago: executing program 4 (id=5834): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) 1.500793414s ago: executing program 2 (id=5836): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = socket(0x11, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x8, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 1.448045332s ago: executing program 1 (id=5837): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4(r0, 0x0, 0x0, 0x800) 1.383217276s ago: executing program 2 (id=5838): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1.253404436s ago: executing program 2 (id=5841): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(0x0, 0x0, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 890.123845ms ago: executing program 3 (id=5850): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 820.807521ms ago: executing program 0 (id=5852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, &(0x7f0000000340)) 799.89813ms ago: executing program 3 (id=5853): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 676.005693ms ago: executing program 0 (id=5854): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x78, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0xffff, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b09, 0x20000000, 0x1, 0x2, 0x5, {0x92, 0x2, 0x2, 0x0, 0x3, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0xff}}]}]}}, @TCA_RATE={0x6, 0x5, {0x37, 0x3}}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) 675.609936ms ago: executing program 3 (id=5855): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) 650.049729ms ago: executing program 2 (id=5856): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r1) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) close(0x3) 636.641206ms ago: executing program 3 (id=5857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b34d2ffddefd03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c15de8905e518e8c72584d2007c26fcbf6f548de70f8b", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 580.097784ms ago: executing program 4 (id=5858): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x7a52, @local, 0x4}, 0x1c) 508.261241ms ago: executing program 1 (id=5859): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x5c2a7000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r1, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 507.143042ms ago: executing program 0 (id=5860): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 498.576105ms ago: executing program 3 (id=5861): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) close(0x4) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)="84b51a", 0x3}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) sendfile(r0, r2, 0x0, 0xf03a0005) 361.173835ms ago: executing program 0 (id=5862): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 204.15202ms ago: executing program 2 (id=5863): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES8=r1], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) close(r3) close(r2) 203.741069ms ago: executing program 1 (id=5864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x30004016) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000800)='bic\x00', 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="ae14665f5b467ae7b905a0db6c5af77521f1ad", 0x13}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 162.888395ms ago: executing program 0 (id=5865): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 131.289923ms ago: executing program 2 (id=5866): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r0) 63.868105ms ago: executing program 3 (id=5867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 0s ago: executing program 0 (id=5868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): put: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 164.743522][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 164.796415][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.805030][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.936778][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.953252][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.041611][ T8379] bond0: left promiscuous mode [ 165.047079][ T8379] bond_slave_0: left promiscuous mode [ 165.052658][ T8379] bond_slave_1: left promiscuous mode [ 165.058989][ T8379] macvlan2: left promiscuous mode [ 165.158696][ T59] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.172804][ T59] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.183111][ T59] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.192092][ T59] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.580899][ T8413] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.783658][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.886692][ T8430] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1043'. [ 166.823537][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 166.891022][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 167.269661][ T8498] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1075'. [ 167.300490][ T8498] 0ªX¹¦À: renamed from caif0 [ 167.317224][ T8498] 0ªX¹¦À: entered allmulticast mode [ 167.322557][ T8498] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 167.863654][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.149052][ T8545] netlink: 'syz.4.1099': attribute type 4 has an invalid length. [ 168.191961][ T8551] syzkaller1: entered promiscuous mode [ 168.230471][ T8551] syzkaller1: entered allmulticast mode [ 168.661292][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1113'. [ 168.706594][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1113'. [ 168.903534][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 169.943532][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 170.544451][ T8641] netlink: 'syz.2.1141': attribute type 21 has an invalid length. [ 170.574262][ T8641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1141'. [ 170.752153][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 170.788867][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 170.887708][ T8658] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1149'. [ 170.983687][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 171.202199][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1156'. [ 171.404107][ T8687] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1162'. [ 171.761519][ T8697] team0: Device ipip0 is of different type [ 172.293726][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 172.323709][ T8709] netlink: 'syz.3.1173': attribute type 20 has an invalid length. [ 172.331729][ T8709] netlink: 'syz.3.1173': attribute type 21 has an invalid length. [ 172.898500][ T8731] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.1183'. [ 173.872362][ T8768] veth0_to_bridge: entered promiscuous mode [ 173.888387][ T8767] veth0_to_bridge: left promiscuous mode [ 174.186129][ T8782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1205'. [ 174.224588][ T8782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1205'. [ 175.394191][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 175.649343][ T8862] sctp: [Deprecated]: syz.2.1244 (pid 8862) Use of int in max_burst socket option. [ 175.649343][ T8862] Use struct sctp_assoc_value instead [ 175.890660][ T8868] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1246'. [ 176.300257][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 176.448054][ T8887] TCP: tcp_parse_options: Illegal window scaling value 15 > 14 received [ 176.558095][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1260'. [ 176.682400][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'. [ 176.704533][ T8902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1263'. [ 176.972796][ T8920] netlink: 'syz.0.1272': attribute type 4 has an invalid length. [ 177.146915][ T8931] bond0: entered promiscuous mode [ 177.152323][ T8931] bond_slave_0: entered promiscuous mode [ 177.166558][ T8931] bond_slave_1: entered promiscuous mode [ 177.190078][ T8931] batadv0: entered promiscuous mode [ 177.201759][ T8931] hsr2: entered allmulticast mode [ 177.207582][ T8931] bond0: entered allmulticast mode [ 177.213153][ T8931] bond_slave_0: entered allmulticast mode [ 177.223153][ T8931] bond_slave_1: entered allmulticast mode [ 177.230204][ T8931] batadv0: entered allmulticast mode [ 177.239817][ T8931] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 177.264889][ T960] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 177.272545][ T960] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 177.291067][ T8931] bond0: left promiscuous mode [ 177.301643][ T8931] bond_slave_0: left promiscuous mode [ 177.308190][ T8931] bond_slave_1: left promiscuous mode [ 177.312940][ T960] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe [ 177.326467][ T8931] batadv0: left promiscuous mode [ 177.372527][ T960] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 177.575024][ T8945] pim6reg1: entered allmulticast mode [ 177.589726][ T8949] __nla_validate_parse: 3 callbacks suppressed [ 177.589747][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 177.734229][ T8958] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 178.245365][ T8982] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1298'. [ 178.269324][ T8986] netlink: 'syz.2.1300': attribute type 11 has an invalid length. [ 178.553661][ T8993] pim6reg1: entered allmulticast mode [ 179.508509][ T9032] veth0_vlan: entered allmulticast mode [ 180.439942][ T30] audit: type=1800 audit(1757009271.043:6): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1337" name=CB dev="tmpfs" ino=1363 res=0 errno=0 [ 180.572365][ T9085] bond0: entered promiscuous mode [ 180.583591][ T9085] bond_slave_0: entered promiscuous mode [ 180.591479][ T9085] bond_slave_1: entered promiscuous mode [ 180.613073][ T9085] batadv0: entered promiscuous mode [ 180.626292][ T9085] debugfs: 'hsr1' already exists in 'hsr' [ 180.632253][ T9085] Cannot create hsr debugfs directory [ 180.640027][ T9085] hsr1: entered allmulticast mode [ 180.650734][ T9085] bond0: entered allmulticast mode [ 180.659071][ T9085] bond_slave_0: entered allmulticast mode [ 180.669339][ T9085] bond_slave_1: entered allmulticast mode [ 180.678070][ T9085] batadv0: entered allmulticast mode [ 180.697835][ T9085] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 180.707532][ T9085] bond0: left promiscuous mode [ 180.712951][ T9085] bond_slave_0: left promiscuous mode [ 180.727437][ T9085] bond_slave_1: left promiscuous mode [ 180.738020][ T9085] batadv0: left promiscuous mode [ 180.795321][ T9087] dummy0: entered promiscuous mode [ 180.802235][ T9087] batadv_slave_0: entered promiscuous mode [ 180.815701][ T9087] debugfs: 'hsr1' already exists in 'hsr' [ 180.821715][ T9087] Cannot create hsr debugfs directory [ 180.848610][ T9087] hsr1: entered allmulticast mode [ 180.861834][ T9087] dummy0: entered allmulticast mode [ 180.871973][ T9087] batadv_slave_0: entered allmulticast mode [ 181.094497][ T9107] tipc: Started in network mode [ 181.099488][ T9107] tipc: Node identity 7f000001, cluster identity 4711 [ 181.143123][ T9107] tipc: Enabled bearer , priority 10 [ 181.159227][ T9110] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 181.183534][ T9110] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1355'. [ 181.392736][ T9124] bond0: entered promiscuous mode [ 181.409165][ T9124] bond_slave_0: entered promiscuous mode [ 181.420851][ T9124] bond_slave_1: entered promiscuous mode [ 181.446358][ T9124] batadv0: entered promiscuous mode [ 181.452704][ T9124] debugfs: 'hsr1' already exists in 'hsr' [ 181.465296][ T9124] Cannot create hsr debugfs directory [ 181.472178][ T9124] hsr1: entered allmulticast mode [ 181.477985][ T9124] bond0: entered allmulticast mode [ 181.483301][ T9124] bond_slave_0: entered allmulticast mode [ 181.489654][ T9124] bond_slave_1: entered allmulticast mode [ 181.496216][ T9124] batadv0: entered allmulticast mode [ 181.502254][ T9124] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 181.510830][ T9124] bond0: left promiscuous mode [ 181.516662][ T9124] bond_slave_0: left promiscuous mode [ 181.522472][ T9124] bond_slave_1: left promiscuous mode [ 181.532941][ T9124] batadv0: left promiscuous mode [ 181.829333][ T9142] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 181.912811][ T9147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1370'. [ 182.253533][ T5869] tipc: Node number set to 2130706433 [ 182.809212][ T9201] macsec1: entered promiscuous mode [ 182.818405][ T9201] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 182.831226][ T9201] macsec1: entered allmulticast mode [ 182.845656][ T9201] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 182.909405][ T9202] macsec2: entered promiscuous mode [ 182.951236][ T9202] macsec2: entered allmulticast mode [ 183.306610][ T9220] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 183.336765][ T9220] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1400'. [ 184.199867][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.208829][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.445347][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.469593][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.598270][ T3485] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.611726][ T3485] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.644024][ T9275] tipc: Started in network mode [ 184.648979][ T9275] tipc: Node identity 7f000001, cluster identity 4711 [ 184.679832][ T9275] tipc: Enabled bearer , priority 10 [ 184.713553][ T3485] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.735975][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.480608][ T9317] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1441'. [ 185.543696][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 185.556634][ T9317] 0ªX¹¦À: renamed from caif0 [ 185.568006][ T9317] 0ªX¹¦À: entered allmulticast mode [ 185.576903][ T9317] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 185.795785][ T5978] tipc: Node number set to 2130706433 [ 185.840779][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.848848][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.338007][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.362721][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.482525][ T9328] geneve2: left promiscuous mode [ 186.528562][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.573152][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.583615][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 186.664230][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.700668][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.360796][ T9382] tun0: tun_chr_ioctl cmd 1074025675 [ 187.373229][ T9382] tun0: persist enabled [ 187.379777][ T9382] tun0: tun_chr_ioctl cmd 1074025675 [ 187.387664][ T9382] tun0: persist disabled [ 