last executing test programs: 1.221749548s ago: executing program 1 (id=3047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 1.124327965s ago: executing program 0 (id=3050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0xe, 0x4, 0x1, 0x6, 0xb9, 0x68, 0x0, 0xff, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x1f, 0x8b, [@private=0xa010102, @multicast2, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}, {0x14, 0x1, 0x0, @local, "c6975072cfd871f86f2dc034f64abd929ce0cc1d27cc836ac7657032adfd8520803fcf77760210e3530651365ce9d63b0db2852cc6bb28cfc5c6e4a671b2af79866cbc04397ebc780e249dbe0188b4569ea6485c8d3a3c5b69239a776927578cd576500ec3d7e2c21208a0110e01bbe6eaba004de184c06a1b"}}}, 0xff77) 972.283613ms ago: executing program 4 (id=3052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 964.835668ms ago: executing program 1 (id=3053): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 843.031578ms ago: executing program 4 (id=3055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x4, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1e, 0x49, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @broadcast}, {0x4f20, 0x4e22, 0x35, 0x0, @opaque="451abb85505b4dd2a265d4c6f933aad186d575a3f2ce8f0acc52b49759da031f007bc4e42a271065020295eae8"}}}, 0x57) 790.601297ms ago: executing program 1 (id=3057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 760.063354ms ago: executing program 3 (id=3058): r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x1600, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 705.543977ms ago: executing program 0 (id=3059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 693.347596ms ago: executing program 2 (id=3060): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e7242cd7", 0x4}], 0x1}}], 0x1, 0x4000880) 616.505976ms ago: executing program 3 (id=3061): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x13, 0x0, &(0x7f0000000200)) 583.21035ms ago: executing program 2 (id=3062): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000008db879e2b2fa56da00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x38}}, 0x20000000) 555.928524ms ago: executing program 0 (id=3063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r2, 0x201, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080) 504.615028ms ago: executing program 4 (id=3064): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 503.605314ms ago: executing program 1 (id=3065): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000300)=0x8) 448.701259ms ago: executing program 2 (id=3066): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 446.531883ms ago: executing program 3 (id=3067): setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r1}, 0x10) 394.220182ms ago: executing program 0 (id=3068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a31e1ff000008000a4000000000080003400000001408000c40008000031400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 338.732026ms ago: executing program 2 (id=3069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 334.699757ms ago: executing program 4 (id=3070): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 307.423903ms ago: executing program 3 (id=3071): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) 295.108131ms ago: executing program 1 (id=3072): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x9, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x10, 0xb}, {}, {0xa, 0xd}}, [{0x8, 0xb, 0x10b60046}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x404c8a5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 223.768514ms ago: executing program 0 (id=3073): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x400000000000000}}, 0x30) syz_emit_ethernet(0xd81, &(0x7f0000001040)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xd73, 0x64, 0x0, 0x80, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xd5f, 0x0, @opaque="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"}}}}}, 0x0) 181.206326ms ago: executing program 4 (id=3074): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000040)="0200000bcdb7f681", 0x8) 159.315806ms ago: executing program 2 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xd8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa70a}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x60, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x57, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 142.108905ms ago: executing program 3 (id=3076): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10}, &(0x7f00000000c0)=0xc) 56.369651ms ago: executing program 1 (id=3077): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000480)={r2, 0x5, 0x20, 0x8, 0x3}, &(0x7f00000004c0)=0x18) 56.105646ms ago: executing program 0 (id=3078): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x1}, 0x3}}, 0x10, 0x0}, 0x0) 55.79184ms ago: executing program 2 (id=3079): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) socket(0x11, 0x3, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 40.817629ms ago: executing program 4 (id=3080): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) 0s ago: executing program 3 (id=3081): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x20, 0x0, 0x0, 0x0, 0x1, 0x2c, 0x9, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}}]}, 0x8c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 72.023144][ T5853] cgroup: Unknown subsys name 'net' [ 72.134068][ T5853] cgroup: Unknown subsys name 'cpuset' [ 72.143450][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.602402][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.172848][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.181180][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.197525][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.207177][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.215907][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.218638][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.223871][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.233394][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.239147][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.255406][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.256865][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.272279][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.280444][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.288778][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.297324][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.305134][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.309989][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.320855][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.328620][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.339242][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.347335][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.355287][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.362766][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.371653][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.380949][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.081813][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 77.123690][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 77.165163][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 77.244865][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 77.272786][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 77.464491][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.471993][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.479474][ T5873] bridge_slave_0: entered allmulticast mode [ 77.486941][ T5873] bridge_slave_0: entered promiscuous mode [ 77.496503][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.504032][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.511418][ T5873] bridge_slave_1: entered