last executing test programs: 3.332265432s ago: executing program 2 (id=4717): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@delchain={0x40, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff8, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 2.986677274s ago: executing program 2 (id=4721): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x3) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 2.534159737s ago: executing program 2 (id=4725): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], &(0x7f0000000500)=""/50, 0x18, 0x32, 0x1, 0x81}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x9f0e5cc4bcd4d319, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.425136468s ago: executing program 1 (id=4727): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 2.340824689s ago: executing program 2 (id=4729): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/201, 0xc9}], 0x1}, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) 2.181721753s ago: executing program 4 (id=4731): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) close(0x4) 2.024277683s ago: executing program 0 (id=4733): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) 1.805989836s ago: executing program 0 (id=4735): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}}, @NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.71109593s ago: executing program 3 (id=4736): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e4f5256b1e4344d50a944ff67347cff6127e6ef12", 0x17}], 0x1}], 0x1, 0x40800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.663782792s ago: executing program 0 (id=4737): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.479176243s ago: executing program 3 (id=4738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 1.401771679s ago: executing program 1 (id=4739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x2}, 0x5d}], 0x1, 0x10022, 0x0) 1.205676361s ago: executing program 3 (id=4740): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000000, 0x2000001}, 0x8) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.203576725s ago: executing program 4 (id=4741): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f00000026c0)="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", 0x10a}, {&(0x7f00000006c0)="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", 0xe31}], 0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) 1.200058081s ago: executing program 2 (id=4742): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe08}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.092285534s ago: executing program 4 (id=4743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1.023339968s ago: executing program 3 (id=4744): socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x10000002, 0xb4, 0xda}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) 998.221232ms ago: executing program 4 (id=4745): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000140), 0x0, 0xaa) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 909.59773ms ago: executing program 1 (id=4746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000002400)="800000800000210ee7decd7a0000", 0xe, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x3}, 0x14) 895.211371ms ago: executing program 3 (id=4747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x4004040) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r0) 783.095818ms ago: executing program 3 (id=4748): socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x80002, 0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x0, 0x1c8, 0x98, 0x0, 0x98, 0x328, 0x328, 0x328, 0x328, 0x328, 0x6, 0x0, {[{{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xffffffff, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0xd, 0x3, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 691.981354ms ago: executing program 0 (id=4749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7fffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 628.634382ms ago: executing program 1 (id=4750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3, @ANYBLOB="029000000080040008000a00", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r0, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) bind$can_raw(r4, &(0x7f0000000c80)={0x1d, r5}, 0x10) 589.392427ms ago: executing program 4 (id=4751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 454.257024ms ago: executing program 0 (id=4752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) 300.825582ms ago: executing program 1 (id=4753): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 232.745651ms ago: executing program 4 (id=4754): r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfff, 0x9, 0xcd5f, 0x30, 0x9, 0x7, 0x3, 0xffffbba5, 0x81}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 229.751724ms ago: executing program 2 (id=4755): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 76.370217ms ago: executing program 0 (id=4756): socket(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 0s ago: executing program 1 (id=4757): close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x1000, 0xb6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_emit_ethernet(0x86, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x65, 0xa, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@timestamp_addr={0x44, 0x14, 0xb6, 0x1, 0x0, [{@remote, 0x80}, {@empty}]}, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1}, {@remote, 0x7}, {@broadcast, 0xfffffc01}, {@multicast1, 0x8}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): : entered promiscuous mode [ 82.767603][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 82.773407][ T5836] Cannot create hsr debugfs directory [ 82.784914][ T5827] hsr_slave_0: entered promiscuous mode [ 82.791395][ T5827] hsr_slave_1: entered promiscuous mode [ 82.797813][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 82.803558][ T5827] Cannot create hsr debugfs directory [ 82.933902][ T5821] hsr_slave_0: entered promiscuous mode [ 82.940466][ T5821] hsr_slave_1: entered promiscuous mode [ 82.947099][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 82.952836][ T5821] Cannot create hsr debugfs directory [ 83.066169][ T5822] hsr_slave_0: entered promiscuous mode [ 83.073073][ T5822] hsr_slave_1: entered promiscuous mode [ 83.079892][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 83.086225][ T5822] Cannot create hsr debugfs directory [ 83.484210][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.497061][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.507739][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.529104][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.580298][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.609945][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.623487][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.634145][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.707554][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.729547][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.745088][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.765211][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.843814][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.860308][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.870546][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.893112][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.008498][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.037632][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.049514][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.078866][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.097656][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.123447][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.187266][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.199289][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.211452][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.241727][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.249052][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.265019][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.276888][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.291205][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.298440][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.317419][ T5829] Bluetooth: hci2: command tx timeout [ 84.318087][ T5832] Bluetooth: hci1: command tx timeout [ 84.323067][ T5142] Bluetooth: hci0: command tx timeout [ 84.334079][ T51] Bluetooth: hci3: command tx timeout [ 84.351091][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.358364][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.369273][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.376492][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.395602][ T51] Bluetooth: hci4: command tx timeout [ 84.409620][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.416948][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.429727][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.436908][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.461110][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.493308][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.500509][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.529920][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.537128][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.597238][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.737514][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.795016][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.830982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.838227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.887932][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.895117][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.177164][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.358680][ T5827] veth0_vlan: entered promiscuous mode [ 85.368052][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.392854][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.420394][ T5827] veth1_vlan: entered promiscuous mode [ 85.491778][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.543488][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.583517][ T5827] veth0_macvtap: entered promiscuous mode [ 85.600197][ T5836] veth0_vlan: entered promiscuous mode [ 85.619978][ T5827] veth1_macvtap: entered promiscuous mode [ 85.643845][ T5836] veth1_vlan: entered promiscuous mode [ 85.733961][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.743830][ T5821] veth0_vlan: entered promiscuous mode [ 85.772391][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.789517][ T5822] veth0_vlan: entered promiscuous mode [ 85.802593][ T5821] veth1_vlan: entered promiscuous mode [ 85.845275][ T143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.857232][ T5836] veth0_macvtap: entered promiscuous mode [ 85.877691][ T143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.886652][ T143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.895367][ T143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.910164][ T5836] veth1_macvtap: entered promiscuous mode [ 85.919899][ T5822] veth1_vlan: entered promiscuous mode [ 85.963114][ T5821] veth0_macvtap: entered promiscuous mode [ 85.980490][ T5821] veth1_macvtap: entered promiscuous mode [ 85.999290][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.034251][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.094159][ T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.103435][ T143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.118208][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.136537][ T143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.155155][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.169441][ T143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.182673][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.201603][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.231154][ T143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.249537][ T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.263832][ T5822] veth0_macvtap: entered promiscuous mode [ 86.283147][ T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.292678][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.313695][ T5833] veth0_vlan: entered promiscuous mode [ 86.338600][ T5822] veth1_macvtap: entered promiscuous mode [ 86.354286][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.354493][ T5833] veth1_vlan: entered promiscuous mode [ 86.372469][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.395852][ T51] Bluetooth: hci3: command tx timeout [ 86.401390][ T51] Bluetooth: hci0: command tx timeout [ 86.406936][ T5832] Bluetooth: hci1: command tx timeout [ 86.407050][ T5142] Bluetooth: hci2: command tx timeout [ 86.448138][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.465757][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.475877][ T51] Bluetooth: hci4: command tx timeout [ 86.483769][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.530438][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.543312][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.560437][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.600508][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.642981][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.653574][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.661106][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.672168][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.684961][ T5833] veth0_macvtap: entered promiscuous mode [ 86.760228][ T5833] veth1_macvtap: entered promiscuous mode [ 86.774645][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.825036][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.919804][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.953785][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.973924][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.099250][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.128785][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.165592][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.209048][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.249130][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.267187][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.299753][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.318016][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.340394][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.375892][ T5956] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'. [ 87.642404][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.683405][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.831792][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.857368][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.476676][ T51] Bluetooth: hci0: command tx timeout [ 88.482226][ T5829] Bluetooth: hci2: command tx timeout [ 88.482268][ T5832] Bluetooth: hci3: command tx timeout [ 88.493349][ T5142] Bluetooth: hci1: command tx timeout [ 88.565540][ T5142] Bluetooth: hci4: command tx timeout [ 89.432609][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 89.464003][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 89.639750][ T6030] smc: net device team0 applied user defined pnetid SYZ2 [ 89.793573][ T6036] Bluetooth: MGMT ver 1.23 [ 90.205709][ T6050] tipc: Enabling of bearer rejected, failed to enable media [ 90.469671][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 90.588000][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'. [ 90.782624][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 90.787218][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.288801][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 91.412228][ T6109] Bluetooth: MGMT ver 1.23 [ 91.874105][ T24] cfg80211: failed to load regulatory.db [ 92.747417][ T6174] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 92.755127][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 92.778686][ T6176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.835541][ T6174] netlink: 658 bytes leftover after parsing attributes in process `syz.1.103'. [ 92.844612][ T6174] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 93.425851][ T6207] Bluetooth: MGMT ver 1.23 [ 93.434563][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.120'. [ 93.466299][ T6205] xt_l2tp: v2 tid > 0xffff: 1114244 [ 94.073372][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 94.102308][ T6243] netlink: 1 bytes leftover after parsing attributes in process `syz.3.135'. [ 94.174542][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 95.246685][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 95.285694][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 95.325539][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 95.334626][ T6300] Zero length message leads to an empty skb [ 95.506532][ T6313] netlink: 'syz.2.165': attribute type 62 has an invalid length. [ 95.690715][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 96.087911][ T1163] tipc: Subscription rejected, illegal request [ 96.442609][ T6357] netlink: 'syz.2.185': attribute type 29 has an invalid length. [ 96.461023][ T6357] netlink: 'syz.2.185': attribute type 29 has an invalid length. [ 97.341620][ T6393] tipc: Enabling of bearer rejected, media not registered [ 97.849791][ T6415] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 97.869682][ T6415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 98.070129][ T6426] __nla_validate_parse: 2 callbacks suppressed [ 98.070150][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 98.224780][ T6430] xt_limit: Overflow, try lower: 604147548/4200216962 [ 98.852508][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'. [ 99.193271][ T6473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.239'. [ 99.388984][ T6483] : entered promiscuous mode [ 99.612375][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 99.714077][ T6502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.253'. [ 100.459830][ T6541] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 100.484880][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.270'. [ 100.484894][ T6541] netlink: 96 bytes leftover after parsing attributes in process `syz.2.269'. [ 100.521689][ T6541] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 100.543094][ T6541] netlink: 'syz.2.269': attribute type 8 has an invalid length. [ 100.588857][ T6541] netlink: 606 bytes leftover after parsing attributes in process `syz.2.269'. [ 100.970571][ T6562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.279'. [ 101.587402][ T6596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.954396][ T6614] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 102.070133][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.307'. [ 102.958657][ T6668] warning: `syz.0.329' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.157774][ T6677] __nla_validate_parse: 2 callbacks suppressed [ 103.157793][ T6677] netlink: 13 bytes leftover after parsing attributes in process `syz.0.334'. [ 103.491242][ T6695] netlink: 'syz.0.343': attribute type 2 has an invalid length. [ 103.505535][ T6695] netlink: 44 bytes leftover after parsing attributes in process `syz.0.343'. [ 104.108291][ T6726] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 104.174848][ T6726] netlink: 96 bytes leftover after parsing attributes in process `syz.2.357'. [ 104.218244][ T6726] netlink: 1 bytes leftover after parsing attributes in process `syz.2.357'. [ 104.238129][ T6729] netlink: 272 bytes leftover after parsing attributes in process `syz.0.359'. [ 104.251306][ T6726] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 104.260320][ T6726] netlink: 'syz.2.357': attribute type 8 has an invalid length. [ 104.268347][ T6726] netlink: 606 bytes leftover after parsing attributes in process `syz.2.357'. [ 104.465348][ T6740] netlink: 'syz.2.365': attribute type 3 has an invalid length. [ 104.496115][ T6740] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 104.503826][ T6740] netlink: 204 bytes leftover after parsing attributes in process `syz.2.365'. [ 104.903277][ T6756] netlink: 'syz.1.374': attribute type 11 has an invalid length. [ 104.945567][ T6756] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.374'. [ 105.068809][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'. [ 105.286976][ T6780] xt_l2tp: unknown flags: 10 [ 105.382398][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 105.540950][ T6784] bond1: Invalid ad_actor_system MAC address. [ 105.588705][ T6784] bond1: option ad_actor_system: invalid value (1) [ 105.637875][ T6784] bond1 (unregistering): Released all slaves [ 105.827278][ T6805] IPVS: length: 8 != 1152 [ 106.610702][ T6841] validate_nla: 2 callbacks suppressed [ 106.611131][ T6841] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 107.625682][ T5896] IPVS: starting estimator thread 0... [ 107.635745][ T6886] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 107.735636][ T6887] IPVS: using max 26 ests per chain, 62400 per kthread [ 108.057579][ T6897] "syz.0.440" (6897) uses obsolete ecb(arc4) skcipher [ 108.426187][ T6923] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 108.688035][ T6937] __nla_validate_parse: 1 callbacks suppressed [ 108.688057][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 108.712722][ T6937] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 109.490331][ T6978] netlink: 'syz.3.479': attribute type 2 has an invalid length. [ 109.637375][ T6985] netlink: 252 bytes leftover after parsing attributes in process `syz.4.483'. [ 109.874646][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 110.131103][ T7010] pimreg3: entered allmulticast mode [ 110.322469][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.500'. [ 110.333275][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 110.366231][ T7023] sctp: [Deprecated]: syz.0.501 (pid 7023) Use of int in max_burst socket option. [ 110.366231][ T7023] Use struct sctp_assoc_value instead [ 110.510197][ T7032] netlink: 240 bytes leftover after parsing attributes in process `syz.2.505'. [ 110.613527][ T7039] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 110.631544][ T7039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.646893][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.509'. [ 110.750797][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 111.033456][ T5881] IPVS: starting estimator thread 0... [ 111.137793][ T7060] IPVS: using max 25 ests per chain, 60000 per kthread [ 111.405885][ T7076] bridge_slave_1: default FDB implementation only supports local addresses [ 111.519592][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 112.072791][ T7111] netlink: 104 bytes leftover after parsing attributes in process `syz.0.543'. [ 112.396661][ T7129] delete_channel: no stack [ 112.508434][ T7136] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 112.594937][ T7140] xt_connbytes: Forcing CT accounting to be enabled [ 113.284456][ T7179] veth1_macvtap: left promiscuous mode [ 113.292112][ T7179] macsec0: entered promiscuous mode [ 113.306593][ T7179] macsec0: entered allmulticast mode [ 113.357143][ T7185] veth1_macvtap: entered promiscuous mode [ 113.362954][ T7185] veth1_macvtap: entered allmulticast mode [ 113.434999][ T7185] macsec0: left promiscuous mode [ 113.456261][ T7185] macsec0: left allmulticast mode [ 113.461415][ T7185] veth1_macvtap: left allmulticast mode [ 113.642095][ T7196] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 113.742628][ T7202] __nla_validate_parse: 4 callbacks suppressed [ 113.742649][ T7202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.587'. [ 113.934782][ T7208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.589'. [ 114.038139][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 114.255626][ T7224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.597'. [ 114.286314][ T7224] netlink: 43 bytes leftover after parsing attributes in process `syz.3.597'. [ 114.298365][ T7224] netlink: 'syz.3.597': attribute type 5 has an invalid length. [ 114.326882][ T7224] netlink: 43 bytes leftover after parsing attributes in process `syz.3.597'. [ 114.345547][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.600'. [ 115.625989][ T7286] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.878482][ T7298] netlink: 'syz.3.633': attribute type 11 has an invalid length. [ 116.046524][ T7308] netlink: 'syz.4.637': attribute type 4 has an invalid length. [ 116.088404][ T7308] netlink: 17 bytes leftover after parsing attributes in process `syz.4.637'. [ 116.212889][ T7318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.476211][ T5142] Bluetooth: hci0: command tx timeout [ 116.747981][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 116.862482][ T7348] pim6reg527: entered allmulticast mode [ 117.233397][ T7362] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.663'. [ 117.260183][ T7362] openvswitch: netlink: Message has 6 unknown bytes. [ 118.416379][ T7415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.980129][ T7502] sock: sock_set_timeout: `syz.0.726' (pid 7502) tries to set negative timeout [ 120.583971][ T7536] netlink: 'syz.3.740': attribute type 2 has an invalid length. [ 120.769676][ T7544] netlink: 'syz.0.746': attribute type 29 has an invalid length. [ 121.707935][ T7591] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 122.094404][ T7609] netlink: zone id is out of range [ 122.111083][ T7609] netlink: zone id is out of range [ 122.130443][ T7609] netlink: zone id is out of range [ 122.148187][ T7609] netlink: zone id is out of range [ 122.158017][ T7609] netlink: zone id is out of range [ 122.174059][ T7609] netlink: zone id is out of range [ 122.184499][ T7609] netlink: zone id is out of range [ 122.195328][ T7609] netlink: zone id is out of range [ 122.220424][ T7609] netlink: zone id is out of range [ 122.244024][ T7609] netlink: zone id is out of range [ 122.495204][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.503661][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.548984][ T7629] netlink: 'syz.0.786': attribute type 3 has an invalid length. [ 122.831924][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.840445][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.984718][ T7636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.002258][ T7636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.282764][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.318988][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.353697][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.405545][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.224415][ T7751] __nla_validate_parse: 1 callbacks suppressed [ 125.224437][ T7751] netlink: 348 bytes leftover after parsing attributes in process `syz.0.847'. [ 125.651848][ T7775] netlink: 'syz.3.859': attribute type 10 has an invalid length. [ 125.809281][ T7786] netlink: 100 bytes leftover after parsing attributes in process `syz.3.864'. [ 126.074340][ T7798] netlink: 'syz.1.870': attribute type 10 has an invalid length. [ 126.429600][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 126.441797][ T7818] netlink: 176 bytes leftover after parsing attributes in process `syz.1.880'. [ 126.452124][ T7818] netlink: 'syz.1.880': attribute type 5 has an invalid length. [ 126.864130][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 126.879408][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 126.935620][ T7838] netlink: 'syz.3.890': attribute type 12 has an invalid length. [ 126.952070][ T7838] netlink: 'syz.3.890': attribute type 11 has an invalid length. [ 128.039831][ T7896] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 128.265214][ T7909] delete_channel: no stack [ 128.539488][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 128.566284][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 128.602976][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 128.830387][ T5824] IPVS: starting estimator thread 0... [ 128.938960][ T7938] IPVS: using max 29 ests per chain, 69600 per kthread [ 129.105640][ T7951] netlink: 'syz.2.945': attribute type 1 has an invalid length. [ 129.123278][ T7951] netlink: 'syz.2.945': attribute type 3 has an invalid length. [ 129.145604][ T7951] netlink: 172 bytes leftover after parsing attributes in process `syz.2.945'. [ 129.192231][ T7951] NCSI netlink: No device for ifindex 813332851 [ 131.390769][ T8046] __nla_validate_parse: 1 callbacks suppressed [ 131.390790][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.992'. [ 132.058807][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 132.800385][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.815679][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.925816][ T8127] net_ratelimit: 45 callbacks suppressed [ 132.925836][ T8127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.991926][ T8131] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 133.901546][ T8172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1050'. [ 134.118474][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 134.940581][ T8218] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1068'. [ 135.205768][ T8228] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1071'. [ 135.316271][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 135.349214][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 135.677952][ T8156] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.684381][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.690545][ T8156] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 135.901334][ T8258] netlink: 'syz.2.1081': attribute type 11 has an invalid length. [ 136.499769][ T8156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.510657][ T8156] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 136.611222][ T8156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.655848][ T8156] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 136.744864][ T8297] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1097'. [ 136.772746][ T8156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.804921][ T8156] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 136.986979][ T8156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.992953][ T8156] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 137.042075][ T8310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1102'. [ 137.672281][ T8340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.180893][ T8368] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 138.211429][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'. [ 138.235626][ T8368] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 138.426859][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 138.806052][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'. [ 138.947690][ T8405] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1136'. [ 139.523033][ T8439] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 139.562221][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.570455][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.589969][ T8439] bridge0: entered allmulticast mode [ 139.848539][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1156'. [ 139.978637][ T8460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.908459][ T8513] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1177'. [ 141.294440][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 141.406006][ T8539] macvlan1: entered allmulticast mode [ 141.491385][ T8539] veth1_vlan: entered allmulticast mode [ 