last executing test programs: 6.319326182s ago: executing program 0 (id=1943): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x800) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r4, 0x5c2a7000) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c7000fbdbdf250a2068fd", @ANYRES32=r2, @ANYBLOB="080009000600000014000200fc01000000000000000000000000000014000600020000005b1600000800000000000000140006000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x4084) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xfffffffffffffe3e}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0xd026}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x58}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd]}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="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"], 0x184}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x2c, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x17, 0x1, '\':\\\\]\\{-$[!+%.@u]}\x00'}]}, 0x2c}}, 0x4000000) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x20, 0x2000, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) 6.234113307s ago: executing program 1 (id=1934): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x2}}], 0xa0}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket(0x28, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r5], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 6.025501489s ago: executing program 1 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 5.923983458s ago: executing program 0 (id=1937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 5.797722852s ago: executing program 1 (id=1938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.79702221s ago: executing program 0 (id=1939): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20) 5.698802389s ago: executing program 0 (id=1940): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40040) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) unshare(0x24020400) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, @ethernet={0x306}, @xdp={0x2c, 0xd, 0x0, 0x3}, 0x5, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x6, 0xffffffff}) 5.635609304s ago: executing program 1 (id=1941): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0xd71, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.558605279s ago: executing program 0 (id=1944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.5038861s ago: executing program 1 (id=1945): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) write(r0, &(0x7f00000002c0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r8, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r9, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 4.657006578s ago: executing program 2 (id=1950): socket(0x18, 0x3, 0x0) syz_emit_ethernet(0xef, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc071f00ffffffffffff86dd60bb04a200b92c03cb697a653e336f000000500000000000ff0200000000000000000000000000012902002e00000000000000000000000000000000000000014e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50800009907801d6f61634809e74e9b607b8d7a1b454272abfab15904709d94499456527ed75a3518b3961b6840e18a77cc4810dadd993696e814b901021b8c3c51c4504b6df1fb6fc1f452d86c9ccd257a7dc4ea7f2d5e70eed50d5ccfcaf275ffc2a392d5502f5d64cc71e23a3bf9245227bfd42ec016242519c7bf363349cf5a861bb60bfab40dca83d1786fbe7cf68d6f1a71f"], 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60ad000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) 4.557389538s ago: executing program 1 (id=1951): unshare(0x6a040000) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvfrom(r2, 0x0, 0x0, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x68041, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbb, &(0x7f0000000140)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @generic={{0x22, 0x4, 0x3, 0x8, 0xad, 0x64, 0x0, 0x10, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_addr={0x44, 0x2c, 0xbb, 0x1, 0xf, [{@loopback, 0x5}, {@multicast2, 0xb}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1ff}, {@multicast2, 0xd7e}]}, @timestamp_addr={0x44, 0x14, 0x1c, 0x1, 0x9, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xe}]}, @end, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0xa}, 0xb}, {@loopback, 0x3}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x17, 0x1d, [@loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @broadcast, @loopback]}]}}, "064902f89a6ad9a8f7a1ce6f1ea2ca018c91382ae205b814c7be992402bae20f1bbae9d37e"}}}}, 0x0) socket$inet6(0xa, 0x80001, 0x0) socket$inet6(0xa, 0x1, 0x0) close(r1) 4.315830319s ago: executing program 2 (id=1952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 4.273737204s ago: executing program 2 (id=1953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2b, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) 4.228618881s ago: executing program 0 (id=1954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 4.083938629s ago: executing program 2 (id=1955): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x5}, 0xe) 4.002930497s ago: executing program 2 (id=1956): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0xd71, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.604168485s ago: executing program 2 (id=1960): r0 = socket(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}}], 0x1, 0x4004804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000002340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func_proto]}, {0x0, [0x30, 0x0, 0x90, 0x0, 0x0]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x10000}, 0x28) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5, 0x0, 0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, 0x0, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100a682e10ad0"], 0x38}}, 0x0) 1.827689128s ago: executing program 4 (id=1967): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, 0x0, 0x8000) socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x24}}, 0x0) 1.620250719s ago: executing program 4 (id=1968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.412140828s ago: executing program 4 (id=1971): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) write(r0, &(0x7f00000002c0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r8, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r9, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 805.971749ms ago: executing program 3 (id=1974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x40000) 650.471472ms ago: executing program 3 (id=1975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0xc084) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 524.318102ms ago: executing program 3 (id=1976): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x7df6, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) 440.777558ms ago: executing program 3 (id=1977): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a82", 0x24}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a905", 0x3a}], 0x2}, 0x40000) 430.548646ms ago: executing program 4 (id=1978): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x20, @random="a380e37b9489", 'vcan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 368.027395ms ago: executing program 3 (id=1979): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, 0x0, 0x8000) socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x24}}, 0x0) 332.072649ms ago: executing program 4 (id=1980): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000000}) 186.514526ms ago: executing program 4 (id=1981): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 0s ago: executing program 3 (id=1982): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): .459': attribute type 1 has an invalid length. [ 202.583281][ T8103] netlink: 224 bytes leftover after parsing attributes in process `syz.1.459'. [ 203.175855][ T8111] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 203.184668][ T8111] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 203.192345][ T8111] netlink: 224 bytes leftover after parsing attributes in process `syz.2.461'. [ 204.046411][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 204.110880][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 204.237365][ T8125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.707929][ T8162] lo speed is unknown, defaulting to 1000 [ 206.132278][ T8170] lo speed is unknown, defaulting to 1000 [ 206.446124][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 206.630895][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 206.671395][ T8187] netlink: 128 bytes leftover after parsing attributes in process `syz.2.479'. [ 207.793748][ T8214] lo speed is unknown, defaulting to 1000 [ 209.002429][ T8246] lo speed is unknown, defaulting to 1000 [ 209.760906][ T8257] batman_adv: batadv0: Removing interface: dummy0 [ 209.770779][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 210.595858][ T8271] geneve2: entered promiscuous mode [ 210.630815][ T8271] geneve2: entered allmulticast mode [ 211.119673][ T8286] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 211.322208][ T8265] lo speed is unknown, defaulting to 1000 [ 211.713012][ T8302] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 211.799300][ T8268] lo speed is unknown, defaulting to 1000 [ 212.744947][ T8297] lo speed is unknown, defaulting to 1000 [ 215.845524][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 216.027914][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 216.622348][ T5929] IPVS: starting estimator thread 0... [ 216.714448][ T8355] IPVS: fo: FWM 3 0x00000003 - no destination available [ 216.768392][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.506'. [ 216.781591][ T8351] IPVS: Scheduler module ip_vs_sip not found [ 216.887079][ T8353] IPVS: using max 26 ests per chain, 62400 per kthread [ 217.007657][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 217.013772][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 217.024695][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 217.432837][ T8308] Set syz1 is full, maxelem 65536 reached [ 217.719175][ T8378] lo speed is unknown, defaulting to 1000 [ 217.823299][ T8375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.887513][ T8387] netlink: 'syz.0.514': attribute type 15 has an invalid length. [ 219.027428][ T8400] netlink: 52 bytes leftover after parsing attributes in process `syz.1.518'. [ 219.038641][ T8400] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 219.555471][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 219.630213][ T8420] netlink: 'syz.1.522': attribute type 10 has an invalid length. [ 219.638333][ T8420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.522'. [ 219.917147][ T5929] IPVS: starting estimator thread 0... [ 220.052083][ T8427] IPVS: using max 29 ests per chain, 69600 per kthread [ 220.109057][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 220.302847][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 220.533662][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 220.969256][ T8446] IPv6: sit3: Disabled Multicast RS [ 221.308468][ T8450] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 221.342346][ T8450] team0: Port device dummy0 added [ 221.847412][ T8467] netlink: 6 bytes leftover after parsing attributes in process `syz.3.532'. [ 221.878316][ T8467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.946258][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 221.962974][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.533'. [ 222.212312][ T8470] lo speed is unknown, defaulting to 1000 [ 222.633104][ T8479] lo speed is unknown, defaulting to 1000 [ 223.412714][ T8504] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 223.441261][ T8504] syz_tun: left allmulticast mode [ 223.447100][ T8504] syz_tun: left promiscuous mode [ 223.452320][ T8504] bridge0: port 3(syz_tun) entered disabled state [ 223.462049][ T8504] bridge_slave_0: left allmulticast mode [ 223.482007][ T8504] bridge_slave_0: left promiscuous mode [ 223.488359][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.508191][ T8504] bridge_slave_1: left allmulticast mode [ 223.528432][ T8504] bridge_slave_1: left promiscuous mode [ 223.548822][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.569541][ T8509] netlink: 'syz.2.539': attribute type 10 has an invalid length. [ 223.607433][ T8504] bond0: (slave bond_slave_0): Releasing backup interface [ 223.655451][ T8504] bond0: (slave bond_slave_1): Releasing backup interface [ 223.696002][ T8504] team_slave_0: left promiscuous mode [ 223.723274][ T8504] team0: Port device team_slave_0 removed [ 223.742967][ T8504] team_slave_1: left promiscuous mode [ 223.765398][ T8504] team0: Port device team_slave_1 removed [ 223.771600][ T8504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.807076][ T8504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.921754][ T8509] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 224.415497][ T8521] lo speed is unknown, defaulting to 1000 [ 225.546608][ T8536] netlink: 'syz.4.545': attribute type 1 has an invalid length. [ 225.835696][ T8542] netlink: 'syz.4.548': attribute type 1 has an invalid length. [ 225.853673][ T8542] netlink: 'syz.4.548': attribute type 2 has an invalid length. [ 225.899797][ T8542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.548'. [ 227.263056][ T8571] netlink: 136 bytes leftover after parsing attributes in process `syz.4.550'. [ 227.612694][ T8579] lo speed is unknown, defaulting to 1000 [ 227.784976][ T8462] Set syz1 is full, maxelem 65536 reached [ 229.053910][ T8615] bond0: Device is already in use. [ 229.080827][ T8611] lo speed is unknown, defaulting to 1000 [ 230.455783][ T8632] lo speed is unknown, defaulting to 1000 [ 232.170556][ T8672] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 233.128447][ T8691] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 233.137154][ T8691] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 233.203018][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.573'. [ 233.376859][ T8701] macsec1: left allmulticast mode [ 233.424996][ T8703] lo speed is unknown, defaulting to 1000 [ 233.449752][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 233.497261][ T8701] hsr_slave_0: left promiscuous mode [ 233.529326][ T8701] hsr_slave_1: left promiscuous mode [ 233.965185][ T8711] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.220787][ T8720] lo speed is unknown, defaulting to 1000 [ 234.403247][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 234.488417][ T8725] macvtap1: entered promiscuous mode [ 234.493922][ T8725] batadv0: entered promiscuous mode [ 234.504307][ T8725] macvtap1: entered allmulticast mode [ 234.510041][ T8725] batadv0: entered allmulticast mode [ 234.547418][ T8725] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 234.556116][ T8728] netlink: 'syz.4.580': attribute type 5 has an invalid length. [ 234.608847][ T8730] macvtap1: left promiscuous mode [ 234.637283][ T8730] batadv0: left promiscuous mode [ 234.642713][ T8730] macvtap1: left allmulticast mode [ 234.650243][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 234.673125][ T8730] batadv0: left allmulticast mode [ 234.930803][ T8741] tipc: Enabled bearer , priority 0 [ 234.955979][ T8741] syzkaller0: entered promiscuous mode [ 234.967256][ T8741] syzkaller0: entered allmulticast mode [ 235.025054][ T8741] tipc: Resetting bearer [ 235.135455][ T8745] netlink: 48 bytes leftover after parsing attributes in process `syz.4.583'. [ 235.144392][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 235.260177][ T8745] netlink: 'syz.4.583': attribute type 2 has an invalid length. [ 235.680147][ T8763] lo speed is unknown, defaulting to 1000 [ 236.297238][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 237.028452][ T8794] netlink: 'syz.3.592': attribute type 15 has an invalid length. [ 237.756486][ T8781] lo speed is unknown, defaulting to 1000 [ 238.236002][ T8799] lo speed is unknown, defaulting to 1000 [ 239.523456][ T8834] lo speed is unknown, defaulting to 1000 [ 241.253421][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 241.828024][ T8870] netlink: 'syz.3.613': attribute type 13 has an invalid length. [ 241.875263][ T8870] netlink: 'syz.3.613': attribute type 17 has an invalid length. [ 241.985047][ T8870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.097204][ T8871] netlink: 6 bytes leftover after parsing attributes in process `syz.4.603'. [ 242.140104][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 242.154764][ T8871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.201749][ T8873] lo speed is unknown, defaulting to 1000 [ 242.436276][ T8870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.970551][ T8901] netlink: 'syz.1.609': attribute type 15 has an invalid length. [ 243.065233][ T8879] lo speed is unknown, defaulting to 1000 [ 244.299576][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 