allmulticast mode [ 77.519152][ T5873] bridge_slave_1: entered promiscuous mode [ 77.527140][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.534520][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.542112][ T5871] bridge_slave_0: entered allmulticast mode [ 77.549358][ T5871] bridge_slave_0: entered promiscuous mode [ 77.607694][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.615460][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.623940][ T5871] bridge_slave_1: entered allmulticast mode [ 77.631147][ T5871] bridge_slave_1: entered promiscuous mode [ 77.695961][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.703497][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.710828][ T5865] bridge_slave_0: entered allmulticast mode [ 77.718070][ T5865] bridge_slave_0: entered promiscuous mode [ 77.738698][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.746049][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.753500][ T5863] bridge_slave_0: entered allmulticast mode [ 77.760569][ T5863] bridge_slave_0: entered promiscuous mode [ 77.771537][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.784610][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.807413][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.815117][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.823085][ T5865] bridge_slave_1: entered allmulticast mode [ 77.830169][ T5865] bridge_slave_1: entered promiscuous mode [ 77.851452][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.860316][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.868701][ T5863] bridge_slave_1: entered allmulticast mode [ 77.877152][ T5863] bridge_slave_1: entered promiscuous mode [ 77.903227][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.926351][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.934075][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.941806][ T5864] bridge_slave_0: entered allmulticast mode [ 77.948854][ T5864] bridge_slave_0: entered promiscuous mode [ 77.996969][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.019189][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.026690][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.034626][ T5864] bridge_slave_1: entered allmulticast mode [ 78.042444][ T5864] bridge_slave_1: entered promiscuous mode [ 78.052010][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.065683][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.077115][ T5873] team0: Port device team_slave_0 added [ 78.098213][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.111652][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.135628][ T5873] team0: Port device team_slave_1 added [ 78.225326][ T5871] team0: Port device team_slave_0 added [ 78.247734][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.261999][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.285127][ T5863] team0: Port device team_slave_0 added [ 78.294668][ T5863] team0: Port device team_slave_1 added [ 78.304530][ T5871] team0: Port device team_slave_1 added [ 78.324113][ T5865] team0: Port device team_slave_0 added [ 78.356229][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.363505][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.382169][ T5876] Bluetooth: hci3: command tx timeout [ 78.391501][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.399816][ T5869] Bluetooth: hci0: command tx timeout [ 78.423369][ T5865] team0: Port device team_slave_1 added [ 78.445806][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.453423][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.460629][ T5869] Bluetooth: hci2: command tx timeout [ 78.483639][ T51] Bluetooth: hci1: command tx timeout [ 78.486247][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.492075][ T5876] Bluetooth: hci4: command tx timeout [ 78.504131][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.514476][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.540754][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.563581][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.570945][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.597323][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.622813][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.629792][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.656475][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.678214][ T5864] team0: Port device team_slave_0 added [ 78.723587][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.730629][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.757131][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.776124][ T5864] team0: Port device team_slave_1 added [ 78.811190][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.818168][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.844508][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.857339][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.864747][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.891812][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.946506][ T5873] hsr_slave_0: entered promiscuous mode [ 78.953646][ T5873] hsr_slave_1: entered promiscuous mode [ 79.016254][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.023341][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.050004][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.063885][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.071225][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.098025][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.125687][ T5871] hsr_slave_0: entered promiscuous mode [ 79.132815][ T5871] hsr_slave_1: entered promiscuous mode [ 79.139000][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 79.145265][ T5871] Cannot create hsr debugfs directory [ 79.172482][ T5863] hsr_slave_0: entered promiscuous mode [ 79.178789][ T5863] hsr_slave_1: entered promiscuous mode [ 79.185650][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 79.191506][ T5863] Cannot create hsr debugfs directory [ 79.233641][ T5865] hsr_slave_0: entered promiscuous mode [ 79.240057][ T5865] hsr_slave_1: entered promiscuous mode [ 79.246845][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 79.252730][ T5865] Cannot create hsr debugfs directory [ 79.342535][ T5864] hsr_slave_0: entered promiscuous mode [ 79.349306][ T5864] hsr_slave_1: entered promiscuous mode [ 79.356320][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 79.362833][ T5864] Cannot create hsr debugfs directory [ 79.952651][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.967867][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.979460][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.003921][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.061454][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.080186][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.108745][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.122100][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.199456][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.217136][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.252658][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.263750][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.354532][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.383911][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.404888][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.416935][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.460600][ T51] Bluetooth: hci3: command tx timeout [ 80.461854][ T5876] Bluetooth: hci0: command tx timeout [ 80.541061][ T5876] Bluetooth: hci2: command tx timeout [ 80.541834][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.553379][ T5876] Bluetooth: hci4: command tx timeout [ 80.553420][ T5876] Bluetooth: hci1: command tx timeout [ 