last executing test programs: 5.730248578s ago: executing program 1 (id=11171): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0200000000000100000008000100030000002c0004800500030001ff5e1380037cdb510000000500030000000000050003002462daadb2be0100000005000300800000000800020003000000"], 0x50}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 5.54785751s ago: executing program 1 (id=11174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40004) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 5.485845745s ago: executing program 2 (id=11176): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) 5.323033878s ago: executing program 2 (id=11177): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_SIOCADDRT(r1, 0x61d9, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000180)) 3.613515735s ago: executing program 1 (id=11182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x3) 3.213205526s ago: executing program 1 (id=11188): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 3.188975817s ago: executing program 0 (id=11189): accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59be176d378767821df88e0ab00d48f37bc797485bf", 0x28}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) shutdown(r0, 0x1) 2.984505643s ago: executing program 0 (id=11190): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x5, 0x7fffffff, 0x2}, 0x0, 0x0) 2.873232675s ago: executing program 1 (id=11191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x40046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd28, 0x10000, {0x0, 0x0, 0x0, r4, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) 2.668044276s ago: executing program 1 (id=11193): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa080002"], 0x84}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='A\x000'], 0x5c) 2.667134106s ago: executing program 2 (id=11194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x5, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000080)="bad330fbc9b55400040000ea0756", 0xe, 0x1, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd9, 0x6, @broadcast}, 0x14) 2.38074426s ago: executing program 3 (id=11195): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}], 0x1, 0x20004841) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.379109678s ago: executing program 2 (id=11196): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.360035454s ago: executing program 4 (id=11197): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 2.277817622s ago: executing program 3 (id=11198): socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.258761246s ago: executing program 2 (id=11199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0xd4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xf}}, @TCA_U32_SEL={0x94, 0x5, {0x10, 0x1, 0x8, 0x3, 0x3, 0xd, 0x9, 0x2, [{0xab27, 0x49, 0x101}, {0xfffff29e, 0x9f9d, 0xf, 0x9}, {0x4, 0xf9, 0x80000000, 0x2}, {0x7, 0x9, 0xffffffff, 0xfffffff7}, {0x1, 0xca99, 0x9, 0x2}, {0x3, 0x3d0, 0x8, 0x3}, {0x2, 0x449, 0x80000001, 0x6}, {0x9, 0x3, 0x2, 0x5}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.065124882s ago: executing program 0 (id=11200): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.999885484s ago: executing program 4 (id=11201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r1, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 1.893187844s ago: executing program 4 (id=11202): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x35}, [@call]}, 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 685.531544ms ago: executing program 3 (id=11203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xdc, 0x6, @broadcast}, 0x14) 669.617411ms ago: executing program 0 (id=11204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x3, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 627.910507ms ago: executing program 4 (id=11205): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) 589.25164ms ago: executing program 2 (id=11206): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1000}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000100001040000e2ff00e52c00efff2600", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e65766500001400028008000100"], 0x58}}, 0x0) 545.472043ms ago: executing program 4 (id=11207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40004) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 433.594757ms ago: executing program 0 (id=11208): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 385.336834ms ago: executing program 3 (id=11209): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000080000000160a01000000"], 0xc8}}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}], 0x1, 0x20004841) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 183.475787ms ago: executing program 3 (id=11210): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 173.628709ms ago: executing program 0 (id=11211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24048000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) 107.668018ms ago: executing program 4 (id=11212): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xff48}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 0s ago: executing program 3 (id=11213): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.0.6788'. [ 328.347501][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6802'. [ 328.443610][T20138] netem: change failed [ 329.550826][T20204] netlink: 'syz.3.6838': attribute type 18 has an invalid length. [ 330.265704][T20247] netlink: 'syz.1.6860': attribute type 14 has an invalid length. [ 330.448095][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6865'. [ 330.696670][T20276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6874'. [ 331.968386][T20364] team0: Cannot enslave team device to itself [ 332.509046][T20400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6934'. [ 332.534221][T20400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6934'. [ 333.609161][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6965'. [ 333.701838][T20465] netem: change failed [ 333.750225][T20467] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6967'. [ 333.995045][T20482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6974'. [ 334.433984][T20510] Bluetooth: hci1: too big key_count value 32778 [ 334.511189][T20517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6990'. [ 335.056135][T20548] netlink: 'syz.1.7005': attribute type 4 has an invalid length. [ 335.138232][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7008'. [ 335.777008][T20595] sctp: [Deprecated]: syz.3.7027 (pid 20595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.777008][T20595] Use struct sctp_sack_info instead [ 336.243056][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7045'. [ 336.263804][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7045'. [ 336.293526][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7045'. [ 336.615674][T20656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7057'. [ 336.732456][T20663] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 336.846501][T20674] bridge0: entered allmulticast mode [ 337.858839][T20704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7078'. [ 338.150544][T20720] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7086'. [ 338.872672][T20764] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7108'. [ 339.150576][T20774] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7113'. [ 339.293287][T20779] tun0: tun_chr_ioctl cmd 1074025675 [ 339.299111][T20779] tun0: persist disabled [ 339.610171][T20797] netlink: 'syz.2.7124': attribute type 4 has an invalid length. [ 340.091505][T20825] netlink: 'syz.0.7138': attribute type 1 has an invalid length. [ 340.552097][T20858] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7154'. [ 340.574111][T20860] block nbd2: not configured, cannot reconfigure [ 340.983663][T20887] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 341.137557][T20897] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.378389][T20909] tipc: Started in network mode [ 341.391986][T20909] tipc: Node identity ac14140f, cluster identity 4711 [ 341.418243][T20909] tipc: New replicast peer: 255.255.255.255 [ 341.426264][T20909] tipc: Enabled bearer , priority 10 [ 341.690149][T20930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7187'. [ 341.835687][T20937] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 341.850948][T20937] syzkaller1: linktype set to 823 [ 341.861771][T20941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7191'. [ 341.885561][T20938] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.895592][T20938] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.902872][T20938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.451168][T20970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7204'. [ 342.543226][ T5832] tipc: Node number set to 2886997007 [ 342.791303][T20992] netlink: 'syz.3.7216': attribute type 10 has an invalid length. [ 342.859495][T20992] team0: Port device dummy0 added [ 343.168425][T21017] netlink: 'syz.4.7227': attribute type 83 has an invalid length. [ 343.583567][T21039] netlink: 54 bytes leftover after parsing attributes in process `syz.2.7238'. [ 343.592730][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7238'. [ 344.057894][T21070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7254'. [ 345.156245][T21144] veth0: entered promiscuous mode [ 345.162449][T21143] veth0: left promiscuous mode [ 345.563464][T21162] IPVS: persistence engine module ip_vs_pe_À not found [ 346.368999][T21205] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7315'. [ 346.536763][T21216] : renamed from bond0 (while UP) [ 346.563636][T21218] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7323'. [ 347.255006][T21265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7345'. [ 348.235534][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7366'. [ 348.644413][T21338] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7378'. [ 348.885776][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7384'. [ 350.675030][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7442'. [ 350.690649][T21475] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 351.088516][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7454'. [ 351.255438][T21512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7461'. [ 351.595747][T21533] netlink: 'syz.1.7471': attribute type 19 has an invalid length. [ 351.950458][T21559] netlink: 564 bytes leftover after parsing attributes in process `syz.3.7484'. [ 352.007409][T21561] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7486'. [ 352.026130][ T5833] block nbd0: Receive control failed (result -32) [ 352.162227][T21568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7487'. [ 352.284245][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7494'. [ 352.333660][T21578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.363056][T21578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.409387][T21578] bond0 (unregistering): Released all slaves [ 352.434803][T21584] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7495'. [ 352.443937][ T5832] infiniband syz1: ib_query_port failed (-19) [ 352.711208][T21602] tipc: Resetting bearer [ 352.736223][T21604] xt_hashlimit: size too large, truncated to 1048576 [ 352.749193][T21607] netlink: 'syz.4.7504': attribute type 16 has an invalid length. [ 352.760867][T21607] netlink: 'syz.4.7504': attribute type 17 has an invalid length. [ 353.052501][T21607] bridge0: left allmulticast mode [ 353.068211][T21607] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.114295][T21607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.138473][ T799] lo speed is unknown, defaulting to 1000 [ 353.147721][T21610] –: renamed from vxcan1 (while UP) [ 353.156720][ T799] syz2: Port: 1 Link ACTIVE [ 353.746422][T21654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7529'. [ 354.082428][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7538'. [ 354.473987][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7551'. [ 354.724389][T21716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7559'. [ 354.966006][T21731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7566'. [ 355.231546][T21751] netlink: 'syz.4.7574': attribute type 2 has an invalid length. [ 355.240176][T21751] netlink: 'syz.4.7574': attribute type 4 has an invalid length. [ 356.186032][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7596'. [ 356.222168][T21803] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7597'. [ 356.753896][T21821] netlink: 'syz.0.7606': attribute type 1 has an invalid length. [ 356.774008][T21821] nbd: error processing sock list [ 356.794040][T21821] block nbd1: shutting down sockets [ 357.390135][T21856] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 358.469467][T21899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7641'. [ 358.479562][T21901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7644'. [ 358.650762][T21912] sch_fq: defrate 0 ignored. [ 358.988363][T21932] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 359.326946][T21954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7670'. [ 359.415668][T21959] netlink: 'syz.2.7672': attribute type 21 has an invalid length. [ 359.434666][T21959] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7672'. [ 359.445133][T21959] netlink: 'syz.2.7672': attribute type 4 has an invalid length. [ 359.452988][T21959] netlink: 'syz.2.7672': attribute type 5 has an invalid length. [ 359.481224][T21962] netlink: 'syz.2.7672': attribute type 21 has an invalid length. [ 359.503032][T21962] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7672'. [ 359.514277][T21959] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7672'. [ 359.566153][T21962] netlink: 'syz.2.7672': attribute type 4 has an invalid length. [ 359.581097][T21969] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7677'. [ 359.595449][T21962] netlink: 'syz.2.7672': attribute type 5 has an invalid length. [ 359.613869][T21962] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7672'. [ 359.791586][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7682'. [ 359.807972][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7682'. [ 360.418611][T22017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.429405][T22017] bond0: (slave bond1): Enslaving as an active interface with an up link [ 361.150036][T22071] tipc: New replicast peer: 255.255.255.255 [ 361.157269][T22071] tipc: Enabled bearer , priority 10 [ 361.227818][T22076] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 361.510163][T22096] netlink: 'syz.3.7738': attribute type 9 has an invalid length. [ 362.604335][T22168] netlink: 'syz.2.7771': attribute type 6 has an invalid length. [ 363.324489][T22202] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 363.668730][T22220] netlink: 'syz.0.7795': attribute type 83 has an invalid length. [ 364.036291][T22246] __nla_validate_parse: 9 callbacks suppressed [ 364.036312][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7807'. [ 364.063979][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7807'. [ 364.501515][T22276] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7822'. [ 364.585936][T22278] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7824'. [ 364.613337][T22278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7824'. [ 364.627028][ T5833] block nbd0: Receive control failed (result -107) [ 364.636933][T22278] block nbd0: reconnected socket [ 364.657842][T22283] netlink: 'syz.2.7825': attribute type 3 has an invalid length. [ 364.673048][T22286] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7827'. [ 364.697924][T22283] netlink: 'syz.2.7825': attribute type 1 has an invalid length. [ 364.712352][T22283] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7825'. [ 364.737350][T22283] NCSI netlink: No device for ifindex 813332851 [ 364.778772][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a71c400: rx timeout, send abort [ 364.789966][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805a71c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 