141.534640][ T8539] macvlan1: entered promiscuous mode [ 141.545088][ T8544] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1192'. [ 142.308504][ T8583] __nla_validate_parse: 1 callbacks suppressed [ 142.308526][ T8583] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1211'. [ 143.361029][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 143.480794][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 143.493398][ T8649] netlink: 'syz.3.1243': attribute type 83 has an invalid length. [ 143.639933][ T8655] xt_hashlimit: size too large, truncated to 1048576 [ 143.655573][ T8657] netlink: 'syz.4.1248': attribute type 83 has an invalid length. [ 143.706837][ T8661] : renamed from vxcan1 [ 143.719871][ T8660] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 144.288312][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1260'. [ 144.646193][ T8704] syz.1.1270 uses obsolete (PF_INET,SOCK_PACKET) [ 144.706537][ T8708] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.871490][ T8716] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1276'. [ 145.186258][ T8726] batadv_slave_1: default FDB implementation only supports local addresses [ 145.273701][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 145.352684][ T8732] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1283'. [ 145.405215][ T8730] macvtap1: entered promiscuous mode [ 145.410741][ T8730] vlan0: entered promiscuous mode [ 145.416443][ T8730] macvtap1: entered allmulticast mode [ 145.421933][ T8730] vlan0: entered allmulticast mode [ 145.427571][ T8730] veth0_vlan: entered allmulticast mode [ 145.623002][ T8738] netem: incorrect ge model size [ 145.638577][ T8738] netem: change failed [ 145.796886][ T8748] block nbd0: Unsupported socket: should be TCP or UNIX. [ 147.114168][ T8802] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1315'. [ 147.436585][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1321'. [ 147.483869][ T8817] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.129068][ T8844] blkio.reset_stats is deprecated [ 149.180674][ T8892] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 149.195602][ T8892] netlink: 'syz.3.1358': attribute type 2 has an invalid length. [ 149.211382][ T8892] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 149.245468][ T8892] netlink: 'syz.3.1358': attribute type 3 has an invalid length. [ 149.277645][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 149.395558][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'. [ 149.480572][ T8906] netlink: 'syz.3.1365': attribute type 83 has an invalid length. [ 149.519050][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 149.539146][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 149.575531][ T8912] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1366'. [ 149.584660][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 149.698323][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 150.808285][ T8970] tipc: Started in network mode [ 150.823111][ T8970] tipc: Node identity ac14140f, cluster identity 4711 [ 150.832881][ T8970] tipc: New replicast peer: 255.255.255.255 [ 150.844960][ T8970] tipc: Enabled bearer , priority 10 [ 150.936345][ T8972] netlink: 'syz.2.1398': attribute type 4 has an invalid length. [ 151.049009][ T8979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 151.448709][ T9002] netlink: 'syz.1.1413': attribute type 2 has an invalid length. [ 151.478246][ T9002] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1413'. [ 151.957101][ T5973] tipc: Node number set to 2886997007 [ 152.099710][ T5142] block nbd0: Receive control failed (result -32) [ 152.616185][ T9055] netlink: 'syz.2.1437': attribute type 21 has an invalid length. [ 152.631656][ T9055] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.663737][ T9055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.671302][ T9055] IPv6: NLM_F_CREATE should be set when creating new route [ 152.678718][ T9055] IPv6: NLM_F_CREATE should be set when creating new route [ 152.686060][ T9055] IPv6: NLM_F_CREATE should be set when creating new route [ 152.761454][ T9063] netlink: 'syz.2.1437': attribute type 21 has an invalid length. [ 152.779770][ T9063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.818305][ T9123] __nla_validate_parse: 1 callbacks suppressed [ 153.818327][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 154.284829][ T9149] netlink: 'syz.1.1480': attribute type 12 has an invalid length. [ 154.310347][ T9149] netlink: 'syz.1.1480': attribute type 29 has an invalid length. [ 154.336284][ T9149] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1480'. [ 154.350245][ T9149] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1480'. [ 154.501147][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1483'. [ 154.539589][ T9158] xfrm1: entered promiscuous mode [ 154.563424][ T9164] block nbd3: not configured, cannot reconfigure [ 154.565684][ T9158] xfrm1: entered allmulticast mode [ 154.583924][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1483'. [ 154.873515][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1493'. [ 155.454321][ T9214] netlink: 'syz.4.1510': attribute type 1 has an invalid length. [ 155.495487][ T9214] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1510'. [ 155.504500][ T9214] netlink: 'syz.4.1510': attribute type 1 has an invalid length. [ 155.535689][ T9214] netlink: 'syz.4.1510': attribute type 8 has an invalid length. [ 155.566612][ T9214] netlink: 582 bytes leftover after parsing attributes in process `syz.4.1510'. [ 155.568116][ T9218] netlink: 'syz.3.1512': attribute type 1 has an invalid length. [ 155.596379][ T9218] netlink: 'syz.3.1512': attribute type 7 has an invalid length. [ 155.621018][ T9218] netlink: 'syz.3.1512': attribute type 8 has an invalid length. [ 155.629255][ T9214] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1510'. [ 155.640854][ T9218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1512'. [ 156.964568][ T9286] netlink: 'syz.3.1546': attribute type 15 has an invalid length. [ 158.481906][ T9371] netlink: 'syz.3.1586': attribute type 5 has an invalid length. [ 159.038181][ T9401] tipc: Started in network mode [ 159.043197][ T9401] tipc: Node identity ac14140f, cluster identity 4711 [ 159.053122][ T9401] tipc: New replicast peer: 255.255.255.255 [ 159.060017][ T9401] tipc: Enabled bearer , priority 10 [ 159.140497][ T9405] __nla_validate_parse: 6 callbacks suppressed [ 159.140517][ T9405] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1603'. [ 159.318982][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1606'. [ 159.731838][ T9435] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1619'. [ 159.862590][ T9444] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 159.871462][ T5973] IPVS: starting estimator thread 0... [ 159.965538][ T9446] IPVS: using max 27 ests per chain, 64800 per kthread [ 160.185218][ T5973] tipc: Node number set to 2886997007 [ 160.490935][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1640'. [ 160.502871][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1640'. [ 160.512508][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1640'. [ 160.616049][ T9487] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.1641'. [ 160.666533][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 161.125318][ T9514] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 161.142591][ T9514] netlink: 'syz.1.1654': attribute type 3 has an invalid length. [ 161.150728][ T9514] netlink: 'syz.1.1654': attribute type 7 has an invalid length. [ 161.159561][ T9514] netlink: 'syz.1.1654': attribute type 8 has an invalid length. [ 161.169256][ T9514] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1654'. [ 161.179049][ T9514] NCSI netlink: No device for ifindex 131092 [ 161.290088][ T9521] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1657'. [ 161.827053][ T9547] vcan0: tx address claim with dlc 0 [ 162.005665][ T9561] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 162.305047][ T9578] veth0: entered promiscuous mode [ 162.320407][ T9578] veth0: left promiscuous mode [ 162.348943][ T9580] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 162.377279][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.386246][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.415983][ T9580] bridge0: entered allmulticast mode [ 162.610754][ T9594] netlink: 'syz.3.1693': attribute type 3 has an invalid length. [ 162.619081][ T9594] netlink: 'syz.3.1693': attribute type 1 has an invalid length. [ 162.627383][ T9594] NCSI netlink: No device for ifindex 813332851 [ 163.436414][ T9618] sctp: [Deprecated]: syz.1.1704 (pid 9618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.436414][ T9618] Use struct sctp_sack_info instead [ 165.264810][ T9703] netlink: 'syz.4.1743': attribute type 1 has an invalid length. [ 165.287472][ T9703] netlink: 'syz.4.1743': attribute type 7 has an invalid length. [ 165.304066][ T9703] netlink: 'syz.4.1743': attribute type 8 has an invalid length. [ 165.316987][ T9703] __nla_validate_parse: 5 callbacks suppressed [ 165.317006][ T9703] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1743'. [ 165.355801][ T9703] NCSI netlink: No device for ifindex 65584 [ 165.862609][ T9728] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1756'. [ 166.392168][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 166.618548][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 167.197487][ T9803] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 167.205294][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1793'. [ 167.343779][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'. [ 167.683648][ T9834] netlink: 'syz.2.1807': attribute type 21 has an invalid length. [ 167.705598][ T9834] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1807'. [ 168.267890][ T9859] tipc: Started in network mode [ 168.276842][ T9859] tipc: Node identity ac14140f, cluster identity 4711 [ 168.288981][ T9859] tipc: New replicast peer: 255.255.255.255 [ 168.296654][ T9859] tipc: Enabled bearer , priority 10 [ 168.419838][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 168.451604][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 169.220415][ T9905] team0: Cannot enslave team device to itself [ 169.349065][ T9912] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1844'. [ 169.358703][ T9912] netem: invalid attributes len -24 [ 169.363948][ T9912] netem: change failed [ 169.448828][ T24] tipc: Node number set to 2886997007 [ 170.183251][ T5142] block nbd0: Receive control failed (result -107) [ 170.192479][ T9954] block nbd0: reconnected socket [ 171.083555][T10007] __nla_validate_parse: 4 callbacks suppressed [ 171.083577][T10007] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1888'. [ 171.428716][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 171.476213][T10025] vlan2: entered allmulticast mode [ 171.493253][T10025] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 171.547655][T10035] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1903'. [ 171.689438][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 171.908793][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1910'. [ 172.566298][T10095] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1930'. [ 172.641509][T10097] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1932'. [ 172.772694][T10103] netlink: 'syz.2.1934': attribute type 11 has an invalid length. [ 172.821634][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 173.021038][T10117] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1940'. [ 173.437427][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 173.658054][T10150] netlink: 'syz.0.1956': attribute type 1 has an invalid length. [ 173.686824][T10150] netlink: 'syz.0.1956': attribute type 2 has an invalid length. [ 173.729197][T10155] erspan0: entered promiscuous mode [ 174.023744][T10169] sctp: [Deprecated]: syz.0.1966 (pid 10169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.023744][T10169] Use struct sctp_sack_info instead [ 174.097890][T10175] netlink: 'syz.3.1969': attribute type 3 has an invalid length. [ 174.829708][T10215] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 175.053552][T10229] netlink: 'syz.0.1995': attribute type 9 has an invalid length. [ 175.337384][T10241] netlink: 'syz.1.2001': attribute type 2 has an invalid length. [ 175.476693][ T13] tipc: Subscription rejected, illegal request [ 176.366934][T10305] __nla_validate_parse: 1 callbacks suppressed [ 176.366955][T10305] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2031'. [ 177.023867][T10343] netlink: 'syz.0.2049': attribute type 4 has an invalid length. [ 178.944189][T10451] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2098'. [ 179.400443][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 179.541580][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 179.590013][T10485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2115'. [ 180.192761][T10518] team0: No ports can be present during mode change [ 180.487236][ T5142] block nbd1: Receive control failed (result -32) [ 180.856369][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 181.002856][T10555] netlink: 54 bytes leftover after parsing attributes in process `syz.2.2146'. [ 181.025514][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 181.070626][T10550] syz.3.2143 (10550) used greatest stack depth: 17472 bytes left [ 181.441374][T10582] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2155'. [ 181.975558][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'. [ 182.016443][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2171'. [ 182.192247][T10617] bond1: ARP target 1.0.0.0 is already present [ 182.198829][T10617] bond1: option arp_ip_target: invalid value (1) [ 182.231771][T10617] bond1 (unregistering): Released all slaves [ 182.452234][T10639] netlink: 'syz.3.2184': attribute type 21 has an invalid length. [ 182.482314][T10639] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2184'. [ 182.493141][T10639] netlink: 'syz.3.2184': attribute type 4 has an invalid length. [ 182.502111][T10639] netlink: 'syz.3.2184': attribute type 5 has an invalid length. [ 182.512130][T10639] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2184'. [ 182.525035][T10639] netlink: 'syz.3.2184': attribute type 21 has an invalid length. [ 182.533181][T10639] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2184'. [ 182.579765][T10639] netlink: 'syz.3.2184': attribute type 4 has an invalid length. [ 182.605450][T10639] netlink: 'syz.3.2184': attribute type 5 has an invalid length. [ 182.613239][T10639] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2184'. [ 182.691414][T10648] block nbd2: Unsupported socket: should be TCP or UNIX. [ 182.737126][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 182.886065][T10654] netlink: 'syz.4.2191': attribute type 4 has an invalid length. [ 184.420713][T10744] netlink: 'syz.3.2234': attribute type 1 has an invalid length. [ 184.440210][T10744] netlink: 'syz.3.2234': attribute type 2 has an invalid length. [ 184.467106][T10744] netlink: 'syz.3.2234': attribute type 1 has an invalid length. [ 184.514828][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2238'. [ 184.681029][T10757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2240'. [ 185.120595][ T5142] block nbd2: Receive control failed (result -32) [ 187.006293][T10877] __nla_validate_parse: 5 callbacks suppressed [ 187.006315][T10877] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2299'. [ 187.036463][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 187.254791][T10885] bond1: entered promiscuous mode [ 187.265341][T10897] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2309'. [ 187.510450][T10908] validate_nla: 7 callbacks suppressed [ 187.510501][T10908] netlink: 'syz.4.2313': attribute