245.631434][ T8936] lo speed is unknown, defaulting to 1000 [ 245.708423][ T8955] tipc: Enabling of bearer rejected, failed to enable media [ 247.230525][ T8981] lo speed is unknown, defaulting to 1000 [ 248.152614][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 248.207627][ T9016] lo speed is unknown, defaulting to 1000 [ 249.087853][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 249.206326][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 249.735825][ T9046] tipc: Resetting bearer [ 250.569851][ T9045] lo speed is unknown, defaulting to 1000 [ 250.699907][ T9057] IPVS: Scheduler module ip_vs_sip not found [ 251.009895][ T9067] tipc: Failed to remove unknown binding: 66,1,1/4:2607029520/2607029522 [ 251.037006][ T9067] tipc: Failed to remove unknown binding: 66,1,1/4:2607029520/2607029522 [ 251.055660][ T9067] tipc: Failed to remove unknown binding: 66,1,1/4:2607029520/2607029522 [ 251.572007][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 252.565712][ T9080] lo speed is unknown, defaulting to 1000 [ 252.896601][ T9091] wg1: left promiscuous mode [ 252.901378][ T9091] wg1: left allmulticast mode [ 252.914619][ T9091] tipc: Resetting bearer [ 252.999066][ T9091] syzkaller0: left promiscuous mode [ 253.004465][ T9091] syzkaller0: left allmulticast mode [ 253.012272][ T9091] bond3: left promiscuous mode [ 253.017271][ T9091] bond3: left allmulticast mode [ 253.769873][ T9108] netlink: 'syz.3.644': attribute type 6 has an invalid length. [ 255.270012][ T9136] netlink: 'syz.3.649': attribute type 15 has an invalid length. [ 255.288285][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 255.649987][ T9144] syz.0.662: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 255.679694][ T9144] CPU: 1 UID: 0 PID: 9144 Comm: syz.0.662 Not tainted syzkaller #0 PREEMPT(full) [ 255.679726][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.679749][ T9144] Call Trace: [ 255.679758][ T9144] [ 255.679769][ T9144] dump_stack_lvl+0x189/0x250 [ 255.679813][ T9144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.679837][ T9144] ? __pfx__printk+0x10/0x10 [ 255.679868][ T9144] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 255.679901][ T9144] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 255.679937][ T9144] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 255.679973][ T9144] warn_alloc+0x214/0x310 [ 255.680008][ T9144] ? stack_depot_save_flags+0x40/0x860 [ 255.680042][ T9144] ? __pfx_warn_alloc+0x10/0x10 [ 255.680078][ T9144] ? kasan_save_track+0x3e/0x80 [ 255.680108][ T9144] ? __kasan_kmalloc+0x93/0xb0 [ 255.680142][ T9144] ? xsk_setsockopt+0x4dc/0x8d0 [ 255.680163][ T9144] ? do_sock_setsockopt+0x179/0x1b0 [ 255.680187][ T9144] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 255.680210][ T9144] ? do_syscall_64+0xfa/0xfa0 [ 255.680236][ T9144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.680271][ T9144] __vmalloc_node_range_noprof+0x125/0x12d0 [ 255.680340][ T9144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 255.680378][ T9144] ? __kasan_kmalloc+0x93/0xb0 [ 255.680419][ T9144] vmalloc_user_noprof+0xad/0xf0 [ 255.680452][ T9144] ? xskq_create+0xbf/0x170 [ 255.680478][ T9144] xskq_create+0xbf/0x170 [ 255.680507][ T9144] xsk_init_queue+0xb0/0x110 [ 255.680536][ T9144] xsk_setsockopt+0x4dc/0x8d0 [ 255.680563][ T9144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 255.680590][ T9144] ? __pfx_aa_sk_perm+0x10/0x10 [ 255.680622][ T9144] ? aa_sock_opt_perm+0xff/0x1b0 [ 255.680662][ T9144] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 255.680684][ T9144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 255.680709][ T9144] do_sock_setsockopt+0x179/0x1b0 [ 255.680741][ T9144] __x64_sys_setsockopt+0x13f/0x1b0 [ 255.680774][ T9144] do_syscall_64+0xfa/0xfa0 [ 255.680801][ T9144] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.680828][ T9144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.680850][ T9144] ? clear_bhb_loop+0x60/0xb0 [ 255.680886][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.680908][ T9144] RIP: 0033:0x7f19bdd8eec9 [ 255.680936][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.680955][ T9144] RSP: 002b:00007f19beba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 255.680979][ T9144] RAX: ffffffffffffffda RBX: 00007f19bdfe5fa0 RCX: 00007f19bdd8eec9 [ 255.680996][ T9144] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 255.681010][ T9144] RBP: 00007f19bde11f91 R08: 0000000000000004 R09: 0000000000000000 [ 255.681023][ T9144] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.681037][ T9144] R13: 00007f19bdfe6038 R14: 00007f19bdfe5fa0 R15: 00007ffcf8f38318 [ 255.681076][ T9144] [ 255.681219][ T9144] Mem-Info: [ 255.709906][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 255.736034][ T9144] active_anon:6273 inactive_anon:0 isolated_anon:0 [ 255.736034][ T9144] active_file:3017 inactive_file:39943 isolated_file:0 [ 255.736034][ T9144] unevictable:768 dirty:328 writeback:0 [ 255.736034][ T9144] slab_reclaimable:11292 slab_unreclaimable:163137 [ 255.736034][ T9144] mapped:31580 shmem:1374 pagetables:1214 [ 255.736034][ T9144] sec_pagetables:0 bounce:0 [ 255.736034][ T9144] kernel_misc_reclaimable:0 [ 255.736034][ T9144] free:1255286 free_pcp:16693 free_cma:0 [ 256.044380][ T9144] Node 0 active_anon:25292kB inactive_anon:0kB active_file:12068kB inactive_file:159572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126420kB dirty:1312kB writeback:0kB shmem:4060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13344kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.165322][ T9144] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.234943][ T9144] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.269702][ T9144] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 256.289808][ T9144] Node 0 DMA32 free:1109952kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25664kB inactive_anon:0kB active_file:12068kB inactive_file:159584kB unevictable:1536kB writepending:1428kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:48788kB local_pcp:20852kB free_cma:0kB [ 256.434976][ T9144] lowmem_reserve[]: 0 0 1 1 1 [ 256.440383][ T9144] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.555256][ T9144] lowmem_reserve[]: 0 0 0 0 0 [ 256.560738][ T9144] Node 1 Normal free:3896224kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16968kB local_pcp:8352kB free_cma:0kB [ 256.676418][ T9144] lowmem_reserve[]: 0 0 0 0 0 [ 256.682787][ T9144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 256.720587][ T9150] lo speed is unknown, defaulting to 1000 [ 256.767146][ T9144] Node 0 DMA32: 499*4kB (UM) 709*8kB (UME) 479*16kB (UME) 549*32kB (UME) 94*64kB (UME) 36*128kB (UME) 20*256kB (UM) 13*512kB (ME) 3*1024kB (M) 8*2048kB (UME) 252*4096kB (UM) = 1106948kB [ 256.853156][ T9144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 256.899336][ T9144] Node 1 Normal: 152*4kB (UE) 38*8kB (UME) 47*16kB (UME) 109*32kB (UME) 36*64kB (UME) 5*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3896224kB [ 256.956919][ T9144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.991950][ T9144] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.028794][ T9144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.065426][ T9144] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.100340][ T9144] 46363 total pagecache pages [ 257.105825][ T9144] 0 pages in swap cache [ 257.110036][ T9144] Free swap = 124996kB [ 257.125266][ T9144] Total swap = 124996kB [ 257.129828][ T9144] 2097051 pages RAM [ 257.133665][ T9144] 0 pages HighMem/MovableOnly [ 257.139193][ T9144] 424543 pages reserved [ 257.143652][ T9144] 0 pages cma reserved [ 257.972419][ T9158] lo speed is unknown, defaulting to 1000 [ 258.730074][ T9197] lo speed is unknown, defaulting to 1000 [ 259.063005][ T9205] netlink: 244 bytes leftover after parsing attributes in process `syz.1.663'. [ 259.076875][ T9205] tipc: New replicast peer: 0.0.0.0 [ 259.082574][ T9205] tipc: Enabled bearer , priority 10 [ 259.091781][ T9205] tipc: New replicast peer: 255.255.255.255 [ 259.580861][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 259.914603][ T9216] lo speed is unknown, defaulting to 1000 [ 260.214735][ T6700] tipc: Node number set to 1386058731 [ 260.558224][ T9223] 8021q: VLANs not supported on vcan0 [ 261.010467][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.292704][ T9223] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.350001][ T9223] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 261.874160][ T9232] netlink: 'syz.1.670': attribute type 2 has an invalid length. [ 262.179337][ T9240] wg1: entered promiscuous mode [ 262.189936][ T9240] wg1: entered allmulticast mode [ 262.225911][ T5839] block nbd0: Receive control failed (result -32) [ 262.728334][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 263.106684][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 263.367665][ T9287] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 263.727417][ T9291] netlink: 'syz.4.680': attribute type 3 has an invalid length. [ 263.807064][ T9291] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 263.863373][ T9291] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.680'. [ 265.244079][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 265.547585][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 265.780758][ T9341] netlink: 48 bytes leftover after parsing attributes in process `syz.4.694'. [ 265.846048][ T9341] netlink: 40 bytes leftover after parsing attributes in process `syz.4.694'. [ 266.767861][ T9355] syzkaller1: entered promiscuous mode [ 266.773499][ T9355] syzkaller1: entered allmulticast mode [ 266.903287][ T9359] bond2: option arp_validate: invalid value (18446744073491447809) [ 266.917393][ T9359] bond2 (unregistering): Released all slaves [ 267.103105][ T9380] netlink: 'syz.1.699': attribute type 13 has an invalid length. [ 267.161153][ T9379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.701'. [ 267.318656][ T9367] lo speed is unknown, defaulting to 1000 [ 267.432670][ T9391] netlink: 'syz.1.704': attribute type 3 has an invalid length. [ 267.456453][ T9391] dvmrp0: left allmulticast mode [ 267.631261][ T9396] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 267.639220][ T9396] netlink: 140 bytes leftover after parsing attributes in process `syz.2.703'. [ 267.643530][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.648652][ T9396] netlink: 96 bytes leftover after parsing attributes in process `syz.2.703'. [ 267.667026][ T6698] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 267.681953][ T9391] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.691989][ T9391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.710161][ T9385] lo speed is unknown, defaulting to 1000 [ 267.784927][ T1113] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 267.814961][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.242407][ T9387] lo speed is unknown, defaulting to 1000 [ 268.717450][ T9412] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 268.845795][ T6101] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.864151][ T6101] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.932668][ T9416] netlink: 'syz.4.710': attribute type 12 has an invalid length. [ 268.941646][ T9416] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.710'. [ 269.495202][ T6696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 269.679276][ T9395] siw: device registration error -23 [ 270.876237][ T9446] lo speed is unknown, defaulting to 1000 [ 272.611330][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 272.723131][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 272.844726][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 272.977193][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 274.197068][ T9515] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 274.205369][ T9515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.731'. [ 274.581613][ T9520] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 274.589666][ T9520] netlink: 224 bytes leftover after parsing attributes in process `syz.3.732'. [ 274.956771][ T9530] netlink: 'syz.0.733': attribute type 13 has an invalid length. [ 275.021186][ T9530] netlink: 'syz.0.733': attribute type 17 has an invalid length. [ 275.054370][ T9535] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 275.076979][ T9526] lo speed is unknown, defaulting to 1000 [ 275.151679][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.163563][ T9530] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.198820][ T9530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.249870][ T5929] lo speed is unknown, defaulting to 1000 [ 275.257176][ T5929] syz0: Port: 1 Link ACTIVE [ 275.265930][ T5929] lo speed is unknown, defaulting to 1000 [ 275.867809][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 275.967570][ T9539] lo speed is unknown, defaulting to 1000 [ 276.147811][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.740'. [ 276.661817][ T9550] lo speed is unknown, defaulting to 1000 [ 277.125681][ T9559] lo speed is unknown, defaulting to 1000 [ 277.412760][ T9562] pim6reg99999999: entered allmulticast mode [ 277.579273][ T9565] netlink: 788 bytes leftover after parsing attributes in process `syz.2.743'. [ 278.682965][ T9575] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 278.921799][ T9571] lo speed is unknown, defaulting to 1000 [ 279.501623][ T9590] macsec0: entered allmulticast mode [ 279.550756][ T9582] lo speed is unknown, defaulting to 1000 [ 279.768660][ T9578] lo speed is unknown, defaulting to 1000 [ 279.917330][ T9588] lo speed is unknown, defaulting to 1000 [ 280.844736][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.028912][ T9614] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 283.342332][ T9624] lo speed is unknown, defaulting to 1000 [ 283.908480][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.760'. [ 284.265644][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 284.627297][ T9659] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 284.718271][ T9648] lo speed is unknown, defaulting to 1000 [ 284.977710][ T9665] netlink: 'syz.3.766': attribute type 30 has an invalid length. [ 285.342071][ T9669] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.767'. [ 286.170513][ T9679] lo speed is unknown, defaulting to 1000 [ 286.547595][ T9685] lo speed is unknown, defaulting to 1000 [ 286.968889][ T9706] macvlan2: mtu less than device minimum [ 287.477587][ T9694] lo speed is unknown, defaulting to 1000 [ 288.134079][ T9697] lo speed is unknown, defaulting to 1000 [ 288.795068][ T9715] lo speed is unknown, defaulting to 1000 [ 291.580079][ T9740] syz_tun: entered allmulticast mode [ 291.701488][ T9738] dvmrp8: entered allmulticast mode [ 291.828550][ T9740] netlink: 'syz.0.779': attribute type 23 has an invalid length. [ 292.041803][ T9738] lo speed is unknown, defaulting to 1000 [ 292.341908][ T9744] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 292.446948][ T9737] syz_tun: left allmulticast mode [ 292.452689][ T9737] dvmrp8: left allmulticast mode [ 292.821801][ T9752] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 292.846235][ T5929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 293.244360][ T9756] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 293.647257][ T5929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 293.657785][ T9759] netlink: 'syz.1.786': attribute type 1 has an invalid length. [ 293.942353][ T9763] lo speed is unknown, defaulting to 1000 [ 296.612763][ T9774] lo speed is unknown, defaulting to 1000 [ 296.703193][ T9783] wg1: left promiscuous mode [ 296.709099][ T9783] wg1: left allmulticast mode [ 296.731625][ T9783] macvtap1: left promiscuous mode [ 296.742634][ T9783] macvtap1: left allmulticast mode [ 297.042168][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 297.437334][ T9795] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 297.453327][ T9795] netlink: 'syz.1.792': attribute type 4 has an invalid length. [ 298.075366][ T5929] IPVS: starting estimator thread 0... [ 298.172769][ T9805] IPVS: using max 26 ests per chain, 62400 per kthread [ 298.192589][ T9807] netlink: 'syz.4.795': attribute type 13 has an invalid length. [ 298.201914][ T9807] netlink: 'syz.4.795': attribute type 17 has an invalid length. [ 298.451101][ T9807] erspan0: left allmulticast mode [ 298.591812][ T9807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.637209][ T9807] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.683901][ T9807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.147980][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.797'. [ 299.219831][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 299.302926][ T9826] bridge5: entered allmulticast mode [ 300.502966][ T9845] lo speed