364.917158][T22297] bridge_slave_0: default FDB implementation only supports local addresses [ 365.585338][ T30] audit: type=1804 audit(1769561906.134:5): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7852" name="/newroot/1575/cgroup.controllers" dev="tmpfs" ino=7916 res=1 errno=0 [ 365.665036][ T30] audit: type=1800 audit(1769561906.164:6): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7852" name="cgroup.controllers" dev="tmpfs" ino=7916 res=0 errno=0 [ 367.264755][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7895'. [ 367.288869][T22447] block nbd1: Unsupported socket: should be TCP or UNIX. [ 368.384536][T22513] netlink: 'syz.1.7926': attribute type 28 has an invalid length. [ 368.397260][T22513] netlink: 'syz.1.7926': attribute type 3 has an invalid length. [ 368.423189][T22513] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7926'. [ 368.686785][T22530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7934'. [ 369.576022][T22579] __nla_validate_parse: 2 callbacks suppressed [ 369.576042][T22579] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7955'. [ 370.598242][T22639] syzkaller1: entered promiscuous mode [ 370.613341][T22639] syzkaller1: entered allmulticast mode [ 370.684178][T22646] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7987'. [ 370.925929][T22659] netlink: 'syz.4.7992': attribute type 1 has an invalid length. [ 370.936657][T22659] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7992'. [ 371.070166][T22668] block nbd1: NBD_DISCONNECT [ 371.273304][T22681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8001'. [ 371.365925][T22685] syzkaller1: entered promiscuous mode [ 371.371466][T22685] syzkaller1: entered allmulticast mode [ 371.404486][T22685] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 371.970356][T22723] netlink: 'syz.3.8020': attribute type 11 has an invalid length. [ 372.242636][T22741] tipc: Resetting bearer [ 372.463790][ T1028] smc: removing ib device  [ 372.503211][T22741] tipc: Disabling bearer [ 372.915454][T22754] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8033'. [ 372.929975][T22756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8034'. [ 373.285332][T22766] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8039'. [ 375.289856][T22861] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 375.652726][T22879] syzkaller1: entered promiscuous mode [ 375.667230][T22879] syzkaller1: entered allmulticast mode [ 376.044880][T22903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8098'. [ 376.062977][T22903] netlink: 'syz.3.8098': attribute type 7 has an invalid length. [ 376.085426][T22903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8098'. [ 376.147555][T22907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8100'. [ 376.179588][T22907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8100'. [ 376.318849][T22915] netlink: 'syz.2.8104': attribute type 10 has an invalid length. [ 376.342193][T22915] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 376.400646][T22919] syzkaller1: entered promiscuous mode [ 376.406385][T22919] syzkaller1: entered allmulticast mode [ 377.404769][T22974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8132'. [ 377.560924][T22980] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8135'. [ 378.382080][T23028] dvmrp6: entered allmulticast mode [ 378.640438][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.208132][T23069] netlink: 'syz.2.8178': attribute type 4 has an invalid length. [ 379.320202][T23079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8183'. [ 379.330092][T23079] block nbd2: Unsupported socket: should be TCP or UNIX. [ 379.748452][T23107] siw: device registration error -23 [ 380.015897][T23121] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 380.565654][T23148] vlan2: entered allmulticast mode [ 380.570896][T23148] geneve1: entered allmulticast mode [ 380.771685][T23157] netlink: 'syz.1.8218': attribute type 29 has an invalid length. [ 380.803595][T23157] netlink: 'syz.1.8218': attribute type 29 has an invalid length. [ 380.824978][T23157] netlink: 500 bytes leftover after parsing attributes in process `syz.1.8218'. [ 380.850608][T23157] unsupported nla_type 58 [ 380.992101][T23172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8224'. [ 381.031663][T23172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8224'. [ 381.914466][T23219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8247'. [ 381.933270][T23219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8247'. [ 382.275638][T23243] erspan0: entered promiscuous mode [ 382.283422][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8258'. [ 382.379120][T23247] veth0: entered promiscuous mode [ 382.395014][T23247] veth0: left promiscuous mode [ 382.677133][T23265] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 382.715658][T23265] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 382.727386][ T30] audit: type=1800 audit(1769561923.284:7): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8270" name="memory.events" dev="tmpfs" ino=8395 res=0 errno=0 [ 382.734634][T23265] gretap1: entered promiscuous mode [ 382.758343][T23265] gretap1: entered allmulticast mode [ 382.796522][T23269] syzkaller1: entered promiscuous mode [ 382.809158][T23269] syzkaller1: entered allmulticast mode [ 382.896588][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8274'. [ 382.913234][T23281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8274'. [ 382.940953][ T135] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.950361][ T135] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.009711][ T135] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.039671][ T135] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.149062][T23293] syzkaller1: entered promiscuous mode [ 383.160726][T23293] syzkaller1: entered allmulticast mode [ 383.450507][T23313] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.8289'. [ 383.625051][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8294'. [ 384.763971][T23388] sock: sock_set_timeout: `syz.4.8327' (pid 23388) tries to set negative timeout [ 385.350367][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8347'. [ 385.360821][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8347'. [ 385.676596][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.705064][T23447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8356'. [ 385.834067][T23453] netlink: 'syz.3.8360': attribute type 29 has an invalid length. [ 385.845434][T23453] netlink: 'syz.3.8360': attribute type 29 has an invalid length. [ 386.014398][T23465] netlink: 'syz.2.8366': attribute type 11 has an invalid length. [ 386.247766][T23475] netlink: 'syz.2.8370': attribute type 1 has an invalid length. [ 386.267808][T23475] netlink: 'syz.2.8370': attribute type 1 has an invalid length. [ 386.553415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.593779][T23497] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 386.784549][T23509] syzkaller1: entered promiscuous mode [ 386.790104][T23509] syzkaller1: entered allmulticast mode [ 387.119931][T23525] syzkaller1: entered promiscuous mode [ 387.139260][T23525] syzkaller1: entered allmulticast mode [ 387.206832][T23535] __nla_validate_parse: 4 callbacks suppressed [ 387.206849][T23535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8400'. [ 387.279434][T23535] bond0 (unregistering): (slave bond1): Releasing backup interface [ 387.355937][T23535] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 387.376900][T23535] bond0 (unregistering): Released all slaves [ 387.390513][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8403'. [ 387.549518][T23548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8405'. [ 387.596878][ T1008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.636343][T23548] gtp1: entered promiscuous mode [ 387.641575][T23548] gtp1: entered allmulticast mode [ 388.340269][T23600] syzkaller1: entered promiscuous mode [ 388.356232][T23600] syzkaller1: entered allmulticast mode [ 388.387527][T23600] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 388.639207][T23616] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8437'. [ 388.941971][T23635] smc: net device team0 applied user defined pnetid SYZ2 [ 388.951541][T23635] smc: net device caif0 applied user defined pnetid SYZ2 [ 389.015846][T23637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.155188][T23647] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.8453'. [ 389.265074][T23656] netlink: 'syz.4.8455': attribute type 1 has an invalid length. [ 389.273848][T23656] netlink: 'syz.4.8455': attribute type 2 has an invalid length. [ 389.579769][T23673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 389.686864][T23679] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.8466'. [ 389.791559][T23687] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8470'. [ 389.982529][T23698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8476'. [ 390.618231][T23745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8497'. [ 391.861949][T23798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8521'. [ 392.459876][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8538'. [ 392.640437][T23848] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8543'. [ 394.992867][ T1028] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.004570][ T1028] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.035325][ T1028] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.045073][ T1028] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.622666][T23999] sctp: [Deprecated]: syz.4.8603 (pid 23999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.622666][T23999] Use struct sctp_sack_info instead [ 395.681378][T24003] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8604'. [ 395.785741][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8608'. [ 396.089278][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8616'. [ 396.285946][T24028] wlan0 speed is unknown, defaulting to 1000 [ 396.308979][T24028] lo speed is unknown, defaulting to 1000 [ 397.524617][T24098] tunl0: left promiscuous mode [ 397.529685][T24098] gre0: left promiscuous mode [ 397.552984][T24098] gretap0: left promiscuous mode [ 397.567072][T24098] erspan0: left promiscuous mode [ 397.572343][T24098] ip_vti0: left promiscuous mode [ 397.662455][T24106] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8651'. [ 397.802518][T24098] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.810356][T24098] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.091839][T24098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.114392][T24098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.209717][T24133] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8656'. [ 398.393867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.402979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.411520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.913459][T24098] gre1: left promiscuous mode [ 398.967462][T24098] bond1: left promiscuous mode [ 398.976363][T24098] gretap1: left promiscuous mode [ 399.025576][T24103] syzkaller1: entered promiscuous mode [ 399.031196][T24103] syzkaller1: entered allmulticast mode [ 399.079294][ T1028] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.100065][ T3582] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.267278][T24158] sctp: [Deprecated]: syz.1.8666 (pid 24158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.267278][T24158] Use struct sctp_sack_info instead [ 399.289960][ T3582] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.308948][ T3582] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.334561][T24159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8664'. [ 399.597897][T24177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8672'. [ 399.945801][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8685'. [ 399.971997][T24203] vcan0: tx drop: invalid sa for name 0x0000000000008001 [ 400.118901][T24210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8689'. [ 400.461376][T24227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8696'. [ 400.855306][T24246] netlink: 'syz.0.8703': attribute type 16 has an invalid length. [ 400.865998][T24246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8703'. [ 401.179641][T24267] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.8714'. [ 401.476792][T24283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8721'. [ 402.122727][T24324] netlink: 'syz.2.8741': attribute type 4 has an invalid length. [ 402.222558][T24330] netlink: 'syz.2.8744': attribute type 9 has an invalid length. [ 402.243205][T24330] netlink: 'syz.2.8744': attribute type 11 has an invalid length. [ 402.252002][T24330] netlink: 'syz.2.8744': attribute type 12 has an invalid length. [ 402.412288][T24341] netlink: 'syz.1.8748': attribute type 25 has an invalid length. [ 402.514104][T24341] netlink: 'syz.1.8748': attribute type 25 has an invalid length. [ 402.579125][T24347] syzkaller1: entered promiscuous mode [ 402.589364][T24347] syzkaller1: entered allmulticast mode [ 402.879137][T24366] __nla_validate_parse: 4 callbacks suppressed [ 402.879156][T24366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8761'. [ 403.326358][T24386] ip6tnl2: entered allmulticast mode [ 403.634744][T24398] netlink: 'syz.1.8773': attribute type 1 has an invalid length. [ 403.649013][T24398] netlink: 'syz.1.8773': attribute type 2 has an invalid length. [ 403.666447][T24398] netlink: 'syz.1.8773': attribute type 1 has an invalid length. [ 403.861993][T24417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8781'. [ 404.116015][T24430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.823016][T24465] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8798'. [ 405.328338][T24487] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.427854][T24495] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8814'. [ 405.484380][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8815'. [ 405.527669][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8815'. [ 405.586922][T24502] syzkaller1: entered promiscuous mode [ 405.602691][T24502] syzkaller1: entered allmulticast mode [ 405.628911][T24118] lo speed is unknown, defaulting to 1000 [ 405.666051][T24118] lo speed is unknown, defaulting to 1000 [ 405.816444][T24514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8822'. [ 405.825876][T24514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8822'. [ 405.957003][T24525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8828'. [ 406.024591][T24525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.577461][T24562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.766497][T24576] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8849'. [ 406.873388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.972061][T24587] syzkaller1: entered promiscuous mode [ 406.983979][T24587] syzkaller1: entered allmulticast mode [ 407.144094][T24598] validate_nla: 4 callbacks suppressed [ 407.144113][T24598] netlink: 'syz.0.8860': attribute type 5 has an invalid length. [ 407.257681][T24602] netlink: 'syz.0.8862': attribute type 4 has an invalid length. [ 408.074263][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.151907][T24650] netlink: 'syz.2.8883': attribute type 1 has an invalid length. [ 408.219356][T24650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.388408][T24667] __nla_validate_parse: 4 callbacks suppressed [ 408.388427][T24667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8891'. [ 408.456591][T24672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8892'. [ 408.648231][T24682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8897'. [ 408.718923][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.746059][T24686] netlink: 'syz.4.8899': attribute type 21 has an invalid length. [ 408.777656][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8899'. [ 408.818001][T24686] netlink: 'syz.4.8899': attribute type 21 has an invalid