type 83 has an invalid length. [ 187.802775][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'. [ 187.914505][T10928] netlink: 'syz.0.2323': attribute type 33 has an invalid length. [ 187.963951][T10928] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 188.007942][T10928] bond1 (unregistering): Released all slaves [ 188.272088][T10951] netlink: 'syz.2.2332': attribute type 16 has an invalid length. [ 188.322282][T10951] netlink: 'syz.2.2332': attribute type 17 has an invalid length. [ 188.392464][T10951] bridge0: left allmulticast mode [ 188.449921][T10951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.797343][T10972] netem: unknown loss type 0 [ 188.806021][T10972] netem: change failed [ 189.222132][T10998] ip6gre0: Master is either lo or non-ether device [ 190.319194][T11059] tap0: tun_chr_ioctl cmd 1074025672 [ 190.331773][T11059] tap0: ignored: set checksum disabled [ 191.269484][T11094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2398'. [ 191.286174][T11094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2398'. [ 191.298460][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 191.422283][T11097] hsr_slave_0 (unregistering): left promiscuous mode [ 192.611642][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 192.847477][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2442'. [ 192.857014][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2442'. [ 193.185062][T11206] netlink: 'syz.3.2452': attribute type 1 has an invalid length. [ 193.193428][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2452'. [ 193.349042][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'. [ 193.405933][T11209] sctp: [Deprecated]: syz.1.2454 (pid 11209) Use of int in max_burst socket option deprecated. [ 193.405933][T11209] Use struct sctp_assoc_value instead [ 193.872050][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2467'. [ 193.920854][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2467'. [ 194.173536][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 194.241094][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.250682][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.311638][T11260] netem: change failed [ 194.338527][T11262] netlink: 'syz.1.2480': attribute type 10 has an invalid length. [ 194.384287][T11262] team0: Port device dummy0 added [ 195.153224][T11303] veth0: entered promiscuous mode [ 195.167015][T11301] veth0: left promiscuous mode [ 195.530952][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2506'. [ 195.881325][T11344] macvtap1: entered allmulticast mode [ 195.889766][T11344] veth0_macvtap: entered allmulticast mode [ 196.064859][T11353] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.2522'. [ 196.270463][T11363] block nbd3: Unsupported socket: should be TCP or UNIX. [ 197.125139][T11401] netlink: 'syz.3.2544': attribute type 4 has an invalid length. [ 197.954559][T11449] __nla_validate_parse: 1 callbacks suppressed [ 197.954580][T11449] netlink: 81 bytes leftover after parsing attributes in process `syz.2.2566'. [ 198.062987][T11452] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2569'. [ 198.218174][T11461] netlink: 'syz.2.2574': attribute type 2 has an invalid length. [ 198.226910][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2574'. [ 198.348758][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'. [ 198.408212][T11470] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.2577'. [ 198.753774][T11487] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2585'. [ 198.775300][T11485] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 198.889823][T11492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2588'. [ 198.901350][T11492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2588'. [ 199.263139][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2594'. [ 200.068027][T11555] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 200.079815][T11558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2615'. [ 200.531684][T11584] veth0: entered promiscuous mode [ 200.558029][T11581] veth0: left promiscuous mode [ 201.359636][T11632] nbd: nbd2 already in use [ 201.560279][T11644] netlink: 'syz.2.2653': attribute type 7 has an invalid length. [ 201.611294][T11644] gretap0: entered promiscuous mode [ 201.630921][T11644] gretap0: left promiscuous mode [ 203.064645][T11668] syz.4.2667 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 203.096197][T11697] bridge0: port 3(gretap0) entered blocking state [ 203.117256][T11697] bridge0: port 3(gretap0) entered disabled state [ 203.131181][T11697] gretap0: entered allmulticast mode [ 203.176738][T11697] gretap0: entered promiscuous mode [ 203.183235][T11668] CPU: 1 UID: 0 PID: 11668 Comm: syz.4.2667 Not tainted syzkaller #0 PREEMPT(full) [ 203.183260][T11668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.183279][T11668] Call Trace: [ 203.183287][T11668] [ 203.183296][T11668] dump_stack_lvl+0xe8/0x150 [ 203.183338][T11668] dump_header+0xd3/0x4c0 [ 203.183364][T11668] oom_kill_process+0x3ab/0x970 [ 203.183389][T11668] out_of_memory+0x106c/0x1410 [ 203.183411][T11668] ? __pfx___mutex_lock+0x10/0x10 [ 203.183446][T11668] ? __pfx_out_of_memory+0x10/0x10 [ 203.183462][T11668] ? do_raw_spin_unlock+0xf5/0x210 [ 203.183492][T11668] try_charge_memcg+0xc53/0x1560 [ 203.183516][T11668] ? __lock_acquire+0x6b5/0x2cf0 [ 203.183554][T11668] ? __pfx_try_charge_memcg+0x10/0x10 [ 203.183572][T11668] ? xa_load+0x60/0x210 [ 203.183601][T11668] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 203.183628][T11668] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 203.183653][T11668] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 203.183679][T11668] __swap_cache_prepare_and_add+0x52a/0x700 [ 203.183728][T11668] swap_cache_alloc_folio+0xf1/0x240 [ 203.183762][T11668] swap_cluster_readahead+0x369/0x690 [ 203.183799][T11668] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 203.183842][T11668] ? get_vma_policy+0x27b/0x3c0 [ 203.183870][T11668] swapin_readahead+0x196/0xc50 [ 203.183914][T11668] ? __pfx_swapin_readahead+0x10/0x10 [ 203.183946][T11668] ? swap_table_get+0x1e/0x260 [ 203.183973][T11668] ? swap_table_get+0x1e/0x260 [ 203.183998][T11668] ? swap_table_get+0x1e/0x260 [ 203.184026][T11668] ? swap_table_get+0x216/0x260 [ 203.184056][T11668] ? swap_cache_get_folio+0x513/0x520 [ 203.184091][T11668] do_swap_page+0x54f/0x58d0 [ 203.184120][T11668] ? __lock_acquire+0x6b5/0x2cf0 [ 203.184167][T11668] ? do_swap_page+0x12c/0x58d0 [ 203.184193][T11668] ? __pfx_do_swap_page+0x10/0x10 [ 203.184218][T11668] ? __pte_offset_map+0x1ae/0x240 [ 203.184258][T11668] ? pte_offset_map_rw_nolock+0xea/0x160 [ 203.184293][T11668] handle_mm_fault+0x12d2/0x3310 [ 203.184339][T11668] ? handle_mm_fault+0xee/0x3310 [ 203.184378][T11668] ? __pfx_handle_mm_fault+0x10/0x10 [ 203.184405][T11668] ? lock_vma_under_rcu+0x45a/0x500 [ 203.184459][T11668] do_user_addr_fault+0xa73/0x1340 [ 203.184495][T11668] ? rcu_is_watching+0x15/0xb0 [ 203.184524][T11668] ? trace_page_fault_user+0x84/0x210 [ 203.184555][T11668] exc_page_fault+0x6a/0xc0 [ 203.184588][T11668] asm_exc_page_fault+0x26/0x30 [ 203.184609][T11668] RIP: 0033:0x7f1e2a06a14c [ 203.184639][T11668] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 203.184656][T11668] RSP: 002b:00007ffe0a581ea0 EFLAGS: 00010202 [ 203.184682][T11668] RAX: 0000000000000000 RBX: 00007f1e2a416090 RCX: 00005555712d7808 [ 203.184696][T11668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.184708][T11668] RBP: 00007f1e2a417da0 R08: 0000000000000000 R09: 0000000000000000 [ 203.184720][T11668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003187f [ 203.184732][T11668] R13: 00007f1e2a41609c R14: 00000000000315b6 R15: 00007ffe0a581fa0 [ 203.184766][T11668] [ 203.494369][T11668] memory: usage 307200kB, limit 307200kB, failcnt 697 [ 203.503986][T11697] bridge0: port 3(gretap0) entered blocking state [ 203.510602][T11697] bridge0: port 3(gretap0) entered forwarding state [ 203.519941][T11668] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 203.527953][T11668] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 203.535266][T11668] Memory cgroup stats for /syz4: [ 203.536461][T11668] cache 0 [ 203.544371][T11668] rss 0 [ 203.547616][T11668] rss_huge 0 [ 203.550853][T11668] shmem 0 [ 203.553821][T11668] mapped_file 0 [ 203.557366][T11668] dirty 0 [ 203.560335][T11668] writeback 0 [ 203.563639][T11668] workingset_refault_anon 9 [ 203.568225][T11668] workingset_refault_file 0 [ 203.572810][T11668] swap 184320 [ 203.576522][T11668] swapcached 200704 [ 203.580354][T11668] pgpgin 26583 [ 203.583749][T11668] pgpgout 26579 [ 203.587260][T11668] pgfault 74504 [ 203.590741][T11668] pgmajfault 8 [ 203.594136][T11668] inactive_anon 0 [ 203.598354][T11668] active_anon 16384 [ 203.602190][T11668] inactive_file 0 [ 203.606174][T11668] active_file 0 [ 203.609660][T11668] unevictable 0 [ 203.613143][T11668] hierarchical_memory_limit 314572800 [ 203.618610][T11668] hierarchical_memsw_limit 9223372036854771712 [ 203.624799][T11668] total_cache 0 [ 203.628355][T11668] total_rss 0 [ 203.631674][T11668] total_rss_huge 0 [ 203.635822][T11668] total_shmem 0 [ 203.639304][T11668] total_mapped_file 0 [ 203.643304][T11668] total_dirty 0 [ 203.646825][T11668] total_writeback 0 [ 203.650653][T11668] total_workingset_refault_anon 9 [ 203.655775][T11668] total_workingset_refault_file 0 [ 203.660831][T11668] total_swap 184320 [ 203.664661][T11668] total_swapcached 200704 [ 203.669411][T11668] total_pgpgin 26583 [ 203.673373][T11668] total_pgpgout 26579 [ 203.677546][T11668] total_pgfault 74504 [ 203.681563][T11668] total_pgmajfault 8 [ 203.685528][T11668] total_inactive_anon 0 [ 203.689703][T11668] total_active_anon 16384 [ 203.694061][T11668] total_inactive_file 0 [ 203.698656][T11668] total_active_file 0 [ 203.702662][T11668] total_unevictable 0 [ 203.706719][T11668] anon_cost 0 [ 203.710032][T11668] file_cost 0 [ 203.713353][T11668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2667,pid=11668,uid=0 [ 203.729918][T11668] Memory cgroup out of memory: Killed process 11668 (syz.4.2667) total-vm:104332kB, anon-rss:1240kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 204.013754][T11708] syzkaller1: entered promiscuous mode [ 204.056035][T11708] syzkaller1: entered allmulticast mode [ 204.458571][T11721] netlink: 'syz.3.2688': attribute type 63 has an invalid length. [ 204.489329][T11721] netlink: 'syz.3.2688': attribute type 63 has an invalid length. [ 204.586843][T11725] __nla_validate_parse: 8 callbacks suppressed [ 204.586862][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 205.354580][T11751] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2703'. [ 205.550925][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2708'. [ 205.586630][T11762] netlink: 'syz.2.2708': attribute type 7 has an invalid length. [ 205.594423][T11762] netlink: 'syz.2.2708': attribute type 8 has an invalid length. [ 205.635702][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 206.163924][T11788] netlink: 'syz.2.2720': attribute type 1 has an invalid length. [ 206.181871][T11788] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2720'. [ 206.216027][T11788] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2720'. [ 206.236019][T11788] netlink: 'syz.2.2720': attribute type 1 has an invalid length. [ 206.259972][T11788] netlink: 634 bytes leftover after parsing attributes in process `syz.2.2720'. [ 206.341605][T11794] sctp: [Deprecated]: syz.4.2723 (pid 11794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.341605][T11794] Use struct sctp_sack_info instead [ 207.209374][T11827] syzkaller1: entered promiscuous mode [ 207.214926][T11827] syzkaller1: entered allmulticast mode [ 207.337265][T11833] gre0: entered promiscuous mode [ 207.343545][T11833] gre0: entered allmulticast mode [ 207.671994][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2751'. [ 207.727064][T11854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2751'. [ 208.094651][T11867] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2757'. [ 208.116619][T11868] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 208.222315][T11872] syzkaller1: entered promiscuous mode [ 208.239285][T11872] syzkaller1: entered allmulticast mode [ 208.633849][T11889] syzkaller1: entered promiscuous mode [ 208.676127][T11889] syzkaller1: entered allmulticast mode [ 209.191013][T11918] pim6reg1: entered promiscuous mode [ 209.213033][T11918] pim6reg1: entered allmulticast mode [ 209.313848][T11922] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.591327][T11941] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 209.637983][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2792'. [ 209.770921][T11947] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2793'. [ 210.471658][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.496739][T11976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.528102][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.552086][T11976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.796762][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2815'. [ 210.847786][T11994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.080925][T12008] netlink: 'syz.1.2823': attribute type 39 has an invalid length. [ 211.789954][T12046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2840'. [ 211.808225][T12046] netlink: 'syz.2.2840': attribute type 7 has an invalid length. [ 211.817162][T12046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2840'. [ 211.963268][T12057] veth0: entered promiscuous mode [ 211.969308][T12056] veth0: left promiscuous mode [ 212.180007][T12070] netlink: 'syz.0.2852': attribute type 17 has an invalid length. [ 212.196466][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 212.222875][T12070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2852'. [ 212.232049][ T24] IPVS: starting estimator thread 0... [ 212.338136][T12072] IPVS: using max 26 ests per chain, 62400 per kthread [ 212.541706][T12088] netlink: 'syz.3.2858': attribute type 13 has an invalid length. [ 212.596360][T12088] netlink: 'syz.3.2858': attribute type 17 has an invalid length. [ 212.669623][T12088] gre0: left promiscuous mode [ 212.674385][T12088] gre0: left allmulticast mode [ 212.812141][T12102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2866'. [ 212.853025][T12088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.288764][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.301348][T12126] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2875'. [ 213.587592][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.942684][T12152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.956482][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.089252][T12152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.120716][T12161] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2893'. [ 214.216621][T12152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.318583][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.342740][T12164] geneve2: entered promiscuous mode [ 214.358363][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 55900 - 0 [ 214.369312][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 55900 - 0 [ 214.380779][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 55900 - 0 [ 214.402054][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 55900 - 0 [ 214.470174][T12152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.726724][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.736188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.774854][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.787691][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.812291][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.838929][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.028041][T12194] __nla_validate_parse: 