80.596853][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.608857][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.623396][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.650189][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.664348][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.711162][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.738215][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.777045][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.784435][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.806849][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.814152][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.837991][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.863463][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.870814][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.892466][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.909377][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.916879][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.969555][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.976857][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.009312][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.016613][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.085969][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.146008][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.185232][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.208427][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.244387][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.307433][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.314665][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.330144][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.337392][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.373954][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.417035][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.424364][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.517837][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.525067][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.716607][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.780043][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.826501][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.008040][ T5865] veth0_vlan: entered promiscuous mode [ 82.039043][ T5871] veth0_vlan: entered promiscuous mode [ 82.066338][ T5873] veth0_vlan: entered promiscuous mode [ 82.096896][ T5873] veth1_vlan: entered promiscuous mode [ 82.106963][ T5865] veth1_vlan: entered promiscuous mode [ 82.122377][ T5871] veth1_vlan: entered promiscuous mode [ 82.137944][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.214497][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.274853][ T5873] veth0_macvtap: entered promiscuous mode [ 82.289977][ T5865] veth0_macvtap: entered promiscuous mode [ 82.303502][ T5873] veth1_macvtap: entered promiscuous mode [ 82.339861][ T5865] veth1_macvtap: entered promiscuous mode [ 82.370212][ T5863] veth0_vlan: entered promiscuous mode [ 82.392856][ T5871] veth0_macvtap: entered promiscuous mode [ 82.409695][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.425297][ T5863] veth1_vlan: entered promiscuous mode [ 82.456623][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.487331][ T5871] veth1_macvtap: entered promiscuous mode [ 82.503355][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.538546][ T3584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.541240][ T51] Bluetooth: hci0: command tx timeout [ 82.553346][ T51] Bluetooth: hci3: command tx timeout [ 82.559587][ T3584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.570056][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.594751][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.610888][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.621313][ T51] Bluetooth: hci1: command tx timeout [ 82.626852][ T51] Bluetooth: hci4: command tx timeout [ 82.632370][ T51] Bluetooth: hci2: command tx timeout [ 82.658010][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.667695][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.685691][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.694775][ T3584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.715489][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.729702][ T5863] veth0_macvtap: entered promiscuous mode [ 82.765113][ T5863] veth1_macvtap: entered promiscuous mode [ 82.775914][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.827336][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.849346][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.863657][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.912114][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.942938][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.952734][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.003797][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.035421][ T5864] veth0_vlan: entered promiscuous mode [ 83.073598][ T5864] veth1_vlan: entered promiscuous mode [ 83.086410][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.088663][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.102917][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.143518][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.154622][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.164509][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.177097][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.195664][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.196701][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.215340][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.247062][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.325666][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.362738][ T5864] veth0_macvtap: entered promiscuous mode [ 83.363821][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.386924][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.399449][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.421506][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.484353][ T5864] veth1_macvtap: entered promiscuous mode [ 83.548975][ T5984] Zero length message leads to an empty skb [ 83.567971][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.601315][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.627297][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.719532][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.775774][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.805499][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.817352][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.848985][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.891655][ T3515] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.961489][ T3584] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.232006][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.252430][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.393748][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.422962][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.478645][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 84.481696][ T6009] Bluetooth: MGMT ver 1.23 [ 84.620950][ T51] Bluetooth: hci3: command tx timeout [ 84.622420][ T5869] Bluetooth: hci0: command tx timeout [ 84.702554][ T5869] Bluetooth: hci2: command tx timeout [ 84.702791][ T5876] Bluetooth: hci1: command tx timeout [ 84.713790][ T51] Bluetooth: hci4: command tx timeout [ 85.043589][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.064004][ T6026] netlink: 'syz.4.20': attribute type 3 has an invalid length. [ 85.725582][ T6053] netlink: 44 bytes leftover after parsing attributes in process `syz.4.31'. [ 85.800860][ T6053] netlink: 