length. [ 408.841364][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8899'. [ 408.865115][T24692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8901'. [ 409.041791][T24703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8907'. [ 409.129566][T24705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8907'. [ 409.165848][T24705] nbd: nbd64 already in use [ 409.243729][T24711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8909'. [ 409.279513][T24711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8909'. [ 409.391011][T24446] udevd[24446]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 409.500710][T24722] netlink: 'syz.4.8913': attribute type 21 has an invalid length. [ 409.527330][T24722] netlink: 'syz.4.8913': attribute type 22 has an invalid length. [ 409.546285][T24722] netlink: 'syz.4.8913': attribute type 23 has an invalid length. [ 409.555321][T24722] netlink: 'syz.4.8913': attribute type 25 has an invalid length. [ 409.564551][T24722] netlink: 'syz.4.8913': attribute type 26 has an invalid length. [ 409.788689][T24733] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 409.808527][T24733] syzkaller1: Refused to change device type [ 409.903333][T24737] bridge0: port 3(batadv1) entered blocking state [ 409.910245][T24737] bridge0: port 3(batadv1) entered disabled state [ 409.933667][T24737] batadv1: entered allmulticast mode [ 409.941043][T24737] batadv1: entered promiscuous mode [ 410.275808][T24756] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 410.283506][ T135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.292273][ T135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.304840][ T135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.343275][ T135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.403432][ T4983] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 410.413513][ T4983] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 411.044291][T24797] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 411.271461][T24763] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 411.293602][T24763] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 411.731082][T24837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.867858][T24898] validate_nla: 4 callbacks suppressed [ 412.867879][T24898] netlink: 'syz.4.8981': attribute type 9 has an invalid length. [ 412.903251][T24898] netlink: 'syz.4.8981': attribute type 11 has an invalid length. [ 412.919622][T24898] netlink: 'syz.4.8981': attribute type 12 has an invalid length. [ 413.654528][T24947] veth0: entered promiscuous mode [ 413.661465][T24946] veth0: left promiscuous mode [ 413.820948][T24957] netlink: 'syz.4.9005': attribute type 1 has an invalid length. [ 413.834601][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.842761][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.015518][T24969] netlink: 'syz.2.9010': attribute type 15 has an invalid length. [ 414.032090][T24968] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 414.053366][T24969] __nla_validate_parse: 13 callbacks suppressed [ 414.053386][T24969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9010'. [ 414.106076][ T1028] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 414.106619][T24969] netlink: 'syz.2.9010': attribute type 15 has an invalid length. [ 414.129135][ T1028] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 414.143277][T24969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9010'. [ 414.160432][ T1028] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 414.181367][ T1028] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 414.298736][T24980] netlink: 'syz.0.9016': attribute type 12 has an invalid length. [ 414.327188][T24980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9016'. [ 414.364720][ T1028] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.364773][T24980] netlink: 'syz.0.9016': attribute type 12 has an invalid length. [ 414.383387][ T1028] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.394595][ T1028] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.412491][ T1028] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.418408][T24980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9016'. [ 414.615163][T24994] trusted_key: syz.2.9021 sent an empty control message without MSG_MORE. [ 414.741345][T25001] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9026'. [ 414.776686][T25004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.791960][T25004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.808676][T25004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.826556][T25004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.843001][T25004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.855164][T25004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.040946][T25013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9031'. [ 415.270643][T25022] !: renamed from dummy0 (while UP) [ 415.711068][T25049] atomic_op ffff88807b71b998 conn xmit_atomic 0000000000000000 [ 415.739859][T25053] netlink: 'syz.4.9047': attribute type 1 has an invalid length. [ 415.823999][T25053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.882587][T25056] bond2: (slave geneve2): making interface the new active one [ 415.916535][T25056] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 416.108604][T25068] net_ratelimit: 197 callbacks suppressed [ 416.108633][T25068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.537868][T25089] netlink: 'syz.1.9060': attribute type 11 has an invalid length. [ 416.574539][T25089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9060'. [ 416.588991][T25089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9060'. [ 417.136144][T25107] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9068'. [ 417.194060][T25110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9069'. [ 417.422258][T25116] pim6reg1: entered promiscuous mode [ 417.427929][T25116] pim6reg1: entered allmulticast mode [ 417.782085][T25138] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 417.956810][T25147] syzkaller1: entered promiscuous mode [ 417.973132][T25147] syzkaller1: entered allmulticast mode [ 418.153418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.345827][T25169] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 418.940864][T25200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.949531][T25200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.960919][ T3582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.973557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.982018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.991507][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.013860][T24118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.152779][T25211] __nla_validate_parse: 6 callbacks suppressed [ 420.152798][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9111'. [ 420.185541][T25211] validate_nla: 1 callbacks suppressed [ 420.185557][T25211] netlink: 'syz.2.9111': attribute type 1 has an invalid length. [ 420.209428][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9111'. [ 420.229089][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9111'. [ 420.239794][T25211] netlink: 'syz.2.9111': attribute type 1 has an invalid length. [ 420.271395][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9111'. [ 420.439382][T25228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9118'. [ 420.470499][T25228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9118'. [ 420.708048][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9124'. [ 420.734668][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9124'. [ 421.239102][T25267] netlink: 'syz.3.9136': attribute type 18 has an invalid length. [ 421.258811][T25267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9136'. [ 421.273635][ C1] net_ratelimit: 6 callbacks suppressed [ 421.273659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.312892][T25267] netlink: 'syz.3.9136': attribute type 18 has an invalid length. [ 421.337300][T25267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9136'. [ 421.510389][T25280] netlink: Conntrack attr has 3 unknown bytes [ 421.587406][T25286] netlink: 'syz.4.9144': attribute type 1 has an invalid length. [ 422.614559][T25346] netlink: 'syz.4.9170': attribute type 12 has an invalid length. [ 422.626450][T25346] netlink: 'syz.4.9170': attribute type 29 has an invalid length. [ 422.634906][T25346] netlink: 'syz.4.9170': attribute type 2 has an invalid length. [ 423.133699][T25377] tipc: Enabling of bearer rejected, already enabled [ 423.227565][T25382] bridge6: entered promiscuous mode [ 423.245729][T25382] bridge6: entered allmulticast mode [ 423.274314][T25382] team0: Port device bridge6 added [ 424.393388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.716960][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.725992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.246374][T25469] __nla_validate_parse: 9 callbacks suppressed [ 425.246392][T25469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9214'. [ 425.767399][T25499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9224'. [ 426.130888][T25519] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.586706][T25542] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9243'. [ 426.763349][T25548] netlink: 'syz.0.9246': attribute type 1 has an invalid length. [ 426.811685][T25554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9247'. [ 426.890912][T25548] bond4: (slave gretap1): making interface the new active one [ 426.899761][T25548] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 426.914745][T25555] netlink: 'syz.1.9248': attribute type 1 has an invalid length. [ 426.923237][T25553] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 426.946660][T25555] netlink: 'syz.1.9248': attribute type 1 has an invalid length. [ 427.266434][T25579] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9257'. [ 427.593526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.661143][ T3582] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 427.683615][ T3582] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 427.704998][ T3582] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 427.727150][ T3582] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 427.884982][T25606] GUP no longer grows the stack in syz.2.9270 (25606): 200000003000-20000000a000 (200000001000) [ 427.896358][T25606] CPU: 1 UID: 0 PID: 25606 Comm: syz.2.9270 Not tainted syzkaller #0 PREEMPT(full) [ 427.896385][T25606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 427.896404][T25606] Call Trace: [ 427.896412][T25606] [ 427.896420][T25606] dump_stack_lvl+0xe8/0x150 [ 427.896452][T25606] __get_user_pages+0x2453/0x29d0 [ 427.896502][T25606] ? __gup_longterm_locked+0xc4e/0x1630 [ 427.896540][T25606] ? down_read_killable+0x1bb/0x340 [ 427.896562][T25606] ? try_get_folio+0xec/0x650 [ 427.896595][T25606] __gup_longterm_locked+0xdcf/0x1630 [ 427.896647][T25606] gup_fast_fallback+0x1d82/0x22e0 [ 427.896708][T25606] ? __pfx_gup_fast_fallback+0x10/0x10 [ 427.896738][T25606] ? is_valid_gup_args+0x11f/0x200 [ 427.896768][T25606] ? get_user_pages_fast+0x4d/0xb0 [ 427.896797][T25606] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 427.896835][T25606] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 427.896865][T25606] iov_iter_get_pages2+0x5e/0xa0 [ 427.896898][T25606] __se_sys_vmsplice+0x7b3/0x1490 [ 427.896941][T25606] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 427.896968][T25606] ? __pfx_futex_wake+0x10/0x10 [ 427.896996][T25606] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.897075][T25606] do_syscall_64+0xe2/0xf80 [ 427.897095][T25606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.897114][T25606] ? trace_irq_disable+0x37/0x100 [ 427.897133][T25606] ? clear_bhb_loop+0x60/0xb0 [ 427.897157][T25606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.897182][T25606] RIP: 0033:0x7fb38159aeb9 [ 427.897200][T25606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.897217][T25606] RSP: 002b:00007fb37f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 427.897245][T25606] RAX: ffffffffffffffda RBX: 00007fb381815fa0 RCX: 00007fb38159aeb9 [ 427.897261][T25606] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 427.897274][T25606] RBP: 00007fb381608c1f R08: 0000000000000000 R09: 0000000000000000 [ 427.897304][T25606] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 427.897317][T25606] R13: 00007fb381816038 R14: 00007fb381815fa0 R15: 00007ffe79a30348 [ 427.897357][T25606] [ 428.204752][T25610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9273'. [ 428.214137][T25610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9273'. [ 428.230705][T25612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9272'. [ 428.260425][T25610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9273'. [ 428.269769][T25610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9273'. [ 428.561242][T24116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.626556][T25631] netlink: 'syz.3.9282': attribute type 2 has an invalid length. [ 428.775643][T25644] netlink: 'syz.4.9286': attribute type 1 has an invalid length. [ 428.785192][T25644] netlink: 'syz.4.9286': attribute type 4 has an invalid length. [ 429.440901][T25680] netlink: 'syz.3.9303': attribute type 1 has an invalid length. [ 429.521851][T25686] bond4: (slave gretap2): making interface the new active one [ 429.530353][T25686] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 430.219947][T25718] netlink: 'syz.1.9317': attribute type 13 has an invalid length. [ 430.483865][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.492892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.803514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.815891][T25740] gre2: entered promiscuous mode [ 430.820888][T25740] gre2: entered allmulticast mode [ 431.607684][T25776] netlink: 'syz.2.9340': attribute type 1 has an invalid length. [ 431.724197][T25787] netlink: 'syz.4.9344': attribute type 1 has an invalid length. [ 431.761098][T25776] bond2: (slave geneve4): making interface the new active one [ 431.786103][T25776] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 431.847999][ T8699] netdevsim netdevsim2 netdevsim0: set [1, 3] type 2 family 0 port 20004 - 0 [ 431.892498][T25789] bond3: (slave gretap2): making interface the new active one [ 431.911752][T25789] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 431.937010][ T8699] netdevsim netdevsim2 netdevsim1: set [1, 3] type 2 family 0 port 20004 - 0 [ 431.946246][ T8699] netdevsim netdevsim2 netdevsim2: set [1, 3] type 2 family 0 port 20004 - 0 [ 431.955204][ T8699] netdevsim netdevsim2 netdevsim3: set [1, 3] type 2 family 0 port 20004 - 0 [ 431.983711][T25788] wlan0 speed is unknown, defaulting to 1000 [ 431.991438][T25788] lo speed is unknown, defaulting to 1000 [ 432.155003][T25804] __nla_validate_parse: 4 callbacks suppressed [ 432.155023][T25804] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9350'. [ 432.606596][T25829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9361'. [ 432.670442][T25833] vcan0: tx drop: invalid sa for name 0x0000000000000401 [ 432.700845][T25829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9361'. [ 433.218468][T25859] netlink: 'syz.0.9374': attribute type 29 has an invalid length. [ 433.241120][T25859] netlink: 'syz.0.9374': attribute type 29 has an invalid length. [ 433.250733][T25861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9377'. [ 433.252997][T25859] netlink: 500 bytes leftover after parsing attributes in process `syz.0.9374'. [ 433.366153][T25866] syz_tun: entered allmulticast mode [ 433.408557][T25865] syz_tun: left allmulticast mode [ 433.792816][ T24] IPVS: starting estimator thread 0... [ 433.903448][T25898] IPVS: using max 28 ests per chain, 67200 per kthread [ 433.919651][T25902] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9391'. [ 434.468092][T25928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9404'. [ 434.478414][T25928] bridge_slave_1: left allmulticast mode [ 434.484962][T25928] bridge_slave_1: left promiscuous mode [ 434.498301][T25928] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.530859][T25928] bridge_slave_0: left allmulticast mode [ 434.548741][T25928] bridge_slave_0: left promiscuous mode [ 434.568919][T25928] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.724766][T25941] lo: Caught tx_queue_len zero misconfig [ 434.779717][T25947] netlink: 'syz.0.9409': attribute type 21 has an invalid length. [ 434.787892][T25947] netlink: 'syz.0.9409': attribute type 22 has an invalid length. [ 434.797814][T25947] netlink: 'syz.0.9409': attribute type 23 has an invalid length. [ 434.806744][T25947] netlink: 'syz.0.9409': attribute type 25 has an invalid length. [ 434.816473][T25947] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9409'. [ 435.259116][T25975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9423'. [ 435.268901][T25975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9423'. [ 435.653884][T25998] netlink: 'syz.4.9433': attribute type 2 has an invalid length. [ 435.665682][T25998] netlink: 'syz.4.9433': attribute type 2 has an invalid length. [ 435.833907][T11792] IPVS: ip_vs_send_async error -1 [ 436.039241][T26021] netlink: 'syz.1.9442': attribute type 1 has an invalid length. [ 436.114811][T26025] bond4: (slave ip6gretap1): making interface the new active one [ 436.127643][T26025] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 436.137216][T26025] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 436.146869][T26025] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 436.265803][T26029] block nbd0: reconnected socket [ 436.272235][ T5833] block nbd0: Receive control failed (result -32) [ 437.602312][T26102] __nla_validate_parse: 6 callbacks suppressed [ 437.602332][T26102] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9474'. [ 437.656585][T26106] syzkaller1: entered promiscuous mode [ 437.662308][T26106] syzkaller1: entered allmulticast mode [ 437.718245][T26108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9476'. [ 437.751170][T26108] geneve2: entered promiscuous mode [ 437.914391][T26118] veth1_to_bond: entered allmulticast mode [ 437.922197][T26118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9482'. [ 438.035667][T26118] bond0: (slave bond_slave_1): Releasing backup interface [ 438.085483][T26118] veth1_to_bond (unregistering): left allmulticast mode [ 438.171958][T26132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9486'. [ 438.335099][T26137] syzkaller1: entered promiscuous mode [ 438.358837][T26137] syzkaller1: entered allmulticast mode [ 438.442121][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9491'. [ 438.487510][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9491'. [ 438.710714][T26159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9498'. [ 438.772812][T26163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9498'. [ 438.898414][T26169] netlink: 'syz.2.9503': attribute type 1 has an invalid length. [ 439.346917][T26200] netlink: 'syz.2.9516': attribute type 1 has an invalid length. [ 439.507277][T26207] bond4: (slave gretap2): making interface the new active one [ 439.518391][T26207] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 439.705802][T26219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.993761][T11792] IPVS: ip_vs_send_async error -1 [ 440.088678][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.561544][T26272] policy can only be matched on NF_INET_PRE_ROUTING [ 440.561568][T26272] unable to load match [ 440.850338][T26289] netlink: 'syz.2.9552': attribute type 11 has an invalid length. [ 440.873116][T26289] netlink: 'syz.2.9552': attribute type 4 has an invalid length. [ 440.880907][T26289] netlink: 'syz.2.9552': attribute type 5 has an invalid length. [ 440.892505][T26293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9555'. [ 440.905140][T26289] netlink: 'syz.2.9552': attribute type 6 has an invalid length. [ 440.924292][T26289] netlink: 199748 bytes leftover after parsing attributes in process `syz.2.9552'. [ 441.011252][T26297] wlan0 speed is unknown, defaulting to 1000 [ 441.024484][T26297] lo speed is unknown, defaulting to 1000 [ 441.805103][T26340] team1: entered promiscuous mode [ 441.814638][T26340] team1: entered allmulticast mode [ 443.291688][T26406] netlink: 'syz.0.9599': attribute type 15 has an invalid length. [ 443.879005][T26441] netlink: 'syz.4.9616': attribute type 4 has an invalid length. [ 443.927508][T24118] lo speed is unknown, defaulting to 1000 [ 443.934444][T26444] __nla_validate_parse: 4 callbacks suppressed [ 443.934465][T26444] netlink: 208 bytes leftover after parsing attributes in process `syz.1.9615'. [ 443.955024][T24118] syz2: Port: 1 Link DOWN [ 444.240979][T26460] netlink: 'syz.1.9620': attribute type 29 has an invalid length. [ 444.260031][T26465] netlink: 'syz.1.9620': attribute type 29 has an invalid length. [ 444.279554][T26460] netlink: 500 bytes leftover after parsing attributes in process `syz.1.9620'. [ 445.030257][T26503] dvmrp0: entered allmulticast mode [ 445.105073][T26505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9637'. [ 445.536045][T26532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9648'. [ 445.972129][T26557] tipc: Failed to remove unknown binding: 66,1,1/10005162:3690908396/3690908398 [ 446.111539][T26563] syzkaller1: entered promiscuous mode [ 446.123269][T26563] syzkaller1: entered allmulticast mode [ 446.405275][T26577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9670'. [ 446.470678][T26581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9672'. [ 446.894701][T26602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9682'. [ 447.126877][T26611] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.9686'. [ 447.174389][T26613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9688'. [ 447.483457][T26630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9695'. [ 447.540115][T26630] bond5: entered promiscuous mode [ 447.548693][T26630] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.666245][T26630] bond5: (slave xfrm1): refused to change device type [ 447.900859][T26641] wlan0 speed is unknown, defaulting to 1000 [ 447.910260][T26641] lo speed is unknown, defaulting to 1000 [ 448.778987][T26649] lec:lec_atm_close: lec0: Shut down! [ 449.246754][T26716] __nla_validate_parse: 7 callbacks suppressed [ 449.246774][T26716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9719'. [ 449.341306][T26722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9720'. [ 449.529392][T26728] syzkaller1: entered promiscuous mode [ 449.553197][T26728] syzkaller1: entered allmulticast mode [ 449.629128][T26740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9725'. [ 449.667162][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.675197][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.683309][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.691228][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.699210][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.707168][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.715141][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.723121][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.731078][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.739106][T26732] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 449.758201][T26739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9726'. [ 449.926258][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9727'. [ 449.935973][T24118] lec:lec_start_xmit: lec0:No lecd attached [ 450.474971][T26772] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9733'. [ 450.494337][T26769] bond5: (slave netdevsim0): Enslaving as an active interface with an up link [ 451.466306][T26820] syzkaller1: entered promiscuous mode [ 451.496243][T26820] syzkaller1: entered allmulticast mode [ 451.837100][T26831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9750'. [ 451.982638][T26838] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.9753'. [ 452.139464][T26846] netlink: 'syz.4.9756': attribute type 1 has an invalid length. [ 452.171665][T26846] netlink: 'syz.4.9756': attribute type 4 has an invalid length. [ 452.214219][T26846] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9756'. [ 452.352524][T26859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9762'. [ 452.697914][T26876] wlan0 speed is unknown, defaulting to 1000 [ 452.727211][T26876] lo speed is unknown, defaulting to 1000 [ 453.687746][T26911] syzkaller0: entered promiscuous mode [ 453.693624][T26911] syzkaller0: entered allmulticast mode [ 454.172567][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059e65c00: rx timeout, send abort [ 454.674482][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059e66800: rx timeout, send abort [ 454.682805][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059e65c00: abort rx timeout. Force session deactivation [ 455.176383][T26927] vcan0 (unregistering): left allmulticast mode [ 455.182899][ C0] vcan0 (unregistering): j1939_tp_rxtimer: 0xffff888059e66800: abort rx timeout. Force session deactivation [ 455.259042][T26934] __nla_validate_parse: 3 callbacks suppressed [ 455.259061][T26934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9788'. [ 455.342481][T26936] netlink: 'syz.2.9790': attribute type 1 has an invalid length. [ 455.373617][T26938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9789'. [ 455.433153][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 455.441712][ C0] lec:lec_tx_timeout: lec0 [ 455.447928][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 455.460256][T26936] bond6: entered promiscuous mode [ 455.482796][T26936] bond6: entered allmulticast mode [ 455.498345][T26936] 8021q: adding VLAN 0 to HW filter on device bond6 [ 455.534488][T26946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9792'. [ 455.572283][T26941] macvlan0: entered promiscuous mode [ 455.585583][T26941] macvlan0: entered allmulticast mode [ 455.612152][T26941] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 456.176047][T26977] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9801'. [ 456.825073][T27017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9816'. [ 457.552260][T27049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9830'. [ 457.746367][T27056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9833'. [ 458.408586][T27082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9843'. [ 458.480330][T27088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9841'. [ 459.091847][T27096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9845'. [ 459.764664][T27082] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 459.775397][T27082] team0: Port device batadv2 added [ 460.318048][T27128] __nla_validate_parse: 1 callbacks suppressed [ 460.318071][T27128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9857'. [ 461.177154][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9875'. [ 461.193114][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 461.201212][ C0] lec:lec_tx_timeout: lec0 [ 461.206960][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 461.326968][T27175] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 461.361700][T27175] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 461.507219][T27183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9880'. [ 461.638436][T27165] netlink: 'syz.2.9873': attribute type 29 has an invalid length. [ 461.691192][T27165] netlink: 'syz.2.9873': attribute type 29 has an invalid length. [ 461.704512][T27189] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.9881'. [ 461.756799][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9882'. [ 462.525036][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9893'. [ 463.016618][T27251] ip6erspan0: entered promiscuous mode [ 463.357263][T27268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9903'. [ 463.390209][T27268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9903'. [ 463.493611][T27281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9907'. [ 463.498744][T27268] netlink: 'syz.2.9903': attribute type 2 has an invalid length. [ 463.619392][T27283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9908'. [ 464.359897][T27297] lec:lec_atm_close: lec0: Shut down! [ 465.426096][T27367] netlink: 'syz.1.9936': attribute type 1 has an invalid length. [ 465.665178][T27372] veth9: entered promiscuous mode [ 465.690863][T27372] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 465.961071][T27392] __nla_validate_parse: 5 callbacks suppressed [ 465.961091][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9942'. [ 466.067284][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9945'. [ 466.078883][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9945'. [ 466.190547][T27403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9946'. [ 466.272186][T27407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9947'. [ 466.324189][T27412] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 466.631235][T27421] wlan0 speed is unknown, defaulting to 1000 [ 466.672461][T27426] : entered promiscuous mode [ 466.692354][T27421] lo speed is unknown, defaulting to 1000 [ 466.740039][T27429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9955'. [ 466.896971][T27436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9957'. [ 467.407258][T27459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9964'. [ 467.477891][T27462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9966'. [ 468.350500][T27513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9981'. [ 469.143785][T27550] tipc: Started in network mode [ 469.160227][T27550] tipc: Node identity de2c44b8f63d, cluster identity 4711 [ 469.177111][T27550] tipc: Enabled bearer , priority 0 [ 469.247235][T27550] +: renamed from syzkaller0 [ 469.271297][T27550] tipc: Disabling bearer [ 469.297536][T27558] wlan0 speed is unknown, defaulting to 1000 [ 469.363331][T27558] lo speed is unknown, defaulting to 1000 [ 469.913091][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 469.921210][ C0] lec:lec_tx_timeout: lec0 [ 469.926268][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 470.054905][T27597] tipc: Enabled bearer , priority 0 [ 470.072193][T27594] syzkaller0: MTU too low for tipc bearer [ 470.078601][T27594] tipc: Disabling bearer [ 470.668083][T27633] wlan0 speed is unknown, defaulting to 1000 [ 470.712529][T27633] lo speed is unknown, defaulting to 1000 [ 470.894772][T27641] netlink: 'syz.3.10015': attribute type 4 has an invalid length. [ 470.941758][T27641] netlink: 'syz.3.10015': attribute type 4 has an invalid length. [ 471.232250][T27660] __nla_validate_parse: 4 callbacks suppressed [ 471.232269][T27660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10023'. [ 471.317984][T27658] netem: change failed [ 471.464157][T27664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10025'. [ 471.609909][T27672] wlan0 speed is unknown, defaulting to 1000 [ 471.619326][T27672] lo speed is unknown, defaulting to 1000 [ 471.752750][T27683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10031'. [ 471.762674][T27683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10031'. [ 472.199792][T27694] syzkaller1: entered promiscuous mode [ 472.210905][T27694] syzkaller1: entered allmulticast mode [ 472.230742][T27699] wlan0 speed is unknown, defaulting to 1000 [ 472.288043][T27699] lo speed is unknown, defaulting to 1000 [ 472.324101][T27708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10041'. [ 472.554002][T27718] veth1_macvtap: left promiscuous mode [ 473.103289][T27743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10045'. [ 473.837738][T27773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10049'. [ 474.009868][T27781] netlink: 'syz.3.10052': attribute type 10 has an invalid length. [ 474.089501][T27787] netlink: 'syz.3.10052': attribute type 10 has an invalid length. [ 474.202519][T27737] veth0_to_bond: left allmulticast mode [ 