187.624454][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.691893][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.699765][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.073357][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.082407][ T9411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1479'. [ 188.106541][ T9411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1479'. [ 188.122452][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.306798][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 188.316598][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 188.353566][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.377983][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.388508][ T9423] syzkaller1: entered promiscuous mode [ 188.394539][ T9423] syzkaller1: entered allmulticast mode [ 188.402088][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.497492][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.663533][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 188.749889][ T9440] lo: entered allmulticast mode [ 188.761123][ T9440] lo: left allmulticast mode [ 188.767909][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 189.352744][ T9454] openvswitch: netlink: IPv4 tun info is not correct [ 189.462310][ T9463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1501'. [ 189.596612][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.604445][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.703550][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 189.750947][ T9461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.767632][ T9461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.864514][ T9461] ip6gretap0: left allmulticast mode [ 189.870231][ T9461] macsec1: left promiscuous mode [ 189.904696][ T9474] lo: entered allmulticast mode [ 189.933750][ T61] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.973044][ T61] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.993459][ T9476] lo: left allmulticast mode [ 189.998300][ T61] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.034608][ T61] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.109832][ T9479] macvlan1: entered promiscuous mode [ 190.117465][ T9479] ipvlan0: entered promiscuous mode [ 190.136740][ T9479] ipvlan0: left promiscuous mode [ 190.173769][ T9479] macvlan1: left promiscuous mode [ 190.490493][ T9499] tun0: tun_chr_ioctl cmd 1074025675 [ 190.507727][ T9499] tun0: persist enabled [ 190.538702][ T9499] tun0: tun_chr_ioctl cmd 1074025675 [ 190.544424][ T9499] tun0: persist disabled [ 190.673304][ T9514] lo: entered allmulticast mode [ 190.693286][ T9514] lo: left allmulticast mode [ 190.709950][ T9515] syzkaller1: entered promiscuous mode [ 190.733682][ T9515] syzkaller1: entered allmulticast mode [ 190.870839][ T9521] veth0_to_bridge: entered promiscuous mode [ 190.909744][ T9520] veth0_to_bridge: left promiscuous mode [ 191.158028][ T9534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1535'. [ 191.194910][ T9534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1535'. [ 193.793566][ T9657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 194.102967][ T9673] macvlan1: entered promiscuous mode [ 194.122864][ T9673] ipvlan0: entered promiscuous mode [ 194.149819][ T9673] ipvlan0: left promiscuous mode [ 194.156311][ T9673] macvlan1: left promiscuous mode [ 195.690901][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1633'. [ 195.731486][ T9750] netlink: 'syz.3.1633': attribute type 32 has an invalid length. [ 195.743606][ T9750] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 196.342974][ T9782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1649'. [ 196.377254][ T9782] netlink: 'syz.2.1649': attribute type 32 has an invalid length. [ 196.399966][ T9782] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 196.694776][ T9805] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1659'. [ 197.683686][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1679'. [ 197.692712][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1679'. [ 197.799978][ T9857] netlink: 'syz.3.1686': attribute type 12 has an invalid length. [ 197.814746][ T9857] netlink: 'syz.3.1686': attribute type 18 has an invalid length. [ 197.822627][ T9857] netlink: 'syz.3.1686': attribute type 21 has an invalid length. [ 197.843873][ T9857] netlink: 'syz.3.1686': attribute type 26 has an invalid length. [ 197.989492][ T9868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1697'. [ 198.324639][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1695'. [ 198.343705][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1695'. [ 198.772523][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 199.414637][ T9945] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1722'. [ 199.629637][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.636190][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.828605][ T9971] syzkaller1: entered promiscuous mode [ 199.835071][ T9971] syzkaller1: entered allmulticast mode [ 200.654086][T10014] batadv_slave_1: entered promiscuous mode [ 200.668565][T10013] batadv_slave_1: left promiscuous mode [ 201.336594][T10051] pim6reg: entered allmulticast mode [ 201.399578][T10057] team0: Device gtp0 is of different type [ 201.444907][T10051] pim6reg: left allmulticast mode [ 201.600184][T10071] openvswitch: netlink: Missing valid actions attribute. [ 201.633896][T10071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.341476][T10109] netlink: 'syz.4.1798': attribute type 29 has an invalid length. [ 202.414239][T10113] netlink: 'syz.4.1798': attribute type 29 has an invalid length. [ 202.451251][T10109] netlink: 488 bytes leftover after parsing attributes in process `syz.4.1798'. [ 202.901540][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 202.991619][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1813'. [ 203.987936][T10191] syzkaller1: entered promiscuous mode [ 204.006176][T10191] syzkaller1: entered allmulticast mode [ 204.116848][T10198] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 204.138854][T10198] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 204.652266][T10219] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1847'. [ 204.710152][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1849'. [ 204.723571][T10223] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 204.732554][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 204.742121][T10223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1849'. [ 204.926340][T10234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1852'. [ 205.449238][T10256] netlink: 'syz.1.1860': attribute type 7 has an invalid length. [ 205.540692][T10260] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1861'. [ 205.592323][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 205.687243][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.701249][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.749567][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.763212][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.419691][T10298] netlink: 'syz.1.1879': attribute type 13 has an invalid length. [ 206.649653][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.687017][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.721544][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.753347][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.846906][T10360] veth3: entered allmulticast mode [ 208.751258][T10412] __nla_validate_parse: 5 callbacks suppressed [ 208.751282][T10412] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1928'. [ 209.138611][T10434] syzkaller1: entered promiscuous mode [ 209.145658][T10434] syzkaller1: entered allmulticast mode [ 209.392152][T10448] netlink: 'syz.4.1944': attribute type 13 has an invalid length. [ 210.478669][T10497] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.823663][T10470] Bluetooth: hci0: command tx timeout [ 211.161369][T10530] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1979'. [ 211.911832][T10571] syzkaller1: entered promiscuous mode [ 211.921132][T10571] syzkaller1: entered allmulticast mode [ 211.945346][T10470] Bluetooth: hci1: command 0x0406 tx timeout [ 211.952696][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 211.959143][T10470] Bluetooth: hci3: command 0x0406 tx timeout [ 212.904157][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 213.039602][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'. [ 213.637672][T10637] netlink: 'syz.1.2026': attribute type 1 has an invalid length. [ 213.665386][T10637] netlink: 'syz.1.2026': attribute type 1 has an invalid length. [ 213.688016][T10637] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2026'. [ 213.934233][T10645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.938119][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 214.567240][T10682] netlink: 'syz.2.2042': attribute type 1 has an invalid length. [ 214.598911][T10682] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2042'. [ 214.942405][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 215.695314][T10745] sit0: entered promiscuous mode [ 215.700658][T10745] netlink: 'syz.3.2067': attribute type 1 has an invalid length. [ 215.717669][T10745] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2067'. [ 216.709211][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2084'. [ 216.842247][T10804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.864450][ T3485] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 216.991059][T10814] netlink: 'syz.2.2094': attribute type 29 has an invalid length. [ 217.023602][T10814] netlink: 'syz.2.2094': attribute type 29 has an invalid length. [ 217.049076][T10814] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2094'. [ 217.554546][T10842] batadv_slave_1: entered promiscuous mode [ 217.562135][T10840] batadv_slave_1: left promiscuous mode [ 218.345069][T10876] syzkaller1: entered promiscuous mode [ 218.350705][T10876] syzkaller1: entered allmulticast mode [ 218.721643][T10891] netlink: 'syz.2.2128': attribute type 7 has an invalid length. [ 218.845084][T10896] netlink: 'syz.1.2131': attribute type 9 has an invalid length. [ 218.862690][T10896] netlink: 212160 bytes leftover after parsing attributes in process `syz.1.2131'. [ 218.900775][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 218.927403][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 218.974515][ T61] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.989312][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 219.006993][ T61] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.017735][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'. [ 219.044765][ T61] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.073808][ T61] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.106360][T10906] netlink: 'syz.3.2137': attribute type 2 has an invalid length. [ 219.489890][T10929] Bluetooth: MGMT ver 1.23 [ 219.753189][T10940] syzkaller1: entered promiscuous mode [ 219.767117][T10940] syzkaller1: entered allmulticast mode [ 219.923756][T10950] __nla_validate_parse: 2 callbacks suppressed [ 219.923777][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 220.212497][T10975] syzkaller1: entered promiscuous mode [ 220.218945][T10975] syzkaller1: entered allmulticast mode [ 220.614891][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 220.922283][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 221.219701][T11016] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2180'. [ 221.375717][T11022] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2185'. [ 221.386144][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 221.514943][T11021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.553450][ T5183] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 221.559893][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 221.621388][T11026] bond1: (slave batadv1): Opening slave failed [ 221.665492][T11028] netlink: 'syz.1.2186': attribute type 21 has an invalid length. [ 221.702098][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 221.789502][T11028] netlink: 'syz.1.2186': attribute type 21 has an invalid length. [ 221.800603][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.807134][T11038] netlink: 'syz.4.2190': attribute type 1 has an invalid length. [ 221.830243][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.839534][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 221.944565][T11038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.971874][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.009210][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.044094][T11042] bond1: (slave erspan1): making interface the new active one [ 222.057653][T11042] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 222.755816][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 222.803595][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 222.877104][ T61] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.922487][ T61] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.956296][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.981429][ T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.588322][T11126] netlink: 'syz.0.2228': attribute type 12 has an invalid length. [ 223.599917][T11126] netlink: 'syz.0.2228': attribute type 29 has an invalid length. [ 224.235781][T11149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.257604][ T3485] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 226.176711][T11214] __nla_validate_parse: 8 callbacks suppressed [ 226.176731][T11214] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2260'. [ 226.294466][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'. [ 226.718745][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 226.741797][T11229] netlink: 'syz.3.2267': attribute type 5 has an invalid length. [ 226.774488][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'. [ 226.859022][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.898045][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.933284][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.971959][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.303541][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 228.478959][T11284] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 228.513528][T11284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2291'. [ 228.845224][T11296] syzkaller1: entered promiscuous mode [ 228.858155][T11296] syzkaller1: entered allmulticast mode [ 229.056680][T11309] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 229.518452][T11309] bond1: entered promiscuous mode [ 229.527368][T11309] bond1: entered allmulticast mode [ 229.542109][T11314] bridge1: entered promiscuous mode [ 229.548347][T11314] bridge1: entered allmulticast mode [ 229.560422][T11314] bond1: (slave bridge1): making interface the new active one [ 229.569302][T11314] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 