35 bytes leftover after parsing attributes in process `syz.4.31'. [ 85.809958][ T6053] netlink: 'syz.4.31': attribute type 5 has an invalid length. [ 85.928442][ T6053] netlink: 'syz.4.31': attribute type 6 has an invalid length. [ 85.942729][ T6053] netlink: 35 bytes leftover after parsing attributes in process `syz.4.31'. [ 86.076415][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 87.166813][ T6113] netlink: 288 bytes leftover after parsing attributes in process `syz.3.59'. [ 88.051717][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.76'. [ 88.114153][ T6147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.76'. [ 89.209482][ T6201] netlink: 'syz.3.101': attribute type 11 has an invalid length. [ 89.898735][ T6230] vlan2: entered allmulticast mode [ 89.907665][ T6230] bond0: entered allmulticast mode [ 89.926217][ T6230] bond_slave_0: entered allmulticast mode [ 89.940849][ T6230] bond_slave_1: entered allmulticast mode [ 90.992269][ T6281] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 91.064628][ T6283] netlink: 'syz.2.138': attribute type 23 has an invalid length. [ 91.156658][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 91.503977][ T6302] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 91.747200][ T6314] warning: `syz.3.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.806163][ T6315] vcan0: entered allmulticast mode [ 92.045873][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 92.087110][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 92.568423][ T979] cfg80211: failed to load regulatory.db [ 92.915506][ T6368] Bluetooth: MGMT ver 1.23 [ 92.970507][ T5982] IPVS: starting estimator thread 0... [ 93.083935][ T6371] IPVS: using max 36 ests per chain, 86400 per kthread [ 93.599295][ T6403] Bluetooth: MGMT ver 1.23 [ 93.688564][ T6407] netlink: 'syz.0.194': attribute type 11 has an invalid length. [ 94.248871][ T6435] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 94.726460][ T6462] netlink: 'syz.3.219': attribute type 1 has an invalid length. [ 94.770799][ T6462] netlink: 236 bytes leftover after parsing attributes in process `syz.3.219'. [ 94.925533][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'. [ 94.990514][ T6470] netlink: 56 bytes leftover after parsing attributes in process `syz.4.225'. [ 95.019303][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 95.350151][ T6490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.235'. [ 95.437827][ T6492] team0: Device vti0 is of different type [ 95.746338][ T6508] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 96.157154][ T6527] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.254'. [ 96.210686][ T6527] netlink: zone id is out of range [ 96.216108][ T6527] netlink: zone id is out of range [ 96.253320][ T6527] netlink: zone id is out of range [ 96.258479][ T6527] netlink: zone id is out of range [ 96.283469][ T6527] netlink: zone id is out of range [ 96.319087][ T6527] netlink: get zone limit has 8 unknown bytes [ 96.393178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 97.033804][ T6568] netlink: 'syz.3.270': attribute type 3 has an invalid length. [ 98.457260][ T6642] team_slave_0: entered promiscuous mode [ 98.463402][ T6642] team_slave_1: entered promiscuous mode [ 98.522887][ T6642] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 98.575633][ T6642] team0: Device macvtap1 is already an upper device of the team interface [ 98.648898][ T6642] team_slave_0: left promiscuous mode [ 98.654492][ T6642] team_slave_1: left promiscuous mode [ 98.733856][ T6660] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 99.111167][ T6681] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.321993][ T6691] netlink: 216 bytes leftover after parsing attributes in process `syz.1.328'. [ 99.356541][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 99.384830][ T6695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.158694][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 100.618810][ T6750] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 101.111540][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 101.174953][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.369'. [ 101.672070][ T6799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.523255][ T6839] netlink: 'syz.1.400': attribute type 19 has an invalid length. [ 102.971789][ T6860] batadv0: entered promiscuous mode [ 102.982782][ T6860] bond0: entered promiscuous mode [ 103.011572][ T6860] bond_slave_0: entered promiscuous mode [ 103.027901][ T6860] bond_slave_1: entered promiscuous mode [ 103.037489][ T6866] xt_time: unknown flags 0xf4 [ 103.048223][ T6860] hsr1: entered allmulticast mode [ 103.061011][ T6860] batadv0: entered allmulticast mode [ 103.070606][ T6860] bond0: entered allmulticast mode [ 103.088355][ T6860] bond_slave_0: entered allmulticast mode [ 103.094292][ T6860] bond_slave_1: entered allmulticast mode [ 103.116163][ T6860] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 103.367458][ T6877] netem: incorrect gi model size [ 103.387628][ T6877] netem: change failed [ 103.831546][ T6900] nbd0: detected capacity change from 0 to 127 [ 103.841951][ T51] block nbd0: Receive control failed (result -32) [ 103.858096][ T5992] block nbd0: Dead connection, failed to find a fallback [ 103.890526][ T5992] block nbd0: shutting down sockets [ 103.897101][ T5992] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.907855][ T5992] Buffer I/O error on dev nbd0, logical block 0, async page read [ 103.930306][ T5992] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.940055][ T5992] Buffer I/O error on dev nbd0, logical block 1, async page read [ 103.948102][ T5992] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.987785][ T5992] Buffer I/O error on dev nbd0, logical block 2, async page read [ 104.016091][ T5992] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.030677][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 104.056637][ T5992] Buffer I/O error on dev nbd0, logical block 3, async page read [ 104.068490][ T5992] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.120204][ T5992] Buffer I/O error on dev nbd0, logical block 0, async page read [ 104.132824][ T5992] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.144960][ T5992] Buffer I/O error on dev nbd0, logical block 1, async page read [ 104.156013][ T5992] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.167238][ T5992] Buffer I/O error on dev nbd0, logical block 2, async page read [ 104.179798][ T5992] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.239430][ T5992] Buffer I/O error on dev nbd0, logical block 3, async page read [ 104.261128][ T5992] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.286908][ T5992] Buffer I/O error on dev nbd0, logical block 0, async page read [ 104.310302][ T5992] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.368349][ T5992] Buffer I/O error on dev nbd0, logical block 1, async page read [ 104.432043][ T5992] ldm_validate_partition_table(): Disk read failed. [ 104.474904][ T5992] Dev nbd0: unable to read RDB block 0 [ 104.521261][ T5992] nbd0: unable to read partition table [ 104.527126][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 104.538401][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 104.592320][ T5992] ldm_validate_partition_table(): Disk read failed. [ 104.610869][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 104.621672][ T5992] Dev nbd0: unable to read RDB block 0 [ 104.629090][ T6934] bridge0: port 3(vlan2) entered blocking state [ 104.629311][ T5992] nbd0: unable to read partition table [ 104.677131][ T6934] bridge0: port 3(vlan2) entered disabled state [ 104.694377][ T6934] vlan2: entered allmulticast mode [ 104.699546][ T6934] bridge0: entered allmulticast mode [ 104.714057][ T6934] vlan2: left allmulticast mode [ 104.727053][ T6934] bridge0: left allmulticast mode [ 105.353099][ T6971] netlink: 71 bytes leftover after parsing attributes in process `syz.2.463'. [ 105.563925][ T6984] netlink: 84 bytes leftover after parsing attributes in process `syz.4.468'. [ 105.859895][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 106.064020][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 106.486235][ T7025] raw_sendmsg: syz.2.486 forgot to set AF_INET. Fix it! [ 106.731033][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.769507][ T7050] netlink: 'syz.1.493': attribute type 16 has an invalid length. [ 106.786973][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.816974][ T7050] netlink: 'syz.1.493': attribute type 17 has an invalid length. [ 106.921312][ T7050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.975860][ T7056] batadv_slave_1: entered promiscuous mode [ 106.984530][ T7059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.987529][ T7056] batman_adv: batadv0: Adding interface: macsec1 [ 107.008743][ T7056] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.037485][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.051478][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.062782][ T7056] batman_adv: batadv0: Interface activated: macsec1 [ 107.076629][ T7060] netlink: 88 bytes leftover after parsing attributes in process `syz.2.502'. [ 107.096061][ T7060] netem: invalid attributes len -24 [ 107.123813][ T7060] netem: change failed [ 107.857829][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.523'. [ 107.977086][ T7112] vxlan0: entered promiscuous mode [ 107.983522][ T7112] vxlan0: entered allmulticast mode [ 107.989681][ T59] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.030907][ T59] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.039767][ T59] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.113765][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.690292][ T7147] netlink: 'syz.3.542': attribute type 5 has an invalid length. [ 109.684720][ T7175] netlink: 'syz.4.557': attribute type 9 has an invalid length. [ 109.718211][ T7175] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.557'. [ 109.798633][ T7182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'. [ 109.843570][ T7182] netlink: 10 bytes leftover after parsing attributes in process `syz.2.560'. [ 110.065374][ T7194] openvswitch: netlink: IP tunnel dst address not specified [ 110.959362][ T7244] netlink: 64 bytes leftover after parsing attributes in process `syz.4.588'. [ 111.323593][ T7264] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.599'. [ 111.883865][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 112.045659][ T7305] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 112.202751][ T7311] netlink: 104 bytes leftover after parsing attributes in process `syz.0.622'. [ 112.400060][ T7328] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 112.531941][ T7331] netlink: 'syz.4.632': attribute type 2 has an invalid length. [ 112.539634][ T7331] netlink: 'syz.4.632': attribute type 8 has an invalid length. [ 112.590965][ T7331] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.632'. [ 112.996423][ T7358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.004297][ T7358] IPv6: NLM_F_CREATE should be set when creating new route [ 113.011697][ T7358] IPv6: NLM_F_CREATE should be set when creating new route [ 113.034590][ T7358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.172289][ T7364] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 113.210699][ T7364] nbd: error processing sock list [ 113.219955][ T7364] block nbd1: shutting down sockets [ 114.058777][ T7405] netlink: 104 bytes leftover after parsing attributes in process `syz.0.668'. [ 114.172365][ T7403] netlink: 48 bytes leftover after parsing attributes in process `syz.2.666'. [ 114.797794][ T7440] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 115.102171][ T7454] __nla_validate_parse: 2 callbacks suppressed [ 115.102193][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.691'. [ 115.805890][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.711'. [ 115.864292][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.711'. [ 116.241013][ T7517] netlink: 830 bytes leftover after parsing attributes in process `syz.4.721'. [ 116.627766][ T7539] netlink: 160 bytes leftover after parsing attributes in process `syz.2.732'. [ 116.779767][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 117.009074][ T7557] netlink: 'syz.1.739': attribute type 8 has an invalid length. [ 117.244769][ T7568] tap0: tun_chr_ioctl cmd 1074025677 [ 117.252374][ T7568] tap0: linktype set to 65534 [ 117.523667][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 117.708036][ T1343] tipc: Subscription rejected, illegal request [ 117.852763][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 118.213911][ T7610] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 118.331654][ T7618] netlink: 104 bytes leftover after parsing attributes in process `syz.2.768'. [ 118.472663][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.773'. [ 119.664158][ T7686] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 119.693739][ T7686] netlink: 'syz.2.798': attribute type 10 has an invalid length. [ 120.198170][ T7716] __nla_validate_parse: 1 callbacks suppressed [ 120.198192][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 120.394596][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 120.530122][ T7734] netlink: 'syz.2.820': attribute type 1 has an invalid length. [ 120.558658][ T7734] netlink: 172 bytes leftover after parsing attributes in process `syz.2.820'. [ 120.686992][ T7740] netlink: 'syz.3.823': attribute type 6 has an invalid length. [ 120.731684][ T7740] netlink: 'syz.3.823': attribute type 6 has an invalid length. [ 121.056992][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 121.246249][ T7773] netlink: 'syz.1.841': attribute type 10 has an invalid length. [ 121.287644][ T7773] team0: Port device dummy0 added [ 122.035837][ T7815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.860'. [ 122.394327][ T7835] netlink: 'syz.2.870': attribute type 2 has an invalid length. [ 122.864468][ T7858] netlink: 92 bytes leftover after parsing attributes in process `syz.3.881'. [ 122.880898][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 122.903372][ T7864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.884'. [ 123.582501][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.899'. [ 123.633652][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.653400][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.662752][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.116549][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 124.141405][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.475481][ T7937] macvtap1: entered allmulticast mode [ 124.508358][ T7937] veth0_macvtap: entered allmulticast mode [ 124.544652][ T5982] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.771320][ T7958] netlink: 'syz.1.930': attribute type 83 has an invalid length. [ 125.478740][ T7996] __nla_validate_parse: 1 callbacks suppressed [ 125.478760][ T7996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.948'. [ 125.511982][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 125.549870][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 126.199689][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 126.260190][ T8040] tipc: Started in network mode [ 126.273827][ T8040] tipc: Node identity ac14140f, cluster identity 4711 [ 126.303396][ T8040] tipc: New replicast peer: 255.255.255.255 [ 126.310205][ T8040] tipc: Enabled bearer , priority 10 [ 126.470267][ T8055] veth0_to_bridge: entered promiscuous mode [ 126.491824][ T8054] veth0_to_bridge: left promiscuous mode [ 127.422162][ T982] tipc: Node number set to 2886997007 [ 127.500563][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.804166][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 128.047794][ T3584] tipc: Subscription rejected, illegal request [ 128.201968][ T8150] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1022'. [ 128.389667][ T8160] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1027'. [ 128.566517][ T8171] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1032'. [ 129.167833][ T8189] team0 (unregistering): Port device team_slave_0 removed [ 129.188838][ T8189] team0 (unregistering): Port device team_slave_1 removed [ 129.327867][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.336519][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.455924][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 129.969625][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 130.609734][ T8267] __nla_validate_parse: 1 callbacks suppressed [ 130.609756][ T8267] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1071'. [ 131.109967][ T8296] netlink: 'syz.3.1083': attribute type 4 has an invalid length. [ 131.483786][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 132.066073][ T8344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1100'. [ 133.149297][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1127'. [ 133.398394][ T8411] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 133.411244][ T8411] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1134'. [ 133.422448][ T8411] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 133.507058][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.760829][ T8426] netlink: 'syz.3.1137': attribute type 6 has an invalid length. [ 134.498939][ T8465] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 134.741572][ T8480] tipc: New replicast peer: 255.255.255.255 [ 134.748448][ T8480] tipc: Enabled bearer , priority 10 [ 135.420530][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.563428][ T8528] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.1186'. [ 135.895636][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 136.417711][ T8572] netlink: 'syz.3.1207': attribute type 1 has an invalid length. [ 136.512513][ T8574] Bluetooth: hci1: too big key_count value 32778 [ 137.121476][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 137.147154][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 137.173329][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 137.918145][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 137.962772][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 138.125018][ T8649] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 138.315948][ T8660] bridge1: entered promiscuous mode [ 138.339136][ T8660] bridge1: entered allmulticast mode [ 138.542302][ T8676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.364393][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1275'. [ 139.580780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.737013][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 139.788329][ T8727] vlan3: entered allmulticast mode [ 139.803634][ T8727] veth0_to_bond: entered allmulticast mode [ 140.007647][ T8731] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 140.540787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.563807][ T8758] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 140.599495][ T8758] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1294'. [ 140.615926][ T8758] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 140.621757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.650256][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 140.659280][ T8762] netlink: 'syz.4.1296': attribute type 30 has an invalid length. [ 140.736483][ T8766] netlink: 'syz.2.1298': attribute type 11 has an invalid length. [ 141.315786][ T8797] netlink: 'syz.4.1313': attribute type 32 has an invalid length. [ 142.253934][ T8841] __nla_validate_parse: 1 callbacks suppressed [ 142.253957][ T8841] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1331'. [ 142.804143][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1347'. [ 142.833100][ T8876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1348'. [ 143.012464][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1353'. [ 143.466150][ T8908] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.1364'. [ 143.511805][ T8908] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 143.801212][ T8916] gtp0: entered promiscuous mode [ 143.808022][ T8916] gtp0: entered allmulticast mode [ 144.311020][ T8937] block nbd1: server does not support multiple connections per device. [ 144.344077][ T8937] block nbd1: shutting down sockets [ 144.371633][ T5982] hid-generic 0005:04F3:1010.0001: item fetching failed at offset 0/1 [ 144.397104][ T5982] hid-generic 0005:04F3:1010.0001: probe with driver hid-generic failed with error -22 [ 145.493400][ T9005] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.614697][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 145.730284][ T5982] IPVS: starting estimator thread 0... [ 145.746458][ T9023] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1418'. [ 145.760147][ T9020] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 145.831114][ T9022] IPVS: using max 36 ests per chain, 86400 per kthread [ 145.874835][ T9027] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1420'. [ 145.986462][ T9031] veth0: entered promiscuous mode [ 146.005389][ T9030] veth0: left promiscuous mode [ 146.462850][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 146.488099][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 148.763429][ T9183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1491'. [ 148.929787][ T9189] netlink: 'syz.0.1495': attribute type 12 has an invalid length. [ 148.958876][ T9193] netlink: 'syz.2.1496': attribute type 5 has an invalid length. [ 149.559636][ T9218] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 149.923789][ T9237] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1516'. [ 150.780530][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.951796][ T9285] tipc: Started in network mode [ 150.962196][ T9285] tipc: Node identity ac14140f, cluster identity 4711 [ 150.981477][ T9285] tipc: New replicast peer: 255.255.255.255 [ 150.998810][ T9285] tipc: Enabled bearer , priority 10 [ 151.438560][ T9312] netlink: 'syz.3.1553': attribute type 11 has an invalid length. [ 151.779028][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1562'. [ 151.799607][ T9331] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 152.110894][ T5980] tipc: Node number set to 2886997007 [ 152.133462][ T9351] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1571'. [ 152.549151][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 152.699775][ T9379] netlink: 'syz.4.1584': attribute type 8 has an invalid length. [ 152.763298][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 152.817532][ T9383] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 152.953981][ T9391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1590'. [ 153.222669][ T9403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1596'. [ 153.474635][ T9420] ªªªªªª: renamed from vlan0 (while UP) [ 153.620617][ T9427] netlink: 'syz.4.1608': attribute type 1 has an invalid length. [ 153.628407][ T9427] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1608'. [ 154.257742][ T9465] netlink: 'syz.4.1626': attribute type 83 has an invalid length. [ 156.426170][ T9566] openvswitch: netlink: IPv4 tun info is not correct [ 156.454616][ T9567] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1672'. [ 157.131069][ T9594] unknown channel width for channel at 909000KHz? [ 160.734387][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'. [ 160.764313][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 161.035671][ T9741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1756'. [ 161.352051][ T9753] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1761'. [ 162.041936][ T30] audit: type=1107 audit(1758285514.748:2): pid=9783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 162.477139][ T9503] Set syz1 is full, maxelem 65536 reached [ 162.622298][ T9801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.831141][ T979] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/1 [ 162.871143][ T979] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 162.952628][ T9821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1795'. [ 162.966463][ T9821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1795'. [ 163.137044][ T9831] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1799'. [ 163.194067][ T9833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.312046][ T9825] syz.1.1794 (9825) used greatest stack depth: 17864 bytes left [ 163.448163][ T9848] blkio.reset_stats is deprecated [ 163.670986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.999155][ T9881] openvswitch: netlink: Multiple metadata blocks provided [ 164.178363][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 164.363632][ T9899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1831'. [ 164.569882][ T9914] netlink: 'syz.4.1838': attribute type 1 has an invalid length. [ 164.587781][ T9914] netlink: 'syz.4.1838': attribute type 4 has an invalid length. [ 164.601976][ T9914] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1838'. [ 164.700538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.576945][ T9970] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1865'. [ 166.044668][ T9993] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 166.073556][ T9993] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1873'. [ 167.304097][T10055] team0: Device ip6gre1 is of different type [ 167.951421][T10095] syz.3.1913: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.014099][T10095] CPU: 1 UID: 0 PID: 10095 Comm: syz.3.1913 Not tainted syzkaller #0 PREEMPT(full) [ 168.014127][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.014145][T10095] Call Trace: [ 168.014154][T10095] [ 168.014162][T10095] dump_stack_lvl+0x189/0x250 [ 168.014202][T10095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.014223][T10095] ? __pfx__printk+0x10/0x10 [ 168.014247][T10095] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.014269][T10095] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.014291][T10095] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 168.014327][T10095] warn_alloc+0x214/0x310 [ 168.014471][T10095] ? stack_depot_save_flags+0x40/0x860 [ 168.014500][T10095] ? __pfx_warn_alloc+0x10/0x10 [ 168.014522][T10095] ? kasan_save_track+0x4f/0x80 [ 168.014542][T10095] ? xskq_create+0x56/0x170 [ 168.014557][T10095] ? xsk_init_queue+0xb0/0x110 [ 168.014570][T10095] ? xsk_setsockopt+0x4dc/0x8d0 [ 168.014593][T10095] ? do_sock_setsockopt+0x17c/0x1b0 [ 168.014621][T10095] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 168.014641][T10095] ? do_syscall_64+0xfa/0x3b0 [ 168.014660][T10095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.014689][T10095] __vmalloc_node_range_noprof+0x125/0x12f0 [ 168.014747][T10095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.014780][T10095] ? __kasan_kmalloc+0x93/0xb0 [ 168.014807][T10095] vmalloc_user_noprof+0xad/0xf0 [ 168.014833][T10095] ? xskq_create+0xbf/0x170 [ 168.014851][T10095] xskq_create+0xbf/0x170 [ 168.014872][T10095] xsk_init_queue+0xb0/0x110 [ 168.014892][T10095] xsk_setsockopt+0x4dc/0x8d0 [ 168.014920][T10095] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.014944][T10095] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.014968][T10095] ? aa_sock_opt_perm+0xff/0x1b0 [ 168.014987][T10095] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 168.015014][T10095] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.015042][T10095] do_sock_setsockopt+0x17c/0x1b0 [ 168.015070][T10095] __x64_sys_setsockopt+0x13f/0x1b0 [ 168.015098][T10095] do_syscall_64+0xfa/0x3b0 [ 168.015117][T10095] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.015135][T10095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.015153][T10095] ? clear_bhb_loop+0x60/0xb0 [ 168.015175][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.015192][T10095] RIP: 0033:0x7fbe67d8ec29 [ 168.015326][T10095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.015344][T10095] RSP: 002b:00007fbe68ba3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.015367][T10095] RAX: ffffffffffffffda RBX: 00007fbe67fd5fa0 RCX: 00007fbe67d8ec29 [ 168.015382][T10095] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 168.015394][T10095] RBP: 00007fbe67e11e41 R08: 0000000000000004 R09: 0000000000000000 [ 168.015406][T10095] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.015424][T10095] R13: 00007fbe67fd6038 R14: 00007fbe67fd5fa0 R15: 00007ffe8bc0e8d8 [ 168.015458][T10095] [ 168.016388][T10095] Mem-Info: [ 168.239242][T10105] tap0: tun_chr_ioctl cmd 1074025678 [ 168.273928][T10095] active_anon:5900 inactive_anon:0 isolated_anon:0 [ 168.273928][T10095] active_file:3269 inactive_file:39893 isolated_file:0 [ 168.273928][T10095] unevictable:768 dirty:216 writeback:0 [ 168.273928][T10095] slab_reclaimable:10854 slab_unreclaimable:99727 [ 168.273928][T10095] mapped:29196 shmem:1356 pagetables:1151 [ 168.273928][T10095] sec_pagetables:0 bounce:0 [ 168.273928][T10095] kernel_misc_reclaimable:0 [ 168.273928][T10095] free:1330633 free_pcp:13386 free_cma:0 [ 168.302804][T10105] tap0: group set to 0 [ 168.317401][T10095] Node 0 active_anon:23700kB inactive_anon:0kB active_file:13076kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116784kB dirty:856kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12096kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.446826][T10095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.506481][T10095] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.570740][T10095] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 168.577658][T10095] Node 0 DMA32 free:1420764kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23524kB inactive_anon:0kB active_file:13076kB inactive_file:157796kB unevictable:1536kB writepending:896kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:35092kB local_pcp:13840kB free_cma:0kB [ 168.647895][T10095] lowmem_reserve[]: 0 0 1 1 1 [ 168.657271][T10095] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 168.713651][T10095] lowmem_reserve[]: 0 0 0 0 0 [ 168.727124][T10095] Node 1 Normal free:3886660kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18560kB local_pcp:7936kB free_cma:0kB [ 168.817735][T10095] lowmem_reserve[]: 0 0 0 0 0 [ 168.830717][T10095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.870996][T10095] Node 0 DMA32: 437*4kB (U) 428*8kB (UME) 168*16kB (UME) 289*32kB (UME) 56*64kB (UME) 46*128kB (ME) 26*256kB (UME) 9*512kB (UM) 4*1024kB (UM) 6*2048kB (UM) 334*4096kB (M) = 1422292kB [ 168.909886][T10095] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 168.930106][T10131] netlink: 'syz.1.1928': attribute type 28 has an invalid length. [ 168.960741][T10095] Node 1 Normal: 197*4kB (UME) 42*8kB (UME) 46*16kB (UME) 72*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3886660kB [ 168.970368][T10131] netlink: 'syz.1.1928': attribute type 3 has an invalid length. [ 169.007937][T10095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.020738][T10131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1928'. [ 169.059671][T10095] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.090263][T10095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.127278][T10095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.163712][T10095] 44515 total pagecache pages [ 169.200912][T10095] 0 pages in swap cache [ 169.209294][T10095] Free swap = 124996kB [ 