474.272387][T27737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.297359][T27737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.314890][T27737] tipc: Resetting bearer [ 474.431068][T27737] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 474.455890][T27737] bond1: left promiscuous mode [ 474.460840][T27737] bond1: left allmulticast mode [ 474.500056][T27737] gre2: left promiscuous mode [ 474.506268][T27737] gre2: left allmulticast mode [ 474.536364][T27743] geneve3: entered promiscuous mode [ 474.541834][T27743] geneve3: entered allmulticast mode [ 474.662565][T27787] 8021q: adding VLAN 0 to HW filter on device  [ 474.682882][T27787] team0: Port device  added [ 474.953216][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 474.961332][ C0] lec:lec_tx_timeout: lec0 [ 474.973136][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 475.058880][T27790] team0: Port device  removed [ 475.071437][T27790] team0: Port device dummy0 removed [ 475.084059][T27790] : (slave bond_slave_0): Releasing backup interface [ 475.095104][T27790] : (slave bond_slave_1): Releasing backup interface [ 475.106862][T27790] team0: Port device team_slave_0 removed [ 475.314013][T27790] team0: Port device team_slave_1 removed [ 475.320496][T27790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.436656][T27790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.464926][T27790] net_ratelimit: 48 callbacks suppressed [ 475.464948][T27790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 475.510468][T27826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10059'. [ 475.585718][T26907] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.618335][T26907] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.778587][T26907] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.814401][T26907] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.883295][T27830] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 476.239752][T27851] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10066'. [ 476.439620][T27864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10071'. [ 476.629405][T27870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10074'. [ 476.717604][T27872] syzkaller0: entered promiscuous mode [ 476.845783][T27880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10076'. [ 477.452163][T27913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10084'. [ 477.710071][ T5497] veth1_macvtap: entered promiscuous mode [ 477.995642][T27939] tipc: Enabled bearer , priority 0 [ 478.063351][T27935] syzkaller0: entered promiscuous mode [ 478.069090][T27935] syzkaller0: entered allmulticast mode [ 478.082604][T27935] tipc: Resetting bearer [ 478.210322][T27934] tipc: Resetting bearer [ 479.050319][T27988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.145401][T27989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.210012][T27988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.983137][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 479.991284][ C0] lec:lec_tx_timeout: lec0 [ 479.995941][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 480.040526][T27934] tipc: Disabling bearer [ 482.363952][T28027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10105'. [ 482.559601][T28040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10109'. [ 482.569312][T28040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10109'. [ 482.937401][T28053] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10114'. [ 483.176225][T28068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10119'. [ 484.693185][T28115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10133'. [ 485.003075][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 485.011225][ C0] lec:lec_tx_timeout: lec0 [ 485.016975][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 485.067147][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10138'. [ 485.540277][T28157] syzkaller0: entered allmulticast mode [ 485.567864][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10145'. [ 485.578617][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10145'. [ 486.000019][T28177] tipc: Failed to remove unknown binding: 66,0,0/0:451330559/451330560 [ 486.028477][T28177] tipc: Failed to remove unknown binding: 66,0,0/0:451330559/451330560 [ 486.788523][T28219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.810386][T28219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.831279][T28219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.900790][T28223] syzkaller0: entered promiscuous mode [ 486.913193][T28223] syzkaller0: entered allmulticast mode [ 486.962287][T28225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.005362][T28222] netlink: 120 bytes leftover after parsing attributes in process `syz.4.10165'. [ 487.024532][T28222] netlink: 'syz.4.10165': attribute type 1 has an invalid length. [ 487.069327][T28229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.096945][T28204] lec:lec_atm_close: lec0: Shut down! [ 487.467424][T28244] netlink: 'syz.4.10173': attribute type 4 has an invalid length. [ 487.766281][T28255] syzkaller0: entered promiscuous mode [ 487.771954][T28255] syzkaller0: entered allmulticast mode [ 487.929701][T28261] wlan0 speed is unknown, defaulting to 1000 [ 488.631633][T28285] __nla_validate_parse: 2 callbacks suppressed [ 488.631714][T28285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10183'. [ 489.556730][T28261] lo speed is unknown, defaulting to 1000 [ 489.703619][T28287] netlink: 'syz.0.10183': attribute type 5 has an invalid length. [ 489.712345][T28287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10183'. [ 489.748464][T28275] wlan0 speed is unknown, defaulting to 1000 [ 489.820311][T28275] lo speed is unknown, defaulting to 1000 [ 489.849256][T28295] netlink: 'syz.0.10187': attribute type 1 has an invalid length. [ 489.880084][T28295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.935704][T28295] vlan4: entered allmulticast mode [ 489.941105][T28295] veth0_to_bond: entered allmulticast mode [ 489.952267][T28295] bond5: (slave vlan4): making interface the new active one [ 489.961718][T28295] bond5: (slave vlan4): Enslaving as an active interface with an up link [ 489.970853][T28291] syzkaller0: entered promiscuous mode [ 489.977512][T28291] syzkaller0: entered allmulticast mode [ 489.985175][ T1028] syzkaller0: tun_net_xmit 70 [ 490.037291][T28293] syzkaller0: entered promiscuous mode [ 490.043100][T28293] syzkaller0: entered allmulticast mode [ 491.684659][T28305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.691851][T28305] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 491.702852][T28305] bond0: (slave gre0): Error -95 calling set_mac_address [ 491.746138][T28308] bond0: (slave rose0): Enslaving as an active interface with an up link [ 491.774836][T28314] syzkaller0: entered promiscuous mode [ 491.780379][T28314] syzkaller0: entered allmulticast mode [ 491.982327][T28330] wlan0 speed is unknown, defaulting to 1000 [ 492.001890][T28330] lo speed is unknown, defaulting to 1000 [ 492.103385][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 492.111488][ C0] lec:lec_tx_timeout: lec0 [ 492.116133][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 492.475121][T28352] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10198'. [ 492.538684][T28356] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10198'. [ 492.877666][T28356] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.884978][T28356] bridge0: port 2(bridge_slave_1) entered listening state [ 492.896042][T28356] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10198'. [ 493.043989][T28356] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.590555][T28368] lec:lec_atm_close: lec0: Shut down! [ 494.063578][T28411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10211'. [ 494.168292][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10213'. [ 494.750171][T28449] tipc: Enabled bearer , priority 0 [ 494.887204][T28449] syzkaller0: entered promiscuous mode [ 494.893659][T28449] syzkaller0: entered allmulticast mode [ 494.900196][T28449] tipc: Resetting bearer [ 494.933437][T28461] syzkaller0: entered promiscuous mode [ 494.946806][T28461] syzkaller0: entered allmulticast mode [ 494.976464][T28456] syzkaller0: entered promiscuous mode [ 494.982034][T28456] syzkaller0: entered allmulticast mode [ 495.038754][T28469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10229'. [ 495.054892][T28448] tipc: Resetting bearer [ 495.388015][T28462] lec:lec_atm_close: lec0: Shut down! [ 495.538337][T28474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10230'. [ 496.502372][T28448] tipc: Disabling bearer [ 496.665556][T28479] netlink: 'syz.1.10231': attribute type 1 has an invalid length. [ 496.757993][T28479] 8021q: adding VLAN 0 to HW filter on device bond6 [ 496.804193][T28492] vlan2: entered allmulticast mode [ 496.809474][T28492] veth1: entered allmulticast mode [ 496.820551][T28492] bond6: (slave vlan2): making interface the new active one [ 496.844778][T28492] bond6: (slave vlan2): Enslaving as an active interface with an up link [ 496.916572][T28487] bond6: (slave veth11): Enslaving as an active interface with a down link [ 496.980509][T28503] tipc: Enabled bearer , priority 0 [ 497.077955][T28506] syzkaller0: entered promiscuous mode [ 497.084708][T28506] syzkaller0: entered allmulticast mode [ 497.097656][T28509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10238'. [ 497.107128][T28506] tipc: Resetting bearer [ 497.118261][T28504] syzkaller0: entered promiscuous mode [ 497.124788][T28504] syzkaller0: entered allmulticast mode [ 497.175341][T28512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10239'. [ 497.207016][T28490] tipc: Resetting bearer [ 497.423409][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805aa11c00: rx timeout, send abort [ 497.928564][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805aa12000: rx timeout, send abort [ 497.937064][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805aa11c00: abort rx timeout. Force session deactivation [ 498.437617][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805aa12000: abort rx timeout. Force session deactivation [ 499.451466][T28490] tipc: Disabling bearer [ 499.481668][T24123] tipc: Node number set to 672220344 [ 499.542108][T28577] syzkaller0: entered promiscuous mode [ 499.568644][T28577] syzkaller0: entered allmulticast mode [ 499.841054][T28610] syzkaller0: entered promiscuous mode [ 499.854704][T28610] syzkaller0: entered allmulticast mode [ 499.945576][T28618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10257'. [ 499.960986][T28618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.076024][T28618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.489244][T28633] syzkaller0: entered promiscuous mode [ 500.499704][T28633] syzkaller0: entered allmulticast mode [ 500.953149][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 500.961309][ C0] lec:lec_tx_timeout: lec0 [ 500.966332][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 501.519456][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.325206][T28656] syzkaller0: entered promiscuous mode [ 502.330734][T28656] syzkaller0: entered allmulticast mode [ 502.566588][T28680] netlink: 'syz.2.10266': attribute type 9 has an invalid length. [ 502.697616][T28689] syzkaller0: entered promiscuous mode [ 502.704770][T28689] syzkaller0: entered allmulticast mode [ 502.715892][T28691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10271'. [ 502.835607][T28694] bridge11: port 1(veth5) entered blocking state [ 502.842377][T28694] bridge11: port 1(veth5) entered disabled state [ 502.849958][T28694] veth5: entered allmulticast mode [ 502.879551][T28694] veth5: entered promiscuous mode [ 502.960191][T28691] bridge11: port 2(veth0_to_bond) entered blocking state [ 502.967572][T28691] bridge11: port 2(veth0_to_bond) entered disabled state [ 502.976821][T28691] veth0_to_bond: entered promiscuous mode [ 502.984918][T28698] syzkaller0: entered promiscuous mode [ 502.990447][T28698] syzkaller0: entered allmulticast mode [ 503.046952][ T4983] bond5: (slave vlan4): link status definitely down, disabling slave [ 503.064335][ T4983] bond5: now running without any active interface! [ 503.105206][T28702] syzkaller0: entered promiscuous mode [ 503.116257][T28702] syzkaller0: entered allmulticast mode [ 503.226264][T28708] syzkaller0: entered promiscuous mode [ 503.249369][T28708] syzkaller0: entered allmulticast mode [ 503.268230][T28708] tipc: Enabled bearer , priority 0 [ 503.276687][T28707] tipc: Resetting bearer [ 503.335458][T28707] tipc: Disabling bearer [ 503.362370][T28714] netlink: 'syz.2.10279': attribute type 1 has an invalid length. [ 503.462077][T28714] 8021q: adding VLAN 0 to HW filter on device bond7 [ 503.492446][T28718] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 504.477990][T11792] IPVS: ip_vs_send_async error -1 [ 505.210843][T28714] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 505.212520][T28726] syzkaller0: entered promiscuous mode [ 505.228289][T28726] syzkaller0: entered allmulticast mode [ 505.245904][T28736] tipc: Enabled bearer , priority 0 [ 505.311938][T28719] tipc: Resetting bearer [ 505.410946][T28719] tipc: Disabling bearer [ 505.483905][T28766] syzkaller0: entered promiscuous mode [ 505.501148][T28766] syzkaller0: entered allmulticast mode [ 505.705322][T28774] wlan0 speed is unknown, defaulting to 1000 [ 505.715423][T28774] lo speed is unknown, defaulting to 1000 [ 505.759338][T28783] syzkaller0: entered promiscuous mode [ 505.765433][T28783] syzkaller0: entered allmulticast mode [ 505.973374][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 505.981529][ C0] lec:lec_tx_timeout: lec0 [ 505.986207][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.024623][T28792] syzkaller0: entered promiscuous mode [ 506.030340][T28792] syzkaller0: entered allmulticast mode [ 506.082473][T28794] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.109787][T28798] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 506.120949][T28798] bond4: (slave macvlan0): Enslaving as an active interface with a down link [ 506.148778][T28794] rdma_rxe: rxe_newlink: failed to add bond0 [ 506.820218][T28810] bond6: (slave veth9): Enslaving as an active interface with a down link [ 506.884752][T28806] bond6: (slave veth11): Enslaving as an active interface with a down link [ 506.959801][T28809] syzkaller0: entered promiscuous mode [ 506.975269][T28809] syzkaller0: entered allmulticast mode [ 506.991914][T28805] tipc: Enabled bearer , priority 0 [ 507.021951][T28804] tipc: Resetting bearer [ 507.075386][T28804] tipc: Disabling bearer [ 507.265441][T28831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10310'. [ 507.372072][T28838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10311'. [ 507.672887][T28855] netlink: 'syz.2.10317': attribute type 1 has an invalid length. [ 507.698735][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10314'. [ 507.735034][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10314'. [ 507.751439][T28855] 8021q: adding VLAN 0 to HW filter on device bond8 [ 507.807989][T28857] vlan1: entered allmulticast mode [ 507.813249][T28857] bond8: entered allmulticast mode [ 507.842715][T28860] bond8: (slave gretap3): making interface the new active one [ 507.850651][T28860] gretap3: entered allmulticast mode [ 507.861309][T28860] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 508.151065][T28873] syzkaller0: entered promiscuous mode [ 508.158209][T28873] syzkaller0: entered allmulticast mode [ 508.419041][T28882] syzkaller0: entered promiscuous mode [ 508.433548][T28882] syzkaller0: entered allmulticast mode [ 508.584781][T28886] netlink: 'syz.3.10328': attribute type 39 has an invalid length. [ 508.698755][T28892] syzkaller0: entered promiscuous mode [ 508.722637][T28892] syzkaller0: entered allmulticast mode [ 508.755870][T28892] 0: reclassify loop, rule prio 0, protocol 800 [ 508.831523][T28895] netlink: 'syz.4.10332': attribute type 1 has an invalid length. [ 508.934514][T28901] syzkaller0: entered