230.000505][T11342] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2313'. [ 230.043897][T11342] gretap0: entered promiscuous mode [ 230.059885][T11346] sit0: entered promiscuous mode [ 230.073819][T11346] netlink: 'syz.0.2315': attribute type 1 has an invalid length. [ 230.092224][T11346] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2315'. [ 230.450672][T11361] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2322'. [ 231.925330][ T3485] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 232.481690][T11429] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2347'. [ 233.430366][T11478] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2369'. [ 234.077143][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 234.100706][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'. [ 234.120045][T11507] netlink: 'syz.2.2383': attribute type 20 has an invalid length. [ 234.167469][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 234.190296][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'. [ 234.258910][T11507] netlink: 'syz.2.2383': attribute type 20 has an invalid length. [ 236.104801][ T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 236.130084][T11605] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 236.275279][T11613] unknown channel width for channel at 909000KHz? [ 236.281857][T11613] unknown channel width for channel at 909000KHz? [ 236.317649][T11613] unknown channel width for channel at 909000KHz? [ 236.626860][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'. [ 236.890492][T11642] netlink: 'syz.2.2446': attribute type 10 has an invalid length. [ 236.909204][T11642] team0: Device dummy0 failed to register rx_handler [ 236.963041][T11642] netlink: 'syz.2.2446': attribute type 10 has an invalid length. [ 237.344461][T11666] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 237.370148][T11666] netlink: 'syz.4.2458': attribute type 4 has an invalid length. [ 237.389841][T11666] netlink: 15538 bytes leftover after parsing attributes in process `syz.4.2458'. [ 239.164147][T11757] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2500'. [ 239.620252][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'. [ 239.672436][T11771] pim6reg1: entered promiscuous mode [ 239.688163][T11771] pim6reg1: entered allmulticast mode [ 239.699835][T11777] netlink: 'syz.2.2510': attribute type 21 has an invalid length. [ 239.710118][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'. [ 239.746956][T11780] netlink: 'syz.1.2511': attribute type 1 has an invalid length. [ 239.755626][T11777] netlink: 'syz.2.2510': attribute type 21 has an invalid length. [ 239.776377][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'. [ 239.785734][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 239.819331][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2512'. [ 239.819902][T11780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.882999][T11783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.938006][T11780] bond1: (slave geneve2): making interface the new active one [ 239.986181][T11780] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 240.019547][T11783] bond2: (slave batadv1): Opening slave failed [ 240.059133][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.101798][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.121716][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.149363][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.056140][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 241.507267][T11863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2534'. [ 241.529645][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2534'. [ 242.072414][T11891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 242.529449][T11908] dummy0: mtu less than device minimum [ 242.692486][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 243.467559][T11977] ip6tnl4: entered promiscuous mode [ 243.578258][ T1326] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 243.689494][T11994] netlink: 'syz.4.2585': attribute type 13 has an invalid length. [ 243.701213][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'. [ 243.717063][T11998] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.723039][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.737494][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.742923][T11994] netlink: 'syz.4.2585': attribute type 13 has an invalid length. [ 243.748158][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.764031][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.849599][T12003] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 243.854398][T12005] netlink: 'syz.2.2587': attribute type 12 has an invalid length. [ 243.866395][T12005] netlink: 'syz.2.2587': attribute type 29 has an invalid length. [ 243.907476][T12003] bond2: entered promiscuous mode [ 243.913691][T12003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.952780][T12007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.961973][T12007] bond2: (slave bond3): making interface the new active one [ 243.969575][T12007] bond3: entered promiscuous mode [ 243.975893][T12007] bond2: (slave bond3): Enslaving as an active interface with an up link [ 245.220414][T12069] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 245.276518][T12069] bond1: entered promiscuous mode [ 245.282361][T12069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.349826][T12075] bond1: (slave bridge1): making interface the new active one [ 245.357679][T12075] bridge1: entered promiscuous mode [ 245.364483][T12075] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 245.489052][T12079] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 245.648661][T12085] netlink: 'syz.0.2620': attribute type 1 has an invalid length. [ 245.693921][T12085] bond2: entered promiscuous mode [ 245.699206][T12085] bond2: entered allmulticast mode [ 245.732256][T12085] bridge2: entered promiscuous mode [ 245.737926][T12085] bridge2: entered allmulticast mode [ 245.751279][T12085] bond2: (slave bridge2): making interface the new active one [ 245.779169][T12085] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 246.255925][ T61] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 246.307246][T12126] __nla_validate_parse: 2 callbacks suppressed [ 246.307270][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2636'. [ 246.446861][T12132] netlink: 'syz.0.2649': attribute type 11 has an invalid length. [ 247.248128][T12177] netlink: 'syz.2.2654': attribute type 4 has an invalid length. [ 247.261891][T12177] netlink: 'syz.2.2654': attribute type 4 has an invalid length. [ 247.332856][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2656'. [ 247.623588][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 248.021185][T12209] batman_adv: batadv0: Adding interface: vxlan1 [ 248.044273][T12214] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2673'. [ 248.068881][T12209] batman_adv: batadv0: The MTU of interface vxlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.145819][T12209] batman_adv: batadv0: Interface activated: vxlan1 [ 248.169292][T12214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2673'. [ 248.641252][T12245] netlink: 'syz.1.2685': attribute type 10 has an invalid length. [ 248.679658][T12245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.691137][T12245] team0: Port device bond0 added [ 248.968017][T12259] netlink: 'syz.2.2694': attribute type 1 has an invalid length. [ 249.010317][T12259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.052920][T12259] bond2: (slave geneve2): making interface the new active one [ 249.062862][T12259] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 249.072734][ T2966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.094975][ T2966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.123519][ T2966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.132391][ T2966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.505120][T12285] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2705'. [ 250.103848][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 250.182569][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2708'. [ 252.635347][T12439] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 252.759584][T12439] bond2: entered promiscuous mode [ 252.765499][T12439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.922298][T12445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.956907][T12445] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 252.983615][T12445] bond2: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 253.014767][T12445] bond2: (slave vxcan5): making interface the new active one [ 253.032446][T12445] vxcan5: entered promiscuous mode [ 253.047858][T12445] bond2: (slave vxcan5): Enslaving as an active interface with an up link [ 253.187671][T12460] dummy0: entered allmulticast mode [ 253.278492][T12463] trusted_key: syz.0.2777 sent an empty control message without MSG_MORE. [ 253.584544][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 253.863856][ T5868] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 253.870459][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 254.207422][T12524] netlink: 'syz.2.2803': attribute type 1 has an invalid length. [ 254.268098][T12524] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 254.279191][T12524] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 254.300271][T12524] bond3: (slave vti0): making interface the new active one [ 254.351776][T12524] bond3: (slave vti0): Enslaving as an active interface with an up link [ 255.063802][T12548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.402085][T12611] syzkaller1: entered promiscuous mode [ 257.411818][T12611] syzkaller1: entered allmulticast mode [ 257.861444][T12637] netlink: 'syz.1.2853': attribute type 12 has an invalid length. [ 257.876300][T12637] netlink: 'syz.1.2853': attribute type 29 has an invalid length. [ 257.889719][T12637] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2853'. [ 257.903045][T12637] netlink: 'syz.1.2853': attribute type 12 has an invalid length. [ 257.914523][T12637] netlink: 'syz.1.2853': attribute type 29 has an invalid length. [ 257.922541][T12637] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2853'. [ 258.026743][T12646] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2857'. [ 258.307383][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2864'. [ 258.391592][T12664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.406416][T12664] bridge0: port 3(bond3) entered blocking state [ 258.413599][T12664] bridge0: port 3(bond3) entered disabled state [ 258.420213][T12664] bond3: entered allmulticast mode [ 258.441370][T12664] bond3: entered promiscuous mode [ 258.538876][ T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 260.430148][T12696] ip6gre1: entered allmulticast mode [ 260.496612][T12712] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2884'. [ 260.838294][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 260.956064][T12738] netlink: 'syz.2.2896': attribute type 4 has an invalid length. [ 261.069627][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.076361][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.081434][T12744] netlink: 'syz.4.2898': attribute type 1 has an invalid length. [ 261.131974][T12750] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.306516][T12761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2903'. [ 261.323551][T12761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2903'. [ 262.391438][T12811] netlink: 'syz.0.2926': attribute type 1 has an invalid length. [ 262.399581][T12811] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2926'. [ 262.409176][T12811] netlink: 'syz.0.2926': attribute type 2 has an invalid length. [ 262.418470][T12811] netlink: 'syz.0.2926': attribute type 1 has an invalid length. [ 263.248330][T12833] netlink: 'syz.2.2936': attribute type 1 has an invalid length. [ 263.287662][T12833] bond4: entered promiscuous mode [ 263.293549][T12833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.377523][T12839] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.394052][T12839] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 263.404940][T12839] bond4: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 263.420176][T12839] bond4: (slave vxcan5): making interface the new active one [ 263.428598][T12839] vxcan5: entered promiscuous mode [ 263.435584][T12839] bond4: (slave vxcan5): Enslaving as an active interface with an up link [ 263.623555][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 263.903177][T12863] netlink: 'syz.2.2948': attribute type 30 has an invalid length. [ 263.984127][T12861] syzkaller1: entered promiscuous mode [ 264.000042][T12861] syzkaller1: entered allmulticast mode [ 264.243528][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 264.316729][T12874] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2954'. [ 264.565093][T12891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 264.810183][T12900] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2960'. [ 265.783728][T12913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2965'. [ 265.844982][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 267.569409][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2970'. [ 268.431948][T12975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 268.433172][T12974] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.2986'. [ 268.721173][T12993] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2993'. [ 268.757258][T12996] netlink: 'syz.3.2996': attribute type 1 has an invalid length. [ 268.846144][T12996] bond3: entered promiscuous mode [ 268.851745][T12996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.885163][T13002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.892401][T13002] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.903875][T13002] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 268.920275][T13002] bond3: (slave vxcan3): making interface the new active one [ 268.928795][T13002] vxcan3: entered promiscuous mode [ 268.935658][T13002] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 269.472040][T13032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3008'. [ 269.496375][T13032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3008'. [ 269.783572][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'. [ 269.886220][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'. [ 270.457800][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3029'. [ 271.367244][T13115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.133151][T13173] netlink: 'syz.1.3068': attribute type 21 has an invalid length. [ 273.175519][T13173] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3068'. [ 273.622057][T13180] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3071'. [ 