is unknown, defaulting to 1000 [ 300.546754][ T9847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.804'. [ 300.782398][ T9847] nbd: socks must be embedded in a SOCK_ITEM attr [ 300.845745][ T5849] block nbd64: NBD_DISCONNECT [ 301.222865][ T5849] udevd[5849]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 302.075014][ T9872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.807'. [ 302.344905][ T9874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.807'. [ 302.714225][ T9845] tipc: can't start tipc receive workqueue [ 302.764735][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 303.086908][ T9893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.709574][ T9903] netlink: 68 bytes leftover after parsing attributes in process `syz.4.813'. [ 303.748982][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 303.887390][ T6696] IPVS: starting estimator thread 0... [ 303.975789][ T9911] IPVS: using max 25 ests per chain, 60000 per kthread [ 303.994065][ T9924] netlink: 'syz.1.815': attribute type 6 has an invalid length. [ 304.213740][ T9925] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 304.389515][ T9930] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 304.767323][ T9930] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 304.830893][ T9944] netlink: 'syz.4.817': attribute type 4 has an invalid length. [ 306.326807][ T9981] Bluetooth: MGMT ver 1.23 [ 306.385336][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 306.386569][ T9986] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.825'. [ 306.418907][ T9987] netlink: 'syz.3.828': attribute type 4 has an invalid length. [ 306.487776][ T9991] netlink: 'syz.1.827': attribute type 12 has an invalid length. [ 306.511201][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.824'. [ 306.709162][ T9972] lo speed is unknown, defaulting to 1000 [ 307.207544][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 307.656431][T10011] lo: entered allmulticast mode [ 307.729749][T10011] dvmrp8: entered allmulticast mode [ 307.796910][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.835'. [ 307.808890][T10019] netlink: 'syz.1.834': attribute type 23 has an invalid length. [ 307.941509][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 308.138252][T10011] lo speed is unknown, defaulting to 1000 [ 308.366686][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 308.589517][T10010] lo: left allmulticast mode [ 308.594418][T10010] dvmrp8: left allmulticast mode [ 308.692816][T10026] lo speed is unknown, defaulting to 1000 [ 309.674128][T10038] lo speed is unknown, defaulting to 1000 [ 310.584566][T10039] lo speed is unknown, defaulting to 1000 [ 311.189829][T10052] syzkaller0: entered promiscuous mode [ 311.195998][T10052] syzkaller0: entered allmulticast mode [ 311.424890][T10057] bond0: (slave rose0): Error: Device can not be enslaved while up [ 313.077993][T10082] netlink: 10 bytes leftover after parsing attributes in process `syz.2.847'. [ 313.181388][T10081] lo speed is unknown, defaulting to 1000 [ 313.546089][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 313.588288][T10088] bpq0: entered promiscuous mode [ 313.710144][T10091] netlink: 'syz.2.851': attribute type 4 has an invalid length. [ 313.718794][T10091] netlink: 17 bytes leftover after parsing attributes in process `syz.2.851'. [ 313.748315][T10092] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 313.812945][T10092] bond0: (slave team0): Releasing backup interface [ 313.910559][T10096] netlink: 'syz.0.850': attribute type 10 has an invalid length. [ 313.930203][T10092] bond0: (slave bond_slave_0): Releasing backup interface [ 313.950434][T10092] bond0: (slave bond_slave_1): Releasing backup interface [ 313.982371][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 313.999547][T10092] team0: Port device team_slave_0 removed [ 314.009539][T10092] team0: Port device team_slave_1 removed [ 314.018078][T10092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.027109][T10092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.037182][T10092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 314.058324][T10096] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 314.112349][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.127295][T10096] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 314.185813][T10103] syzkaller0: entered promiscuous mode [ 314.191446][T10103] syzkaller0: entered allmulticast mode [ 314.244804][T10098] lo speed is unknown, defaulting to 1000 [ 314.835787][T10113] lo speed is unknown, defaulting to 1000 [ 315.240609][T10127] netlink: 72 bytes leftover after parsing attributes in process `syz.3.859'. [ 315.375455][T10127] nbd3: detected capacity change from 0 to 63 [ 315.386556][T10130] block nbd3: NBD_DISCONNECT [ 315.410488][T10130] block nbd3: Disconnected due to user request. [ 315.447715][T10130] block nbd3: shutting down sockets [ 315.469547][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.478922][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.488777][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.497921][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 315.505822][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.514915][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 315.522766][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.531899][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 315.540429][ T5849] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.553049][ T5849] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.563295][ T5849] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.593624][ T5849] Buffer I/O error on dev nbd3, logical block 1, async page read [ 315.614924][ T5849] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.637766][ T5849] Buffer I/O error on dev nbd3, logical block 2, async page read [ 315.662053][ T5849] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.686537][ T5849] Buffer I/O error on dev nbd3, logical block 3, async page read [ 315.709069][ T5849] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.749647][ T5849] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.775170][ T5849] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.798652][ T5849] Buffer I/O error on dev nbd3, logical block 1, async page read [ 315.835298][ T5849] ldm_validate_partition_table(): Disk read failed. [ 315.857354][ T5849] Dev nbd3: unable to read RDB block 0 [ 315.867774][ T5849] nbd3: unable to read partition table [ 315.941529][ T5849] ldm_validate_partition_table(): Disk read failed. [ 315.980580][ T5849] Dev nbd3: unable to read RDB block 0 [ 316.004821][ T5849] nbd3: unable to read partition table [ 316.317033][T10147] lo speed is unknown, defaulting to 1000 [ 316.400545][T10149] netlink: 'syz.0.864': attribute type 10 has an invalid length. [ 316.440981][T10149] team0: Device dummy0 failed to register rx_handler [ 316.463982][T10149] macvlan2: mtu less than device minimum [ 317.132092][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 317.312618][T10158] lo speed is unknown, defaulting to 1000 [ 318.180979][T10164] lo speed is unknown, defaulting to 1000 [ 318.571373][T10159] lo speed is unknown, defaulting to 1000 [ 319.418294][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 319.491755][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 321.406580][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 322.261977][T10249] syzkaller0: entered promiscuous mode [ 322.268252][T10249] syzkaller0: entered allmulticast mode [ 322.450922][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.646039][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 322.681115][T10269] bpq0: left promiscuous mode [ 322.760964][T10274] lo speed is unknown, defaulting to 1000 [ 323.589498][T10293] veth0: entered promiscuous mode [ 323.746311][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.749859][T10299] netlink: 'syz.3.888': attribute type 39 has an invalid length. [ 323.794782][T10297] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 323.879141][T10297] bond0: (slave gre0): Error -95 calling set_mac_address [ 323.929539][T10292] lo speed is unknown, defaulting to 1000 [ 323.968873][T10293] netlink: 'syz.1.887': attribute type 16 has an invalid length. [ 324.012955][T10293] netlink: 'syz.1.887': attribute type 17 has an invalid length. [ 324.111152][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 324.252003][T10293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.277008][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.310968][T10293] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.357821][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 324.386939][T10293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.762365][T10293] veth0: left promiscuous mode [ 324.773141][T10321] syzkaller0: entered promiscuous mode [ 324.784328][T10321] syzkaller0: entered allmulticast mode [ 325.127093][T10329] netlink: 256 bytes leftover after parsing attributes in process `syz.0.893'. [ 325.223916][T10325] lo speed is unknown, defaulting to 1000 [ 325.334843][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 325.430326][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 325.938465][T10353] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 326.577444][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.597343][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.819468][T10385] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 326.908514][T10385] netlink: 'syz.4.900': attribute type 10 has an invalid length. [ 326.922979][T10385] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 326.938705][T10385] bond0: (slave wlan1): refused to change device type [ 326.946427][ T6696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.984316][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 327.393170][T10398] smc: net device geneve0 applied user defined pnetid SYZ0 [ 327.441836][T10402] netlink: 100 bytes leftover after parsing attributes in process `syz.0.901'. [ 328.142332][T10405] geneve2: entered promiscuous mode [ 328.215538][T10405] geneve2: entered allmulticast mode [ 328.243682][ T3480] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 35543 - 0 [ 328.295503][ T3480] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 50292 - 0 [ 328.315671][ T3480] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 35543 - 0 [ 328.323989][ T3480] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 50292 - 0 [ 328.351358][ T3480] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 35543 - 0 [ 328.386871][ T3480] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 50292 - 0 [ 328.416035][ T3480] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 35543 - 0 [ 328.424358][ T3480] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 50292 - 0 [ 328.526717][T10408] syzkaller0: entered promiscuous mode [ 328.532241][T10408] syzkaller0: entered allmulticast mode [ 329.101953][T10420] netlink: 6 bytes leftover after parsing attributes in process `syz.4.906'. [ 329.129850][T10420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.430174][T10428] lo speed is unknown, defaulting to 1000 [ 329.461403][T10429] tipc: Enabling of bearer rejected, failed to enable media [ 329.481483][T10429] syzkaller0: entered promiscuous mode [ 329.490185][T10429] syzkaller0: entered allmulticast mode [ 329.813365][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 329.830342][T10440] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 329.996004][T10444] trusted_key: syz.2.910 sent an empty control message without MSG_MORE. [ 330.097826][T10443] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 330.147591][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 330.149478][T10445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.182397][T10446] veth5: entered promiscuous mode [ 330.191895][T10446] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 330.264750][ T3540] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 330.264973][T10440] bond1: (slave erspan0): Releasing active interface [ 330.307114][T10440] bridge_slave_0: left allmulticast mode [ 330.331457][T10440] bridge_slave_0: left promiscuous mode [ 330.338266][T10440] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.375658][ T6698] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 330.395584][T10440] bridge_slave_1: left allmulticast mode [ 330.401480][T10440] bridge_slave_1: left promiscuous mode [ 330.409234][T10440] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.424458][T10440] bond0: (slave bond_slave_0): Releasing backup interface [ 330.436350][T10440] bond0: (slave bond_slave_1): Releasing backup interface [ 330.452319][T10452] netlink: 68 bytes leftover after parsing attributes in process `syz.3.912'. [ 330.461632][ T6696] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 330.470688][T10440] team0: Port device team_slave_0 removed [ 330.479821][T10440] team0: Port device team_slave_1 removed [ 330.487010][T10440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.495300][T10440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.514818][T10440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 330.598712][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 330.643222][T10448] hsr_slave_0: left promiscuous mode [ 330.663527][T10448] hsr_slave_1: left promiscuous mode [ 330.765736][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.371995][T10470] netlink: 'syz.1.915': attribute type 12 has an invalid length. [ 331.599953][T10468] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 331.614766][T10468] tipc: Enabling of bearer rejected, failed to enable media [ 331.721021][T10468] bridge3: entered promiscuous mode [ 331.734736][T10468] bridge3: entered allmulticast mode [ 331.745376][T10468] team0: Port device bridge3 added [ 332.521333][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.920'. [ 332.719471][T10506] netlink: 6 bytes leftover after parsing attributes in process `syz.1.920'. [ 333.063536][T10506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.273491][T10510] tipc: Enabling of bearer rejected, failed to enable media [ 333.511219][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.922'. [ 334.069783][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.926'. [ 334.563310][T10555] lo speed is unknown, defaulting to 1000 [ 334.931177][T10571] netlink: 128 bytes leftover after parsing attributes in process `syz.0.931'. [ 335.133141][T10535] lo speed is unknown, defaulting to 1000 [ 335.541100][T10575] tipc: Enabling of bearer rejected, failed to enable media [ 335.582507][T10575] syzkaller0: entered promiscuous mode [ 335.605535][T10575] syzkaller0: entered allmulticast mode [ 336.063284][T10564] lo speed is unknown, defaulting to 1000 [ 336.662753][T10587] lo speed is unknown, defaulting to 1000 [ 337.084448][T10596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.938'. [ 337.278337][T10588] lo speed is unknown, defaulting to 1000 [ 337.799627][T10593] lo speed is unknown, defaulting to 1000 [ 338.306772][T10615] syzkaller0: entered promiscuous mode [ 338.312898][T10615] syzkaller0: entered allmulticast mode [ 339.094778][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 339.204257][T10623] lo speed is unknown, defaulting to 1000 [ 339.226170][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 339.356539][T10627] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.945'. [ 339.375487][T10627] openvswitch: netlink: Message has 512 unknown bytes. [ 339.834462][T10629] tipc: Enabling of bearer rejected, failed to enable media [ 339.855565][T10630] syzkaller0: entered promiscuous mode [ 339.865498][T10630] syzkaller0: entered allmulticast mode [ 340.944643][ T5839] Bluetooth: hci4: link tx timeout [ 340.950190][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.961939][ T5836] Bluetooth: hci4: link tx timeout [ 340.971944][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.984957][ T5836] Bluetooth: hci4: link tx timeout [ 340.990162][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.998255][ T5836] Bluetooth: hci4: link tx timeout [ 341.003402][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 341.012549][ T5836] Bluetooth: hci4: link tx timeout [ 341.019413][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 341.201391][T10640] lo speed is unknown, defaulting to 1000 [ 341.402884][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 342.322796][T10657] netlink: 'syz.0.953': attribute type 303 has an invalid length. [ 342.333413][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 342.583079][T10661] tipc: Enabling of bearer rejected, failed to enable media [ 342.595873][T10661] syzkaller0: entered promiscuous mode [ 342.601391][T10661] syzkaller0: entered allmulticast mode [ 342.685834][T10666] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 