promiscuous mode [ 508.940066][T28901] syzkaller0: entered allmulticast mode [ 509.002585][T28903] syzkaller0: entered promiscuous mode [ 509.024685][T28903] syzkaller0: entered allmulticast mode [ 509.161250][T28905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10337'. [ 509.558694][T28929] syzkaller0: entered promiscuous mode [ 509.564268][T28929] syzkaller0: entered allmulticast mode [ 509.576370][T28928] syzkaller0: entered promiscuous mode [ 509.582184][T28928] syzkaller0: entered allmulticast mode [ 509.699332][T28934] syzkaller0: entered promiscuous mode [ 509.705136][T28934] syzkaller0: entered allmulticast mode [ 510.993094][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 511.001229][ C0] lec:lec_tx_timeout: lec0 [ 511.006649][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 513.040324][T28981] tipc: Enabling of bearer rejected, failed to enable media [ 513.265872][T29010] syzkaller0: entered promiscuous mode [ 513.282946][T29010] syzkaller0: entered allmulticast mode [ 513.366755][T29018] tipc: Enabled bearer , priority 0 [ 513.367314][T29012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10365'. [ 513.382747][T29017] tipc: Enabled bearer , priority 0 [ 513.387190][T29017] syzkaller0: entered promiscuous mode [ 513.396661][T29017] syzkaller0: entered allmulticast mode [ 513.407033][T29018] syzkaller0: entered promiscuous mode [ 513.412554][T29018] syzkaller0: entered allmulticast mode [ 513.479028][T29017] tipc: Resetting bearer [ 513.492696][T29018] tipc: Resetting bearer [ 513.500510][T29014] tipc: Resetting bearer [ 513.534319][T29014] tipc: Disabling bearer [ 513.544798][T29015] syzkaller0: entered promiscuous mode [ 513.564458][T29015] syzkaller0: entered allmulticast mode [ 513.574000][T29016] tipc: Resetting bearer [ 513.601413][T29016] tipc: Disabling bearer [ 513.824346][T29031] syzkaller0: entered promiscuous mode [ 513.837477][T29031] syzkaller0: entered allmulticast mode [ 513.923404][T29040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10377'. [ 513.932919][T29036] syzkaller0: entered promiscuous mode [ 513.939074][T29036] syzkaller0: entered allmulticast mode [ 513.947468][T29038] syzkaller0: entered promiscuous mode [ 513.953431][T29038] syzkaller0: entered allmulticast mode [ 514.147262][T29049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.159601][T29044] syzkaller0: entered promiscuous mode [ 514.166390][T29044] syzkaller0: entered allmulticast mode [ 514.187700][T29049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.208472][T29047] tipc: Enabled bearer , priority 0 [ 514.256246][T29047] syzkaller0: entered promiscuous mode [ 514.261926][T29047] syzkaller0: entered allmulticast mode [ 514.277155][T29047] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 514.331082][T29047] tipc: Resetting bearer [ 514.346665][T29053] syzkaller0: entered promiscuous mode [ 514.352205][T29053] syzkaller0: entered allmulticast mode [ 514.395483][T29046] tipc: Resetting bearer [ 514.413965][T29046] tipc: Disabling bearer [ 514.428521][T29056] syzkaller0: entered promiscuous mode [ 514.434571][T29056] syzkaller0: entered allmulticast mode [ 514.591391][T29064] syzkaller0: entered promiscuous mode [ 514.597236][T29064] syzkaller0: entered allmulticast mode [ 514.667355][T29066] netlink: 'syz.3.10387': attribute type 1 has an invalid length. [ 514.699392][T29066] 8021q: adding VLAN 0 to HW filter on device bond7 [ 514.765431][T29066] 8021q: adding VLAN 0 to HW filter on device bond7 [ 514.797622][T29066] bond7: (slave vxcan2): The slave device specified does not support setting the MAC address [ 514.810886][T29071] smc: net device wlan0 erased user defined pnetid SYZ0 [ 514.822398][T29071] netlink: 'syz.0.10389': attribute type 1 has an invalid length. [ 514.828061][T29066] bond7: (slave vxcan2): Error -95 calling set_mac_address [ 514.880765][T29076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10387'. [ 514.891907][T29072] veth13: entered promiscuous mode [ 514.904426][T29072] bond7: (slave veth13): Enslaving as an active interface with a down link [ 514.948036][T29075] bond6: (slave bridge12): making interface the new active one [ 514.957253][T29075] bond6: (slave bridge12): Enslaving as an active interface with an up link [ 514.969853][T29076] 8021q: adding VLAN 0 to HW filter on device bond7 [ 514.987553][T29074] tipc: Enabled bearer , priority 0 [ 515.002239][T29074] syzkaller0: entered promiscuous mode [ 515.014335][T29074] syzkaller0: entered allmulticast mode [ 515.027860][T29074] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 515.068570][T29074] tipc: Resetting bearer [ 515.085632][T29073] tipc: Resetting bearer [ 515.137187][T29073] tipc: Disabling bearer [ 515.179690][T29083] 0: reclassify loop, rule prio 0, protocol 700 [ 515.308814][ T1316] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.606265][T29103] netlink: 'syz.2.10402': attribute type 1 has an invalid length. [ 515.655878][T29108] syzkaller0: entered promiscuous mode [ 515.661490][T29108] syzkaller0: entered allmulticast mode [ 515.680449][T29108] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 515.814503][T29111] tipc: Enabled bearer , priority 0 [ 515.831638][T29111] syzkaller0: entered promiscuous mode [ 515.846109][T29111] syzkaller0: entered allmulticast mode [ 515.916834][T29111] tipc: Resetting bearer [ 515.932640][T29110] tipc: Resetting bearer [ 515.941887][T29119] netlink: 'syz.4.10410': attribute type 1 has an invalid length. [ 515.966820][T29110] tipc: Disabling bearer [ 516.013684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 516.021840][ C0] lec:lec_tx_timeout: lec0 [ 516.027136][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 516.053872][T29124] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 516.075006][T29125] syzkaller0: entered promiscuous mode [ 516.080645][T29125] syzkaller0: entered allmulticast mode [ 516.192635][T29129] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 516.249114][T29119] veth9: entered promiscuous mode [ 516.265681][T29119] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 516.442041][T29134] can: request_module (can-proto-0) failed. [ 516.566309][T29131] syzkaller0: entered promiscuous mode [ 516.581113][T29131] syzkaller0: entered allmulticast mode [ 518.646077][T29159] syzkaller0: entered promiscuous mode [ 518.651595][T29159] syzkaller0: entered allmulticast mode [ 518.711839][T29167] syzkaller0: entered promiscuous mode [ 518.719319][T29167] syzkaller0: entered allmulticast mode [ 521.047484][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 521.055591][ C0] lec:lec_tx_timeout: lec0 [ 521.061240][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 521.765326][T29186] tipc: Enabling of bearer rejected, failed to enable media [ 521.782990][T29204] syz_tun: entered allmulticast mode [ 521.790751][T29204] syz_tun: left allmulticast mode [ 521.988388][T29223] tipc: Enabled bearer , priority 0 [ 522.025193][T29223] syzkaller0: entered promiscuous mode [ 522.043135][T29223] syzkaller0: entered allmulticast mode [ 522.060973][T29229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10430'. [ 522.100100][T29229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10430'. [ 522.134124][T29223] tipc: Resetting bearer [ 522.163338][T29222] tipc: Resetting bearer [ 522.225936][T29222] tipc: Disabling bearer [ 522.255866][T29238] syzkaller0: entered promiscuous mode [ 522.261643][T29238] syzkaller0: entered allmulticast mode [ 522.434192][T29246] syzkaller0: entered promiscuous mode [ 522.441340][T29246] syzkaller0: entered allmulticast mode [ 522.450540][T29244] syzkaller0: entered promiscuous mode [ 522.457210][T29244] syzkaller0: entered allmulticast mode [ 522.578393][T29252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10443'. [ 522.735635][T29262] syzkaller0: entered promiscuous mode [ 522.838816][T29250] syzkaller0: entered promiscuous mode [ 522.847621][T29250] syzkaller0: entered allmulticast mode [ 522.866886][T29254] syzkaller0: left promiscuous mode [ 524.684921][T29303] syzkaller0: entered promiscuous mode [ 524.690886][T29303] syzkaller0: entered allmulticast mode [ 524.958659][T29306] syzkaller0: entered promiscuous mode [ 524.964429][T29306] syzkaller0: entered allmulticast mode [ 526.073695][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 526.081816][ C0] lec:lec_tx_timeout: lec0 [ 526.086738][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 527.165809][T29368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10465'. [ 527.404975][T29376] tipc: Enabled bearer , priority 0 [ 527.415336][T29376] syzkaller0: entered promiscuous mode [ 527.424887][T29376] syzkaller0: entered allmulticast mode [ 527.447277][T29376] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 527.536943][T29376] tipc: Resetting bearer [ 527.561218][T29374] tipc: Resetting bearer [ 527.589335][T29374] tipc: Disabling bearer [ 527.600567][T29384] syzkaller0: entered promiscuous mode [ 527.607353][T29384] syzkaller0: entered allmulticast mode [ 527.617329][T29387] syzkaller0: entered promiscuous mode [ 527.623168][T29387] syzkaller0: entered allmulticast mode [ 527.649792][T29387] tipc: Enabled bearer , priority 0 [ 527.674477][T29388] syzkaller0: entered promiscuous mode [ 527.683884][T29388] syzkaller0: entered allmulticast mode [ 527.725859][T29390] netlink: 'syz.0.10474': attribute type 1 has an invalid length. [ 527.742184][T29387] tipc: Resetting bearer [ 527.854214][T29385] tipc: Resetting bearer [ 527.934444][T29385] tipc: Disabling bearer [ 527.989439][T29402] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.000335][T29402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.018109][ T5901] lo speed is unknown, defaulting to 1000 [ 528.026141][ T5901] syz2: Port: 1 Link ACTIVE [ 528.058636][T29401] syzkaller0: entered promiscuous mode [ 528.073178][T29401] syzkaller0: entered allmulticast mode [ 528.250699][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10482'. [ 528.449218][T29425] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10485'. [ 528.588429][T29431] syzkaller0: entered promiscuous mode [ 528.594735][T29431] syzkaller0: entered allmulticast mode [ 528.710737][T29437] syzkaller0: entered promiscuous mode [ 528.718319][T29437] syzkaller0: entered allmulticast mode [ 528.727974][T29435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10488'. [ 528.735104][T29437] TC_ACT_REPEAT abuse ? [ 528.841908][T29435] syzkaller0: entered promiscuous mode [ 528.847997][T29435] syzkaller0: entered allmulticast mode [ 528.961801][T29440] syzkaller0: entered promiscuous mode [ 528.968006][T29440] syzkaller0: entered allmulticast mode [ 529.029111][T29445] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10492'. [ 529.183972][T29452] syzkaller0: entered promiscuous mode [ 529.206027][T29452] syzkaller0: entered allmulticast mode [ 529.286749][T29456] syzkaller0: entered promiscuous mode [ 529.292463][T29456] syzkaller0: entered allmulticast mode [ 529.571918][T29474] netlink: 'syz.0.10505': attribute type 1 has an invalid length. [ 529.635947][T29477] rdma_rxe: rxe_newlink: failed to add lo [ 529.821893][T29483] syzkaller0: entered promiscuous mode [ 529.827926][T29483] syzkaller0: entered allmulticast mode [ 529.848055][T29485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10510'. [ 530.165112][T29495] ip6gre1: entered promiscuous mode [ 530.173722][T29495] ip6gre1: entered allmulticast mode [ 530.182884][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.205866][T29495] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.220061][T24116] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.228676][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.253869][T29496] syzkaller0: entered promiscuous mode [ 530.265702][T29496] syzkaller0: entered allmulticast mode [ 530.278606][T24116] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.306469][T29507] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 530.446768][T24116] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.471473][T29513] syzkaller0: entered promiscuous mode [ 530.500052][T29513] syzkaller0: entered allmulticast mode [ 530.610517][T29525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10521'. [ 530.672200][T29519] syz_tun: entered promiscuous mode [ 530.755950][T29531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10522'. [ 531.095048][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 531.103269][ C0] lec:lec_tx_timeout: lec0 [ 531.108658][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 531.469452][T29545] syzkaller0: entered promiscuous mode [ 531.514224][T29545] syzkaller0: entered allmulticast mode [ 531.745239][T29545] tipc: Enabled bearer , priority 0 [ 531.781462][T29558] tipc: Resetting bearer [ 531.790038][T29558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.798619][T29558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.826194][T29561] syzkaller0: entered promiscuous mode [ 531.837436][T29561] syzkaller0: entered allmulticast mode [ 531.866351][T29542] tipc: Resetting bearer [ 531.955635][T29542] tipc: Disabling bearer [ 531.984069][ T5841] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 532.038392][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 532.038422][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 532.038435][ T5841] Call Trace: [ 532.038444][ T5841] [ 532.038452][ T5841] dump_stack_lvl+0xe8/0x150 [ 532.038486][ T5841] dump_header+0xd3/0x4c0 [ 532.038510][ T5841] oom_kill_process+0x3ab/0x970 [ 532.038546][ T5841] out_of_memory+0x106c/0x1410 [ 532.038563][ T5841] ? percpu_ref_put+0x19/0x180 [ 532.038583][ T5841] ? __pfx___mutex_lock+0x10/0x10 [ 532.038609][ T5841] ? __pfx_out_of_memory+0x10/0x10 [ 532.038624][ T5841] ? do_raw_spin_unlock+0xf5/0x210 [ 532.038653][ T5841] try_charge_memcg+0xc53/0x1560 [ 532.038687][ T5841] ? __pfx_try_charge_memcg+0x10/0x10 [ 532.038701][ T5841] ? xa_load+0x60/0x210 [ 532.038724][ T5841] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 532.038754][ T5841] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 532.038783][ T5841] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 532.038811][ T5841] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 532.038838][ T5841] __read_swap_cache_async+0x212/0x480 [ 532.038866][ T5841] swap_cluster_readahead+0x358/0x680 [ 532.038893][ T5841] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 532.038925][ T5841] ? get_vma_policy+0x27b/0x3c0 [ 532.038944][ T5841] swapin_readahead+0x196/0xc50 [ 532.038966][ T5841] ? finish_task_switch+0x161/0x920 [ 532.038992][ T5841] ? swap_table_get+0x1e/0x260 [ 532.039019][ T5841] ? __pfx_swapin_readahead+0x10/0x10 [ 532.039045][ T5841] ? swap_table_get+0x1e/0x260 [ 532.039069][ T5841] ? swap_table_get+0x1e/0x260 [ 532.039089][ T5841] ? swap_table_get+0x1e/0x260 [ 532.039110][ T5841] ? swap_table_get+0x216/0x260 [ 532.039133][ T5841] ? swap_cache_get_folio+0x513/0x520 [ 532.039161][ T5841] do_swap_page+0x8ce/0x5e10 [ 532.039197][ T5841] ? ___pte_offset_map+0x29/0x240 [ 532.039228][ T5841] ? ___pte_offset_map+0x29/0x240 [ 532.039253][ T5841] ? do_swap_page+0x18b/0x5e10 [ 532.039274][ T5841] ? __pfx_do_swap_page+0x10/0x10 [ 532.039297][ T5841] ? __lock_acquire+0x6b5/0x2cf0 [ 532.039321][ T5841] ? __pfx_default_wake_function+0x10/0x10 [ 532.039346][ T5841] ? ___pte_offset_map+0x1ae/0x240 [ 532.039373][ T5841] ? pte_offset_map_rw_nolock+0xea/0x160 [ 532.039401][ T5841] handle_mm_fault+0x12d2/0x32a0 [ 532.039437][ T5841] ? handle_mm_fault+0xee/0x32a0 [ 532.039468][ T5841] ? __pfx_handle_mm_fault+0x10/0x10 [ 532.039490][ T5841] ? lock_vma_under_rcu+0x45a/0x500 [ 532.039530][ T5841] do_user_addr_fault+0xa73/0x1360 [ 532.039563][ T5841] ? rcu_is_watching+0x15/0xb0 [ 532.039580][ T5841] ? trace_page_fault_user+0x84/0x1c0 [ 532.039608][ T5841] exc_page_fault+0x6a/0xc0 [ 532.039626][ T5841] asm_exc_page_fault+0x26/0x30 [ 532.039642][ T5841] RIP: 0033:0x7fe40cb5b78e [ 532.039658][ T5841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 532.039673][ T5841] RSP: 002b:00007fff95381488 EFLAGS: 00010246 [ 