274.064035][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3089'. [ 274.625524][T13250] netlink: 'syz.1.3102': attribute type 5 has an invalid length. [ 275.055663][T13271] netlink: 'syz.4.3110': attribute type 16 has an invalid length. [ 275.084026][T13271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3110'. [ 275.756547][T13298] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3123'. [ 275.943766][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3125'. [ 276.673978][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3142'. [ 277.077625][ T61] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 277.568915][T13397] netlink: 'syz.3.3165': attribute type 4 has an invalid length. [ 277.912398][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3168'. [ 278.066202][T13416] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.3171'. [ 278.434506][ T30] audit: type=1800 audit(1757009369.043:7): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3175" name="memory.events" dev="tmpfs" ino=3388 res=0 errno=0 [ 279.293956][T13463] batadv_slave_1: entered promiscuous mode [ 279.312436][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 279.362184][T13463] batadv_slave_1 (unregistering): left promiscuous mode [ 279.392124][T13463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.586848][T13477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3197'. [ 279.602094][T13477] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3197'. [ 279.669944][T13477] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 279.804939][T13489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3201'. [ 279.882160][T13489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.912676][T13493] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 280.010517][T13503] netlink: 'syz.3.3208': attribute type 1 has an invalid length. [ 280.026242][T13503] netlink: 'syz.3.3208': attribute type 6 has an invalid length. [ 280.036160][T13503] netlink: 'syz.3.3208': attribute type 3 has an invalid length. [ 280.376973][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 280.389373][T13524] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3216'. [ 280.408970][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'. [ 280.428886][T13522] openvswitch: netlink: IPv4 tun info is not correct [ 280.438437][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 280.453697][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'. [ 282.293791][T13612] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3259'. [ 283.118168][T13665] netlink: 'syz.4.3280': attribute type 22 has an invalid length. [ 283.126172][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'. [ 283.136332][T13665] netlink: 'syz.4.3280': attribute type 22 has an invalid length. [ 283.145218][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'. [ 283.460588][T13679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3284'. [ 284.308791][T13717] netlink: 'syz.0.3299': attribute type 4 has an invalid length. [ 284.556882][T13727] macsec3: entered promiscuous mode [ 284.574061][T13727] team0: entered promiscuous mode [ 284.579250][T13727] team_slave_0: entered promiscuous mode [ 284.598479][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 284.611636][T13727] team_slave_1: entered promiscuous mode [ 284.622335][T13727] macsec3: entered allmulticast mode [ 284.641871][T13727] team0: entered allmulticast mode [ 284.651990][T13727] team_slave_0: entered allmulticast mode [ 284.665151][T13727] team_slave_1: entered allmulticast mode [ 284.717723][T13727] team0: Device macsec3 is already an upper device of the team interface [ 284.742112][T13727] team0: left allmulticast mode [ 284.747927][T13727] team_slave_0: left allmulticast mode [ 284.759334][T13727] team_slave_1: left allmulticast mode [ 284.771204][T13727] team0: left promiscuous mode [ 284.782526][T13727] team_slave_0: left promiscuous mode [ 284.795435][T13727] team_slave_1: left promiscuous mode [ 285.648245][T13785] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3324'. [ 285.694436][ T2966] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 285.981448][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 287.800056][T13879] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3362'. [ 287.907356][T13883] netlink: 'syz.2.3364': attribute type 21 has an invalid length. [ 287.918937][T13883] netlink: 'syz.2.3364': attribute type 22 has an invalid length. [ 287.931132][T13883] netlink: 'syz.2.3364': attribute type 23 has an invalid length. [ 287.941857][T13883] netlink: 'syz.2.3364': attribute type 25 has an invalid length. [ 287.972713][T13883] netlink: 'syz.2.3364': attribute type 26 has an invalid length. [ 287.987604][T13883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3364'. [ 288.005225][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3365'. [ 288.037686][T13887] bridge_slave_1: left allmulticast mode [ 288.080746][T13887] bridge_slave_1: left promiscuous mode [ 288.090174][T13887] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.109454][T13862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3355'. [ 288.121955][T13887] bridge_slave_0: left allmulticast mode [ 288.141394][T13887] bridge_slave_0: left promiscuous mode [ 288.149421][T13887] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.178186][T13894] netlink: 'syz.2.3369': attribute type 1 has an invalid length. [ 288.472999][T13897] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.483859][T13897] bond5: (slave bond6): making interface the new active one [ 288.491768][T13897] bond5: (slave bond6): Enslaving as an active interface with an up link [ 288.825041][T13925] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.3381'. [ 289.217497][T13944] ip6gre2: entered allmulticast mode [ 289.250426][T13947] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3392'. [ 289.386350][ T5868] Bluetooth: hci4: link tx timeout [ 289.391612][ T5868] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 289.404498][ T5183] Bluetooth: hci4: link tx timeout [ 289.409783][ T5183] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 289.417838][ T5183] Bluetooth: hci4: link tx timeout [ 289.423074][ T5183] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 289.434062][ T5183] Bluetooth: hci4: link tx timeout [ 289.440045][ T5183] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 289.448009][ T5183] Bluetooth: hci4: link tx timeout [ 289.453166][ T5183] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 289.461089][ T5183] Bluetooth: hci4: link tx timeout [ 289.466381][ T5183] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 289.474246][ T5183] Bluetooth: hci4: link tx timeout [ 289.479398][ T5183] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 290.419155][ T30] audit: type=1800 audit(1757009381.033:8): pid=14008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3416" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=3444 res=0 errno=0 [ 290.481967][T14011] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3417'. [ 291.463639][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 292.420295][T14077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3447'. [ 293.202086][T14127] netlink: 'syz.2.3469': attribute type 19 has an invalid length. [ 293.215483][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3469'. [ 293.230302][T14127] netlink: 'syz.2.3469': attribute type 19 has an invalid length. [ 293.243035][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3469'. [ 293.325335][T14133] netlink: 'syz.0.3470': attribute type 13 has an invalid length. [ 293.860163][T14133] batman_adv: batadv0: Interface deactivated: vxlan1 [ 293.932316][ T1326] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.954437][ T1326] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.009104][ T1326] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.018410][ T1326] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.850557][T14191] tipc: Started in network mode [ 294.857976][T14191] tipc: Node identity ac14140f, cluster identity 4711 [ 294.872645][T14191] tipc: New replicast peer: 255.255.255.255 [ 294.881633][T14191] tipc: Enabled bearer , priority 10 [ 295.738078][ T1159] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 295.873515][ T9486] tipc: Node number set to 2886997007 [ 296.247875][T14268] pimreg: entered allmulticast mode [ 296.265303][T14268] dvmrp8: entered allmulticast mode [ 296.273771][T14268] pimreg: left allmulticast mode [ 296.279648][T14268] dvmrp8: left allmulticast mode [ 296.732703][T14282] netlink: 'syz.1.3532': attribute type 13 has an invalid length. [ 296.942972][T14292] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3534'. [ 296.996682][ T1159] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.005339][ T1159] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.032918][T14289] vlan0: entered promiscuous mode [ 297.039512][T14289] bridge0: entered promiscuous mode [ 297.056297][ T1159] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.064888][ T1159] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.083297][ T1159] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.102521][ T1159] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.131056][ T1159] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.183680][ T1159] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.859276][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'. [ 297.989953][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 298.653091][T14383] IPVS: Scheduler module ip_vs_ not found [ 298.800376][T14392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'. [ 299.516276][T14432] vlan2: entered promiscuous mode [ 299.536743][T14432] bridge0: entered promiscuous mode [ 299.569024][T14435] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3592'. [ 299.610767][T14440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3594'. [ 300.179211][T14457] syzkaller1: entered promiscuous mode [ 300.197525][T14457] syzkaller1: entered allmulticast mode [ 300.217823][T14461] veth0: entered promiscuous mode [ 300.226771][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3604'. [ 300.316953][T14461] veth0 (unregistering): left promiscuous mode [ 300.356256][T14464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3606'. [ 300.392992][T14464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3606'. [ 300.412336][T14467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3608'. [ 300.495451][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 300.622570][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3614'. [ 300.643849][T14479] pim6reg: entered allmulticast mode [ 300.655790][T14479] pim6reg: left allmulticast mode [ 300.851912][T14492] netlink: 'syz.3.3619': attribute type 1 has an invalid length. [ 300.895702][T14492] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.958018][T14497] bond5: (slave geneve2): making interface the new active one [ 300.980613][T14497] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 300.992783][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.025264][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.064856][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.095875][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.440631][T14600] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3655'. [ 305.979537][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'. [ 306.013724][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3684'. [ 306.091467][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'. [ 306.106180][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3684'. [ 306.164548][ T2966] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.191837][ T2966] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.242857][ T2966] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.253300][ T2966] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.375763][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 308.302122][T14767] macsec0: entered promiscuous mode [ 308.311988][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 308.324656][T14767] bridge0: entered promiscuous mode [ 308.339840][T14767] bridge0: port 3(macsec0) entered blocking state [ 308.362221][T14767] bridge0: port 3(macsec0) entered disabled state [ 308.369873][T14767] macsec0: entered allmulticast mode [ 308.379953][T14767] bridge0: entered allmulticast mode [ 308.389156][T14767] macsec0: left allmulticast mode [ 308.399891][T14767] bridge0: left allmulticast mode [ 308.407531][T14767] bridge0: left promiscuous mode [ 309.216860][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3738'. [ 309.237302][ T61] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 309.299760][T14808] bond0: (slave bond_slave_1): Releasing backup interface [ 309.314380][T14808] bond_slave_1 (unregistering): left allmulticast mode [ 310.390184][T14866] netlink: 'syz.4.3761': attribute type 8 has an invalid length. [ 310.410457][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3761'. [ 310.431442][T14866] bond0: entered promiscuous mode [ 310.436769][T14866] bond_slave_0: entered promiscuous mode [ 310.442733][T14866] bond_slave_1: entered promiscuous mode [ 310.483653][T14866] bond0: left promiscuous mode [ 310.488624][T14866] bond_slave_0: left promiscuous mode [ 310.510406][T14866] bond_slave_1: left promiscuous mode [ 310.560686][T14874] netlink: 'syz.3.3765': attribute type 1 has an invalid length. [ 310.568802][T14874] netlink: 'syz.3.3765': attribute type 4 has an invalid length. [ 310.577542][T14874] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3765'. [ 310.716460][T14878] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3766'. [ 311.228001][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'. [ 312.029616][T14950] netlink: 'syz.0.3798': attribute type 13 has an invalid length. [ 312.941989][T14990] pimreg: entered allmulticast mode [ 313.490208][T15019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3829'. [ 313.584745][T15023] lo: Caught tx_queue_len zero misconfig [ 313.603737][T15022] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3830'. [ 313.767167][T15030] netlink: 'syz.2.3835': attribute type 1 has an invalid length. [ 313.810632][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'. [ 314.174375][T15061] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3846'. [ 314.402836][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3852'. [ 315.128331][T15091] syzkaller0: entered promiscuous mode [ 315.189372][T15091] syzkaller0: entered allmulticast mode [ 315.574483][T15106] netlink: 'syz.2.3864': attribute type 3 has an invalid length. [ 317.704639][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'. [ 317.718094][T15140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 317.730141][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3872'. [ 317.740063][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'. [ 