1 callbacks suppressed [ 215.028061][T12194] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2908'. [ 215.053976][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 215.356321][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.443718][T12219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.452996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.464265][T12219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.472683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.659716][T12231] sctp: [Deprecated]: syz.2.2926 (pid 12231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.659716][T12231] Use struct sctp_sack_info instead [ 215.701994][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 215.950330][T12244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.129227][T12245] syzkaller1: entered promiscuous mode [ 216.136241][T12245] syzkaller1: entered allmulticast mode [ 216.393368][T12268] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2938'. [ 216.409138][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.441397][T12268] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2938'. [ 216.886756][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 217.622201][T12337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.632337][T12337] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.907414][T12347] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 217.979144][T12347] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 217.992500][T12347] gretap1: entered promiscuous mode [ 218.002282][T12347] gretap1: entered allmulticast mode [ 218.551638][T12375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2989'. [ 218.563417][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2991'. [ 218.616595][T12378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.639059][T12378] team0: Port device batadv0 added [ 218.671426][T12375] veth0_to_team: entered promiscuous mode [ 218.707075][T12375] veth0_to_team: left promiscuous mode [ 218.969034][T12397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3000'. [ 219.149089][T12408] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 219.522080][ T5824] net_ratelimit: 7 callbacks suppressed [ 219.522101][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.842591][T12441] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3022'. [ 220.452616][T12477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.483133][T12477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.502206][T12477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.519805][T12477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.531670][T12477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.540852][T12477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.549349][T12477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.559884][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.576284][T12477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.807333][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3047'. [ 222.960055][T12609] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.198872][T12623] syzkaller1: entered promiscuous mode [ 223.245634][T12623] syzkaller1: entered allmulticast mode [ 223.760413][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3120'. [ 223.798607][T12651] netlink: 'syz.2.3120': attribute type 30 has an invalid length. [ 223.851547][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3120'. [ 223.883060][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.898163][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.908840][T12657] netlink: 'syz.2.3120': attribute type 30 has an invalid length. [ 223.933524][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.969620][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.003083][T12660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3121'. [ 224.026968][T12649] syzkaller1: entered promiscuous mode [ 224.032508][T12649] syzkaller1: entered allmulticast mode [ 224.747226][T12701] syzkaller1: entered promiscuous mode [ 224.754718][T12701] syzkaller1: entered allmulticast mode [ 224.801777][ T24] net_ratelimit: 29 callbacks suppressed [ 224.801796][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.046655][T12714] xt_hashlimit: size too large, truncated to 1048576 [ 225.687388][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'. [ 225.846090][T12748] team0: Port device team_slave_0 removed [ 225.900975][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.055894][T12753] syzkaller1: entered promiscuous mode [ 226.061439][T12753] syzkaller1: entered allmulticast mode [ 226.105267][T12763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.114199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.302524][T12774] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.3172'. [ 226.538732][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3177'. [ 226.564909][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3177'. [ 226.645320][T12792] sock: sock_set_timeout: `syz.4.3181' (pid 12792) tries to set negative timeout [ 227.190440][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3195'. [ 227.598584][T12845] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3207'. [ 228.238726][T12875] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.3220'. [ 228.268656][T12875] netlink: Unknown conntrack attr (type=2304, max=9) [ 228.493386][T12887] netlink: 'syz.4.3226': attribute type 12 has an invalid length. [ 228.502081][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3226'. [ 228.535342][T12887] netlink: 'syz.4.3226': attribute type 12 has an invalid length. [ 228.543967][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.557587][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.566856][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3226'. [ 228.584353][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.599205][ T78] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.099834][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'. [ 229.300083][T12926] netlink: 'syz.1.3245': attribute type 13 has an invalid length. [ 229.325672][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 229.372608][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.383131][T12926] netlink: 'syz.1.3245': attribute type 13 has an invalid length. [ 229.399714][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.422634][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.454709][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.501523][ T5142] block nbd3: Receive control failed (result -107) [ 230.546395][T12996] nbd3: detected capacity change from 0 to 127 [ 230.555339][ T5823] block nbd3: Dead connection, failed to find a fallback [ 230.575860][ T5823] block nbd3: shutting down sockets [ 230.581587][ T5823] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.639502][ T5823] Buffer I/O error on dev nbd3, logical block 0, async page read [ 230.655810][ T5823] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.665346][ T5823] Buffer I/O error on dev nbd3, logical block 1, async page read [ 230.707991][ T5823] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.753706][ T5823] Buffer I/O error on dev nbd3, logical block 2, async page read [ 230.795507][ T5823] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.856687][ T5823] Buffer I/O error on dev nbd3, logical block 3, async page read [ 230.867207][T13006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.905571][ T5823] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.969486][ T5823] Buffer I/O error on dev nbd3, logical block 0, async page read [ 230.988495][T13022] netlink: 'syz.0.3283': attribute type 22 has an invalid length. [ 231.004474][ T5823] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.040496][T13022] netlink: 'syz.0.3283': attribute type 22 has an invalid length. [ 231.042165][ T5823] Buffer I/O error on dev nbd3, logical block 1, async page read [ 231.084946][ T5823] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.113129][ T5823] Buffer I/O error on dev nbd3, logical block 2, async page read [ 231.149841][T13026] netlink: 'syz.4.3286': attribute type 9 has an invalid length. [ 231.160899][ T5823] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.190427][T13026] netlink: 'syz.4.3286': attribute type 11 has an invalid length. [ 231.225700][T13026] netlink: 'syz.4.3286': attribute type 12 has an invalid length. [ 231.233613][ T5823] Buffer I/O error on dev nbd3, logical block 3, async page read [ 231.278927][ T5823] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.307082][ T5823] Buffer I/O error on dev nbd3, logical block 0, async page read [ 231.314943][ T5823] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.368211][ T5823] Buffer I/O error on dev nbd3, logical block 1, async page read [ 231.388148][ T5823] ldm_validate_partition_table(): Disk read failed. [ 231.400386][ T5823] Dev nbd3: unable to read RDB block 0 [ 231.413301][ T5823] nbd3: unable to read partition table [ 231.454945][ T5823] ldm_validate_partition_table(): Disk read failed. [ 231.476805][ T5823] Dev nbd3: unable to read RDB block 0 [ 231.482961][ T5823] nbd3: unable to read partition table [ 231.547302][T13048] bridge_slave_0: invalid flags given to default FDB implementation [ 231.778672][T13056] netlink: 'syz.4.3296': attribute type 12 has an invalid length. [ 231.791541][T13056] netlink: 'syz.4.3296': attribute type 29 has an invalid length. [ 231.817477][T13056] __nla_validate_parse: 9 callbacks suppressed [ 231.817497][T13056] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3296'. [ 231.833492][T13056] netlink: 'syz.4.3296': attribute type 2 has an invalid length. [ 231.842750][T13056] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3296'. [ 231.934187][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 232.236559][T13082] bridge_slave_1: left allmulticast mode [ 232.265450][T13082] bridge_slave_1: left promiscuous mode [ 232.289027][T13082] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.320666][T13082] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 232.410607][T13089] pim6reg1: entered promiscuous mode [ 232.421863][T13089] pim6reg1: entered allmulticast mode [ 232.691959][T13104] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 232.699859][T13104] syzkaller1: Linktype set failed because interface is up [ 232.717232][ T5881] syzkaller1: tun_net_xmit 90 [ 233.219208][T13135] veth0: entered promiscuous mode [ 233.225543][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3333'. [ 233.471778][T13144] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.3337'. [ 234.291211][T13177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3352'. [ 234.736941][T13202] syzkaller1: entered promiscuous mode [ 234.742626][T13202] syzkaller1: entered allmulticast mode [ 234.778646][T13205] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3364'. [ 234.998909][T13216] syzkaller1: entered promiscuous mode [ 235.025839][T13216] syzkaller1: entered allmulticast mode [ 235.097829][T13222] validate_nla: 3 callbacks suppressed [ 235.097849][T13222] netlink: 'syz.0.3372': attribute type 1 has an invalid length. [ 235.184755][T13222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.251099][T13226] bond1: (slave geneve2): making interface the new active one [ 235.260662][T13226] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 235.299662][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.321543][T13232] netlink: 'syz.3.3377': attribute type 18 has an invalid length. [ 235.330748][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 235.332121][T13228] syzkaller1: entered promiscuous mode [ 235.361496][T13228] syzkaller1: entered allmulticast mode [ 235.373860][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.392118][T13232] netlink: 'syz.3.3377': attribute type 18 has an invalid length. [ 235.402005][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 235.450082][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.460164][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.803762][T13263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3388'. [ 236.229505][T13289] netlink: 'syz.4.3399': attribute type 12 has an invalid length. [ 236.245862][T13289] netlink: 'syz.4.3399': attribute type 29 has an invalid length. [ 236.266064][T13289] netlink: 'syz.4.3399': attribute type 1 has an invalid length. [ 236.273873][T13289] netlink: 'syz.4.3399': attribute type 37 has an invalid length. [ 236.299511][T13289] netlink: 'syz.4.3399': attribute type 2 has an invalid length. [ 236.310203][T13289] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.504966][T13300] netlink: 'syz.1.3405': attribute type 15 has an invalid length. [ 236.564897][T13300] netlink: 'syz.1.3405': attribute type 15 has an invalid length. [ 236.573696][ T12] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 236.593097][ T12] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 236.630320][ T12] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 236.660558][ T12] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 237.376559][T13342] __nla_validate_parse: 5 callbacks suppressed [ 237.376581][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 237.416651][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 237.644604][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 237.663880][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 237.676977][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 237.687281][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 237.818080][T13361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.984024][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 238.014565][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3438'. [ 238.050358][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 238.097847][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3438'. [ 238.904333][T13423] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.903866][T13524] syzkaller1: entered promiscuous mode [ 241.911101][T13524] syzkaller1: entered allmulticast mode [ 242.524084][T13538] __nla_validate_parse: 6 callbacks suppressed [ 242.524107][T13538] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3511'. [ 242.756394][T13542] syzkaller1: entered promiscuous mode [ 242.775541][T13542] syzkaller1: entered allmulticast mode [ 243.289076][T13562] validate_nla: 6 callbacks suppressed [ 243.289097][T13562] netlink: 'syz.0.3523': attribute type 1 has an invalid length. [ 243.329260][T13562] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3523'. [ 243.615026][T13580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.803648][T13586] syzkaller1: entered promiscuous mode [ 243.812896][T13586] syzkaller1: entered allmulticast mode [ 243.830924][T13586] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 244.133263][T13608] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3542'. [ 244.143643][T13608] netlink: 320 bytes leftover after parsing attributes in process `syz.4.3542'. [ 244.514522][T13627] syzkaller1: entered promiscuous mode [ 244.520343][T13627] syzkaller1: entered allmulticast mode [ 245.006962][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3556'. [ 245.084870][ T78] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 245.116252][ T78] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 245.125865][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 245.139436][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 245.370093][T13658] netlink: 'syz.2.3562': attribute type 1 has an invalid length. [ 245.469428][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'. [ 245.577720][T13665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.675453][T13670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.692102][T13670] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 