532.039688][ T5841] RAX: 0000000000000000 RBX: 0000555585caa500 RCX: 00007fe40cb5b78e [ 532.039700][ T5841] RDX: 00007fff953814e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.039710][ T5841] RBP: 00007fff9538154c R08: 0000000000000000 R09: 0000000000000000 [ 532.039720][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 532.039730][ T5841] R13: 00000000000927c0 R14: 000000000008186a R15: 00007fff953815a0 [ 532.039759][ T5841] [ 532.453399][ T5841] memory: usage 307200kB, limit 307200kB, failcnt 634 [ 532.460245][ T5841] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 532.541532][ T5841] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 532.596588][T29565] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 532.619488][ T5841] Memory cgroup stats for /syz0: [ 532.619793][ T5841] cache 4096 [ 532.696611][ T5841] rss 0 [ 532.699515][ T5841] rss_huge 0 [ 532.702783][ T5841] shmem 0 [ 532.706656][ T5841] mapped_file 0 [ 532.710150][ T5841] dirty 0 [ 532.713454][ T5841] writeback 0 [ 532.716768][ T5841] workingset_refault_anon 36 [ 532.721385][ T5841] workingset_refault_file 71 [ 532.726076][ T5841] swap 143360 [ 532.729390][ T5841] swapcached 49152 [ 532.734161][ T5841] pgpgin 121731 [ 532.737662][ T5841] pgpgout 121718 [ 532.741235][ T5841] pgfault 291100 [ 532.745164][ T5841] pgmajfault 22 [ 532.748644][ T5841] inactive_anon 49152 [ 532.752692][ T5841] active_anon 0 [ 532.756343][ T5841] inactive_file 4096 [ 532.760264][ T5841] active_file 0 [ 532.786820][ T5841] unevictable 0 [ 532.814440][ T5841] hierarchical_memory_limit 314572800 [ 532.833097][ T5841] hierarchical_memsw_limit 9223372036854771712 [ 532.854141][ T5841] total_cache 4096 [ 532.857937][ T5841] total_rss 0 [ 532.877892][ T5841] total_rss_huge 0 [ 532.891801][ T5841] total_shmem 0 [ 532.897695][ T5841] total_mapped_file 0 [ 532.902153][ T5841] total_dirty 0 [ 532.923321][ T5841] total_writeback 0 [ 532.927201][ T5841] total_workingset_refault_anon 36 [ 532.983315][ T5841] total_workingset_refault_file 71 [ 532.988500][ T5841] total_swap 143360 [ 532.993475][ T5841] total_swapcached 49152 [ 532.997766][ T5841] total_pgpgin 121731 [ 533.020599][ T5841] total_pgpgout 121718 [ 533.025421][ T5841] total_pgfault 291100 [ 533.029517][ T5841] total_pgmajfault 22 [ 533.050458][ T5841] total_inactive_anon 49152 [ 533.083110][ T5841] total_active_anon 0 [ 533.087165][ T5841] total_inactive_file 4096 [ 533.091611][ T5841] total_active_file 0 [ 533.118396][ T5841] total_unevictable 0 [ 533.122532][ T5841] anon_cost 0 [ 533.142423][ T5841] file_cost 0 [ 533.152811][ T5841] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10523,pid=29522,uid=0 [ 533.206458][ T5841] Memory cgroup out of memory: Killed process 29522 (syz.0.10523) total-vm:102124kB, anon-rss:1208kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 533.480921][T29588] syzkaller0: entered promiscuous mode [ 533.505816][T29588] syzkaller0: entered allmulticast mode [ 533.685550][T29599] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 534.043635][T29609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10549'. [ 534.052946][T29609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10549'. [ 534.064980][T29609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10549'. [ 534.085119][ T24] lo speed is unknown, defaulting to 1000 [ 534.090932][ T8699] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.099958][ T24] syz2: Port: 1 Link DOWN [ 534.162887][T29606] syzkaller0: entered promiscuous mode [ 534.170375][T29606] syzkaller0: entered allmulticast mode [ 534.185611][ T8699] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.205130][ T8699] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.126394][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 536.134534][ C0] lec:lec_tx_timeout: lec0 [ 536.140049][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 536.296864][T29624] syzkaller0: entered promiscuous mode [ 536.315980][T29624] syzkaller0: entered allmulticast mode [ 536.857866][T29664] xt_limit: Overflow, try lower: 604147548/4200216962 [ 537.075560][T29676] tipc: Enabled bearer , priority 0 [ 537.095898][T29676] syzkaller0: entered promiscuous mode [ 537.101426][T29676] syzkaller0: entered allmulticast mode [ 537.144704][T29676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 537.202546][T29676] tipc: Resetting bearer [ 537.282759][T29676] tipc: Disabling bearer [ 537.301278][T29691] SET target dimension over the limit! [ 537.320491][T29688] syzkaller0: entered promiscuous mode [ 537.329050][T29688] syzkaller0: entered allmulticast mode [ 537.782287][T29719] syzkaller0: entered promiscuous mode [ 537.788404][T29719] syzkaller0: entered allmulticast mode [ 537.798063][T29717] syzkaller0: entered promiscuous mode [ 537.810960][T29717] syzkaller0: entered allmulticast mode [ 537.975822][T29729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10601'. [ 538.372387][T29755] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10615'. [ 538.412074][T29759] syzkaller0: entered promiscuous mode [ 538.417882][T29759] syzkaller0: entered allmulticast mode [ 538.938051][T29785] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.993707][T29788] syzkaller0: entered promiscuous mode [ 538.999260][T29788] syzkaller0: entered allmulticast mode [ 539.058934][T29785] rdma_rxe: rxe_newlink: failed to add lo [ 539.245808][T29804] xt_TCPMSS: Only works on TCP SYN packets [ 539.636915][T29832] tipc: Enabled bearer , priority 0 [ 539.649689][T29832] syzkaller0: entered promiscuous mode [ 539.677154][T29832] syzkaller0: entered allmulticast mode [ 539.699464][T29839] xt_l2tp: v2 sid > 0xffff: 1114112 [ 539.699707][T29838] netlink: 252 bytes leftover after parsing attributes in process `syz.4.10652'. [ 539.739224][T29832] tipc: Resetting bearer [ 539.776795][T29832] tipc: Disabling bearer [ 540.236903][T29874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10665'. [ 540.307580][T29876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10669'. [ 540.594303][T29894] gtp2: entered promiscuous mode [ 540.605575][T29894] gtp2: entered allmulticast mode [ 540.618008][T29896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10678'. [ 540.745702][T29903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10680'. [ 540.759074][T29905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10682'. [ 540.971892][T29918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10689'. [ 541.358128][T29945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10700'. [ 541.439039][T29950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10704'. [ 541.904509][T29981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10719'. [ 542.380167][T29994] netlink: 'syz.0.10726': attribute type 1 has an invalid length. [ 542.474198][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6330 ms [ 542.482319][ C0] lec:lec_tx_timeout: lec0 [ 542.487647][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 543.068857][T30025] netem: invalid attributes len -24 [ 543.808321][T30081] netlink: 'syz.4.10768': attribute type 1 has an invalid length. [ 544.207100][T30107] syzkaller0: entered promiscuous mode [ 544.213259][T30107] syzkaller0: entered allmulticast mode [ 544.705138][T30138] __nla_validate_parse: 5 callbacks suppressed [ 544.705156][T30138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10794'. [ 544.746274][T30142] netlink: 'syz.4.10796': attribute type 1 has an invalid length. [ 544.860654][T30142] 8021q: adding VLAN 0 to HW filter on device bond6 [ 544.891228][T30144] bond6: (slave ip6gretap2): making interface the new active one [ 544.910998][T30144] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 545.006890][T30151] veth11: entered promiscuous mode [ 545.046099][T30142] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 545.312705][T30174] bridge_slave_0: default FDB implementation only supports local addresses [ 545.437579][T30180] netlink: 'syz.3.10813': attribute type 1 has an invalid length. [ 546.176470][T30227] netlink: 'syz.1.10831': attribute type 1 has an invalid length. [ 546.449222][T30244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10839'. [ 546.508723][T30247] netlink: 'syz.1.10841': attribute type 1 has an invalid length. [ 546.619059][T30247] 8021q: adding VLAN 0 to HW filter on device bond8 [ 546.709704][T30255] bond8: (slave ip6gretap2): making interface the new active one [ 546.719847][T30255] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 546.799726][T30258] veth15: entered promiscuous mode [ 546.820592][T30265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10846'. [ 546.858982][T30247] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 547.094105][T30278] netlink: 'syz.2.10852': attribute type 1 has an invalid length. [ 547.195062][T30284] syzkaller1: entered promiscuous mode [ 547.206741][T30284] syzkaller1: entered allmulticast mode [ 547.480978][T30303] syzkaller1: entered promiscuous mode [ 547.488577][T30303] syzkaller1: entered allmulticast mode [ 547.636890][T30311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10868'. [ 548.008945][T30336] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10880'. [ 548.108727][T30342] netlink: 'syz.3.10883': attribute type 4 has an invalid length. [ 548.233092][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 548.241171][ C0] lec:lec_tx_timeout: lec0 [ 548.246624][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 548.257850][T30349] netlink: 'syz.3.10885': attribute type 1 has an invalid length. [ 548.325056][T30349] 8021q: adding VLAN 0 to HW filter on device bond8 [ 548.362357][T30354] bond8: (slave ip6gretap1): making interface the new active one [ 548.395591][T30354] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 548.420904][T30349] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 548.459316][T30359] bridge6: entered allmulticast mode [ 548.467029][T30358] bridge6: left allmulticast mode [ 548.788358][ T1316] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x3b [ 549.098890][T30395] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10901'. [ 549.734222][T30413] tls_set_device_offload_rx: netdev not found [ 549.919580][T30424] netlink: 'syz.0.10915': attribute type 1 has an invalid length. [ 549.968139][T30424] 8021q: adding VLAN 0 to HW filter on device bond7 [ 550.031277][T30424] bond7: (slave geneve3): making interface the new active one [ 550.041557][T30424] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 550.234856][T30436] syzkaller1: entered promiscuous mode [ 550.240404][T30436] syzkaller1: entered allmulticast mode [ 550.594740][ T37] nci: nci_ntf_packet: unknown ntf opcode 0xe15 [ 550.604894][T30459] syzkaller0: entered promiscuous mode [ 550.610508][T30459] syzkaller0: entered allmulticast mode [ 550.849082][T30474] syzkaller1: entered promiscuous mode [ 550.855791][T30474] syzkaller1: entered allmulticast mode [ 550.924401][T30475] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 550.989558][T30482] syzkaller0: entered promiscuous mode [ 550.995928][T30482] syzkaller0: entered allmulticast mode [ 551.003532][T30481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10936'. [ 551.013235][T30481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.095828][T30481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.182531][T30485] ip6gre2: entered promiscuous mode [ 551.454443][T30496] syzkaller1: entered promiscuous mode [ 551.460118][T30496] syzkaller1: entered allmulticast mode [ 551.528690][T30504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10944'. [ 551.566634][T30504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10944'. [ 551.779854][T30516] syzkaller0: entered promiscuous mode [ 551.785858][T30516] syzkaller0: entered allmulticast mode [ 552.675239][T30550] syzkaller0: entered promiscuous mode [ 552.680864][T30550] syzkaller0: entered allmulticast mode [ 553.293650][T30568] tipc: Enabled bearer , priority 0 [ 553.364573][T30577] tipc: Resetting bearer [ 553.387098][T30557] tipc: Disabling bearer [ 553.639733][T30588] syzkaller1: entered promiscuous mode [ 553.654335][T30588] syzkaller1: entered allmulticast mode [ 553.756955][T30597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10972'. [ 553.773914][T30597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10972'. [ 553.800868][T30597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10972'. [ 553.816832][T30597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10972'. [ 553.993131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 554.001245][ C0] lec:lec_tx_timeout: lec0 [ 554.006158][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 554.033796][T30607] veth5: entered promiscuous mode [ 554.055374][T30608] syzkaller0: entered promiscuous mode [ 554.060943][T30608] syzkaller0: entered allmulticast mode [ 554.123425][T30603] block nbd3: shutting down sockets [ 554.164928][T30611] block nbd3: NBD_DISCONNECT [ 554.239229][T30618] syzkaller0: entered promiscuous mode [ 554.257114][T30618] syzkaller0: entered allmulticast mode [ 554.278833][T30618] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 554.407591][T30627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10983'. [ 554.441805][T30627] netlink: 'syz.4.10983': attribute type 2 has an invalid length. [ 554.453074][T30627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10983'. [ 554.784900][T30650] tipc: Enabled bearer , priority 0 [ 554.808596][T30650] tipc: Disabling bearer [ 554.842175][T30651] syzkaller0: entered promiscuous mode [ 554.848053][T30651] syzkaller0: entered allmulticast mode [ 554.882948][T30654] netlink: 'syz.0.10995': attribute type 1 has an invalid length. [ 555.077624][T30666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10999'. [ 555.092120][T30663] gretap0: entered promiscuous mode [ 555.105251][T30657] syzkaller1: entered promiscuous mode [ 555.111358][T30657] syzkaller1: entered allmulticast mode [ 555.200476][T30663] lo: left promiscuous mode [ 555.231203][T30663] gretap0: left promiscuous mode [ 555.239480][T30663] erspan0: left promiscuous mode [ 555.410772][T30663] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.418029][T30663] bridge0: port 2(bridge_slave_1) entered listening state [ 555.492190][T30663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.711687][T30690] tipc: Enabled bearer , priority 0 [ 555.771972][T30690] tipc: Disabling bearer [ 555.857600][T30700] syzkaller0: entered promiscuous mode [ 555.875962][T30700] syzkaller0: entered allmulticast mode [ 556.402603][T30725] __nla_validate_parse: 2 callbacks suppressed [ 556.402623][T30725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11021'. [ 556.421157][T30725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11021'. [ 556.702321][T30738] syzkaller0: entered promiscuous mode [ 556.708076][T30738] syzkaller0: entered allmulticast mode [ 557.116821][T30765] tipc: Enabling of bearer rejected, failed to enable media [ 557.182224][T30766] wlan0 speed is unknown, defaulting to 1000 [ 557.199595][T30766] lo speed is unknown, defaulting to 1000 [ 557.339434][T30771] wlan0 speed is unknown, defaulting to 1000 [ 557.419030][T30771] lo speed is unknown, defaulting to 1000 [ 557.579540][T30777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.602736][T30777] eql: remember to turn off Van-Jacobson compression on your slave devices [ 557.617245][T30777] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 557.830387][T30785] syzkaller0: entered promiscuous mode [ 557.843671][T30785] syzkaller0: entered allmulticast mode [ 557.958697][T30801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11047'. [ 558.148840][T30809] netlink: 'syz.4.11050': attribute type 39 has an invalid length. [ 558.439140][ T3582] nci: nci_rf_intf_activated_ntf_packet: error when signaling tm activation [ 559.013061][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 559.021159][ C0] lec:lec_tx_timeout: lec0 [ 559.028815][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 559.576096][T30801] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 559.621475][T30818] tipc: Enabling