317.749450][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3872'. [ 317.777451][T15140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 317.951878][T15149] netlink: 'syz.0.3878': attribute type 1 has an invalid length. [ 318.022652][T15149] bond4: (slave geneve0): making interface the new active one [ 318.037155][T15149] bond4: (slave geneve0): Enslaving as an active interface with an up link [ 318.047714][ T3485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 318.085660][ T3485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 318.105060][ T3485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 318.124168][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 318.205376][T15159] netlink: 2308 bytes leftover after parsing attributes in process `syz.1.3881'. [ 318.225285][T15159] netlink: 'syz.1.3881': attribute type 1 has an invalid length. [ 318.233399][T15159] netlink: 'syz.1.3881': attribute type 5 has an invalid length. [ 318.259073][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3881'. [ 318.393296][T15165] pim6reg1: entered promiscuous mode [ 318.402589][T15165] pim6reg1: entered allmulticast mode [ 318.946540][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 318.954281][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 318.961989][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 318.969641][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 318.977290][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 318.984967][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 318.992592][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 319.000291][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 319.007965][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 319.026240][T15193] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 319.526919][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3906'. [ 320.944389][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3936'. [ 321.613746][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3950'. [ 322.125023][T15339] syzkaller0: entered promiscuous mode [ 322.140956][T15339] syzkaller0: entered allmulticast mode [ 323.340771][T15353] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 323.428205][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3971'. [ 323.464926][T15369] netlink: 'syz.1.3971': attribute type 20 has an invalid length. [ 323.487407][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3971'. [ 323.506369][T15369] netlink: 'syz.1.3971': attribute type 20 has an invalid length. [ 324.484417][T15410] netlink: 212856 bytes leftover after parsing attributes in process `syz.3.3985'. [ 325.405070][T15453] netlink: 'syz.0.4005': attribute type 4 has an invalid length. [ 325.588324][ T30] audit: type=1800 audit(1757009416.183:9): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4003" name="memory.events" dev="tmpfs" ino=3983 res=0 errno=0 [ 325.761868][T15468] netlink: 'syz.3.4012': attribute type 10 has an invalid length. [ 325.788004][T15468] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.802243][T15468] bond0: (slave team0): Enslaving as an active interface with an up link [ 326.075605][T15479] syzkaller1: entered promiscuous mode [ 326.090861][T15479] syzkaller1: entered allmulticast mode [ 326.441380][T15501] macsec0: entered promiscuous mode [ 326.452420][T15501] dummy0: entered promiscuous mode [ 326.475542][T15501] dummy0: left promiscuous mode [ 327.985495][T15562] syzkaller1: entered promiscuous mode [ 327.993077][T15562] syzkaller1: entered allmulticast mode [ 328.152657][T15567] netlink: 'syz.0.4053': attribute type 10 has an invalid length. [ 328.170530][T15567] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.182273][T15567] team0: entered allmulticast mode [ 328.188326][T15567] team_slave_0: entered allmulticast mode [ 328.194970][T15567] team_slave_1: entered allmulticast mode [ 328.201636][T15567] bond0: (slave team0): Enslaving as an active interface with an up link [ 328.550582][T15584] geneve3: entered promiscuous mode [ 329.361056][T15615] pim6reg1: entered promiscuous mode [ 329.396709][T15615] pim6reg1: entered allmulticast mode [ 329.490581][T15621] netlink: 'syz.0.4074': attribute type 1 has an invalid length. [ 329.612546][T15621] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.698771][T15626] bond5: (slave gretap1): making interface the new active one [ 329.752542][T15626] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 330.271733][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4085'. [ 330.281323][T15656] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 330.372188][T15664] only policy match revision 0 supported [ 330.372219][T15664] unable to load match [ 330.708519][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4094'. [ 331.011796][T15685] smc: net device bond0 applied user defined pnetid SYZ2 [ 331.012629][T15687] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4098'. [ 331.056582][T15688] smc: net device bond0 erased user defined pnetid SYZ2 [ 331.105864][T15687] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4098'. [ 331.375859][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4106'. [ 331.393974][T15705] netlink: 'syz.3.4106': attribute type 15 has an invalid length. [ 331.451026][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4106'. [ 331.480898][T15705] netlink: 'syz.3.4106': attribute type 15 has an invalid length. [ 331.609316][T15712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4109'. [ 332.470486][T15761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4126'. [ 335.023135][T15795] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 335.035888][T15795] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 335.059520][T15795] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 335.961101][T15845] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4161'. [ 335.990291][T15848] syzkaller1: entered promiscuous mode [ 336.013515][T15848] syzkaller1: entered allmulticast mode [ 336.139025][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4164'. [ 336.292994][T15863] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 336.518139][T15874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4174'. [ 336.528364][T15874] netlink: 'syz.2.4174': attribute type 14 has an invalid length. [ 336.544736][T15874] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 336.564195][T15874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4174'. [ 336.583881][T15874] netlink: 'syz.2.4174': attribute type 14 has an invalid length. [ 336.623993][T15874] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 339.170735][T15929] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 339.703203][T15971] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4215'. [ 340.338710][T16007] netlink: 'syz.3.4231': attribute type 1 has an invalid length. [ 340.423646][ T5868] Bluetooth: hci0: command 0x0406 tx timeout [ 341.927044][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4242'. [ 343.264447][T16086] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 345.123265][T16103] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 345.138779][T16103] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 345.164685][T16103] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 345.280508][T16113] syzkaller1: entered promiscuous mode [ 345.287743][T16113] syzkaller1: entered allmulticast mode [ 347.380856][T16182] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4285'. [ 347.829757][T16195] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3324566563/3324566565 [ 347.956303][T16193] syzkaller1: entered promiscuous mode [ 347.961851][T16193] syzkaller1: entered allmulticast mode [ 349.607271][T16263] syzkaller1: entered promiscuous mode [ 349.614997][T16265] netlink: 'syz.2.4320': attribute type 1 has an invalid length. [ 349.641340][T16263] syzkaller1: entered allmulticast mode [ 349.689833][T16271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4323'. [ 349.800438][T16271] geneve2: entered promiscuous mode [ 349.807873][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.863187][T16272] bond7: (slave gretap1): making interface the new active one [ 349.879277][T16272] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 349.937071][T16273] syzkaller1: entered promiscuous mode [ 349.956464][T16273] syzkaller1: entered allmulticast mode [ 349.972844][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.998182][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.122311][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.154114][T16289] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4327'. [ 350.177541][T16289] net_ratelimit: 3310 callbacks suppressed [ 350.177592][T16289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.314860][T16288] team0: Port device bond0 removed [ 350.358781][T16288] bond0: (slave bond_slave_0): Releasing backup interface [ 350.393739][T16288] bond_slave_0: left allmulticast mode [ 350.435104][T16288] bond0: (slave bond_slave_1): Releasing backup interface [ 350.541800][T16288] bond_slave_1: left allmulticast mode [ 350.591139][T16288] team0: Port device team_slave_0 removed [ 350.602348][T16288] team0: Port device team_slave_1 removed [ 350.611450][T16288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.651616][T16288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.702438][T16288] bond1: (slave geneve2): Releasing active interface [ 350.781644][T16288] bond2: (slave vxcan5): Releasing backup interface [ 350.790170][T16288] vxcan5: left promiscuous mode [ 351.413518][T16331] nbd4: detected capacity change from 0 to 63 [ 351.420358][T16334] block nbd4: NBD_DISCONNECT [ 351.429035][T16334] block nbd4: Disconnected due to user request. [ 351.438195][T16334] block nbd4: shutting down sockets [ 351.762396][ T3485] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 352.028833][T16357] scsi_nl_rcv_msg: discarding partial skb [ 352.112385][T16364] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 352.236072][T16366] bond4: (slave bridge2): making interface the new active one [ 352.297472][T16366] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 353.490903][T16419] syzkaller0: entered promiscuous mode [ 353.515854][T16419] syzkaller0: entered allmulticast mode [ 354.593929][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4386'. [ 356.323721][T16489] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4396'. [ 358.227888][T16567] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 358.666010][T16584] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4430'. [ 359.227167][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 359.277095][T16587] lec:lec_atm_close: lec0: Shut down! [ 360.327449][T16642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.352217][T16642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 360.515324][T16642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.550035][T16642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 360.687903][T16642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.703144][T16642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 360.876406][T16642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.909750][T16642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 361.130724][ T3485] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.149026][ T3485] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.204362][ T1326] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.228284][ T1326] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.263004][ T1326] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.286180][ T1326] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.306620][ T49] nci: nci_rx_work: unknown MT 0x1 [ 361.339377][ T1326] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.350068][ T1326] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 363.743649][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4473'. [ 363.765651][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4473'. [ 363.958890][T16730] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4477'. [ 365.001767][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4498'. [ 365.026460][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4498'. [ 365.336076][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4506'. [ 365.430419][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4506'. [ 365.433680][T16791] macvtap0: entered promiscuous mode [ 365.514023][T16791] erspan0: entered promiscuous mode [ 365.519483][T16791] macvtap0: entered allmulticast mode [ 365.539871][T16791] erspan0: entered allmulticast mode [ 366.198176][T16795] erspan0: left allmulticast mode [ 366.211993][T16795] erspan0: left promiscuous mode [ 366.453120][T16816] sctp: [Deprecated]: syz.0.4515 (pid 16816) Use of int in max_burst socket option deprecated. [ 366.453120][T16816] Use struct sctp_assoc_value instead [ 367.074214][T16844] netlink: 'syz.2.4527': attribute type 1 has an invalid length. [ 367.497251][T16867] syzkaller1: entered promiscuous mode [ 367.502932][T16867] syzkaller1: entered allmulticast mode [ 368.259233][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4550'. [ 368.280813][T16899] macvtap0: entered promiscuous mode [ 368.286300][T16899] erspan0: entered promiscuous mode [ 368.292023][T16899] macvtap0: entered allmulticast mode [ 368.297889][T16899] erspan0: entered allmulticast mode [ 368.309828][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 369.444545][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4567'. [ 370.741244][T16998] netlink: 'syz.1.4590': attribute type 1 has an invalid length. [ 371.172891][T17014] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4596'. [ 371.221305][T17014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.122937][T17052] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4612'. [ 372.678386][T17076] syzkaller1: entered promiscuous mode [ 372.688736][T17076] syzkaller1: entered allmulticast mode [ 373.005399][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4625'. [ 373.525930][T17115] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4632'. [ 373.535583][T17115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4632'. [ 374.057494][T17142] netlink: 'syz.1.4645': attribute type 1 has an invalid length. [ 374.118442][T17142] gretap1: entered allmulticast mode [ 374.128110][T17142] bond3: (slave gretap1): making interface the new active one [ 374.137248][T17142] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 374.217246][T17145] netlink: 'syz.0.4646': attribute type 1 has an invalid length. [ 374.646092][T17148] bond6: (slave bridge4): making interface the new active one [ 374.679868][T17148] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 374.986722][T17162] bond0: (slave team0): Releasing backup interface [ 375.009482][T17162] team0: left allmulticast mode [ 375.033183][T17162] team_slave_0: left allmulticast mode [ 375.093503][T17162] team_slave_1: left allmulticast mode [ 375.268307][T17162] bridge_slave_0: left allmulticast mode [ 375.293605][T17162] bridge_slave_0: left promiscuous mode [ 375.300489][T17162] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.019916][T17162] bridge_slave_1: left allmulticast mode [ 376.047149][T17162] bridge_slave_1: left promiscuous mode [ 376.070654][T17162] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.142822][T17162] bond0: (slave bond_slave_0): Releasing backup interface [ 376.154522][T17162] bond_slave_0: left allmulticast mode [ 376.175727][T17162] bond0: (slave bond_slave_1): Releasing backup interface [ 376.190731][T17162] bond_slave_1: left allmulticast mode [ 376.209788][T17162] team0: Port device team_slave_0 removed [ 376.219924][T17162] team0: Port device team_slave_1 removed [ 376.230499][T17162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.240829][T17162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.256109][T17162] bond1: (slave bridge1): Releasing backup interface [ 376.263204][T17162] bridge1: left promiscuous mode [ 376.278070][T17162] bond2: (slave bridge2): Releasing backup interface [ 376.289839][T17162] batman_adv: batadv0: Removing interface: vxlan1 [ 376.297850][T17162] bond3: left allmulticast mode [ 376.302896][T17162] bond3: left promiscuous mode [ 376.308833][T17162] bridge0: port 3(bond3) entered disabled state [ 376.321328][T17162] bond4: (slave geneve0): Releasing active interface [ 376.342875][T17162] bond5: (slave gretap1): Releasing active interface [ 376.368199][T17162] bond6: (slave bridge4): Releasing active interface [ 376.401186][T17174] netem: incorrect gi model size [ 376.407282][T17174] netem: change failed [ 376.412009][ T3485] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.435691][ T3485] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.457607][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'. [ 376.487573][ T3485] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.507578][ T3485] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.679136][T17184] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 377.108722][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4669'. [ 377.296667][T17208] policy can only be matched on NF_INET_PRE_ROUTING [ 377.296689][T17208] unable to load match [ 377.804495][T17229] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4682'. [ 377.814202][T17229] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4682'. [ 377.824945][T17229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4682'. [ 378.164254][T17239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4688'. [ 378.220478][T17241] syzkaller1: entered promiscuous mode [ 378.226416][T17241] syzkaller1: entered allmulticast mode [ 379.182079][T17275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.199802][T17275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.292577][T17275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.304025][T17275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.380548][T17275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.391796][T17275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.459816][T17275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.470572][T17275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.594999][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.610844][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.661961][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.671805][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.699323][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.710423][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.747576][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.764869][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.198089][T17347] netlink: 'syz.3.4734': attribute type 10 has an invalid length. [ 381.211396][T17346] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2869139306/2869139308 [ 381.224619][T17347] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 381.247243][T17346] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2869139306/2869139308 [ 381.505480][T17357] pim6reg1: entered promiscuous mode [ 381.510857][T17357] pim6reg1: entered allmulticast mode [ 381.591494][T17362] netlink: 'syz.3.4742': attribute type 21 has an invalid length. [ 381.599804][T17362] netlink: 'syz.3.4742': attribute type 22 has an invalid length. [ 381.608081][T17362] netlink: 'syz.3.4742': attribute type 23 has an invalid length. [ 381.616167][T17362] netlink: 'syz.3.4742': attribute type 25 has an invalid length. [ 381.655339][T17362] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4742'. [ 381.947819][T17379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4749'. [ 381.960383][T17379] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4749'. [ 382.315397][T17385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.383984][ T5957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 382.683609][ T5957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 382.694334][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4754'. [ 382.754102][T17398] gtp0: entered promiscuous mode [ 383.430902][ T3485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 383.548300][T17441] vlan2: entered allmulticast mode [ 384.128582][T17459] netlink: 'syz.0.4777': attribute type 4 has an invalid length. [ 384.362977][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4785'. [ 384.382015][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4785'. [ 384.503275][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4788'. [ 384.512973][ T3485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.533870][ T3485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.631121][T17490] netlink: 'syz.4.4791': attribute type 1 has an invalid length. [ 384.641983][T17490] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4791'. [ 385.383855][ T5950] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.585277][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4804'. [ 385.610282][T17524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.662689][T17527] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.247116][T17560] bridge_slave_0: left allmulticast mode [ 386.253652][T17560] bridge_slave_0: left promiscuous mode [ 386.259950][T17560] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.279734][T17560] bridge_slave_1: left allmulticast mode [ 386.287616][T17560] bridge_slave_1: left promiscuous mode [ 386.299094][T17560] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.312687][T17560] bond0: (slave bond_slave_0): Releasing backup interface [ 386.326492][T17560] bond_slave_0: left allmulticast mode [ 386.338317][T17560] team0: Port device team_slave_0 removed [ 386.349608][T17560] team0: Port device team_slave_1 removed [ 386.365741][T17560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.397513][T17560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.437892][T17560] bond2: (slave geneve2): Releasing active interface [ 386.517413][T17560] bond3: (slave vti0): Releasing backup interface [ 386.549505][T17560] bond4: (slave vxcan5): Releasing backup interface [ 386.565272][T17560] vxcan5: left promiscuous mode [ 386.597889][T17560] bond5: (slave bond6): Releasing backup interface [ 386.631617][T17560] bond7: (slave gretap1): Releasing active interface [ 387.147451][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4830'. [ 388.044162][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4847'. [ 388.131506][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4849'. [ 388.425671][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 389.910370][T17631] team1: entered promiscuous mode [ 389.915556][T17631] team1: entered allmulticast mode [ 390.432312][T17663] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4857'. [ 390.584363][T17669] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4860'. [ 391.231419][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'. [ 391.255220][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'. [ 391.399188][T17711] syz.0.4875: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 391.434921][T17711] CPU: 1 UID: 0 PID: 17711 Comm: syz.0.4875 Not tainted syzkaller #0 PREEMPT(full) [ 391.434960][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.434981][T17711] Call Trace: [ 391.434990][T17711] [ 391.435000][T17711] dump_stack_lvl+0x189/0x250 [ 391.435039][T17711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.435067][T17711] ? __pfx__printk+0x10/0x10 [ 391.435099][T17711] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 391.435126][T17711] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 391.435153][T17711] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 391.435181][T17711] warn_alloc+0x214/0x310 [ 391.435213][T17711] ? stack_depot_save_flags+0x40/0x860 [ 391.435245][T17711] ? __pfx_warn_alloc+0x10/0x10 [ 391.435278][T17711] ? kasan_save_track+0x4f/0x80 [ 391.435305][T17711] ? xskq_create+0x56/0x170 [ 391.435322][T17711] ? xsk_init_queue+0xb0/0x110 [ 391.435350][T17711] ? xsk_setsockopt+0x4dc/0x8d0 [ 391.435377][T17711] ? do_sock_setsockopt+0x179/0x1b0 [ 391.435398][T17711] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 391.435418][T17711] ? do_syscall_64+0xfa/0x3b0 [ 391.435439][T17711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.435468][T17711] __vmalloc_node_range_noprof+0x125/0x12f0 [ 391.435535][T17711] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 391.435567][T17711] ? xskq_create+0x56/0x170 [ 391.435590][T17711] ? __kasan_kmalloc+0x93/0xb0 [ 391.435622][T17711] vmalloc_user_noprof+0xad/0xf0 [ 391.435653][T17711] ? xskq_create+0xbf/0x170 [ 391.435673][T17711] xskq_create+0xbf/0x170 [ 391.435697][T17711] xsk_init_queue+0xb0/0x110 [ 391.435743][T17711] xsk_setsockopt+0x4dc/0x8d0 [ 391.435778][T17711] ? __pfx_xsk_setsockopt+0x10/0x10 [ 391.435810][T17711] ? __pfx_aa_sk_perm+0x10/0x10 [ 391.435847][T17711] ? aa_sock_opt_perm+0xff/0x1b0 [ 391.435871][T17711] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 391.435893][T17711] ? __pfx_xsk_setsockopt+0x10/0x10 [ 391.435926][T17711] do_sock_setsockopt+0x179/0x1b0 [ 391.435955][T17711] __x64_sys_setsockopt+0x13f/0x1b0 [ 391.435985][T17711] do_syscall_64+0xfa/0x3b0 [ 391.436007][T17711] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.436027][T17711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.436048][T17711] ? clear_bhb_loop+0x60/0xb0 [ 391.436073][T17711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.436101][T17711] RIP: 0033:0x7f528c18ebe9 [ 391.436122][T17711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.436140][T17711] RSP: 002b:00007f528d0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 391.436162][T17711] RAX: ffffffffffffffda RBX: 00007f528c3c6090 RCX: 00007f528c18ebe9 [ 391.436177][T17711] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 391.436188][T17711] RBP: 00007f528c211e19 R08: 0000000000000004 R09: 0000000000000000 [ 391.436200][T17711] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.436213][T17711] R13: 00007f528c3c6128 R14: 00007f528c3c6090 R15: 00007ffdbbbb9de8 [ 391.436246][T17711] [ 391.436268][T17711] Mem-Info: [ 391.456645][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4879'. [ 391.527519][T17711] active_anon:4477 inactive_anon:0 isolated_anon:0 [ 391.527519][T17711] active_file:3077 inactive_file:39962 isolated_file:0 [ 391.527519][T17711] unevictable:768 dirty:380 writeback:0 [ 391.527519][T17711] slab_reclaimable:11884 slab_unreclaimable:186982 [ 391.527519][T17711] mapped:29070 shmem:1382 pagetables:1115 [ 391.527519][T17711] sec_pagetables:0 bounce:0 [ 391.527519][T17711] kernel_misc_reclaimable:0 [ 391.527519][T17711] free:1241755 free_pcp:16348 free_cma:0 [ 392.020115][T17711] Node 0 active_anon:18208kB inactive_anon:0kB active_file:12308kB inactive_file:159648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116380kB dirty:1520kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13036kB pagetables:4292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.059349][T17711] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.164325][T17711] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.228036][T17713] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4880'. [ 392.244091][ C1] vcan0: j1939_session_tx_dat: 0xffff888029a3a400: queue data error: -100 [ 392.255283][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 392.261760][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 392.287891][T17711] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 392.294184][T17711] Node 0 DMA32 free:1066404kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18004kB inactive_anon:0kB active_file:12308kB inactive_file:158088kB unevictable:1536kB writepending:1524kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:45556kB local_pcp:21552kB free_cma:0kB [ 392.342868][T17711] lowmem_reserve[]: 0 0 1 1 1 [ 392.347915][T17711] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 392.392998][T17711] lowmem_reserve[]: 0 0 0 0 0 [ 392.405545][T17711] Node 1 Normal free:3888264kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:8288kB free_cma:0kB [ 392.440970][T17711] lowmem_reserve[]: 0 0 0 0 0 [ 392.446159][T17711] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.459338][T17711] Node 0 DMA32: 2148*4kB (UM) 979*8kB (UME) 417*16kB (UME) 466*32kB (UME) 273*64kB (UME) 83*128kB (UM) 26*256kB (UME) 15*512kB (UM) 13*1024kB (UME) 3*2048kB (UM) 236*4096kB (UM) = 1066552kB [ 392.479344][T17711] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 392.499688][T17711] Node 1 Normal: 194*4kB (UME) 54*8kB (UME) 41*16kB (UME) 154*32kB (UME) 40*64kB (UME) 8*128kB (UME) 4*256kB (ME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 945*4096kB (M) = 3888264kB [ 392.589443][T17711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.638460][T17711] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.653587][T17730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4886'. [ 392.664253][T17711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.674055][T17711] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.688106][T17711] 44394 total pagecache pages [ 392.692964][T17711] 0 pages in swap cache [ 392.697263][T17711] Free swap = 124996kB [ 392.701659][T17711] Total swap = 124996kB [ 392.706195][T17711] 2097051 pages RAM [ 392.710329][T17711] 0 pages HighMem/MovableOnly [ 392.715659][T17711] 425669 pages reserved [ 392.719941][T17711] 0 pages cma reserved [ 392.818773][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 393.356806][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4890'. [ 393.419254][T17747] pim6reg: entered allmulticast mode [ 393.437127][T17747] pim6reg: left allmulticast mode [ 393.496183][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4890'. [ 