245.749890][T13670] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 246.431295][T13699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3578'. [ 246.734908][T13715] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.781847][T13715] bond2: (slave lo): Enslaving as an active interface with an up link [ 246.793784][T13715] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 246.832559][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3581'. [ 246.843224][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3581'. [ 247.184940][T13738] syzkaller1: entered promiscuous mode [ 247.192215][T13738] syzkaller1: entered allmulticast mode [ 247.241702][T13740] xt_hashlimit: size too large, truncated to 1048576 [ 247.921677][T13773] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3610'. [ 248.036159][T13779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3613'. [ 248.063764][T13779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3613'. [ 248.150799][T13785] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3616'. [ 248.212842][T13787] netlink: 'syz.4.3617': attribute type 9 has an invalid length. [ 248.258948][T13787] netlink: 'syz.4.3617': attribute type 11 has an invalid length. [ 248.281319][T13787] netlink: 'syz.4.3617': attribute type 12 has an invalid length. [ 248.290570][T13787] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3617'. [ 248.300762][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3617'. [ 248.490786][T13800] syz_tun: entered allmulticast mode [ 248.522991][T13799] syz_tun: left allmulticast mode [ 248.533973][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3623'. [ 248.576325][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3623'. [ 248.608570][T13808] netlink: 'syz.4.3625': attribute type 21 has an invalid length. [ 248.641060][T13808] netlink: 'syz.4.3625': attribute type 22 has an invalid length. [ 248.672380][T13808] netlink: 'syz.4.3625': attribute type 23 has an invalid length. [ 248.709268][T13808] netlink: 'syz.4.3625': attribute type 25 has an invalid length. [ 248.735798][T13808] netlink: 'syz.4.3625': attribute type 26 has an invalid length. [ 248.749220][T13808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3625'. [ 249.060086][T13830] netlink: 'syz.2.3637': attribute type 15 has an invalid length. [ 249.492364][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3646'. [ 250.280128][T13891] netlink: Conntrack attr has 4 unknown bytes [ 250.486373][T13901] pim6reg1: entered promiscuous mode [ 250.498224][T13901] pim6reg1: entered allmulticast mode [ 251.951905][T13974] netlink: 'syz.3.3703': attribute type 4 has an invalid length. [ 252.003523][T13977] netlink: 'syz.3.3703': attribute type 4 has an invalid length. [ 253.168095][T14029] __nla_validate_parse: 10 callbacks suppressed [ 253.168115][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 253.204074][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'. [ 253.226070][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 253.236168][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'. [ 253.750619][T14057] netlink: 'syz.0.3735': attribute type 29 has an invalid length. [ 253.762900][T14057] netlink: 'syz.0.3735': attribute type 29 has an invalid length. [ 253.817217][T14057] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3735'. [ 253.823131][T14059] netlink: 'syz.4.3736': attribute type 10 has an invalid length. [ 253.881975][T14059] team0: Device vxcan1 is of different type [ 254.179560][T14077] syzkaller1: entered promiscuous mode [ 254.185172][T14077] syzkaller1: entered allmulticast mode [ 254.922939][T14101] syzkaller0: entered allmulticast mode [ 254.948152][T14101] syzkaller0 (unregistering): left allmulticast mode [ 255.213588][T14113] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 255.380210][T14113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.556423][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3767'. [ 255.667654][T14140] netlink: 'syz.4.3768': attribute type 4 has an invalid length. [ 255.680826][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.680920][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.893387][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3771'. [ 255.933848][T14150] syz_tun: entered allmulticast mode [ 255.962667][T14150] dvmrp8: entered allmulticast mode [ 256.026368][T14150] dvmrp8: left allmulticast mode [ 256.043378][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'. [ 256.143516][T14149] syz_tun: left allmulticast mode [ 256.477544][T14181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3786'. [ 256.607335][T14186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3788'. [ 256.704063][T14190] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 257.306311][T14220] trusted_key: syz.2.3803 sent an empty control message without MSG_MORE. [ 258.286710][T14277] geneve3: entered promiscuous mode [ 258.303143][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.336155][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.352330][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.366024][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.000983][T14315] __nla_validate_parse: 3 callbacks suppressed [ 259.001003][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3835'. [ 259.048042][T14303] syzkaller0: entered promiscuous mode [ 259.053843][T14303] syzkaller0: entered allmulticast mode [ 259.072074][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3835'. [ 260.979708][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3854'. [ 260.996591][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3854'. [ 261.023674][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3854'. [ 261.045005][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3854'. [ 261.189931][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3858'. [ 262.270788][T14437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3884'. [ 262.458771][T14449] netlink: 'syz.0.3890': attribute type 12 has an invalid length. [ 262.475977][T14449] netlink: 'syz.0.3890': attribute type 29 has an invalid length. [ 262.492313][T14449] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3890'. [ 262.504079][T14449] netlink: 'syz.0.3890': attribute type 3 has an invalid length. [ 262.741175][T14467] netlink: 'syz.3.3897': attribute type 1 has an invalid length. [ 262.765724][T14467] netlink: 'syz.3.3897': attribute type 4 has an invalid length. [ 262.776884][T14467] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.3897'. [ 262.911986][T14475] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 263.598201][T14510] netem: change failed [ 263.766716][T14523] netlink: 'syz.3.3924': attribute type 7 has an invalid length. [ 263.774723][T14523] netlink: 'syz.3.3924': attribute type 8 has an invalid length. [ 263.918518][T14531] xt_hashlimit: size too large, truncated to 1048576 [ 263.978519][T14535] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 264.074037][T14535] bond2: (slave gretap1): making interface the new active one [ 264.103270][T14535] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 264.124862][T14542] syzkaller1: entered promiscuous mode [ 264.143524][T14542] syzkaller1: entered allmulticast mode [ 264.233695][T14547] netlink: 'syz.2.3932': attribute type 1 has an invalid length. [ 264.247247][T14548] block nbd0: Unsupported socket: should be TCP or UNIX. [ 264.320894][T14547] bond3: (slave gretap2): making interface the new active one [ 264.329451][T14547] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 268.038976][T14685] __nla_validate_parse: 2 callbacks suppressed [ 268.038996][T14685] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3982'. [ 268.099668][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.107482][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.115256][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.123015][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.130764][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.138498][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.146219][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.153910][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.161644][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.169357][T14677] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 268.326853][T14692] PKCS7: Unknown OID: [4] (bad) [ 268.331785][T14692] PKCS7: Only support pkcs7_signedData type [ 268.476868][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3988'. [ 268.527794][T14698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3988'. [ 268.904392][T14725] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3997'. [ 269.160160][T14732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4001'. [ 269.708398][T14761] only policy match revision 0 supported [ 269.708421][T14761] unable to load match [ 270.661167][T14808] syzkaller1: entered promiscuous mode [ 270.685580][T14808] syzkaller1: entered allmulticast mode [ 270.916097][T14816] x_tables: ip_tables: osf match: only valid for protocol 6 [ 271.622013][T14838] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3319192567/3319192569 [ 271.642637][T14838] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3319192567/3319192569 [ 272.285198][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 272.305944][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 272.334863][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 272.365822][ T49] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 272.572464][T14885] netlink: 'syz.2.4055': attribute type 15 has an invalid length. [ 272.585021][T14873] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 272.614025][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4056'. [ 272.665557][T14888] bridge_slave_1: left allmulticast mode [ 272.676403][T14888] bridge_slave_1: left promiscuous mode [ 272.707170][T14888] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.746661][T14888] bridge_slave_0: left allmulticast mode [ 272.762640][T14888] bridge_slave_0: left promiscuous mode [ 272.769452][T14888] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.020217][T14901] syzkaller1: entered promiscuous mode [ 273.037971][T14901] syzkaller1: entered allmulticast mode [ 273.069355][T14904] syzkaller1: entered promiscuous mode [ 273.078402][T14904] syzkaller1: entered allmulticast mode [ 273.176978][T14918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4066'. [ 273.328383][T14923] netlink: 'syz.0.4068': attribute type 1 has an invalid length. [ 273.354995][T14926] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4069'. [ 273.796282][T14942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4076'. [ 274.166199][T14960] policy can only be matched on NF_INET_PRE_ROUTING [ 274.166226][T14960] unable to load match [ 274.348517][T14969] IPv6: sit2: Disabled Multicast RS [ 274.371329][T14969] sit2: entered allmulticast mode [ 274.573058][T14979] netlink: 'syz.2.4094': attribute type 1 has an invalid length. [ 274.592292][T14979] netlink: 'syz.2.4094': attribute type 1 has an invalid length. [ 274.704731][T14985] netlink: 'syz.4.4096': attribute type 21 has an invalid length. [ 274.735467][T14985] netlink: 'syz.4.4096': attribute type 22 has an invalid length. [ 274.743429][T14985] netlink: 'syz.4.4096': attribute type 23 has an invalid length. [ 274.751874][T14988] netlink: 'syz.2.4098': attribute type 1 has an invalid length. [ 274.762834][T14985] netlink: 'syz.4.4096': attribute type 25 has an invalid length. [ 274.772356][T14985] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4096'. [ 274.863165][T14993] bond4: (slave bridge2): making interface the new active one [ 274.874255][T14993] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 276.398480][T15077] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.419876][T15077] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.443519][T15077] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.952531][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.965112][T15077] infiniband syz2: set down [ 276.970449][T15077] infiniband syz2: added ip6_vti0 [ 277.066191][T15077] RDS/IB: syz2: added [ 277.076001][T15077] smc: adding ib device syz2 with port count 1 [ 277.092661][T15077] smc: ib device syz2 port 1 has no pnetid [ 277.109930][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 277.122122][T15077] ip6_vti0 speed is unknown, defaulting to 1000 [ 277.225708][T15099] netlink: 'syz.2.4140': attribute type 1 has an invalid length. [ 277.236956][T15099] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.4140'. [ 277.276814][T15103] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4141'. [ 277.503030][T15113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.566778][T15116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4146'. [ 277.668521][T15077] ip6_vti0 speed is unknown, defaulting to 1000 [ 277.959153][T15077] ip6_vti0 speed is unknown, defaulting to 1000 [ 278.629333][T15138] validate_nla: 1 callbacks suppressed [ 278.629354][T15138] netlink: 'syz.3.4155': attribute type 1 has an invalid length. [ 278.736643][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4155'. [ 281.015235][T15077] ip6_vti0 speed is unknown, defaulting to 1000 [ 281.019392][T15138] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 281.449183][T15161] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4163'. [ 281.500639][T15164] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4163'. [ 281.528783][T15161] bridge0: port 3(gretap0) entered disabled state [ 281.593206][T15077] ip6_vti0 speed is unknown, defaulting to 1000 [ 281.685796][T15168] veth1_to_bond: entered allmulticast mode [ 281.715708][T15168] veth1_to_bond: left allmulticast mode [ 282.168540][T15190] netlink: 'syz.3.4176': attribute type 1 has an invalid length. [ 282.251906][T15190] bond3: entered promiscuous mode [ 282.257742][T15190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.310956][T15198] netlink: 'syz.2.4179': attribute type 2 has an invalid length. [ 282.332583][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 282.348874][T15198] netlink: 'syz.2.4179': attribute type 2 has an invalid length. [ 282.363755][T15190] bond3: (slave bridge1): making interface the new active one [ 282.376546][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 282.396185][T15190] bridge1: entered promiscuous mode [ 282.420747][T15190] bridge1: left promiscuous mode [ 282.647676][T15209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4183'. [ 282.843535][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 282.897229][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4186'. [ 283.113357][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4192'. [ 283.370809][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'. [ 283.492231][T15247] dvmrp0: entered allmulticast mode [ 283.578333][T15251] ip6_vti0 speed is unknown, defaulting to 1000 [ 284.290173][T15283] __nla_validate_parse: 1 callbacks suppressed [ 284.290195][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4214'. [ 284.737808][T15302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4221'. [ 284.990419][T15314] xt_hashlimit: size too large, truncated to 1048576 [ 285.145845][T15322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.242547][T15322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.300261][T15324] erspan0: entered promiscuous mode [ 285.325855][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4230'. [ 285.490007][T15330] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.4232'. [ 285.548882][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4234'. [ 285.712610][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4236'. [ 285.750669][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4238'. [ 285.880514][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4241'. [ 