342.705795][T10666] batadv_slave_0: entered promiscuous mode [ 342.713108][T10666] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 342.725791][T10666] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.743799][T10666] hsr1: entered promiscuous mode [ 342.895846][T10673] netlink: 'syz.4.957': attribute type 13 has an invalid length. [ 342.912645][T10673] netlink: 'syz.4.957': attribute type 17 has an invalid length. [ 343.001371][T10673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.027005][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 343.116742][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 343.254854][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.768625][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 343.779497][T10677] lo speed is unknown, defaulting to 1000 [ 344.120909][T10686] lo speed is unknown, defaulting to 1000 [ 344.612688][T10687] lo speed is unknown, defaulting to 1000 [ 345.774800][T10705] lo speed is unknown, defaulting to 1000 [ 346.096263][T10715] batadv_slave_1: entered promiscuous mode [ 346.106606][T10716] batadv_slave_1: left promiscuous mode [ 346.369572][T10723] netlink: 64 bytes leftover after parsing attributes in process `syz.4.968'. [ 346.502703][T10706] lo speed is unknown, defaulting to 1000 [ 346.651065][T10731] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 346.819013][T10734] netlink: 'syz.0.970': attribute type 4 has an invalid length. [ 346.853951][ T6696] lo speed is unknown, defaulting to 1000 [ 346.859973][ T6696] syz0: Port: 1 Link DOWN [ 346.866421][ T6696] lo speed is unknown, defaulting to 1000 [ 346.890158][T10734] netlink: 152 bytes leftover after parsing attributes in process `syz.0.970'. [ 346.996146][T10736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'. [ 347.787950][T10747] lo speed is unknown, defaulting to 1000 [ 348.577062][T10756] macsec1: entered promiscuous mode [ 348.582338][T10756] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 348.720628][T10756] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 348.945057][T10754] lo speed is unknown, defaulting to 1000 [ 349.750257][T10760] lo speed is unknown, defaulting to 1000 [ 350.432315][T10768] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 350.459586][T10769] netlink: 'syz.3.976': attribute type 4 has an invalid length. [ 350.558761][T10768] tipc: Resetting bearer [ 350.804740][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 352.447782][T10787] lo speed is unknown, defaulting to 1000 [ 352.610519][T10796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.983'. [ 352.897091][T10794] lo speed is unknown, defaulting to 1000 [ 353.602771][T10793] lo speed is unknown, defaulting to 1000 [ 354.083772][T10811] lo speed is unknown, defaulting to 1000 [ 355.587231][T10822] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 356.364872][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 356.371304][T10825] netlink: 'syz.4.988': attribute type 5 has an invalid length. [ 356.608125][T10831] tipc: Can't bind to reserved service type 1 [ 356.616307][T10831] netlink: 'syz.4.991': attribute type 39 has an invalid length. [ 356.683394][T10834] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.990'. [ 356.714225][T10835] netlink: 44 bytes leftover after parsing attributes in process `syz.4.991'. [ 356.724823][T10835] netlink: 43 bytes leftover after parsing attributes in process `syz.4.991'. [ 356.733722][T10835] netlink: 'syz.4.991': attribute type 5 has an invalid length. [ 356.744269][T10835] netlink: 43 bytes leftover after parsing attributes in process `syz.4.991'. [ 356.874594][T10835] vlan2: entered allmulticast mode [ 356.914556][T10835] bridge_slave_0: entered allmulticast mode [ 358.076168][T10863] siw: device registration error -23 [ 358.091183][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.997'. [ 358.891104][T10877] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1001'. [ 359.489075][T10890] lo speed is unknown, defaulting to 1000 [ 359.497411][T10892] netlink: 'syz.4.1006': attribute type 29 has an invalid length. [ 359.532025][T10892] netlink: 'syz.4.1006': attribute type 29 has an invalid length. [ 359.669345][T10898] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1006'. [ 360.075796][T10900] lo speed is unknown, defaulting to 1000 [ 360.360255][T10901] lo speed is unknown, defaulting to 1000 [ 360.759063][T10904] lo speed is unknown, defaulting to 1000 [ 360.826758][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 360.866559][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 361.211567][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'. [ 361.548164][T10906] lo speed is unknown, defaulting to 1000 [ 362.234697][T10923] lo speed is unknown, defaulting to 1000 [ 363.116200][T10933] __nla_validate_parse: 2 callbacks suppressed [ 363.116219][T10933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1014'. [ 363.137779][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'. [ 363.147103][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'. [ 363.163234][T10932] netlink: 'syz.0.1014': attribute type 4 has an invalid length. [ 364.644062][T10939] netlink: 'syz.0.1017': attribute type 16 has an invalid length. [ 364.652349][T10939] netlink: 'syz.0.1017': attribute type 17 has an invalid length. [ 364.727839][T10941] IPv6: NLM_F_REPLACE set, but no existing node found! [ 364.957056][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 364.968729][T10939] tipc: Resetting bearer [ 365.241129][ T6104] smc: removing ib device syz1 [ 365.251170][ T3509] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 35543 - 0 [ 365.260329][ T3509] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 50292 - 0 [ 365.309090][ T3509] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 35543 - 0 [ 365.318320][ T3509] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 50292 - 0 [ 365.385473][ T3509] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 35543 - 0 [ 365.401855][ T3509] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 50292 - 0 [ 365.426044][ T3509] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 35543 - 0 [ 365.456011][ T3509] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 50292 - 0 [ 366.155464][T10968] netlink: 'syz.1.1022': attribute type 303 has an invalid length. [ 366.157310][T10965] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1021'. [ 366.177375][T10958] lo speed is unknown, defaulting to 1000 [ 366.306301][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 366.491573][T10969] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 366.936767][T10980] syzkaller1: entered promiscuous mode [ 366.942450][T10980] syzkaller1: entered allmulticast mode [ 366.958430][T10980] nbd: nbd0 already in use [ 366.976381][T10980] block nbd0: NBD_DISCONNECT [ 366.984630][T10980] block nbd0: Send disconnect failed -32 [ 366.990470][T10980] block nbd0: shutting down sockets [ 367.229462][T10985] netlink: 'syz.4.1026': attribute type 13 has an invalid length. [ 367.623720][T10993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1027'. [ 367.650633][T10993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1027'. [ 367.827351][T10992] bond1: option tlb_dynamic_lb: invalid value (71) [ 367.840797][T10992] bond1 (unregistering): Released all slaves [ 368.339174][T11005] netlink: 'syz.4.1029': attribute type 1 has an invalid length. [ 368.362893][T11005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1029'. [ 368.378421][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 368.438147][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 368.932766][T11015] lo speed is unknown, defaulting to 1000 [ 369.543475][T11036] netlink: 'syz.3.1035': attribute type 303 has an invalid length. [ 369.821614][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 369.883775][T11042] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 369.933623][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 370.007455][T11025] lo speed is unknown, defaulting to 1000 [ 370.159302][T11042] macvlan3: entered promiscuous mode [ 370.194261][T11042] macvlan3: entered allmulticast mode [ 370.210023][T11042] bond1: entered promiscuous mode [ 370.226713][T11042] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 370.246317][T11042] bond1: left promiscuous mode [ 370.550186][T11058] !: renamed from dummy0 [ 370.621392][T11027] lo speed is unknown, defaulting to 1000 [ 371.010956][T11058] lo speed is unknown, defaulting to 1000 [ 371.209655][T11071] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 371.858271][T11079] netlink: 'syz.2.1044': attribute type 8 has an invalid length. [ 371.983687][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 372.143133][T11086] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 372.853622][T11098] lo speed is unknown, defaulting to 1000 [ 373.005082][T11104] netlink: 'syz.4.1050': attribute type 10 has an invalid length. [ 373.496602][T11097] lo speed is unknown, defaulting to 1000 [ 373.873680][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 374.762627][T11111] lo speed is unknown, defaulting to 1000 [ 375.198744][T11154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.217643][ T6690] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 375.226789][T11150] lo speed is unknown, defaulting to 1000 [ 375.445033][ T5929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 375.461024][T11162] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 375.580900][T11147] lo speed is unknown, defaulting to 1000 [ 376.364961][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 376.404063][T11183] netlink: 'syz.4.1062': attribute type 4 has an invalid length. [ 376.431855][T11183] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1062'. [ 376.441693][T11179] hsr_slave_0: left promiscuous mode [ 376.469341][T11179] hsr_slave_1: left promiscuous mode [ 376.804194][T11188] syzkaller0: entered promiscuous mode [ 376.809983][T11188] syzkaller0: entered allmulticast mode [ 377.256205][T11196] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 377.636532][T11209] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 378.605710][T11229] lo speed is unknown, defaulting to 1000 [ 378.657343][T11228] IPVS: Scheduler module ip_vs_sip not found [ 378.921262][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 378.932616][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 378.943223][T11248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.003409][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 379.518366][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 379.865144][T11265] lo speed is unknown, defaulting to 1000 [ 379.949559][T11270] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 380.246399][ T30] audit: type=1800 audit(1760492469.107:4): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1082" name="memory.events" dev="tmpfs" ino=1154 res=0 errno=0 [ 380.294793][ T30] audit: type=1804 audit(1760492469.107:5): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1082" name="memory.events" dev="tmpfs" ino=1154 res=1 errno=0 [ 380.368312][T11283] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 380.376438][T11283] netlink: 'syz.0.1082': attribute type 2 has an invalid length. [ 381.352869][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 381.372955][T11310] vxcan1: entered allmulticast mode [ 381.918107][T11328] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 381.934724][T11328] bond0 (unregistering): Released all slaves [ 382.123268][T11334] netlink: 'syz.2.1090': attribute type 1 has an invalid length. [ 382.131240][T11334] netlink: 'syz.2.1090': attribute type 2 has an invalid length. [ 382.240355][T11336] lo speed is unknown, defaulting to 1000 [ 382.269922][T11334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1090'. [ 382.590599][T11350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1093'. [ 382.778465][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 383.344787][T11358] netlink: 'syz.2.1094': attribute type 303 has an invalid length. [ 383.426790][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 383.546958][T11361] lo speed is unknown, defaulting to 1000 [ 384.752992][T11371] lo speed is unknown, defaulting to 1000 [ 385.849306][T11419] lo speed is unknown, defaulting to 1000 [ 386.719464][T11435] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 387.224664][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 387.315991][T11446] wg1: left promiscuous mode [ 387.320682][T11446] wg1: left allmulticast mode [ 387.379054][T11446] syzkaller0: left promiscuous mode [ 387.384680][T11446] syzkaller0: left allmulticast mode [ 387.392596][T11446] bridge3: left promiscuous mode [ 387.403592][T11446] bridge3: left allmulticast mode [ 387.573485][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 387.820107][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 387.901111][T11465] netlink: 'syz.4.1113': attribute type 2 has an invalid length. [ 387.940031][T11465] netlink: 'syz.4.1113': attribute type 9 has an invalid length. [ 387.973388][T11465] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1113'. [ 388.004954][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 388.089971][T11471] veth5: left promiscuous mode [ 388.295601][T11462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.362671][T11482] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1117'. [ 388.369279][T11480] lo speed is unknown, defaulting to 1000 [ 388.533951][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 388.823850][T11491] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 388.951062][T11492] lo speed is unknown, defaulting to 1000 [ 389.600153][T11498] lo speed is unknown, defaulting to 1000 [ 390.311006][T11541] netlink: 'syz.1.1127': attribute type 1 has an invalid length. [ 391.269853][T11551] dvmrp0: entered allmulticast mode [ 391.752416][T11555] xt_l2tp: wrong L2TP version: 1 [ 392.001687][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 392.057086][T11562] netlink: 'syz.2.1132': attribute type 1 has an invalid length. [ 392.091988][T11562] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1132'. [ 392.296168][T11566] lo speed is unknown, defaulting to 1000 [ 392.353667][T11569] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1134'. [ 392.362876][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'. [ 392.376064][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 392.404670][T11567] netlink: 'syz.0.1133': attribute type 4 has an invalid length. [ 393.084585][T11593] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 393.458985][T11578] lo speed is unknown, defaulting to 1000 [ 393.749443][T11606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1140'. [ 394.015051][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 395.197133][T11627] lo speed is unknown, defaulting to 1000 [ 395.601971][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 396.253749][T11664] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 396.291673][T11664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1145'. [ 397.273800][T11688] lo speed is unknown, defaulting to 1000 [ 397.722581][T11689] lo speed is unknown, defaulting to 1000 [ 398.669109][T11733] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 398.763634][T11698] lo speed is unknown, defaulting to 1000 [ 399.301803][T11747] netlink: 'syz.3.1159': attribute type 1 has an invalid length. [ 399.339271][T11747] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1159'. [ 399.560325][T11728] lo speed is unknown, defaulting to 1000 [ 400.000285][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 400.310281][T11740] lo speed is unknown, defaulting to 1000 [ 400.333776][ T30] audit: type=1800 audit(1760492489.197:6): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1161" name="memory.events" dev="tmpfs" ino=1256 res=0 errno=0 [ 401.046117][T11794] team0: Port device dummy0 removed [ 401.077601][T11794] veth0_to_bond: left allmulticast mode [ 401.083232][T11794] veth0_to_bond: left promiscuous mode [ 401.099909][T11794] bridge1: port 2(veth0_to_bond) entered disabled state [ 401.136241][T11794] bond2: (slave macvlan2): Releasing backup interface [ 401.147518][T11794] veth3: left allmulticast mode [ 401.162131][T11794] veth3: left promiscuous mode [ 401.182088][T11794] bridge1: port 1(veth3) entered disabled state [ 401.182091][T11802] netlink: 'syz.3.1165': attribute type 10 has an invalid length. [ 401.217356][T11794] vlan3: left allmulticast mode [ 401.264906][T11794] veth1: left allmulticast mode [ 401.275527][T11794] vlan3: left promiscuous mode [ 401.286043][T11794] veth1: left promiscuous mode [ 401.307858][T11794] bridge1: port 3(vlan3) entered disabled state [ 401.382582][T11794] team0: Port device bridge3 removed [ 401.437554][T11784] lo speed is unknown, defaulting to 