393.687980][T17755] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4898'. [ 393.714259][T17758] netlink: 'syz.0.4897': attribute type 2 has an invalid length. [ 393.737925][T17758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4897'. [ 393.856677][T17763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4901'. [ 394.049293][T17773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4903'. [ 394.901738][T17782] netlink: 'syz.2.4908': attribute type 1 has an invalid length. [ 395.015776][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4909'. [ 396.745008][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.578905][T17868] netlink: 'syz.0.4938': attribute type 4 has an invalid length. [ 402.663056][T17995] __nla_validate_parse: 1 callbacks suppressed [ 402.663078][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4993'. [ 402.688592][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4993'. [ 402.806656][T18003] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4993'. [ 403.091503][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5001'. [ 403.335241][T18020] syzkaller0: entered promiscuous mode [ 403.344148][T18020] syzkaller0: entered allmulticast mode [ 403.566063][T18031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5008'. [ 404.318661][T18046] syzkaller1: entered promiscuous mode [ 404.330754][T18046] syzkaller1: entered allmulticast mode [ 404.502969][T18061] netlink: 'syz.4.5018': attribute type 12 has an invalid length. [ 404.594193][T18070] netlink: 264 bytes leftover after parsing attributes in process `syz.3.5021'. [ 404.604270][T18070] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5021'. [ 404.729550][T18075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5023'. [ 405.398193][T18088] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 405.830888][T18107] netlink: 'syz.0.5035': attribute type 1 has an invalid length. [ 405.841691][T18107] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5035'. [ 405.842034][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5036'. [ 406.314122][T18122] netlink: 'syz.2.5040': attribute type 4 has an invalid length. [ 408.341706][T18186] sctp: [Deprecated]: syz.0.5066 (pid 18186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.341706][T18186] Use struct sctp_sack_info instead [ 408.609504][T18194] netlink: 'syz.2.5070': attribute type 8 has an invalid length. [ 409.246827][T18219] __nla_validate_parse: 2 callbacks suppressed [ 409.246850][T18219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5080'. [ 410.092348][T18244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5089'. [ 410.892588][T18281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5106'. [ 411.968158][T18315] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5118'. [ 412.113672][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.404200][T18333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5124'. [ 414.541303][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5127'. [ 414.571330][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5127'. [ 416.054191][T18382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5138'. [ 416.242521][T18388] bond0: (slave team0): Releasing backup interface [ 416.253968][T18135] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.360892][T18393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5141'. [ 416.382380][T18388] bridge_slave_0: left promiscuous mode [ 416.413329][T18388] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.436778][T18388] bridge_slave_1: left allmulticast mode [ 416.450842][T18388] bridge_slave_1: left promiscuous mode [ 416.463690][T18388] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.513955][T18388] bond0: (slave bond_slave_0): Releasing backup interface [ 416.545144][T18388] bond0: (slave bond_slave_1): Releasing backup interface [ 416.613527][ T5869] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.903206][T18388] team0: Port device team_slave_0 removed [ 416.935787][T18388] team0: Port device team_slave_1 removed [ 416.942048][T18388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.956065][T18388] bond0: (slave wlan1): Releasing backup interface [ 416.991936][T18388] bond1: (slave bridge1): Releasing backup interface [ 417.036074][T18388] bond3: (slave vxcan3): Releasing backup interface [ 417.060000][T18388] vxcan3: left promiscuous mode [ 417.078375][T18388] bond4: (slave erspan1): Releasing backup interface [ 417.099676][T18388] bond5: (slave geneve2): Releasing active interface [ 417.208104][T18399] veth0_virt_wifi: renamed from macvlan0 [ 417.250888][ T3485] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.297150][ T3485] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.327449][ T3485] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.371896][ T3485] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.588904][T18434] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1212526707/1212526709 [ 417.627362][T18434] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1212526707/1212526709 [ 417.897564][T18445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5158'. [ 417.986946][T18445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5158'. [ 418.778915][T18478] sit0: left promiscuous mode [ 418.848063][T18478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.875855][T18478] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.913546][T18478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.932034][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5178'. [ 420.893766][T18504] syzkaller1: entered promiscuous mode [ 420.899312][T18504] syzkaller1: entered allmulticast mode [ 421.131475][T18518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5183'. [ 421.252479][T18518] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5183'. [ 422.209498][T18553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5198'. [ 422.914386][T18569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5204'. [ 423.021955][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5204'. [ 423.036034][T18577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5207'. [ 424.075951][T18597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5214'. [ 424.556139][T18611] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 424.871258][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5225'. [ 425.209703][ T30] audit: type=1800 audit(1757009515.823:10): pid=18643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5232" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5569 res=0 errno=0 [ 425.307349][ T30] audit: type=1804 audit(1757009515.853:11): pid=18643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5232" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5569 res=1 errno=0 [ 426.322532][T18640] netlink: 'syz.1.5231': attribute type 2 has an invalid length. [ 426.602774][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5242'. [ 426.675678][T18673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5242'. [ 426.813945][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5244'. [ 426.907486][T18686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5247'. [ 427.366186][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5250'. [ 428.487217][ T2966] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.502070][ T2966] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.520397][ T2966] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.532277][ T2966] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.869109][T18731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5265'. [ 428.882626][T18731] netlink: 'syz.1.5265': attribute type 7 has an invalid length. [ 428.890637][T18731] netlink: 'syz.1.5265': attribute type 8 has an invalid length. [ 428.909980][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5265'. [ 429.232570][T18742] netlink: 'syz.4.5270': attribute type 13 has an invalid length. [ 429.538891][T18751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5274'. [ 429.948856][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 431.700731][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5297'. [ 432.393002][T18842] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.498466][T18842] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.591706][T18842] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.687454][T18842] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.883149][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5315'. [ 432.937615][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.976770][ T3485] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.019181][ T2966] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.085615][ T2966] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.256993][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5319'. [ 433.309528][T18878] syzkaller1: entered promiscuous mode [ 433.315487][T18878] syzkaller1: entered allmulticast mode [ 433.950061][T18901] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.001421][T18901] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.047501][T18907] netlink: 308 bytes leftover after parsing attributes in process `syz.1.5333'. [ 434.057093][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5333'. [ 434.157159][T18901] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.173771][T18901] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.191575][T18910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5334'. [ 434.267440][T18901] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.293428][T18901] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.459275][T18901] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.484478][T18901] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.552698][T18924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5340'. [ 434.776202][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.793729][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.879824][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.906866][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.014790][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.178331][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.202193][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.211954][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.336696][T18945] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 435.809945][T18960] gtp0: entered promiscuous mode [ 435.846866][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5354'. [ 435.886879][T18963] netlink: 'syz.0.5355': attribute type 13 has an invalid length. [ 436.571505][T18979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5362'. [ 436.926906][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5367'. [ 437.089667][T19005] netlink: 'syz.4.5371': attribute type 4 has an invalid length. [ 438.356564][T19021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5378'. [ 438.384531][T19021] netlink: 'syz.4.5378': attribute type 13 has an invalid length. [ 438.397077][T19021] netlink: 'syz.4.5378': attribute type 17 has an invalid length. [ 438.421106][T19021] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 440.409900][T19081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5396'. [ 441.047227][T19095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5403'. [ 441.075661][T19095] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 442.193489][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.448639][T19147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5419'. [ 445.000260][T19166] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 445.041540][T19169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5426'. [ 445.116614][T19156] netlink: 'syz.2.5422': attribute type 2 has an invalid length. [ 445.789038][T19208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5440'. [ 446.320336][T19231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5449'. [ 447.275334][T19259] syzkaller1: entered promiscuous mode [ 447.300948][T19259] syzkaller1: entered allmulticast mode [ 447.586826][T19268] gretap0: left promiscuous mode [ 447.625290][T19268] sit0: left promiscuous mode [ 447.642923][T19268] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 447.660472][ T5957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 447.699184][T19277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 447.979471][T19293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5466'. [ 448.110029][T19298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5467'. [ 448.288563][T19301] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 448.418741][T19310] sctp: [Deprecated]: syz.4.5471 (pid 19310) Use of int in maxseg socket option. [ 448.418741][T19310] Use struct sctp_assoc_value instead [ 448.504535][ T5957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 448.546383][T19315] syzkaller0: entered promiscuous mode [ 448.576561][T19315] syzkaller0: entered allmulticast mode [ 448.591659][T19317] syzkaller1: entered promiscuous mode [ 448.603207][T19317] syzkaller1: entered allmulticast mode [ 449.097456][T19335] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 449.214474][T19339] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.5481'. [ 449.312537][T19342] syzkaller1: entered promiscuous mode [ 449.324076][T19342] syzkaller1: entered allmulticast mode [ 449.624995][T19359] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5491'. [ 450.730911][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5509'. [ 450.769049][T19398] netlink: 'syz.3.5507': attribute type 16 has an invalid length. [ 450.779170][T19398] netlink: 'syz.3.5507': attribute type 17 has an invalid length. [ 450.791048][T19402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5509'. [ 450.806697][T19398] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 451.461849][T19428] syzkaller1: entered promiscuous mode [ 451.491672][T19428] syzkaller1: entered allmulticast mode [ 451.511975][T19430] batman_adv: batadv0: Adding interface: dummy0 [ 451.525127][T19430] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.588682][T19430] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 452.349057][T19455] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 452.460301][T19473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5539'. [ 453.725767][T19487] syzkaller1: entered promiscuous mode [ 453.731901][T19487] syzkaller1: entered allmulticast mode [ 454.279488][T19502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5547'. [ 454.541003][T19502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5547'. [ 455.050615][T19524] netlink: 'syz.1.5554': attribute type 10 has an invalid length. [ 455.059034][T19524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5554'. [ 455.069904][T19524] dummy0: entered promiscuous mode [ 455.078089][T19524] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 455.194888][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5552'. [ 