286.116844][T15360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4245'. [ 286.550486][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4256'. [ 286.847578][T15395] netlink: 'syz.3.4261': attribute type 39 has an invalid length. [ 287.550089][T15436] netlink: 'syz.3.4277': attribute type 16 has an invalid length. [ 287.558226][T15436] netlink: 'syz.3.4277': attribute type 17 has an invalid length. [ 287.567869][T15431] syzkaller0: entered promiscuous mode [ 287.593814][T15431] syzkaller0: entered allmulticast mode [ 287.769827][T15436] net_ratelimit: 3255 callbacks suppressed [ 287.769839][T15436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.928031][T15440] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.935787][T15440] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.114570][T15440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.146484][T15440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.429744][T15440] bond3: left promiscuous mode [ 289.748310][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.840366][ T143] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.863199][ T143] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.889468][ T143] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.285954][T15503] tipc: Can't bind to reserved service type 1 [ 291.082567][T15530] netlink: 'syz.4.4308': attribute type 5 has an invalid length. [ 291.130652][T15533] ip6_vti0 speed is unknown, defaulting to 1000 [ 292.341402][T15560] syzkaller0: entered promiscuous mode [ 292.366215][T15560] syzkaller0: entered allmulticast mode [ 292.387331][T15565] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2589840726/2589840728 [ 292.531220][T15567] __nla_validate_parse: 5 callbacks suppressed [ 292.531240][T15567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4322'. [ 294.182508][T15586] netlink: 'syz.1.4326': attribute type 1 has an invalid length. [ 294.660447][T15598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4331'. [ 295.412179][T15586] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 295.560073][T15606] netlink: 'syz.4.4333': attribute type 4 has an invalid length. [ 295.626493][T15606] netlink: 'syz.4.4333': attribute type 4 has an invalid length. [ 295.896791][T15625] netlink: 'syz.4.4341': attribute type 1 has an invalid length. [ 295.923300][T15625] netlink: 'syz.4.4341': attribute type 4 has an invalid length. [ 295.935723][T15625] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4341'. [ 296.319906][T15642] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4349'. [ 296.354238][T15647] netlink: 'syz.3.4351': attribute type 4 has an invalid length. [ 296.764604][T15658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4356'. [ 296.844745][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4357'. [ 296.938958][T15665] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4359'. [ 296.966801][T15667] syzkaller1: entered promiscuous mode [ 296.972969][T15667] syzkaller1: entered allmulticast mode [ 297.193463][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4365'. [ 297.202841][T15678] gretap0: left allmulticast mode [ 297.209899][T15678] gretap0: left promiscuous mode [ 297.215252][T15678] bridge0: port 3(gretap0) entered disabled state [ 297.237056][T15678] bridge_slave_1: left allmulticast mode [ 297.250374][T15678] bridge_slave_1: left promiscuous mode [ 297.264744][T15678] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.284018][T15678] bridge_slave_0: left allmulticast mode [ 297.290408][T15678] bridge_slave_0: left promiscuous mode [ 297.297872][T15678] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.493017][T15693] netlink: 'syz.3.4369': attribute type 1 has an invalid length. [ 297.535119][T15693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.570707][T15693] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 297.595659][T15693] bond4: entered promiscuous mode [ 297.600853][T15693] bond4: entered allmulticast mode [ 297.670761][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4371'. [ 298.288765][T15726] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.598656][T15730] netlink: 'syz.0.4383': attribute type 13 has an invalid length. [ 298.650978][T15730] lo: entered promiscuous mode [ 298.701205][T15730] lo: entered allmulticast mode [ 298.734726][T15730] bond0: entered promiscuous mode [ 298.806557][T15730] bond0: entered allmulticast mode [ 298.826222][T15730] dummy0: entered promiscuous mode [ 298.832019][T15730] dummy0: entered allmulticast mode [ 298.854058][T15730] eql: entered promiscuous mode [ 298.870459][T15730] eql: entered allmulticast mode [ 298.909487][T15730] ifb0: entered promiscuous mode [ 298.928918][T15730] ifb0: entered allmulticast mode [ 298.946649][T15730] ifb1: entered promiscuous mode [ 298.959471][T15730] ifb1: entered allmulticast mode [ 298.974711][T15730] virtio_net virtio1 eth0: entered promiscuous mode [ 298.997391][T15730] virtio_net virtio1 eth0: entered allmulticast mode [ 299.047999][T15730] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 299.055131][T15730] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 299.109018][T15730] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 299.224430][T15738] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 299.246304][T15738] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 299.366403][T15751] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4391'. [ 299.475289][T15757] syzkaller1: entered promiscuous mode [ 299.491415][T15757] syzkaller1: entered allmulticast mode [ 299.549504][T15760] netlink: 'syz.0.4393': attribute type 1 has an invalid length. [ 299.712189][T15760] bond3: entered promiscuous mode [ 299.724292][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4394'. [ 299.736089][T15760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.787672][T15761] bond3: (slave bridge2): making interface the new active one [ 299.795305][T15761] bridge2: entered promiscuous mode [ 299.802345][T15761] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 299.842808][T15764] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 299.859478][T15764] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 299.995127][T15772] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 300.009424][T15772] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 301.541217][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4401'. [ 301.800365][T15806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4409'. [ 301.812124][T15806] netlink: 'syz.1.4409': attribute type 7 has an invalid length. [ 301.820285][T15806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4409'. [ 301.854022][T15795] lo speed is unknown, defaulting to 1000 [ 301.880943][T15806] erspan0: entered promiscuous mode [ 301.906850][T15806] gretap0: entered promiscuous mode [ 301.914803][T15806] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 301.929019][T15806] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 301.942155][T15795] lo speed is unknown, defaulting to 1000 [ 302.083389][T15795] lo speed is unknown, defaulting to 1000 [ 302.278269][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4412'. [ 302.298810][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4412'. [ 302.593078][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4419'. [ 302.598248][T15795] infiniband syz0: set down [ 302.613317][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4419'. [ 302.626239][T15795] infiniband syz0: added lo [ 302.703592][T15795] RDS/IB: syz0: added [ 302.723913][T15795] smc: adding ib device syz0 with port count 1 [ 302.742543][T15795] smc: ib device syz0 port 1 has no pnetid [ 302.868330][ T5889] lo speed is unknown, defaulting to 1000 [ 302.885272][ T29] lo speed is unknown, defaulting to 1000 [ 302.891568][T15795] lo speed is unknown, defaulting to 1000 [ 302.894312][T15840] tipc: Started in network mode [ 302.914389][T15840] tipc: Node identity bedb8f0af73f, cluster identity 4711 [ 302.934904][T15840] tipc: Enabled bearer , priority 0 [ 302.948681][T15827] ip6_vti0 speed is unknown, defaulting to 1000 [ 303.056110][T15840] syzkaller0: entered promiscuous mode [ 303.061723][T15840] syzkaller0: entered allmulticast mode [ 303.068417][T15840] tipc: Resetting bearer [ 303.191169][T15839] tipc: Resetting bearer [ 303.535234][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4427'. [ 303.545310][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4427'. [ 304.792132][T15839] tipc: Disabling bearer [ 304.810576][ T5889] tipc: Node number set to 1239715594 [ 304.810575][T15827] lo speed is unknown, defaulting to 1000 [ 305.108041][T15795] lo speed is unknown, defaulting to 1000 [ 305.340025][T15893] vlan2: entered allmulticast mode [ 305.350681][T15893] hsr0: entered allmulticast mode [ 305.376167][T15893] hsr_slave_0: entered allmulticast mode [ 305.405011][T15893] hsr_slave_1: entered allmulticast mode [ 305.442893][T15902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4442'. [ 305.821524][T15795] lo speed is unknown, defaulting to 1000 [ 306.303430][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4453'. [ 306.360647][T15795] lo speed is unknown, defaulting to 1000 [ 306.530803][T15928] tipc: Enabled bearer , priority 0 [ 306.552619][T15928] +: renamed from syzkaller0 [ 306.758156][T15928] tipc: Disabling bearer [ 306.780262][T15795] lo speed is unknown, defaulting to 1000 [ 307.021572][T15934] bond5: entered promiscuous mode [ 307.161088][T15940] macvlan3: entered promiscuous mode [ 307.179851][T15940] macvlan3: entered allmulticast mode [ 307.221495][T15940] bond5: (slave macvlan3): Opening slave failed [ 310.996565][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4476'. [ 311.274132][T16010] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4479'. [ 311.306365][T16007] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4479'. [ 311.319362][T16009] tipc: Enabled bearer , priority 0 [ 311.348627][T16012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4482'. [ 311.360048][T16012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4482'. [ 311.406173][T16009] syzkaller0: entered promiscuous mode [ 311.412907][T16009] syzkaller0: entered allmulticast mode [ 311.437165][T16009] tipc: Resetting bearer [ 311.501666][T16008] tipc: Resetting bearer [ 312.816499][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4491'. [ 312.826423][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4491'. [ 313.017973][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4493'. [ 313.149059][T16008] tipc: Disabling bearer [ 313.160054][T16022] netlink: 'syz.3.4485': attribute type 5 has an invalid length. [ 313.518967][T16066] vlan2: entered allmulticast mode [ 313.536490][T16066] bond0: entered allmulticast mode [ 313.541708][T16066] bond_slave_0: entered allmulticast mode [ 313.549762][T16072] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4498'. [ 313.559401][T16066] bond_slave_1: entered allmulticast mode [ 313.567819][T16067] ip6_vti0 speed is unknown, defaulting to 1000 [ 313.644175][T16072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.670976][T16072] bond_slave_0: left allmulticast mode [ 313.684532][T16072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.706268][T16072] bond_slave_1: left allmulticast mode [ 313.712743][T16072] bond0 (unregistering): Released all slaves [ 314.108340][T16067] lo speed is unknown, defaulting to 1000 [ 314.116635][T16075] ip6_vti0 speed is unknown, defaulting to 1000 [ 314.687681][T16075] lo speed is unknown, defaulting to 1000 [ 314.822053][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4512'. [ 315.616446][T16136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.635685][T16136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.649693][T16136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.664301][T16136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.187909][T16150] __nla_validate_parse: 4 callbacks suppressed [ 316.187930][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4525'. [ 316.225589][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4525'. [ 316.572634][T16171] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 316.597411][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4532'. [ 317.131778][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.142971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.447244][T16192] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4540'. [ 318.342259][T16236] syzkaller1: entered promiscuous mode [ 318.385386][T16236] syzkaller1: entered allmulticast mode [ 318.655710][T16240] netlink: 'syz.1.4555': attribute type 26 has an invalid length. [ 318.663739][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4555'. [ 318.715640][T16240] netlink: 'syz.1.4555': attribute type 26 has an invalid length. [ 318.723551][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4555'. [ 318.846819][T16245] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4557'. [ 318.876279][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4557'. [ 319.063397][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4562'. [ 319.090254][T16254] tipc: Enabled bearer , priority 0 [ 319.189849][T16263] syzkaller0: entered promiscuous mode [ 319.206199][T16263] syzkaller0: entered allmulticast mode [ 319.213393][T16263] tipc: Resetting bearer [ 319.260032][T16253] tipc: Resetting bearer [ 320.632576][T16253] tipc: Disabling bearer [ 320.816996][T16300] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4573'. [ 320.871747][T16294] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 320.888074][T16294] bond6 (unregistering): Released all slaves [ 321.375077][T16331] netlink: 'syz.2.4587': attribute type 1 has an invalid length. [ 321.392091][T16334] __nla_validate_parse: 4 callbacks suppressed [ 321.392110][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4588'. [ 321.531243][T16341] netlink: 'syz.2.4592': attribute type 1 has an invalid length. [ 321.562467][T16341] bond6: entered promiscuous mode [ 321.568086][T16341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 321.620816][T16341] bond6: (slave bridge0): making interface the new active one [ 321.628672][T16341] bridge0: entered promiscuous mode [ 321.635787][T16341] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 321.865288][T16355] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4597'. [ 322.339210][T16363] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4599'. [ 322.634864][T16381] bond3: entered allmulticast mode [ 322.650535][T16381] bridge2: entered promiscuous mode [ 322.655850][T16381] bridge2: entered allmulticast mode [ 322.664133][T16381] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 323.534525][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4610'. [ 323.562388][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4611'. [ 323.588819][T16400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.660222][T16412] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.742657][T16409] syzkaller0: entered promiscuous mode [ 323.777696][T16409] syzkaller0: entered allmulticast mode [ 324.012362][T16426] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.020756][T16430] tipc: Enabled bearer , priority 0 [ 324.139615][T16430] syzkaller0: entered promiscuous mode [ 324.145220][T16430] syzkaller0: entered allmulticast mode [ 324.158100][T16430] tipc: Resetting bearer [ 324.196562][T16429] tipc: Resetting bearer [ 325.572040][T16465] tipc: Failed to remove unknown binding: 66,0,0/1239715594:1835526985/1835526986 [ 325.588915][T16465] tipc: Failed to remove unknown binding: 66,0,0/1239715594:1835526985/1835526986 [ 325.735122][T16469] netlink: 'syz.4.4625': attribute type 1 has an invalid length. [ 326.126779][T16429] tipc: Disabling bearer [ 326.136696][ T143] bond0: (slave