1000 [ 401.477373][T11802] bond0: (slave wlan1): refused to change device type [ 401.947689][T11822] syzkaller0: entered promiscuous mode [ 401.953228][T11822] syzkaller0: entered allmulticast mode [ 402.286318][T11826] lo speed is unknown, defaulting to 1000 [ 402.795601][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 402.970775][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 403.533925][T11855] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 403.563925][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1175'. [ 403.796212][T11856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1175'. [ 403.905300][T11862] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 404.602368][T11871] tipc: Enabling of bearer rejected, already enabled [ 404.816797][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 404.884387][T11879] lo speed is unknown, defaulting to 1000 [ 405.017187][T11886] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 405.156363][T11886] netlink: 'syz.0.1179': attribute type 10 has an invalid length. [ 405.222826][T11897] netlink: 'syz.4.1184': attribute type 3 has an invalid length. [ 405.701982][T11917] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.1185'. [ 405.809639][T11912] netlink: 'syz.4.1185': attribute type 10 has an invalid length. [ 405.873183][T11883] lo speed is unknown, defaulting to 1000 [ 406.093228][T11923] vlan0: entered promiscuous mode [ 406.098841][T11923] bond0: entered promiscuous mode [ 406.249089][T11893] lo speed is unknown, defaulting to 1000 [ 406.500496][T11930] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1189'. [ 406.532255][T11921] lo speed is unknown, defaulting to 1000 [ 407.630020][T11945] tipc: Enabled bearer , priority 0 [ 407.672320][T11945] tipc: Resetting bearer [ 407.706961][T11944] tipc: Disabling bearer [ 408.103674][T11962] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 408.133464][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1195'. [ 408.635143][T11977] lo speed is unknown, defaulting to 1000 [ 409.002444][T11988] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1194'. [ 409.186225][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 409.213658][T11991] lo speed is unknown, defaulting to 1000 [ 409.775516][T11999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1202'. [ 409.885808][T12002] tipc: Enabled bearer , priority 0 [ 409.907627][T12002] syzkaller0: entered promiscuous mode [ 409.923789][T12002] syzkaller0: entered allmulticast mode [ 410.152001][T12002] tipc: Resetting bearer [ 410.177347][T12000] tipc: Resetting bearer [ 410.215296][T12014] netlink: 'syz.4.1203': attribute type 4 has an invalid length. [ 410.236067][T12000] tipc: Disabling bearer [ 410.292143][T12012] lo speed is unknown, defaulting to 1000 [ 410.476519][T12016] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1215'. [ 410.514786][T12016] 0ªX¹¦À: renamed from caif0 [ 410.528365][T12020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1215'. [ 410.542022][T12016] 0ªX¹¦À: entered allmulticast mode [ 410.548009][T12016] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 410.611331][T12016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1215'. [ 410.980171][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 411.067331][T12033] netem: change failed [ 411.129043][T12033] vlan3: entered allmulticast mode [ 411.134320][T12033] bridge0: entered allmulticast mode [ 411.146489][T12033] bridge3: port 1(vlan3) entered blocking state [ 411.163362][T12033] bridge3: port 1(vlan3) entered disabled state [ 411.186052][T12033] vlan3: entered promiscuous mode [ 411.191147][T12033] bridge0: entered promiscuous mode [ 411.218601][T12035] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 411.244325][T12030] lo speed is unknown, defaulting to 1000 [ 412.629181][T12045] lo speed is unknown, defaulting to 1000 [ 413.444069][T12065] lo speed is unknown, defaulting to 1000 [ 413.449149][T12068] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1212'. [ 413.470019][T12068] netlink: 'syz.0.1212': attribute type 3 has an invalid length. [ 413.643585][T12069] syz_tun: entered allmulticast mode [ 413.809055][T12069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.820350][T12069] 0ªX¹¦À: left allmulticast mode [ 413.826150][T12069] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 413.847368][ T6696] lo speed is unknown, defaulting to 1000 [ 413.864754][ T6696] syz0: Port: 1 Link ACTIVE [ 413.869480][ T6696] lo speed is unknown, defaulting to 1000 [ 413.972332][T12068] siw: device registration error -23 [ 413.993401][T12067] syz_tun: left allmulticast mode [ 414.682531][T12084] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 415.104213][T12094] lo speed is unknown, defaulting to 1000 [ 415.110640][T12103] netlink: 'syz.1.1219': attribute type 9 has an invalid length. [ 415.152724][T12103] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1219'. [ 415.487798][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1221'. [ 416.143058][T12124] vlan0: entered promiscuous mode [ 416.148831][T12124] bond0: entered promiscuous mode [ 416.530137][T12139] lo speed is unknown, defaulting to 1000 [ 416.776551][T12145] bond4: option tlb_dynamic_lb: invalid value (71) [ 416.815636][T12145] bond4 (unregistering): Released all slaves [ 418.790674][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 418.881356][T12196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1233'. [ 418.921504][T12196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1233'. [ 419.020581][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 419.170549][T12198] 8021q: VLANs not supported on bond0 [ 419.539012][T12206] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1235'. [ 419.591112][ T6097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.601820][ T6097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.646850][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 419.669192][T12212] lo speed is unknown, defaulting to 1000 [ 420.002920][T12216] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 420.031327][T12216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1237'. [ 420.640135][T12227] lo speed is unknown, defaulting to 1000 [ 420.969514][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1240'. [ 421.128703][T12238] ip6tnl1: entered promiscuous mode [ 421.155132][T12238] ip6tnl1: entered allmulticast mode [ 421.185913][T12238] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 422.933904][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 423.263018][T12274] netlink: 'syz.2.1245': attribute type 9 has an invalid length. [ 423.271233][T12265] netlink: 'syz.0.1243': attribute type 8 has an invalid length. [ 423.622470][T12276] : renamed from bond_slave_0 [ 423.808268][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 423.842402][T12274] can: request_module (can-proto-0) failed. [ 423.928520][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 424.150940][T12306] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 424.305585][T12293] vlan3 (unregistering): left promiscuous mode [ 424.311847][T12293] bridge0 (unregistering): left promiscuous mode [ 424.354908][T12293] bridge3: port 1(vlan3) entered disabled state [ 424.452282][T12300] lo speed is unknown, defaulting to 1000 [ 424.470252][T12302] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 424.504947][T12302] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 424.542168][T12302] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 424.642412][T12308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1251'. [ 424.791260][T12308] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1251'. [ 424.821817][T12308] openvswitch: netlink: Message has 512 unknown bytes. [ 425.062553][T12319] Bluetooth: MGMT ver 1.23 [ 425.074082][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 426.352290][T12346] lo speed is unknown, defaulting to 1000 [ 427.183019][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 427.191579][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 427.573915][T12361] lo speed is unknown, defaulting to 1000 [ 427.769322][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 427.794592][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 427.825159][T12367] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1263'. [ 427.826219][T12366] netlink: 'syz.3.1263': attribute type 4 has an invalid length. [ 428.529932][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 428.560040][T12372] netlink: 'syz.4.1265': attribute type 21 has an invalid length. [ 428.568142][T12372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1265'. [ 428.735023][T12377] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 429.330585][T12387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'. [ 429.686477][T12401] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1274'. [ 430.216935][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1277'. [ 430.252880][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 430.709222][T12420] lo speed is unknown, defaulting to 1000 [ 431.452309][T12430] lo speed is unknown, defaulting to 1000 [ 432.263891][T12459] netlink: 'syz.4.1286': attribute type 13 has an invalid length. [ 432.279913][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 432.508152][T12457] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 432.695606][T12471] lo speed is unknown, defaulting to 1000 [ 432.928429][T12477] raw_sendmsg: syz.3.1289 forgot to set AF_INET. Fix it! [ 434.399306][T12510] tipc: Enabled bearer , priority 0 [ 434.424896][T12506] syzkaller0: entered promiscuous mode [ 434.454642][T12506] syzkaller0: entered allmulticast mode [ 434.476404][T12511] __nla_validate_parse: 1 callbacks suppressed [ 434.476426][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 434.506095][T12506] tipc: Resetting bearer [ 434.525316][T12505] tipc: Resetting bearer [ 434.614672][T12505] tipc: Disabling bearer [ 434.787395][T12514] dvmrp8: entered allmulticast mode [ 434.942809][T12515] lo speed is unknown, defaulting to 1000 [ 435.377949][T12534] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1300'. [ 435.795870][T12548] tipc: Failed to remove unknown binding: 66,1,1/1386058731:374627558/374627560 [ 435.807365][T12548] tipc: Failed to remove unknown binding: 66,1,1/1386058731:374627558/374627560 [ 436.034699][T12544] wlan1 speed is unknown, defaulting to 1000 [ 436.041970][T12531] lo speed is unknown, defaulting to 1000 [ 436.050326][T12544] wlan1 speed is unknown, defaulting to 1000 [ 436.107377][T12544] wlan1 speed is unknown, defaulting to 1000 [ 436.329158][T12559] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 436.695676][T12569] macvlan0: entered promiscuous mode [ 436.702402][T12569] macvlan0: entered allmulticast mode [ 437.076029][T12544] infiniband syz2: set down [ 437.080796][ T6696] wlan1 speed is unknown, defaulting to 1000 [ 437.103434][T12544] infiniband syz2: added wlan1 [ 437.116645][ T5839] Bluetooth: hci4: link tx timeout [ 437.117467][T12544] syz2: rxe_create_cq: returned err = -12 [ 437.122005][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 437.156280][T12544] infiniband syz2: Couldn't create ib_mad CQ [ 437.177526][T12544] infiniband syz2: Couldn't open port 1 [ 437.303348][T12574] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1307'. [ 437.333898][T12544] RDS/IB: syz2: added [ 437.344893][T12544] smc: adding ib device syz2 with port count 1 [ 437.358385][T12544] smc: ib device syz2 port 1 has no pnetid [ 437.409862][ T6696] wlan1 speed is unknown, defaulting to 1000 [ 437.461059][T12544] wlan1 speed is unknown, defaulting to 1000 [ 437.573228][T12580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1308'. [ 438.060086][T12596] netlink: 'syz.3.1310': attribute type 15 has an invalid length. [ 438.148857][T12544] wlan1 speed is unknown, defaulting to 1000 [ 438.827062][T12544] wlan1 speed is unknown, defaulting to 1000 [ 439.165412][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 439.502693][T12628] netlink: 'syz.1.1313': attribute type 2 has an invalid length. [ 439.511495][T12628] netlink: 'syz.1.1313': attribute type 2 has an invalid length. [ 439.569581][T12544] wlan1 speed is unknown, defaulting to 1000 [ 440.378181][T12544] wlan1 speed is unknown, defaulting to 1000 [ 441.007509][T12544] wlan1 speed is unknown, defaulting to 1000 [ 441.399788][T12544] wlan1 speed is unknown, defaulting to 1000 [ 441.480231][T12683] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 441.635687][T12544] wlan1 speed is unknown, defaulting to 1000 [ 441.832717][T12544] wlan1 speed is unknown, defaulting to 1000 [ 442.053839][T12634] lo speed is unknown, defaulting to 1000 [ 442.446718][T12686] lo speed is unknown, defaulting to 1000 [ 443.012135][T12638] lo speed is unknown, defaulting to 1000 [ 443.215508][T12696] lo speed is unknown, defaulting to 1000 [ 443.547159][T12715] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1326'. [ 443.702108][T12718] veth5: entered promiscuous mode [ 443.733211][T12696] wlan1 speed is unknown, defaulting to 1000 [ 444.790557][T12726] sctp: [Deprecated]: syz.2.1329 (pid 12726) Use of int in maxseg socket option. [ 444.790557][T12726] Use struct sctp_assoc_value instead [ 444.813773][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 445.913403][T12732] netem: incorrect ge model size [ 445.930067][T12732] netem: change failed [ 446.200628][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 446.406432][T12743] lo speed is unknown, defaulting to 1000 [ 447.383219][T12743] wlan1 speed is unknown, defaulting to 1000 [ 447.383920][T12749] lo speed is unknown, defaulting to 1000 [ 447.918743][T12779] ip6t_srh: unknown srh match flags 4000 [ 448.070811][T12763] lo speed is unknown, defaulting to 1000 [ 448.080341][T12749] wlan1 speed is unknown, defaulting to 1000 [ 448.080364][T12781] bond0: (slave rose0): Error: Device can not be enslaved while up [ 448.422371][T12763] wlan1 speed is unknown, defaulting to 1000 [ 448.849953][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 448.927304][T12790] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 448.973217][T12790] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 449.008487][T12790] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 449.423955][T12796] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 449.740076][T12810] netlink: 'syz.1.1347': attribute type 9 has an invalid length. [ 449.868089][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1347'. [ 450.006898][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 450.279849][T12814] netlink: 'syz.0.1349': attribute type 83 has an invalid length. [ 450.304009][T12818] tipc: Enabled bearer , priority 0 [ 450.349437][T12818] syzkaller0: entered promiscuous mode [ 450.384646][T12818] syzkaller0: entered allmulticast mode [ 450.400181][T12818] tipc: Resetting bearer [ 450.454766][T12816] tipc: Resetting bearer [ 451.105866][T12816] tipc: Disabling bearer [ 451.689050][T12844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1356'. [ 452.227019][T12859] lo speed is unknown, defaulting to 1000 [ 452.545696][T12864] netlink: 'syz.3.1359': attribute type 15 has an invalid length. [ 452.741618][T12867] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 452.775224][T12872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1359'. [ 453.062314][T12859] wlan1 speed is unknown, defaulting to 1000 [ 453.310791][T12877] lo speed is unknown, defaulting to 1000 [ 453.775356][T12895] netlink: 'syz.3.1364': attribute type 13 has an invalid length. [ 453.793078][T12895] netlink: 'syz.3.1364': attribute type 17 has an invalid length. [ 453.984335][T12895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.015923][T12895] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.086345][T12895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.337181][T12886] lo speed is unknown, defaulting to 1000 [ 454.530353][T12877] wlan1 speed is unknown, defaulting to 1000 [ 455.051706][T12898] lo speed is unknown, defaulting to 1000 [ 455.133157][T12886] wlan1 speed is unknown, defaulting to 1000 [ 455.998250][T12898] wlan1 speed is unknown, defaulting to 1000 [ 458.853686][T12954] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 459.100187][T12954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.170999][T12958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.234112][T12958] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 459.338687][T12958] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 459.428988][T12960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1368'. [ 459.675334][T12961] veth9: entered promiscuous mode [ 459.686298][T12961] bond0: (slave veth9): Enslaving as an active interface with a down link [ 460.133519][T12967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 