455.263608][T19522] netlink: 'syz.2.5552': attribute type 1 has an invalid length. [ 455.752344][T19540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5560'. [ 456.091673][T19555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5566'. [ 456.347518][T19559] tipc: Enabled bearer , priority 0 [ 456.385336][T19559] tipc: Disabling bearer [ 456.968580][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5571'. [ 457.005060][T19577] netlink: 'syz.0.5571': attribute type 14 has an invalid length. [ 457.013162][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5571'. [ 457.073049][T19577] netlink: 'syz.0.5571': attribute type 14 has an invalid length. [ 457.679250][T19598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5579'. [ 458.012069][T19620] bond0: entered promiscuous mode [ 458.029403][T19620] batadv0: entered promiscuous mode [ 458.042080][T19620] debugfs: 'hsr1' already exists in 'hsr' [ 458.049163][T19620] Cannot create hsr debugfs directory [ 458.057968][T19620] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 458.068928][T19620] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 458.085878][T19620] hsr1: entered allmulticast mode [ 458.091582][T19620] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 458.108955][T19620] bond0: left promiscuous mode [ 458.115433][T19620] batadv0: left promiscuous mode [ 458.399054][T19637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5595'. [ 458.943022][T19663] netlink: 'syz.1.5606': attribute type 10 has an invalid length. [ 458.971563][T19663] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.001770][T19663] team0: entered allmulticast mode [ 459.034793][T19663] bond0: (slave team0): Enslaving as an active interface with an up link [ 460.239995][T19701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5621'. [ 461.701510][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5626'. [ 461.741112][T19718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5627'. [ 462.008923][T19728] syzkaller1: entered promiscuous mode [ 462.017997][T19728] syzkaller1: entered allmulticast mode [ 462.299131][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5639'. [ 462.551871][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5643'. [ 466.517897][T19840] veth0: entered promiscuous mode [ 466.531273][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5668'. [ 468.584084][T19848] netlink: 22 bytes leftover after parsing attributes in process `syz.2.5672'. [ 468.712590][T19871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5682'. [ 468.873769][T19880] syzkaller1: entered promiscuous mode [ 468.879411][T19880] syzkaller1: entered allmulticast mode [ 471.128848][T19972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5721'. [ 471.194938][T19975] netlink: 'syz.3.5723': attribute type 10 has an invalid length. [ 471.242374][T19975] team0: Port device dummy0 added [ 471.279740][T19978] netlink: 'syz.3.5723': attribute type 10 has an invalid length. [ 471.328220][T19978] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 471.364570][T19978] team0: Failed to send options change via netlink (err -105) [ 471.383626][T19978] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 471.395234][T19978] team0: Port device dummy0 removed [ 471.419302][T19978] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 472.331605][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5740'. [ 472.940415][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5749'. [ 474.763055][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5766'. [ 475.721364][T20075] netlink: 'syz.4.5758': attribute type 2 has an invalid length. [ 476.763907][T20110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5764'. [ 476.795175][T20110] netlink: 'syz.1.5764': attribute type 13 has an invalid length. [ 476.847507][T20110] netlink: 'syz.1.5764': attribute type 17 has an invalid length. [ 476.871205][T20110] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 476.957042][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5770'. [ 477.435778][T20147] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1721006956/1721006958 [ 477.481026][T20147] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1721006956/1721006958 [ 477.505708][T20147] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1721006956/1721006958 [ 477.553158][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5776'. [ 477.765233][T20150] team2: entered promiscuous mode [ 477.787094][T20150] team2: entered allmulticast mode [ 477.792917][T20150] 8021q: adding VLAN 0 to HW filter on device team2 [ 478.069317][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5780'. [ 478.097574][T20161] syzkaller0: entered promiscuous mode [ 478.111940][T20161] syzkaller0: entered allmulticast mode [ 478.602654][T20189] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 478.850665][T20209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5792'. [ 479.476487][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5793'. [ 480.469048][T20196] tipc: Enabling of bearer rejected, failed to enable media [ 480.514565][T20212] netlink: 23932 bytes leftover after parsing attributes in process `syz.4.5792'. [ 480.618745][T20219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.653894][T20219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.664418][T20220] netlink: 'syz.0.5794': attribute type 10 has an invalid length. [ 480.664582][T20220] batman_adv: batadv0: Removing interface: dummy0 [ 480.673437][ T5868] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 480.702935][T20220] team0: Port device dummy0 added [ 480.720935][T20220] netlink: 'syz.0.5794': attribute type 10 has an invalid length. [ 480.737747][T20220] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 480.758423][T20220] team0: Failed to send options change via netlink (err -105) [ 480.767116][T20220] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 480.777913][T20220] team0: Port device dummy0 removed [ 480.791465][T20220] dummy0: entered allmulticast mode [ 480.808866][T20224] Â: renamed from pim6reg1 [ 482.283542][ T30] audit: type=1800 audit(1757009572.903:12): pid=20249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5807" name="cgroup.controllers" dev="tmpfs" ino=5942 res=0 errno=0 [ 482.443701][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5815'. [ 482.533078][T20269] syzkaller1: entered promiscuous mode [ 482.538862][T20269] syzkaller1: entered allmulticast mode [ 482.728925][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5820'. [ 482.852083][T20279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5820'. [ 482.887522][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5822'. [ 484.642169][T20331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.654000][T20334] netlink: 'syz.3.5842': attribute type 1 has an invalid length. [ 484.662555][T20334] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5842'. [ 484.680957][T20334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5842'. [ 484.702321][T20336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5843'. [ 484.926248][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5848'. [ 485.092027][T20356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5853'. [ 485.238794][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5854'. [ 485.589156][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5862'. [ 485.828187][T20394] netlink: 'syz.2.5866': attribute type 10 has an invalid length. [ 485.849521][T20394] ieee802154 phy0 wpan0: entered promiscuous mode [ 485.867341][T20394] ieee802154 phy0 wpan0: entered allmulticast mode [ 485.883695][ T5957] ================================================================== [ 485.891830][ T5957] BUG: KASAN: null-ptr-deref in mac802154_header_create+0x144/0x5f0 [ 485.899857][ T5957] Write of size 4 at addr 000000000000004c by task kworker/1:4/5957 [ 485.907876][ T5957] [ 485.910241][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 485.910269][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.910284][ T5957] Workqueue: mld mld_ifc_work [ 485.910318][ T5957] Call Trace: [ 485.910326][ T5957] [ 485.910337][ T5957] dump_stack_lvl+0x189/0x250 [ 485.910365][ T5957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.910390][ T5957] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 485.910424][ T5957] ? __virt_addr_valid+0x7c/0x5c0 [ 485.910452][ T5957] ? mac802154_header_create+0x144/0x5f0 [ 485.910476][ T5957] kasan_report+0x118/0x150 [ 485.910507][ T5957] ? mac802154_header_create+0x144/0x5f0 [ 485.910535][ T5957] kasan_check_range+0x2b0/0x2c0 [ 485.910565][ T5957] mac802154_header_create+0x144/0x5f0 [ 485.910591][ T5957] ? __pfx_mac802154_header_create+0x10/0x10 [ 485.910618][ T5957] ? read_seqbegin+0x122/0x250 [ 485.910647][ T5957] ? neigh_connected_output+0x1ea/0x460 [ 485.910677][ T5957] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.910705][ T5957] ? ___neigh_create+0x1c83/0x2260 [ 485.910733][ T5957] ? __pfx_mac802154_header_create+0x10/0x10 [ 485.910758][ T5957] neigh_connected_output+0x286/0x460 [ 485.910800][ T5957] ip6_finish_output2+0xfb0/0x1480 [ 485.910840][ T5957] ? __pfx_ip6_finish_output2+0x10/0x10 [ 485.910871][ T5957] ? ip6_mtu+0x7d/0x490 [ 485.910897][ T5957] ? ip6_mtu+0x38c/0x490 [ 485.910924][ T5957] ? ip6_finish_output+0x2ef/0x4e0 [ 485.910950][ T5957] ? ip6_output+0x126/0x550 [ 485.910976][ T5957] ip6_output+0x340/0x550 [ 485.911004][ T5957] NF_HOOK+0x9e/0x380 [ 485.911033][ T5957] ? NF_HOOK+0x101/0x380 [ 485.911062][ T5957] ? __pfx_NF_HOOK+0x10/0x10 [ 485.911089][ T5957] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 485.911116][ T5957] ? do_raw_spin_unlock+0x122/0x240 [ 485.911141][ T5957] ? icmp6_dst_alloc+0x3a5/0x420 [ 485.911167][ T5957] ? icmp6_dst_alloc+0x3a5/0x420 [ 485.911196][ T5957] mld_sendpack+0x8d4/0xe60 [ 485.911243][ T5957] ? mld_sendpack+0x1e7/0xe60 [ 485.911273][ T5957] ? __pfx_mld_sendpack+0x10/0x10 [ 485.911313][ T5957] mld_ifc_work+0x83e/0xd60 [ 485.911343][ T5957] ? process_scheduled_works+0x9ef/0x17b0 [ 485.911364][ T5957] process_scheduled_works+0xae1/0x17b0 [ 485.911400][ T5957] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.911430][ T5957] worker_thread+0x8a0/0xda0 [ 485.911451][ T5957] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 485.911487][ T5957] ? __kthread_parkme+0x7b/0x200 [ 485.911514][ T5957] kthread+0x70e/0x8a0 [ 485.911541][ T5957] ? __pfx_worker_thread+0x10/0x10 [ 485.911561][ T5957] ? __pfx_kthread+0x10/0x10 [ 485.911587][ T5957] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.911616][ T5957] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.911635][ T5957] ? __pfx_kthread+0x10/0x10 [ 485.911660][ T5957] ret_from_fork+0x3f9/0x770 [ 485.911682][ T5957] ? __pfx_ret_from_fork+0x10/0x10 [ 485.911706][ T5957] ? __switch_to_asm+0x39/0x70 [ 485.911732][ T5957] ? __switch_to_asm+0x33/0x70 [ 485.911757][ T5957] ? __pfx_kthread+0x10/0x10 [ 485.911782][ T5957] ret_from_fork_asm+0x1a/0x30 [ 485.911818][ T5957] [ 485.911827][ T5957] ================================================================== [ 486.260008][ T5957] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 486.267279][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 486.276688][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.286861][ T5957] Workqueue: mld mld_ifc_work [ 486.291597][ T5957] Call Trace: [ 486.294902][ T5957] [ 486.297842][ T5957] dump_stack_lvl+0x99/0x250 [ 486.302475][ T5957] ? __asan_memcpy+0x40/0x70 [ 486.307081][ T5957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.312302][ T5957] ? __pfx__printk+0x10/0x10 [ 486.316906][ T5957] vpanic+0x281/0x750 [ 486.320913][ T5957] ? preempt_schedule+0xae/0xc0 [ 486.325770][ T5957] ? __pfx_vpanic+0x10/0x10 [ 486.330282][ T5957] ? preempt_schedule_common+0x83/0xd0 [ 486.335742][ T5957] ? preempt_schedule+0xae/0xc0 [ 486.340619][ T5957] ? __pfx_preempt_schedule+0x10/0x10 [ 486.346020][ T5957] panic+0xb9/0xc0 [ 486.349753][ T5957] ? __pfx_panic+0x10/0x10 [ 486.354182][ T5957] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 486.360097][ T5957] ? mac802154_header_create+0x144/0x5f0 [ 486.365741][ T5957] check_panic_on_warn+0x89/0xb0 [ 486.370698][ T5957] ? mac802154_header_create+0x144/0x5f0 [ 486.376339][ T5957] end_report+0x78/0x160 [ 486.380609][ T5957] kasan_report+0x129/0x150 [ 486.385123][ T5957] ? mac802154_header_create+0x144/0x5f0 [ 486.390808][ T5957] kasan_check_range+0x2b0/0x2c0 [ 486.395760][ T5957] mac802154_header_create+0x144/0x5f0 [ 486.401237][ T5957] ? __pfx_mac802154_header_create+0x10/0x10 [ 486.407237][ T5957] ? read_seqbegin+0x122/0x250 [ 486.412017][ T5957] ? neigh_connected_output+0x1ea/0x460 [ 486.417577][ T5957] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.422791][ T5957] ? ___neigh_create+0x1c83/0x2260 [ 486.427915][ T5957] ? __pfx_mac802154_header_create+0x10/0x10 [ 486.433904][ T5957] neigh_connected_output+0x286/0x460 [ 486.439307][ T5957] ip6_finish_output2+0xfb0/0x1480 [ 486.444559][ T5957] ? __pfx_ip6_finish_output2+0x10/0x10 [ 486.450150][ T5957] ? ip6_mtu+0x7d/0x490 [ 486.454333][ T5957] ? ip6_mtu+0x38c/0x490 [ 486.458589][ T5957] ? ip6_finish_output+0x2ef/0x4e0 [ 486.463708][ T5957] ? ip6_output+0x126/0x550 [ 486.468223][ T5957] ip6_output+0x340/0x550 [ 486.472571][ T5957] NF_HOOK+0x9e/0x380 [ 486.476564][ T5957] ? NF_HOOK+0x101/0x380 [ 486.480827][ T5957] ? __pfx_NF_HOOK+0x10/0x10 [ 486.485439][ T5957] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 486.491264][ T5957] ? do_raw_spin_unlock+0x122/0x240 [ 486.496484][ T5957] ? icmp6_dst_alloc+0x3a5/0x420 [ 486.501436][ T5957] ? icmp6_dst_alloc+0x3a5/0x420 [ 486.506387][ T5957] mld_sendpack+0x8d4/0xe60 [ 486.510912][ T5957] ? mld_sendpack+0x1e7/0xe60 [ 486.515601][ T5957] ? __pfx_mld_sendpack+0x10/0x10 [ 486.520641][ T5957] mld_ifc_work+0x83e/0xd60 [ 486.525159][ T5957] ? process_scheduled_works+0x9ef/0x17b0 [ 486.530895][ T5957] process_scheduled_works+0xae1/0x17b0 [ 486.536494][ T5957] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.542507][ T5957] worker_thread+0x8a0/0xda0 [ 486.547548][ T5957] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 486.553893][ T5957] ? __kthread_parkme+0x7b/0x200 [ 486.558848][ T5957] kthread+0x70e/0x8a0 [ 486.563009][ T5957] ? __pfx_worker_thread+0x10/0x10 [ 486.568124][ T5957] ? __pfx_kthread+0x10/0x10 [ 486.572720][ T5957] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.577938][ T5957] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.583138][ T5957] ? __pfx_kthread+0x10/0x10 [ 486.587738][ T5957] ret_from_fork+0x3f9/0x770 [ 486.592370][ T5957] ? __pfx_ret_from_fork+0x10/0x10 [ 486.597489][ T5957] ? __switch_to_asm+0x39/0x70 [ 486.602296][ T5957] ? __switch_to_asm+0x33/0x70 [ 486.607065][ T5957] ? __pfx_kthread+0x10/0x10 [ 486.611664][ T5957] ret_from_fork_asm+0x1a/0x30 [ 486.616447][ T5957] [ 486.619800][ T5957] Kernel Offset: disabled [ 486.624128][ T5957] Rebooting in 86400 seconds..