bond_slave_0): interface is now down [ 326.138970][T16441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.143793][ T143] bond0: (slave bond_slave_1): interface is now down [ 326.160874][ T49] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 326.196374][ T49] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 326.216687][ T49] bond0: now running without any active interface! [ 326.235915][T16426] lo speed is unknown, defaulting to 1000 [ 326.286746][T16469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 326.357393][T16473] bond4: (slave bridge3): making interface the new active one [ 326.365924][T16473] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 326.621730][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4632'. [ 326.769758][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4633'. [ 326.778889][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4633'. [ 326.794520][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'. [ 327.040871][T16508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4636'. [ 327.212958][T16511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.304837][T16511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.374952][T16511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.241401][T16563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4656'. [ 328.321249][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4656'. [ 328.353551][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4658'. [ 328.378289][T16568] sch_tbf: burst 12 is lower than device bridge4 mtu (1514) ! [ 329.047083][T16590] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 329.060530][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4670'. [ 329.070099][T16590] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 329.310517][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4675'. [ 329.404109][T16606] netlink: 'syz.2.4675': attribute type 5 has an invalid length. [ 331.098224][T16645] syzkaller0: entered promiscuous mode [ 331.103948][T16645] syzkaller0: entered allmulticast mode [ 331.582900][T16676] syzkaller0: entered promiscuous mode [ 331.588945][T16676] syzkaller0: entered allmulticast mode [ 331.900275][T16689] netlink: 'syz.2.4701': attribute type 4 has an invalid length. [ 332.235878][T16708] netlink: 'syz.4.4710': attribute type 1 has an invalid length. [ 332.314953][T16708] 8021q: adding VLAN 0 to HW filter on device bond5 [ 332.357333][T16708] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 332.385050][T16708] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 332.425741][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 332.495776][T16719] syzkaller0: entered allmulticast mode [ 332.562878][ T167] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.582696][T16722] netlink: 'syz.4.4716': attribute type 4 has an invalid length. [ 332.587108][ T78] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.599107][ T78] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 332.637292][T16723] netlink: 'syz.4.4716': attribute type 4 has an invalid length. [ 332.699795][T16725] __nla_validate_parse: 2 callbacks suppressed [ 332.699820][T16725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4717'. [ 332.718277][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.745825][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.766466][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.815111][ T78] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.845905][ T78] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.880259][ T78] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 333.098087][T16737] netlink: 'syz.4.4720': attribute type 4 has an invalid length. [ 333.180219][T16743] netlink: 'syz.4.4720': attribute type 4 has an invalid length. [ 333.254193][T16747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4723'. [ 333.391582][T16726] lec:lec_atm_close: lec0: Shut down! [ 333.486507][T16752] syzkaller0: entered promiscuous mode [ 333.492059][T16752] syzkaller0: entered allmulticast mode [ 333.655996][T16760] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 333.680305][T16760] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 334.497471][T16761] lec:lec_atm_close: lec0: Shut down! [ 334.655694][T16804] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4738'. [ 334.838742][T15466] lec:lec_start_xmit: lec0:No lecd attached [ 335.124872][T16827] syzkaller0: entered promiscuous mode [ 335.130919][T16827] syzkaller0: entered allmulticast mode [ 335.374205][T16835] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 335.433493][T16848] netlink: 'syz.1.4750': attribute type 1 has an invalid length. [ 335.499038][T16848] bond2: (slave vxcan2): The slave device specified does not support setting the MAC address [ 335.509978][T16848] bond2: (slave vxcan2): Setting fail_over_mac to active for active-backup mode [ 335.525172][T16848] bond2: (slave vxcan2): making interface the new active one [ 335.534155][T16848] bond2: (slave vxcan2): Enslaving as an active interface with an up link [ 335.732638][T16857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4753'. [ 335.779284][T16857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.848691][T16857] macvlan2: entered promiscuous mode [ 335.854052][T16857] macvlan2: entered allmulticast mode [ 335.888477][T16857] bond3: entered allmulticast mode [ 335.893819][T16857] bond3: entered promiscuous mode [ 335.900336][T16857] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 335.911695][T16857] team0: Port device macvlan2 added [ 335.960689][T16862] ------------[ cut here ]------------ [ 335.966709][T16862] msk->pm.local_addr_used == 0 [ 335.966740][T16862] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb1/0x1430, CPU#1: syz.2.4755/16862 [ 335.982853][T16862] Modules linked in: [ 335.987227][T16862] CPU: 1 UID: 0 PID: 16862 Comm: syz.2.4755 Not tainted syzkaller #0 PREEMPT(full) [ 335.996709][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.006846][T16862] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 336.013412][T16862] Code: 01 00 00 49 89 c6 e8 9e 03 29 f6 e9 28 fb ff ff e8 94 03 29 f6 48 89 df be 03 00 00 00 e8 17 a0 11 f9 eb a4 e8 80 03 29 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 336.033140][T16862] RSP: 0018:ffffc9000551f160 EFLAGS: 00010287 [ 336.039289][T16862] RAX: ffffffff8b9c8830 RBX: 0000000000000000 RCX: 0000000000080000 [ 336.047366][T16862] RDX: ffffc9000d5d9000 RSI: 000000000000386e RDI: 000000000000386f [ 336.055419][T16862] RBP: ffffc9000551f3b0 R08: ffff8880578b3dc7 R09: 1ffff1100af167b8 [ 336.063435][T16862] R10: dffffc0000000000 R11: ffffed100af167b9 R12: 1ffff1100af167b7 [ 336.071508][T16862] R13: ffff8880347b1000 R14: ffff8880578b3300 R15: ffff8880578b3db8 [ 336.079565][T16862] FS: 00007f22bb5b66c0(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 336.088643][T16862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.095281][T16862] CR2: 00007faebc3456b8 CR3: 000000001fb5a000 CR4: 00000000003526f0 [ 336.103364][T16862] Call Trace: [ 336.106738][T16862] [ 336.109719][T16862] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 336.115987][T16862] ? rcu_is_watching+0x15/0xb0 [ 336.120808][T16862] ? trace_kmalloc+0x2a/0x110 [ 336.125597][T16862] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 336.132003][T16862] genl_family_rcv_msg_doit+0x22a/0x330 [ 336.137665][T16862] ? __asan_memcpy+0x40/0x70 [ 336.142322][T16862] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 336.148528][T16862] ? bpf_lsm_capable+0x9/0x20 [ 336.153256][T16862] ? security_capable+0x7e/0x2c0 [ 336.158310][T16862] genl_rcv_msg+0x61c/0x7a0 [ 336.162928][T16862] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.168054][T16862] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 336.174268][T16862] ? __lock_acquire+0x6b5/0x2cf0 [ 336.179328][T16862] netlink_rcv_skb+0x232/0x4b0 [ 336.184145][T16862] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.189288][T16862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.194645][T16862] ? down_read+0x272/0x2e0 [ 336.199171][T16862] ? genl_rcv+0xd/0x40 [ 336.203291][T16862] genl_rcv+0x28/0x40 [ 336.207386][T16862] netlink_unicast+0x80f/0x9b0 [ 336.212209][T16862] ? __pfx_netlink_unicast+0x10/0x10 [ 336.217597][T16862] ? netlink_sendmsg+0x650/0xb40 [ 336.222596][T16862] ? skb_put+0x11b/0x210 [ 336.226956][T16862] netlink_sendmsg+0x813/0xb40 [ 336.231783][T16862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.237162][T16862] ? aa_sock_msg_perm+0xf1/0x1b0 [ 336.242148][T16862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.247515][T16862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.252883][T16862] ____sys_sendmsg+0xa68/0xad0 [ 336.257739][T16862] ? futex_unqueue+0x211/0x240 [ 336.262560][T16862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.267983][T16862] ? import_iovec+0x73/0xa0 [ 336.272553][T16862] ___sys_sendmsg+0x2a5/0x360 [ 336.277347][T16862] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.282607][T16862] ? futex_wait+0x29a/0x380 [ 336.287247][T16862] ? __fget_files+0x2a/0x420 [ 336.291888][T16862] ? __fget_files+0x3a0/0x420 [ 336.296676][T16862] __x64_sys_sendmsg+0x1bd/0x2a0 [ 336.301673][T16862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.307262][T16862] ? rcu_is_watching+0x15/0xb0 [ 336.312101][T16862] do_syscall_64+0x14d/0xf80 [ 336.316805][T16862] ? trace_irq_disable+0x3b/0x150 [ 336.321886][T16862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.328050][T16862] ? clear_bhb_loop+0x40/0x90 [ 336.332781][T16862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.338788][T16862] RIP: 0033:0x7f22ba79c799 [ 336.343246][T16862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.362952][T16862] RSP: 002b:00007f22bb5b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.371475][T16862] RAX: ffffffffffffffda RBX: 00007f22baa15fa0 RCX: 00007f22ba79c799 [ 336.379585][T16862] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 336.387653][T16862] RBP: 00007f22ba832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 336.395719][T16862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.403740][T16862] R13: 00007f22baa16038 R14: 00007f22baa15fa0 R15: 00007fff0b53d508 [ 336.411824][T16862] [ 336.414886][T16862] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 336.422204][T16862] CPU: 1 UID: 0 PID: 16862 Comm: syz.2.4755 Not tainted syzkaller #0 PREEMPT(full) [ 336.431618][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.441705][T16862] Call Trace: [ 336.445004][T16862] [ 336.447952][T16862] vpanic+0x56c/0xa60 [ 336.451965][T16862] ? __pfx__printk+0x10/0x10 [ 336.456590][T16862] ? __pfx_vpanic+0x10/0x10 [ 336.461141][T16862] ? is_bpf_text_address+0x292/0x2b0 [ 336.466451][T16862] ? is_bpf_text_address+0x26/0x2b0 [ 336.471701][T16862] panic+0xc5/0xd0 [ 336.475454][T16862] ? __pfx_panic+0x10/0x10 [ 336.479910][T16862] __warn+0x315/0x4f0 [ 336.483916][T16862] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 336.489845][T16862] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 336.495774][T16862] __report_bug+0x29a/0x540 [ 336.500308][T16862] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 336.506245][T16862] ? __pfx___report_bug+0x10/0x10 [ 336.511303][T16862] ? __lock_acquire+0x6b5/0x2cf0 [ 336.516272][T16862] ? reacquire_held_locks+0x104/0x190 [ 336.521681][T16862] ? __lock_sock_fast+0x45/0xe0 [ 336.526571][T16862] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 336.532497][T16862] report_bug+0x16a/0x220 [ 336.536861][T16862] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 336.542786][T16862] ? mptcp_pm_nl_del_addr_doit+0xfb3/0x1430 [ 336.548759][T16862] handle_bug+0x98/0x200 [ 336.553024][T16862] exc_invalid_op+0x1a/0x50 [ 336.557553][T16862] asm_exc_invalid_op+0x1a/0x20 [ 336.562425][T16862] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 336.569007][T16862] Code: 01 00 00 49 89 c6 e8 9e 03 29 f6 e9 28 fb ff ff e8 94 03 29 f6 48 89 df be 03 00 00 00 e8 17 a0 11 f9 eb a4 e8 80 03 29 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 336.588632][T16862] RSP: 0018:ffffc9000551f160 EFLAGS: 00010287 [ 336.594733][T16862] RAX: ffffffff8b9c8830 RBX: 0000000000000000 RCX: 0000000000080000 [ 336.602718][T16862] RDX: ffffc9000d5d9000 RSI: 000000000000386e RDI: 000000000000386f [ 336.610703][T16862] RBP: ffffc9000551f3b0 R08: ffff8880578b3dc7 R09: 1ffff1100af167b8 [ 336.618698][T16862] R10: dffffc0000000000 R11: ffffed100af167b9 R12: 1ffff1100af167b7 [ 336.626687][T16862] R13: ffff8880347b1000 R14: ffff8880578b3300 R15: ffff8880578b3db8 [ 336.634684][T16862] ? mptcp_pm_nl_del_addr_doit+0xfb0/0x1430 [ 336.640643][T16862] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 336.646849][T16862] ? rcu_is_watching+0x15/0xb0 [ 336.651639][T16862] ? trace_kmalloc+0x2a/0x110 [ 336.656344][T16862] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 336.662708][T16862] genl_family_rcv_msg_doit+0x22a/0x330 [ 336.668281][T16862] ? __asan_memcpy+0x40/0x70 [ 336.672906][T16862] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 336.679022][T16862] ? bpf_lsm_capable+0x9/0x20 [ 336.683730][T16862] ? security_capable+0x7e/0x2c0 [ 336.688694][T16862] genl_rcv_msg+0x61c/0x7a0 [ 336.693229][T16862] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.698280][T16862] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 336.704473][T16862] ? __lock_acquire+0x6b5/0x2cf0 [ 336.709444][T16862] netlink_rcv_skb+0x232/0x4b0 [ 336.714226][T16862] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.719282][T16862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.724608][T16862] ? down_read+0x272/0x2e0 [ 336.729043][T16862] ? genl_rcv+0xd/0x40 [ 336.733145][T16862] genl_rcv+0x28/0x40 [ 336.737156][T16862] netlink_unicast+0x80f/0x9b0 [ 336.741949][T16862] ? __pfx_netlink_unicast+0x10/0x10 [ 336.747255][T16862] ? netlink_sendmsg+0x650/0xb40 [ 336.752212][T16862] ? skb_put+0x11b/0x210 [ 336.756481][T16862] netlink_sendmsg+0x813/0xb40 [ 336.761300][T16862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.766621][T16862] ? aa_sock_msg_perm+0xf1/0x1b0 [ 336.771582][T16862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.776888][T16862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.782194][T16862] ____sys_sendmsg+0xa68/0xad0 [ 336.786992][T16862] ? futex_unqueue+0x211/0x240 [ 336.791785][T16862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.797115][T16862] ? import_iovec+0x73/0xa0 [ 336.801653][T16862] ___sys_sendmsg+0x2a5/0x360 [ 336.806363][T16862] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.811593][T16862] ? futex_wait+0x29a/0x380 [ 336.816167][T16862] ? __fget_files+0x2a/0x420 [ 336.820805][T16862] ? __fget_files+0x3a0/0x420 [ 336.825530][T16862] __x64_sys_sendmsg+0x1bd/0x2a0 [ 336.830509][T16862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.836007][T16862] ? rcu_is_watching+0x15/0xb0 [ 336.840815][T16862] do_syscall_64+0x14d/0xf80 [ 336.845433][T16862] ? trace_irq_disable+0x3b/0x150 [ 336.850483][T16862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.856602][T16862] ? clear_bhb_loop+0x40/0x90 [ 336.861302][T16862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.867217][T16862] RIP: 0033:0x7f22ba79c799 [ 336.871663][T16862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.891287][T16862] RSP: 002b:00007f22bb5b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.899726][T16862] RAX: ffffffffffffffda RBX: 00007f22baa15fa0 RCX: 00007f22ba79c799 [ 336.907743][T16862] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 336.915732][T16862] RBP: 00007f22ba832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 336.923728][T16862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.931715][T16862] R13: 00007f22baa16038 R14: 00007f22baa15fa0 R15: 00007fff0b53d508 [ 336.939720][T16862] [ 336.943462][T16862] Kernel Offset: disabled [ 336.947792][T16862] Rebooting in 86400 seconds..