460.178261][T12972] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 460.272334][T12978] lo speed is unknown, defaulting to 1000 [ 460.299023][T12971] netlink: 'syz.3.1371': attribute type 1 has an invalid length. [ 460.325076][T12971] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1371'. [ 460.464001][T12986] sctp: [Deprecated]: syz.0.1372 (pid 12986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.464001][T12986] Use struct sctp_sack_info instead [ 460.529581][T12978] wlan1 speed is unknown, defaulting to 1000 [ 460.550288][T12989] tipc: Enabled bearer , priority 0 [ 460.557964][T12989] syzkaller0: entered promiscuous mode [ 460.563466][T12989] syzkaller0: entered allmulticast mode [ 460.779676][T12989] tipc: Resetting bearer [ 460.808585][T12988] tipc: Resetting bearer [ 460.858417][T12988] tipc: Disabling bearer [ 461.088072][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 461.134977][T12994] vlan4: entered promiscuous mode [ 461.148224][T12994] bond0: entered promiscuous mode [ 461.179038][T13002] : renamed from bond_slave_0 [ 461.316207][T12997] lo speed is unknown, defaulting to 1000 [ 461.625363][T13005] lo speed is unknown, defaulting to 1000 [ 461.656926][T13014] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1379'. [ 462.299374][T13006] lo speed is unknown, defaulting to 1000 [ 462.872405][T13010] lo speed is unknown, defaulting to 1000 [ 463.281706][T13019] lo speed is unknown, defaulting to 1000 [ 463.289287][T13005] wlan1 speed is unknown, defaulting to 1000 [ 463.915619][T13006] wlan1 speed is unknown, defaulting to 1000 [ 464.123930][T12997] wlan1 speed is unknown, defaulting to 1000 [ 464.341923][T13010] wlan1 speed is unknown, defaulting to 1000 [ 464.557311][T13019] wlan1 speed is unknown, defaulting to 1000 [ 465.079954][T13056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1381'. [ 466.555464][T13069] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 466.680407][T13069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.714308][T13070] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 466.878464][T13071] vlan0: entered allmulticast mode [ 466.883825][T13071] veth1: entered allmulticast mode [ 466.906526][T13071] bond5: (slave vlan0): Opening slave failed [ 467.130998][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1386'. [ 467.213953][T13087] tipc: Enabling of bearer rejected, already enabled [ 467.221040][T13083] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1386'. [ 467.236195][T13088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1387'. [ 467.237776][T13083] openvswitch: netlink: Message has 512 unknown bytes. [ 467.449260][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 467.484302][T13104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1391'. [ 467.583853][T13097] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1387'. [ 467.736959][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1393'. [ 467.941199][T13110] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1393'. [ 467.975979][T13110] openvswitch: netlink: Message has 512 unknown bytes. [ 468.137413][T13116] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 468.194005][T13119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1394'. [ 468.232306][T13118] lo speed is unknown, defaulting to 1000 [ 468.374949][T13124] syzkaller0: Caught tx_queue_len zero misconfig [ 468.433378][T13126] netlink: 'syz.4.1399': attribute type 1 has an invalid length. [ 468.520748][T13126] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.705055][T13128] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.722711][T13128] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 468.768681][T13128] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 469.136755][T13126] veth9: entered promiscuous mode [ 469.147557][T13126] bond6: (slave veth9): Enslaving as an active interface with a down link [ 469.194762][T13136] tipc: Enabling of bearer rejected, already enabled [ 469.216599][T13118] wlan1 speed is unknown, defaulting to 1000 [ 469.676782][T13157] lo speed is unknown, defaulting to 1000 [ 470.337287][T13177] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 470.533923][T13157] wlan1 speed is unknown, defaulting to 1000 [ 471.150029][T13194] __nla_validate_parse: 2 callbacks suppressed [ 471.150049][T13194] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.1412'. [ 471.209348][T13194] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 471.471443][T13187] lo speed is unknown, defaulting to 1000 [ 471.517688][T13201] tipc: Enabled bearer , priority 0 [ 471.527900][T13201] syzkaller0: entered promiscuous mode [ 471.541007][T13201] syzkaller0: entered allmulticast mode [ 471.634318][T13201] tipc: Resetting bearer [ 471.671574][T13200] tipc: Resetting bearer [ 471.725919][T13200] tipc: Disabling bearer [ 471.785831][T13192] lo speed is unknown, defaulting to 1000 [ 471.881020][T13187] wlan1 speed is unknown, defaulting to 1000 [ 471.993144][T13206] netlink: 'syz.1.1415': attribute type 12 has an invalid length. [ 472.071308][T13208] syzkaller1: entered promiscuous mode [ 472.076958][T13208] syzkaller1: entered allmulticast mode [ 472.422958][T13192] wlan1 speed is unknown, defaulting to 1000 [ 472.564395][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1416'. [ 472.633841][T13212] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1416'. [ 472.657620][T13212] openvswitch: netlink: Message has 512 unknown bytes. [ 473.059212][T13220] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1418'. [ 473.101178][T13220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1418'. [ 474.501802][T13246] netlink: 'syz.1.1421': attribute type 4 has an invalid length. [ 474.535681][T13246] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1421'. [ 475.183720][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 475.304850][T13264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1425'. [ 475.568436][T13264] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1425'. [ 475.614606][T13264] openvswitch: netlink: Message has 512 unknown bytes. [ 477.040120][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 477.152618][T13285] netlink: 'syz.3.1429': attribute type 4 has an invalid length. [ 477.179040][T13288] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1431'. [ 477.366523][T13288] lo speed is unknown, defaulting to 1000 [ 477.877651][T13297] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1433'. [ 477.914295][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.945146][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.355628][T13304] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1435'. [ 478.594862][T13304] batadv1: entered promiscuous mode [ 478.600388][T13304] batadv1: entered allmulticast mode [ 478.644634][T13288] wlan1 speed is unknown, defaulting to 1000 [ 479.138753][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1437'. [ 479.207049][T13317] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1437'. [ 479.216723][T13317] openvswitch: netlink: Message has 512 unknown bytes. [ 479.789826][T13324] lo speed is unknown, defaulting to 1000 [ 480.233712][T13336] netlink: 'syz.0.1440': attribute type 4 has an invalid length. [ 480.396879][T13336] vlan3: entered allmulticast mode [ 480.424550][T13336] bridge_slave_0: entered allmulticast mode [ 480.742180][T13324] wlan1 speed is unknown, defaulting to 1000 [ 481.457068][T13355] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 481.582894][ T6104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.591205][ T6104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.677979][T13364] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1448'. [ 481.734018][T13368] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1448'. [ 481.737258][T13369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1450'. [ 481.804993][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 481.838903][T13369] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1450'. [ 481.861743][T13369] openvswitch: netlink: Message has 512 unknown bytes. [ 481.944662][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 481.957276][T13371] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 482.055228][ T3509] bond5: (slave wlan0): failed to get link speed/duplex [ 482.220425][T13378] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 482.254772][ T3509] bond5: (slave wlan0): failed to get link speed/duplex [ 482.289712][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 482.423133][T13380] batadv_slave_0: entered promiscuous mode [ 482.442387][T13383] tipc: Enabled bearer , priority 0 [ 482.451223][T13383] syzkaller0: entered promiscuous mode [ 482.462576][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1454'. [ 482.472144][T13383] syzkaller0: entered allmulticast mode [ 482.490284][T13378] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1454'. [ 482.501035][T13378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1454'. [ 482.523217][T13383] tipc: Resetting bearer [ 482.543782][T13382] tipc: Resetting bearer [ 482.557489][T13382] tipc: Disabling bearer [ 482.596211][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 482.705279][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 482.813726][T13395] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 482.824838][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 482.954818][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 482.981792][T13400] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1460'. [ 483.110118][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1463'. [ 483.122336][T13408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1462'. [ 483.198500][T13409] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1463'. [ 483.229919][T13413] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1462'. [ 483.254669][T13405] lo speed is unknown, defaulting to 1000 [ 483.359508][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 484.083997][T13405] wlan1 speed is unknown, defaulting to 1000 [ 484.324692][ T3447] net_ratelimit: 11 callbacks suppressed [ 484.324717][ T3447] bond5: (slave wlan0): failed to get link speed/duplex [ 484.476083][ T3447] bond5: (slave wlan0): failed to get link speed/duplex [ 484.584754][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 484.714600][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 485.294770][ T6097] bond5: (slave wlan0): failed to get link speed/duplex [ 485.434984][ T6097] bond5: (slave wlan0): failed to get link speed/duplex [ 485.452369][T13468] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 485.594640][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 485.753694][ T3447] bond5: (slave wlan0): failed to get link speed/duplex [ 485.865192][ T3447] bond5: (slave wlan0): failed to get link speed/duplex [ 486.147840][T13484] openvswitch: netlink: Message has 512 unknown bytes. [ 487.411075][T13510] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 487.557060][T13515] __nla_validate_parse: 6 callbacks suppressed [ 487.557080][T13515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1486'. [ 487.577131][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 487.597588][T13516] 8021q: VLANs not supported on vcan0 [ 487.693327][T13515] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1486'. [ 487.733735][T13524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1489'. [ 487.826640][T13524] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1489'. [ 487.827166][T13526] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 487.887867][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'. [ 488.022421][T13528] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 488.239890][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 488.439124][T13543] lo speed is unknown, defaulting to 1000 [ 488.915753][T13543] wlan1 speed is unknown, defaulting to 1000 [ 488.980951][T13548] lo speed is unknown, defaulting to 1000 [ 489.474570][ T3540] net_ratelimit: 26 callbacks suppressed [ 489.474592][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 489.604700][ T6097] bond5: (slave wlan0): failed to get link speed/duplex [ 489.753339][T13559] lo speed is unknown, defaulting to 1000 [ 489.786304][T13548] wlan1 speed is unknown, defaulting to 1000 [ 489.794631][ T6104] bond5: (slave wlan0): failed to get link speed/duplex [ 489.954572][ T6097] bond5: (slave wlan0): failed to get link speed/duplex [ 490.214759][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 490.327466][T13559] wlan1 speed is unknown, defaulting to 1000 [ 490.394555][ T6097] bond5: (slave wlan0): failed to get link speed/duplex [ 490.586950][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 490.695327][ T6097] bond5: (slave wlan0): failed to get link speed/duplex [ 490.836130][ T3540] bond5: (slave wlan0): failed to get link speed/duplex [ 491.455112][ T6097] bond5: (slave wlan0): failed to get link speed/duplex [ 492.040725][T13588] netlink: 'syz.0.1504': attribute type 1 has an invalid length. [ 492.164836][T13591] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 492.211532][T13588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.290038][T13592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.297546][T13592] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 492.315929][T13592] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 492.591734][T13593] veth7: entered promiscuous mode [ 492.672229][T13593] bond2: (slave veth7): Enslaving as an active interface with a down link [ 492.970531][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 493.231863][T13616] lo speed is unknown, defaulting to 1000 [ 493.468771][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 493.768008][T13616] wlan1 speed is unknown, defaulting to 1000 [ 494.066877][T13640] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 494.453958][T13653] lo speed is unknown, defaulting to 1000 [ 494.700665][T13662] batadv0: entered promiscuous mode [ 494.707710][T13662] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 494.731743][T13662] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 494.759807][T13662] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 494.954104][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1522'. [ 494.966181][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 495.047699][T13653] wlan1 speed is unknown, defaulting to 1000 [ 495.069846][T13671] netlink: 'syz.4.1523': attribute type 12 has an invalid length. [ 495.088630][T13671] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1523'. [ 495.126472][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1524'. [ 495.177049][T13675] 8021q: VLANs not supported on vcan0 [ 495.350498][T13682] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 495.384695][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 495.416094][T13682] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 495.519820][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 495.595027][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'. [ 495.679576][T13682] bond5: entered promiscuous mode [ 495.695405][T13682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.825671][T13687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.832933][T13687] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 495.917328][T13687] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 495.995125][T13687] bond5: (slave gre1): Opening slave failed [ 496.768753][T13682] kthread_run failed with err -4 [ 496.900229][T13717] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 496.991016][T13721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1534'. [ 497.201150][T13724] lo speed is unknown, defaulting to 1000 [ 497.219244][T13731] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 497.266118][T13731] netlink: 'syz.3.1536': attribute type 10 has an invalid length. [ 497.274224][T13731] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 497.285166][T13731] bond0: (slave wlan1): refused to change device type [ 497.514080][T13737] sctp: [Deprecated]: syz.1.1538 (pid 13737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.514080][T13737] Use struct sctp_sack_info instead [ 497.545411][T13724] wlan1 speed is unknown, defaulting to 1000 [ 497.826761][T13729] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 499.279213][T13771] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 499.335625][T13776] __nla_validate_parse: 2 callbacks suppressed [ 499.335646][T13776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1548'. [ 499.385217][T13774] lo speed is unknown, defaulting to 1000 [ 499.445695][T13781] sctp: [Deprecated]: syz.4.1549 (pid 13781) Use of int in max_burst socket option deprecated. [ 499.445695][T13781] Use struct sctp_assoc_value instead [ 499.486161][T13782] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 