of bearer rejected, failed to enable media [ 559.782807][T30829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11056'. [ 560.040395][T30837] wlan0 speed is unknown, defaulting to 1000 [ 560.069533][T30837] lo speed is unknown, defaulting to 1000 [ 560.359908][T30857] tipc: Enabling of bearer rejected, failed to enable media [ 560.371731][T30855] netlink: 19 bytes leftover after parsing attributes in process `syz.4.11064'. [ 560.377626][T30859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11065'. [ 560.424742][T30859] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 560.436806][T30859] team0: Failed to send port change of device batadv3 via netlink (err -105) [ 560.447383][T30859] team0: Failed to send options change via netlink (err -105) [ 560.455105][T30859] team0: Port device batadv3 added [ 560.522483][T30863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11067'. [ 561.099292][T30896] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11076'. [ 561.420033][T30904] tipc: Enabling of bearer rejected, failed to enable media [ 561.759502][T30916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11082'. [ 562.272020][T30952] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 562.959732][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.167192][T30980] syzkaller0: entered promiscuous mode [ 563.172824][T30980] syzkaller0: entered allmulticast mode [ 564.043355][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 564.051506][ C0] lec:lec_tx_timeout: lec0 [ 564.056169][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 565.021011][T30997] vlan0: entered promiscuous mode [ 565.027549][T30997] vlan0: entered allmulticast mode [ 565.032727][T30997] hsr_slave_1: entered allmulticast mode [ 565.222133][T31020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11106'. [ 565.349313][T31029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11109'. [ 565.377139][T31031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11108'. [ 565.532133][T31038] syzkaller1: entered promiscuous mode [ 565.539042][T31038] syzkaller1: entered allmulticast mode [ 565.756297][T31047] syzkaller0: entered promiscuous mode [ 565.764738][T31047] syzkaller0: entered allmulticast mode [ 565.930511][T11792] IPVS: ip_vs_send_async error -1 [ 566.358887][T31074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11119'. [ 566.519514][T31085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11120'. [ 567.664936][T31088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11121'. [ 567.939145][T31105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 567.946486][T31105] IPv6: NLM_F_CREATE should be set when creating new route [ 567.953782][T31105] IPv6: NLM_F_CREATE should be set when creating new route [ 568.140884][T31121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11132'. [ 568.399764][T31134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11134'. [ 568.416525][T31136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11135'. [ 568.490261][T31134] netlink: 'syz.0.11134': attribute type 5 has an invalid length. [ 568.505570][T31134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11134'. [ 569.063069][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 569.071199][ C0] lec:lec_tx_timeout: lec0 [ 569.076546][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 569.238383][ T135] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 570.250907][T31245] syzkaller0: entered promiscuous mode [ 570.270962][T31245] syzkaller0: entered allmulticast mode [ 570.395229][T31252] netlink: 'syz.0.11164': attribute type 33 has an invalid length. [ 570.403615][T31252] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11164'. [ 570.504248][T31258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11164'. [ 570.562073][T31260] syzkaller0: entered promiscuous mode [ 570.568079][T31260] syzkaller0: entered allmulticast mode [ 570.644827][T31263] netlink: 'syz.4.11167': attribute type 1 has an invalid length. [ 570.718206][T31265] tipc: Enabling of bearer rejected, failed to enable media [ 570.859591][T31268] wlan0 speed is unknown, defaulting to 1000 [ 570.928165][T31268] lo speed is unknown, defaulting to 1000 [ 571.012800][T31280] tipc: Enabled bearer , priority 0 [ 571.106611][T31280] syzkaller0: entered promiscuous mode [ 571.112154][T31280] syzkaller0: entered allmulticast mode [ 571.124414][T31280] tipc: Resetting bearer [ 571.284160][T31278] tipc: Resetting bearer [ 572.842515][T31278] tipc: Disabling bearer [ 572.876997][T31300] wlan0 speed is unknown, defaulting to 1000 [ 573.022786][T31300] lo speed is unknown, defaulting to 1000 [ 573.045704][T31328] tipc: Enabling of bearer rejected, failed to enable media [ 573.104777][T31330] syzkaller0: entered promiscuous mode [ 573.110326][T31330] syzkaller0: entered allmulticast mode [ 573.387457][T31346] netlink: 'syz.1.11188': attribute type 1 has an invalid length. [ 573.444774][T31346] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 573.455804][T31346] bond9: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 573.467360][T31346] bond9: (slave xfrm1): making interface the new active one [ 573.476967][T31346] bond9: (slave xfrm1): Enslaving as an active interface with an up link [ 573.491355][T31345] syzkaller0: entered promiscuous mode [ 573.496257][T31346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11188'. [ 573.499073][T31345] syzkaller0: entered allmulticast mode [ 573.516492][T31346] bond9 (unregistering): (slave xfrm1): Releasing backup interface [ 573.535603][T31346] bond9 (unregistering): Released all slaves [ 573.967189][T31372] syzkaller0: entered promiscuous mode [ 573.980748][T31372] syzkaller0: entered allmulticast mode [ 574.083620][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 574.091721][ C0] lec:lec_tx_timeout: lec0 [ 574.096582][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 574.386253][T31390] syzkaller0: entered promiscuous mode [ 574.398225][T31390] syzkaller0: entered allmulticast mode [ 574.702306][T31401] netlink: 'syz.4.11202': attribute type 4 has an invalid length. [ 574.766716][T31402] netlink: 'syz.4.11202': attribute type 4 has an invalid length. [ 575.824510][T24116] lo speed is unknown, defaulting to 1000 [ 575.850792][T24116] syz2: Port: 1 Link ACTIVE [ 575.901667][T31407] syzkaller0: entered promiscuous mode [ 575.908467][T31407] syzkaller0: entered allmulticast mode [ 576.128070][T31422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11208'. [ 576.142706][T31413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11206'. [ 576.176709][T31413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11206'. [ 576.528088][T31444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11211'. [ 576.581484][T31439] ------------[ cut here ]------------ [ 576.587004][T31439] DEBUG_LOCKS_WARN_ON(1) [ 576.587038][T31439] WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x39d/0x2cf0, CPU#0: syz.0.11211/31439 [ 576.601857][T31439] Modules linked in: [ 576.605797][T31439] CPU: 0 UID: 0 PID: 31439 Comm: syz.0.11211 Not tainted syzkaller #0 PREEMPT(full) [ 576.615294][T31439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 576.625375][T31439] RIP: 0010:__lock_acquire+0x3a4/0x2cf0 [ 576.630958][T31439] Code: 18 00 4c 8b 74 24 08 75 27 90 e8 17 f2 fc 02 85 c0 74 1c 83 3d 50 e0 4e 0e 00 75 13 48 8d 3d 43 f7 51 0e 48 c7 c6 1c 3b de 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 576.650646][T31439] RSP: 0018:ffffc9000b75f680 EFLAGS: 00010046 [ 576.656744][T31439] RAX: 0000000000000001 RBX: 0000000000040000 RCX: 0000000000080000 [ 576.664729][T31439] RDX: ffffc9000ce2b000 RSI: ffffffff8dde3b1c RDI: ffffffff8ff24ca0 [ 576.672721][T31439] RBP: 0000000000000003 R08: ffffffff8fef35a3 R09: 1ffffffff1fde6b4 [ 576.680709][T31439] R10: dffffc0000000000 R11: fffffbfff1fde6b5 R12: 0000000000000f72 [ 576.688698][T31439] R13: ffff8880537ac8a8 R14: ffff8880537abd00 R15: ffff8880537ac830 [ 576.696688][T31439] FS: 00007fe40d9bf6c0(0000) GS:ffff8881256f8000(0000) knlGS:0000000000000000 [ 576.705630][T31439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.712217][T31439] CR2: 000000110c364b75 CR3: 0000000055aec000 CR4: 00000000003526f0 [ 576.720199][T31439] Call Trace: [ 576.723488][T31439] [ 576.726443][T31439] ? __lock_acquire+0x146e/0x2cf0 [ 576.731500][T31439] ? touch_wq_lockdep_map+0xb5/0x180 [ 576.736802][T31439] lock_acquire+0x106/0x330 [ 576.741320][T31439] ? touch_wq_lockdep_map+0xb5/0x180 [ 576.746616][T31439] ? touch_wq_lockdep_map+0xb5/0x180 [ 576.751928][T31439] touch_wq_lockdep_map+0xcb/0x180 [ 576.757055][T31439] ? touch_wq_lockdep_map+0xb5/0x180 [ 576.762358][T31439] __flush_workqueue+0x14b/0x14f0 [ 576.767407][T31439] ? __pfx___schedule+0x10/0x10 [ 576.772300][T31439] ? lockdep_hardirqs_on+0x7a/0x110 [ 576.777525][T31439] ? nci_close_device+0x10a/0x630 [ 576.782573][T31439] ? irqentry_exit+0x59c/0x620 [ 576.787355][T31439] ? __pfx___flush_workqueue+0x10/0x10 [ 576.792853][T31439] ? preempt_schedule_thunk+0x16/0x30 [ 576.798253][T31439] nci_close_device+0x302/0x630 [ 576.803127][T31439] ? __pfx_nci_close_device+0x10/0x10 [ 576.808531][T31439] ? do_raw_spin_lock+0x12b/0x2f0 [ 576.813587][T31439] ? __pfx_nci_dev_down+0x10/0x10 [ 576.818638][T31439] nci_dev_down+0x3b/0x50 [ 576.822997][T31439] nfc_dev_down+0x152/0x290 [ 576.827718][T31439] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 576.833558][T31439] nfc_rfkill_set_block+0x2d/0x100 [ 576.838691][T31439] rfkill_set_block+0x1d2/0x440 [ 576.843561][T31439] rfkill_fop_write+0x461/0x5a0 [ 576.848428][T31439] ? apparmor_file_permission+0x17f/0x1f0 [ 576.854158][T31439] ? __pfx_rfkill_fop_write+0x10/0x10 [ 576.859545][T31439] ? security_kernfs_init_security+0x220/0x270 [ 576.865721][T31439] ? rw_verify_area+0x255/0x4d0 [ 576.870590][T31439] ? __pfx_rfkill_fop_write+0x10/0x10 [ 576.875977][T31439] vfs_write+0x29a/0xb90 [ 576.880252][T31439] ? __pfx_vfs_write+0x10/0x10 [ 576.885033][T31439] ? __fget_files+0x2a/0x420 [ 576.889647][T31439] ? __fget_files+0x2a/0x420 [ 576.894299][T31439] ? __fget_files+0x3a0/0x420 [ 576.898999][T31439] ? __fget_files+0x2a/0x420 [ 576.903614][T31439] ksys_write+0x150/0x270 [ 576.907994][T31439] ? __pfx_ksys_write+0x10/0x10 [ 576.912888][T31439] do_syscall_64+0xe2/0xf80 [ 576.917415][T31439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.923492][T31439] ? trace_irq_disable+0x37/0x100 [ 576.928528][T31439] ? clear_bhb_loop+0x60/0xb0 [ 576.933223][T31439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.939126][T31439] RIP: 0033:0x7fe40cb9aeb9 [ 576.943556][T31439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.963191][T31439] RSP: 002b:00007fe40d9bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.971639][T31439] RAX: ffffffffffffffda RBX: 00007fe40ce15fa0 RCX: 00007fe40cb9aeb9 [ 576.979627][T31439] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 576.987605][T31439] RBP: 00007fe40cc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 576.995590][T31439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.003577][T31439] R13: 00007fe40ce16038 R14: 00007fe40ce15fa0 R15: 00007fff953811a8 [ 577.011584][T31439] [ 577.014638][T31439] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 577.021940][T31439] CPU: 0 UID: 0 PID: 31439 Comm: syz.0.11211 Not tainted syzkaller #0 PREEMPT(full) [ 577.031415][T31439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 577.041477][T31439] Call Trace: [ 577.044781][T31439] [ 577.047735][T31439] vpanic+0x1e0/0x670 [ 577.051763][T31439] panic+0xc5/0xd0 [ 577.055503][T31439] ? __pfx_panic+0x10/0x10 [ 577.059964][T31439] __warn+0x315/0x4a0 [ 577.063981][T31439] ? __lock_acquire+0x39d/0x2cf0 [ 577.068958][T31439] ? __lock_acquire+0x39d/0x2cf0 [ 577.073916][T31439] __report_bug+0x29a/0x540 [ 577.078451][T31439] ? __lock_acquire+0x39d/0x2cf0 [ 577.083411][T31439] ? __pfx___report_bug+0x10/0x10 [ 577.088454][T31439] ? kernel_text_address+0xa5/0xe0 [ 577.093585][T31439] ? __kernel_text_address+0xd/0x30 [ 577.098811][T31439] ? unwind_get_return_address+0x4d/0x90 [ 577.104459][T31439] report_bug_entry+0x19a/0x290 [ 577.109316][T31439] ? __lock_acquire+0x3a4/0x2cf0 [ 577.114264][T31439] ? __lock_acquire+0x3a9/0x2cf0 [ 577.119217][T31439] handle_bug+0xca/0x200 [ 577.123471][T31439] exc_invalid_op+0x1a/0x50 [ 577.128001][T31439] asm_exc_invalid_op+0x1a/0x20 [ 577.132893][T31439] RIP: 0010:__lock_acquire+0x3a4/0x2cf0 [ 577.138468][T31439] Code: 18 00 4c 8b 74 24 08 75 27 90 e8 17 f2 fc 02 85 c0 74 1c 83 3d 50 e0 4e 0e 00 75 13 48 8d 3d 43 f7 51 0e 48 c7 c6 1c 3b de 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 577.158084][T31439] RSP: 0018:ffffc9000b75f680 EFLAGS: 00010046 [ 577.164167][T31439] RAX: 0000000000000001 RBX: 0000000000040000 RCX: 0000000000080000 [ 577.172148][T31439] RDX: ffffc9000ce2b000 RSI: ffffffff8dde3b1c RDI: ffffffff8ff24ca0 [ 577.180134][T31439] RBP: 0000000000000003 R08: ffffffff8fef35a3 R09: 1ffffffff1fde6b4 [ 577.188122][T31439] R10: dffffc0000000000 R11: fffffbfff1fde6b5 R12: 0000000000000f72 [ 577.196111][T31439] R13: ffff8880537ac8a8 R14: ffff8880537abd00 R15: ffff8880537ac830 [ 577.204111][T31439] ? __lock_acquire+0x146e/0x2cf0 [ 577.209158][T31439] ? touch_wq_lockdep_map+0xb5/0x180 [ 577.214450][T31439] lock_acquire+0x106/0x330 [ 577.218967][T31439] ? touch_wq_lockdep_map+0xb5/0x180 [ 577.224259][T31439] ? touch_wq_lockdep_map+0xb5/0x180 [ 577.229548][T31439] touch_wq_lockdep_map+0xcb/0x180 [ 577.234664][T31439] ? touch_wq_lockdep_map+0xb5/0x180 [ 577.239963][T31439] __flush_workqueue+0x14b/0x14f0 [ 577.245002][T31439] ? __pfx___schedule+0x10/0x10 [ 577.249869][T31439] ? lockdep_hardirqs_on+0x7a/0x110 [ 577.255076][T31439] ? nci_close_device+0x10a/0x630 [ 577.260118][T31439] ? irqentry_exit+0x59c/0x620 [ 577.264893][T31439] ? __pfx___flush_workqueue+0x10/0x10 [ 577.270380][T31439] ? preempt_schedule_thunk+0x16/0x30 [ 577.275787][T31439] nci_close_device+0x302/0x630 [ 577.280754][T31439] ? __pfx_nci_close_device+0x10/0x10 [ 577.286162][T31439] ? do_raw_spin_lock+0x12b/0x2f0 [ 577.291213][T31439] ? __pfx_nci_dev_down+0x10/0x10 [ 577.296255][T31439] nci_dev_down+0x3b/0x50 [ 577.300612][T31439] nfc_dev_down+0x152/0x290 [ 577.305148][T31439] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 577.310887][T31439] nfc_rfkill_set_block+0x2d/0x100 [ 577.316016][T31439] rfkill_set_block+0x1d2/0x440 [ 577.320894][T31439] rfkill_fop_write+0x461/0x5a0 [ 577.325760][T31439] ? apparmor_file_permission+0x17f/0x1f0 [ 577.331518][T31439] ? __pfx_rfkill_fop_write+0x10/0x10 [ 577.336938][T31439] ? security_kernfs_init_security+0x220/0x270 [ 577.343122][T31439] ? rw_verify_area+0x255/0x4d0 [ 577.347993][T31439] ? __pfx_rfkill_fop_write+0x10/0x10 [ 577.353385][T31439] vfs_write+0x29a/0xb90 [ 577.357663][T31439] ? __pfx_vfs_write+0x10/0x10 [ 577.362474][T31439] ? __fget_files+0x2a/0x420 [ 577.367093][T31439] ? __fget_files+0x2a/0x420 [ 577.371703][T31439] ? __fget_files+0x3a0/0x420 [ 577.376406][T31439] ? __fget_files+0x2a/0x420 [ 577.381017][T31439] ksys_write+0x150/0x270 [ 577.385363][T31439] ? __pfx_ksys_write+0x10/0x10 [ 577.390238][T31439] do_syscall_64+0xe2/0xf80 [ 577.394753][T31439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.400823][T31439] ? trace_irq_disable+0x37/0x100 [ 577.405858][T31439] ? clear_bhb_loop+0x60/0xb0 [ 577.410545][T31439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.416451][T31439] RIP: 0033:0x7fe40cb9aeb9 [ 577.420874][T31439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.440490][T31439] RSP: 002b:00007fe40d9bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 577.448945][T31439] RAX: ffffffffffffffda RBX: 00007fe40ce15fa0 RCX: 00007fe40cb9aeb9 [ 577.456939][T31439] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 577.465092][T31439] RBP: 00007fe40cc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 577.473072][T31439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.481060][T31439] R13: 00007fe40ce16038 R14: 00007fe40ce15fa0 R15: 00007fff953811a8 [ 577.489062][T31439] [ 577.492701][T31439] Kernel Offset: disabled [ 577.497050][T31439] Rebooting in 86400 seconds..