499.560427][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 499.729495][T13790] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 499.743908][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1554'. [ 499.835213][T13795] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1554'. [ 499.863735][T13795] net_ratelimit: 7 callbacks suppressed [ 499.863757][T13795] openvswitch: netlink: Message has 512 unknown bytes. [ 499.975314][T13800] lo speed is unknown, defaulting to 1000 [ 500.012874][T13774] wlan1 speed is unknown, defaulting to 1000 [ 500.886237][T13777] lo speed is unknown, defaulting to 1000 [ 501.057650][T13792] lo speed is unknown, defaulting to 1000 [ 501.203451][T13792] wlan1 speed is unknown, defaulting to 1000 [ 501.403560][T13818] lo speed is unknown, defaulting to 1000 [ 501.410234][T13823] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 501.416024][T13800] wlan1 speed is unknown, defaulting to 1000 [ 501.500697][T13825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1562'. [ 501.593219][T13827] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 501.686203][T13830] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1564'. [ 501.695523][T13830] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1564'. [ 501.706609][T13830] netlink: 'syz.1.1564': attribute type 6 has an invalid length. [ 501.714374][T13830] netlink: 'syz.1.1564': attribute type 4 has an invalid length. [ 501.794355][T13832] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1565'. [ 501.815412][T13834] tipc: Failed to remove unknown binding: 66,1,1/1386058731:2061009995/2061009997 [ 501.894839][T13830] tipc: Failed to remove unknown binding: 66,1,1/1386058731:2061009995/2061009997 [ 501.904129][T13830] tipc: Failed to remove unknown binding: 66,1,1/1386058731:2061009995/2061009997 [ 502.156340][T13777] wlan1 speed is unknown, defaulting to 1000 [ 502.376055][T13818] wlan1 speed is unknown, defaulting to 1000 [ 502.843890][T13843] lo speed is unknown, defaulting to 1000 [ 504.130088][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 504.178612][T13861] 8021q: VLANs not supported on vcan0 [ 504.548210][T13843] wlan1 speed is unknown, defaulting to 1000 [ 504.556083][T13863] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 504.639240][T13865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1573'. [ 505.017568][T13871] lo speed is unknown, defaulting to 1000 [ 505.675183][T13895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1581'. [ 505.781878][T13895] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1581'. [ 505.788226][T13871] wlan1 speed is unknown, defaulting to 1000 [ 505.819261][T13895] openvswitch: netlink: Message has 512 unknown bytes. [ 506.025903][T13904] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 506.032999][T13907] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1586'. [ 506.147973][T13902] lo speed is unknown, defaulting to 1000 [ 506.574949][T13902] wlan1 speed is unknown, defaulting to 1000 [ 507.311580][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 507.335039][T13936] lo speed is unknown, defaulting to 1000 [ 507.723559][T13949] geneve2: left promiscuous mode [ 507.731850][T13949] veth3: left promiscuous mode [ 507.738201][T13949] gre1: left promiscuous mode [ 507.743237][T13949] gre1: left allmulticast mode [ 507.753901][T13951] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 507.755232][T13949] macvlan0: left promiscuous mode [ 507.785975][T13949] macvlan0: left allmulticast mode [ 507.794247][T13949] veth9: left promiscuous mode [ 507.913826][T13936] wlan1 speed is unknown, defaulting to 1000 [ 508.019456][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 508.362156][T13960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1602'. [ 508.752523][T13970] xt_CT: No such helper "netbios-ns" [ 508.929038][T13979] netlink: 'syz.4.1606': attribute type 13 has an invalid length. [ 508.958801][T13979] netlink: 'syz.4.1606': attribute type 17 has an invalid length. [ 509.151909][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 509.465275][T13986] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 509.875611][T13990] lo speed is unknown, defaulting to 1000 [ 510.085389][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'. [ 510.791633][T13990] wlan1 speed is unknown, defaulting to 1000 [ 510.955475][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 511.204986][T14029] lo speed is unknown, defaulting to 1000 [ 512.226649][T14046] lo speed is unknown, defaulting to 1000 [ 512.236904][T14029] wlan1 speed is unknown, defaulting to 1000 [ 512.634807][T14056] lo speed is unknown, defaulting to 1000 [ 512.867835][T14059] lo speed is unknown, defaulting to 1000 [ 513.019677][T14059] wlan1 speed is unknown, defaulting to 1000 [ 513.177439][T14056] wlan1 speed is unknown, defaulting to 1000 [ 513.559411][T14046] wlan1 speed is unknown, defaulting to 1000 [ 513.776787][T14073] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1632'. [ 514.555397][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'. [ 514.896204][T14086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1635'. [ 514.986973][T14088] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1635'. [ 514.997269][T14088] openvswitch: netlink: Message has 512 unknown bytes. [ 515.092635][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 515.149099][T14089] vlan4: entered promiscuous mode [ 515.691567][T14108] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 515.766039][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 515.799774][T14102] lo speed is unknown, defaulting to 1000 [ 516.111585][T14102] wlan1 speed is unknown, defaulting to 1000 [ 517.968455][T14134] lo speed is unknown, defaulting to 1000 [ 518.083243][T14140] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1653'. [ 518.468556][T14146] lo speed is unknown, defaulting to 1000 [ 518.854385][T14150] netlink: 'syz.4.1656': attribute type 1 has an invalid length. [ 518.913062][T14134] wlan1 speed is unknown, defaulting to 1000 [ 519.346899][T14166] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 520.077867][T14187] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1666'. [ 520.290323][T14189] lo speed is unknown, defaulting to 1000 [ 520.471771][T14195] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 520.811569][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1670'. [ 520.829946][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1670'. [ 520.876954][T14197] netlink: 'syz.3.1670': attribute type 4 has an invalid length. [ 521.152780][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 521.364994][T14189] wlan1 speed is unknown, defaulting to 1000 [ 521.501811][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 521.659282][T14221] netlink: 'syz.0.1680': attribute type 1 has an invalid length. [ 521.729211][T14223] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1682'. [ 521.743647][T14225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.892737][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 521.936010][T14230] 8021q: VLANs not supported on bond0 [ 521.955404][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 522.013324][T14233] bpq0: entered promiscuous mode [ 522.751116][T14247] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 523.098528][T14260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.333769][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 523.354100][T14264] vlan0: entered promiscuous mode [ 523.738656][T14282] lo speed is unknown, defaulting to 1000 [ 523.859085][T14287] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 524.099835][T14282] wlan1 speed is unknown, defaulting to 1000 [ 524.241075][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 524.541055][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 524.768245][T14313] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 524.932123][T14317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 525.551113][T14332] lo speed is unknown, defaulting to 1000 [ 525.632412][T14338] vlan0: entered promiscuous mode [ 525.853717][T14352] __nla_validate_parse: 2 callbacks suppressed [ 525.853739][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 526.213086][T14332] wlan1 speed is unknown, defaulting to 1000 [ 526.290835][T14356] lo speed is unknown, defaulting to 1000 [ 527.391361][T14382] lo speed is unknown, defaulting to 1000 [ 527.630490][T14384] lo speed is unknown, defaulting to 1000 [ 528.073121][T14384] wlan1 speed is unknown, defaulting to 1000 [ 528.590124][T14356] wlan1 speed is unknown, defaulting to 1000 [ 528.692436][T14420] lo speed is unknown, defaulting to 1000 [ 529.165536][T14382] wlan1 speed is unknown, defaulting to 1000 [ 529.249548][T14423] netlink: 'syz.1.1750': attribute type 6 has an invalid length. [ 529.541933][T14429] lo speed is unknown, defaulting to 1000 [ 529.847732][T14420] wlan1 speed is unknown, defaulting to 1000 [ 530.111211][T14441] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1756'. [ 530.250749][T14445] netlink: zone id is out of range [ 530.274481][T14445] netlink: zone id is out of range [ 530.294497][T14445] netlink: zone id is out of range [ 530.304598][T14445] netlink: set zone limit has 4 unknown bytes [ 530.467028][T14429] wlan1 speed is unknown, defaulting to 1000 [ 531.436604][T14453] netlink: 'syz.3.1760': attribute type 8 has an invalid length. [ 531.584002][T14456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1761'. [ 532.237735][T14460] lo speed is unknown, defaulting to 1000 [ 533.323060][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 533.416572][T14460] wlan1 speed is unknown, defaulting to 1000 [ 533.424036][T14465] lo speed is unknown, defaulting to 1000 [ 533.679814][T14485] openvswitch: netlink: Message has 1 unknown bytes. [ 533.694555][T14485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.461771][T14492] lo speed is unknown, defaulting to 1000 [ 534.763972][T14465] wlan1 speed is unknown, defaulting to 1000 [ 535.095256][T14496] lo speed is unknown, defaulting to 1000 [ 535.474566][T14504] lo speed is unknown, defaulting to 1000 [ 535.691003][T14509] lo speed is unknown, defaulting to 1000 [ 535.691003][T14492] wlan1 speed is unknown, defaulting to 1000 [ 535.943979][T14496] wlan1 speed is unknown, defaulting to 1000 [ 536.281140][T14504] wlan1 speed is unknown, defaulting to 1000 [ 536.691050][T14509] wlan1 speed is unknown, defaulting to 1000 [ 537.394116][T14521] netlink: 'syz.3.1778': attribute type 1 has an invalid length. [ 537.866759][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1780'. [ 537.985548][T14527] vlan4: entered promiscuous mode [ 538.081440][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 538.141478][T14528] vlan0: entered promiscuous mode [ 538.606440][T14535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1785'. [ 538.730778][T14540] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1785'. [ 538.753275][T14540] openvswitch: netlink: Message has 512 unknown bytes. [ 539.326116][T14553] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.1790'. [ 540.578409][T14583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1799'. [ 540.639845][T14587] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1799'. [ 540.649449][T14587] openvswitch: netlink: Message has 512 unknown bytes. [ 540.821660][T14593] lo speed is unknown, defaulting to 1000 [ 540.870390][T14576] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 541.161372][T14601] netlink: 14300 bytes leftover after parsing attributes in process `syz.3.1803'. [ 541.173220][T14601] openvswitch: netlink: ufid size 132 bytes exceeds the range (1, 16) [ 541.254201][T14604] netlink: 'syz.4.1804': attribute type 2 has an invalid length. [ 541.561541][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 541.628406][T14608] vlan0: entered promiscuous mode [ 541.705609][T14593] wlan1 speed is unknown, defaulting to 1000 [ 542.233575][T14632] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 542.553395][T14636] xt_l2tp: v2 sid > 0xffff: 1114112 [ 542.932706][T14648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 543.070116][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 543.106661][T14652] vlan0: entered promiscuous mode [ 543.381294][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 543.432542][T14664] vlan0: entered promiscuous mode [ 543.635899][T14672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1826'. [ 543.791386][T14674] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 543.807247][T14672] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1826'. [ 543.840404][T14672] openvswitch: netlink: Message has 512 unknown bytes. [ 544.293568][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 544.481029][T14696] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 544.498085][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 544.532580][T14698] vlan0: entered promiscuous mode [ 544.632646][T14703] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 544.824651][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'. [ 544.857456][T14709] bpq0: left promiscuous mode [ 544.980468][T14717] lo speed is unknown, defaulting to 1000 [ 545.702483][T14717] wlan1 speed is unknown, defaulting to 1000 [ 547.295444][T14756] netlink: 'syz.1.1853': attribute type 13 has an invalid length. [ 547.310776][T14756] netlink: 'syz.1.1853': attribute type 17 has an invalid length. [ 547.420145][T14756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.431586][T14756] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.438792][ T6703] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.470847][T14756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.586577][T14757] lo speed is unknown, defaulting to 1000 [ 547.736024][ T6097] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.746540][ T5929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.755214][ T6097] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.778458][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 548.050153][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'. [ 548.096785][T14757] wlan1 speed is unknown, defaulting to 1000 [ 548.129686][T14782] 8021q: VLANs not supported on vcan0 [ 548.767277][ T6700] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 549.328003][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 549.363517][T14805] 8021q: VLANs not supported on vcan0 [ 549.548686][T14807] lo speed is unknown, defaulting to 1000 [ 550.045336][T14807] wlan1 speed is unknown, defaulting to 1000 [ 551.028777][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 551.045382][T14841] 8021q: VLANs not supported on vcan0 [ 551.341040][T14854] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 551.351347][T14855] lo speed is unknown, defaulting to 1000 [ 551.644639][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 551.995153][T14855] wlan1 speed is unknown, defaulting to 1000 [ 553.214170][T14904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1902'. [ 553.325322][T14907] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 553.326936][T14904] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1902'. [ 553.347874][T14904] openvswitch: netlink: Message has 512 unknown bytes. [ 553.406168][T14913] lo speed is unknown, defaulting to 1000 [ 553.470993][T14916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1906'. [ 553.550451][T14918] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1906'. [ 553.573895][T14918] openvswitch: netlink: Message has 512 unknown bytes. [ 553.909734][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 554.191063][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'. [ 554.222118][T14925] lo speed is unknown, defaulting to 1000 [ 554.276937][T14913] wlan1 speed is unknown, defaulting to 1000 [ 554.429457][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1916'. [ 555.005382][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1922'. [ 555.107315][T14925] wlan1 speed is unknown, defaulting to 1000 [ 555.176771][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 555.649850][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 555.683707][T14982] 8021q: VLANs not supported on vcan0 [ 555.790806][T14986] vlan0: entered promiscuous mode [ 556.865278][T14998] openvswitch: netlink: Message has 512 unknown bytes. [ 556.937498][T15003] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 557.003485][T15000] lo speed is unknown, defaulting to 1000 [ 557.848783][T15000] wlan1 speed is unknown, defaulting to 1000 [ 557.973656][T15038] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 558.265377][T15043] __nla_validate_parse: 5 callbacks suppressed [ 558.265397][T15043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1949'. [ 558.340217][T15043] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1949'. [ 558.350013][T15043] openvswitch: netlink: Message has 512 unknown bytes. [ 558.756402][T15051] lo speed is unknown, defaulting to 1000 [ 558.866399][T15058] nbd: must specify at least one socket [ 559.190711][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 559.242125][T15069] 8021q: VLANs not supported on vcan0 [ 559.553125][T15051] wlan1 speed is unknown, defaulting to 1000 [ 559.562753][T15052] lo speed is unknown, defaulting to 1000 [ 559.884663][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 560.168091][T15062] lo speed is unknown, defaulting to 1000 [ 560.508946][T15052] wlan1 speed is unknown, defaulting to 1000 [ 560.574359][T15082] lo speed is unknown, defaulting to 1000 [ 560.898194][T15093] gretap0: entered promiscuous mode [ 560.915800][T15093] vlan5: entered promiscuous mode [ 561.631780][T15062] wlan1 speed is unknown, defaulting to 1000 [ 561.748015][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 561.759053][T15112] 8021q: VLANs not supported on vcan0 [ 562.306180][T15082] wlan1 speed is unknown, defaulting to 1000 [ 562.498245][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'. [ 563.085669][ C1] ================================================================== [ 563.093809][ C1] BUG: KASAN: slab-use-after-free in timer_is_static_object+0x35/0x80 [ 563.101992][ C1] Read of size 8 at addr ffff88807da28c98 by task syz.4.1981/15146 [ 563.109908][ C1] [ 563.112269][ C1] CPU: 1 UID: 0 PID: 15146 Comm: syz.4.1981 Not tainted syzkaller #0 PREEMPT(full) [ 563.112299][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 563.112323][ C1] Call Trace: [ 563.112333][ C1] [ 563.112344][ C1] dump_stack_lvl+0x189/0x250 [ 563.112371][ C1] ? __kasan_check_byte+0x12/0x40 [ 563.112411][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.112436][ C1] ? lock_release+0x4b/0x3e0 [ 563.112464][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 563.112498][ C1] print_report+0xca/0x240 [ 563.112527][ C1] ? timer_is_static_object+0x35/0x80 [ 563.112548][ C1] kasan_report+0x118/0x150 [ 563.112571][ C1] ? timer_is_static_object+0x35/0x80 [ 563.112598][ C1] timer_is_static_object+0x35/0x80 [ 563.112620][ C1] debug_object_activate+0x168/0x420 [ 563.112656][ C1] __mod_timer+0xa4f/0xf30 [ 563.112696][ C1] call_timer_fn+0x17e/0x5f0 [ 563.112718][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 563.112741][ C1] ? call_timer_fn+0xbe/0x5f0 [ 563.112763][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 563.112791][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 563.112817][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.112844][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 563.112867][ C1] __run_timer_base+0x61a/0x860 [ 563.112912][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 563.112944][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 563.112987][ C1] run_timer_softirq+0xb7/0x180 [ 563.113023][ C1] handle_softirqs+0x283/0x870 [ 563.113051][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 563.113080][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 563.113112][ C1] __irq_exit_rcu+0xca/0x1f0 [ 563.113137][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 563.113168][ C1] irq_exit_rcu+0x9/0x30 [ 563.113196][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 563.113225][ C1] [ 563.113233][ C1] [ 563.113242][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.113273][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 563.113323][ C1] Code: 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 35 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 563.113344][ C1] RSP: 0018:ffffc90003adf4b8 EFLAGS: 00050206 [ 563.113366][ C1] RAX: ffffffff848da101 RBX: ffff88803ca400e8 RCX: 000000000000e3b0 [ 563.113384][ C1] RDX: 0000000000000001 RSI: 0000200000124000 RDI: ffff88803ca41f08 [ 563.113400][ C1] RBP: ffffc90003adf630 R08: ffff88803ca502b7 R09: 1ffff1100794a056 [ 563.113417][ C1] R10: dffffc0000000000 R11: ffffed100794a057 R12: 1ffff9200075bfbf [ 563.113434][ C1] R13: 00002000001221e0 R14: ffffc90003adfe08 R15: 00000000000101d0 [ 563.113457][ C1] ? _copy_from_iter+0x211/0x1790 [ 563.113494][ C1] _copy_from_iter+0x24f/0x1790 [ 563.113531][ C1] ? rcu_is_watching+0x15/0xb0 [ 563.113559][ C1] ? __alloc_skb+0x142/0x2d0 [ 563.113600][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 563.113635][ C1] ? __build_skb_around+0x262/0x3f0 [ 563.113661][ C1] ? tipc_msg_build+0x400/0xcf0 [ 563.113696][ C1] tipc_msg_build+0x458/0xcf0 [ 563.113731][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 563.113758][ C1] ? __pfx_tipc_msg_build+0x10/0x10 [ 563.113794][ C1] ? tipc_sk_filtering+0x13c/0x510 [ 563.113821][ C1] __tipc_sendstream+0x8ac/0x1290 [ 563.113874][ C1] ? __pfx___tipc_sendstream+0x10/0x10 [ 563.113904][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 563.113940][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 563.113972][ C1] tipc_sendstream+0x55/0x70 [ 563.113998][ C1] ? __pfx_tipc_sendstream+0x10/0x10 [ 563.114025][ C1] __sock_sendmsg+0x21c/0x270 [ 563.114061][ C1] ____sys_sendmsg+0x505/0x830 [ 563.114093][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.114127][ C1] ? import_iovec+0x74/0xa0 [ 563.114150][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 563.114179][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.114237][ C1] ? __fget_files+0x2a/0x420 [ 563.114256][ C1] ? __fget_files+0x3a0/0x420 [ 563.114283][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 563.114313][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.114348][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 563.114386][ C1] ? do_syscall_64+0xbe/0xfa0 [ 563.114415][ C1] do_syscall_64+0xfa/0xfa0 [ 563.114441][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.114467][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.114489][ C1] ? clear_bhb_loop+0x60/0xb0 [ 563.114514][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.114536][ C1] RIP: 0033:0x7f110598eec9 [ 563.114554][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.114593][ C1] RSP: 002b:00007f1103bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.114617][ C1] RAX: ffffffffffffffda RBX: 00007f1105be6090 RCX: 00007f110598eec9 [ 563.114636][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 563.114651][ C1] RBP: 00007f1105a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 563.114667][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.114694][ C1] R13: 00007f1105be6128 R14: 00007f1105be6090 R15: 00007ffc8b6518d8 [ 563.114723][ C1] [ 563.114731][ C1] [ 563.624324][ C1] Allocated by task 11016: [ 563.628774][ C1] kasan_save_track+0x3e/0x80 [ 563.633494][ C1] __kasan_kmalloc+0x93/0xb0 [ 563.638127][ C1] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 563.643539][ C1] rose_add_node+0x23a/0xeb0 [ 563.648168][ C1] rose_rt_ioctl+0xce2/0x1240 [ 563.652880][ C1] rose_ioctl+0x3ce/0x8b0 [ 563.657245][ C1] sock_do_ioctl+0xd9/0x300 [ 563.661783][ C1] sock_ioctl+0x576/0x790 [ 563.666189][ C1] __se_sys_ioctl+0xfc/0x170 [ 563.670814][ C1] do_syscall_64+0xfa/0xfa0 [ 563.675362][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.681283][ C1] [ 563.683650][ C1] Freed by task 3447: [ 563.687652][ C1] kasan_save_track+0x3e/0x80 [ 563.692369][ C1] __kasan_save_free_info+0x46/0x50 [ 563.697613][ C1] __kasan_slab_free+0x5c/0x80 [ 563.702420][ C1] kfree+0x19a/0x6d0 [ 563.706462][ C1] rose_timer_expiry+0x4cb/0x600 [ 563.711429][ C1] call_timer_fn+0x17e/0x5f0 [ 563.716053][ C1] __run_timer_base+0x61a/0x860 [ 563.720942][ C1] run_timer_softirq+0xb7/0x180 [ 563.725826][ C1] handle_softirqs+0x283/0x870 [ 563.730605][ C1] __irq_exit_rcu+0xca/0x1f0 [ 563.735205][ C1] irq_exit_rcu+0x9/0x30 [ 563.739455][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 563.745096][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.751089][ C1] [ 563.753416][ C1] The buggy address belongs to the object at ffff88807da28c00 [ 563.753416][ C1] which belongs to the cache kmalloc-512 of size 512 [ 563.767474][ C1] The buggy address is located 152 bytes inside of [ 563.767474][ C1] freed 512-byte region [ffff88807da28c00, ffff88807da28e00) [ 563.781281][ C1] [ 563.783611][ C1] The buggy address belongs to the physical page: [ 563.790032][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7da28 [ 563.798799][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 563.807300][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 563.815279][ C1] page_type: f5(slab) [ 563.819262][ C1] raw: 00fff00000000040 ffff88813ffa6c80 0000000000000000 dead000000000001 [ 563.827938][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 563.836538][ C1] head: 00fff00000000040 ffff88813ffa6c80 0000000000000000 dead000000000001 [ 563.845210][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 563.853884][ C1] head: 00fff00000000002 ffffea0001f68a01 00000000ffffffff 00000000ffffffff [ 563.862558][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 563.871223][ C1] page dumped because: kasan: bad access detected [ 563.877643][ C1] page_owner tracks the page as allocated [ 563.883356][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5842, tgid 5842 (syz-executor), ts 90904071026, free_ts 37531597445 [ 563.904715][ C1] post_alloc_hook+0x240/0x2a0 [ 563.909489][ C1] get_page_from_freelist+0x2365/0x2440 [ 563.915035][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 563.920842][ C1] alloc_pages_mpol+0x232/0x4a0 [ 563.925709][ C1] allocate_slab+0x96/0x3a0 [ 563.930214][ C1] ___slab_alloc+0xe94/0x18a0 [ 563.934893][ C1] __slab_alloc+0x65/0x100 [ 563.939312][ C1] __kmalloc_cache_noprof+0x411/0x6f0 [ 563.944690][ C1] device_add+0xbe/0xb50 [ 563.948944][ C1] netdev_register_kobject+0x178/0x310 [ 563.954417][ C1] register_netdevice+0x126c/0x1ae0 [ 563.959622][ C1] veth_newlink+0x5d4/0xa60 [ 563.964274][ C1] rtnl_newlink_create+0x310/0xb00 [ 563.969393][ C1] rtnl_newlink+0x16e4/0x1c80 [ 563.974081][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 563.979048][ C1] netlink_rcv_skb+0x205/0x470 [ 563.983847][ C1] page last free pid 5215 tgid 5215 stack trace: [ 563.990175][ C1] __free_frozen_pages+0xbc4/0xd30 [ 563.995299][ C1] __put_partials+0x146/0x170 [ 563.999992][ C1] put_cpu_partial+0x1f2/0x2e0 [ 564.004777][ C1] __slab_free+0x2b9/0x390 [ 564.009205][ C1] qlist_free_all+0x97/0x140 [ 564.013806][ C1] kasan_quarantine_reduce+0x148/0x160 [ 564.019274][ C1] __kasan_slab_alloc+0x22/0x80 [ 564.024136][ C1] kmem_cache_alloc_lru_noprof+0x35d/0x6d0 [ 564.029955][ C1] alloc_inode+0xb8/0x1b0 [ 564.034295][ C1] iget_locked+0x106/0x580 [ 564.038710][ C1] kernfs_get_inode+0x4f/0x780 [ 564.043479][ C1] kernfs_iop_lookup+0x1f6/0x320 [ 564.048429][ C1] __lookup_slow+0x297/0x3d0 [ 564.053025][ C1] lookup_slow+0x53/0x70 [ 564.057360][ C1] link_path_walk+0x935/0xea0 [ 564.062043][ C1] path_lookupat+0x97/0x430 [ 564.066546][ C1] [ 564.068888][ C1] Memory state around the buggy address: [ 564.074524][ C1] ffff88807da28b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.082588][ C1] ffff88807da28c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.090648][ C1] >ffff88807da28c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.098711][ C1] ^ [ 564.103571][ C1] ffff88807da28d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.111648][ C1] ffff88807da28d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.119721][ C1] ================================================================== [ 564.127795][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 564.134994][ C1] CPU: 1 UID: 0 PID: 15146 Comm: syz.4.1981 Not tainted syzkaller #0 PREEMPT(full) [ 564.144366][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 564.154430][ C1] Call Trace: [ 564.157722][ C1] [ 564.160571][ C1] dump_stack_lvl+0x99/0x250 [ 564.165197][ C1] ? __asan_memcpy+0x40/0x70 [ 564.169800][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.175025][ C1] ? __pfx__printk+0x10/0x10 [ 564.179626][ C1] vpanic+0x237/0x6d0 [ 564.183816][ C1] ? __pfx_vpanic+0x10/0x10 [ 564.188337][ C1] panic+0xb9/0xc0 [ 564.192083][ C1] ? __pfx_panic+0x10/0x10 [ 564.196515][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 564.202421][ C1] ? timer_is_static_object+0x35/0x80 [ 564.207799][ C1] check_panic_on_warn+0x89/0xb0 [ 564.212758][ C1] ? timer_is_static_object+0x35/0x80 [ 564.218157][ C1] end_report+0x78/0x160 [ 564.222416][ C1] kasan_report+0x129/0x150 [ 564.226927][ C1] ? timer_is_static_object+0x35/0x80 [ 564.232305][ C1] timer_is_static_object+0x35/0x80 [ 564.237512][ C1] debug_object_activate+0x168/0x420 [ 564.242812][ C1] __mod_timer+0xa4f/0xf30 [ 564.247245][ C1] call_timer_fn+0x17e/0x5f0 [ 564.251847][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 564.257506][ C1] ? call_timer_fn+0xbe/0x5f0 [ 564.262188][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 564.267309][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.272515][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.277718][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 564.283360][ C1] __run_timer_base+0x61a/0x860 [ 564.288233][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 564.293618][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 564.299883][ C1] run_timer_softirq+0xb7/0x180 [ 564.304747][ C1] handle_softirqs+0x283/0x870 [ 564.309516][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 564.314288][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 564.319593][ C1] __irq_exit_rcu+0xca/0x1f0 [ 564.324195][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 564.329402][ C1] irq_exit_rcu+0x9/0x30 [ 564.333647][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 564.339289][ C1] [ 564.342225][ C1] [ 564.345175][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.351166][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 564.356990][ C1] Code: 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 35 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 564.376691][ C1] RSP: 0018:ffffc90003adf4b8 EFLAGS: 00050206 [ 564.382771][ C1] RAX: ffffffff848da101 RBX: ffff88803ca400e8 RCX: 000000000000e3b0 [ 564.390746][ C1] RDX: 0000000000000001 RSI: 0000200000124000 RDI: ffff88803ca41f08 [ 564.398747][ C1] RBP: ffffc90003adf630 R08: ffff88803ca502b7 R09: 1ffff1100794a056 [ 564.406721][ C1] R10: dffffc0000000000 R11: ffffed100794a057 R12: 1ffff9200075bfbf [ 564.414701][ C1] R13: 00002000001221e0 R14: ffffc90003adfe08 R15: 00000000000101d0 [ 564.422686][ C1] ? _copy_from_iter+0x211/0x1790 [ 564.427746][ C1] _copy_from_iter+0x24f/0x1790 [ 564.432637][ C1] ? rcu_is_watching+0x15/0xb0 [ 564.437410][ C1] ? __alloc_skb+0x142/0x2d0 [ 564.442005][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 564.447301][ C1] ? __build_skb_around+0x262/0x3f0 [ 564.452506][ C1] ? tipc_msg_build+0x400/0xcf0 [ 564.457371][ C1] tipc_msg_build+0x458/0xcf0 [ 564.462067][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 564.467967][ C1] ? __pfx_tipc_msg_build+0x10/0x10 [ 564.473183][ C1] ? tipc_sk_filtering+0x13c/0x510 [ 564.478300][ C1] __tipc_sendstream+0x8ac/0x1290 [ 564.483354][ C1] ? __pfx___tipc_sendstream+0x10/0x10 [ 564.488823][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 564.494473][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 564.500201][ C1] tipc_sendstream+0x55/0x70 [ 564.504806][ C1] ? __pfx_tipc_sendstream+0x10/0x10 [ 564.510098][ C1] __sock_sendmsg+0x21c/0x270 [ 564.514805][ C1] ____sys_sendmsg+0x505/0x830 [ 564.519625][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.524937][ C1] ? import_iovec+0x74/0xa0 [ 564.529468][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 564.534165][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.539399][ C1] ? __fget_files+0x2a/0x420 [ 564.544001][ C1] ? __fget_files+0x3a0/0x420 [ 564.548695][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 564.553649][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.559149][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 564.564447][ C1] ? do_syscall_64+0xbe/0xfa0 [ 564.569134][ C1] do_syscall_64+0xfa/0xfa0 [ 564.573648][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.578951][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.585048][ C1] ? clear_bhb_loop+0x60/0xb0 [ 564.589735][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.595650][ C1] RIP: 0033:0x7f110598eec9 [ 564.600076][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.619693][ C1] RSP: 002b:00007f1103bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.628123][ C1] RAX: ffffffffffffffda RBX: 00007f1105be6090 RCX: 00007f110598eec9 [ 564.636107][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 564.644095][ C1] RBP: 00007f1105a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 564.652101][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.660087][ C1] R13: 00007f1105be6128 R14: 00007f1105be6090 R15: 00007ffc8b6518d8 [ 564.668087][ C1] [ 564.671549][ C1] Kernel Offset: disabled [ 564.675904][ C1] Rebooting in 86400 seconds..