169.224648][T10095] Total swap = 124996kB [ 169.229380][T10095] 2097051 pages RAM [ 169.255398][T10095] 0 pages HighMem/MovableOnly [ 169.260173][T10095] 425671 pages reserved [ 169.271542][T10095] 0 pages cma reserved [ 169.884460][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 170.559513][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 170.598473][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 171.714725][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 171.980230][T10294] netlink: 'syz.4.2004': attribute type 2 has an invalid length. [ 172.043907][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 172.204690][T10307] netlink: 'syz.4.2010': attribute type 18 has an invalid length. [ 172.637403][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 172.749620][T10332] netlink: 81 bytes leftover after parsing attributes in process `syz.2.2022'. [ 173.517564][T10380] netlink: 'syz.4.2042': attribute type 10 has an invalid length. [ 173.553698][T10383] netlink: 'syz.1.2044': attribute type 83 has an invalid length. [ 173.617798][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 173.635313][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 175.170124][T10482] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2093'. [ 175.737043][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 176.501343][T10562] lo: entered allmulticast mode [ 176.601295][T10564] tap0: tun_chr_ioctl cmd 2148553947 [ 176.794403][T10578] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2140'. [ 176.854426][T10583] netlink: 'syz.1.2141': attribute type 4 has an invalid length. [ 177.020643][ T51] Bluetooth: hci4: command tx timeout [ 177.153285][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'. [ 177.191938][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 178.248461][T10653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.336602][T10658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.597025][T10678] tap0: tun_chr_ioctl cmd 1074025672 [ 178.613162][T10678] tap0: ignored: set checksum disabled [ 178.977458][T10702] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2196'. [ 179.100088][T10711] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2199'. [ 179.167158][T10718] netlink: 'syz.3.2202': attribute type 9 has an invalid length. [ 179.209381][T10718] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.2202'. [ 179.425237][T10721] netlink: 'syz.4.2203': attribute type 4 has an invalid length. [ 179.901469][T10743] netem: unknown loss type 0 [ 179.906549][T10743] netem: change failed [ 180.006226][T10749] veth1_macvtap: left promiscuous mode [ 180.193784][T10758] netlink: 'syz.3.2220': attribute type 21 has an invalid length. [ 180.211281][T10758] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2220'. [ 180.375875][T10767] veth0: entered promiscuous mode [ 180.384153][T10763] veth0: left promiscuous mode [ 180.425917][T10772] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2223'. [ 180.860558][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.964859][T10805] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 181.225388][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2251'. [ 181.296300][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2253'. [ 181.730773][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 181.749456][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 181.938180][T10863] veth0: entered promiscuous mode [ 181.949872][T10862] veth0: left promiscuous mode [ 182.059138][T10869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2273'. [ 182.063479][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 182.090424][T10872] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 182.099445][T10872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.589224][T10905] team_slave_0: mtu greater than device maximum [ 183.175329][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2304'. [ 183.515550][T10959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2315'. [ 184.314860][T11014] netlink: 'syz.3.2340': attribute type 1 has an invalid length. [ 185.030845][T11062] veth0: entered promiscuous mode [ 185.060167][T11062] veth0: left promiscuous mode [ 185.064906][T11058] sctp: [Deprecated]: syz.4.2358 (pid 11058) Use of int in max_burst socket option deprecated. [ 185.064906][T11058] Use struct sctp_assoc_value instead [ 185.854169][T11096] __nla_validate_parse: 5 callbacks suppressed [ 185.854191][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2378'. [ 185.908880][T11102] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2381'. [ 186.227214][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 186.312614][T11125] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2392'. [ 186.388648][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'. [ 186.502469][T11139] syz.2.2399 uses obsolete (PF_INET,SOCK_PACKET) [ 186.664144][T11149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2403'. [ 186.784586][T11156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.090999][T11177] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 187.532440][T11205] openvswitch: netlink: IPv4 tunnel dst address is zero [ 187.737313][T11218] block nbd1: Unsupported socket: shutdown callout must be supported. [ 187.820520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.953736][T11230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2442'. [ 188.231576][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'. [ 188.266755][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'. [ 188.277840][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2451'. [ 188.860988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.248862][T11303] ip6gre0: Master is either lo or non-ether device [ 191.020251][T11382] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 191.158179][T11385] team0: Device wireguard0 is of different type [ 191.340063][ T51] block nbd1: Receive control failed (result -32) [ 191.717620][T11418] netlink: 'syz.4.2528': attribute type 1 has an invalid length. [ 191.774522][T11418] netlink: 'syz.4.2528': attribute type 2 has an invalid length. [ 191.789027][T11421] __nla_validate_parse: 4 callbacks suppressed [ 191.789047][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2527'. [ 191.826658][T11418] netlink: 'syz.4.2528': attribute type 1 has an invalid length. [ 191.866534][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'. [ 191.884662][T11418] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.2528'. [ 192.095592][T11437] bridge_slave_0: invalid flags given to default FDB implementation [ 192.337822][T11452] sctp: [Deprecated]: syz.4.2541 (pid 11452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.337822][T11452] Use struct sctp_sack_info instead [ 192.563019][T11467] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2551'. [ 192.987349][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2565'. [ 193.012378][T11500] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.2564'. [ 193.217286][T11494] macvtap1: entered promiscuous mode [ 193.224756][T11494] vlan0: entered promiscuous mode [ 193.230938][T11494] macvtap1: entered allmulticast mode [ 193.236636][T11494] vlan0: entered allmulticast mode [ 193.242335][T11494] veth0_vlan: entered allmulticast mode [ 194.857428][T11609] sock: sock_set_timeout: `syz.3.2619' (pid 11609) tries to set negative timeout [ 194.867182][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2618'. [ 194.947183][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.005426][T11612] block nbd3: not configured, cannot reconfigure [ 195.437588][T11636] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 195.825193][T11654] unknown channel width for channel at 909000KHz? [ 195.843784][T11654] unknown channel width for channel at 909000KHz? [ 195.857226][T11654] unknown channel width for channel at 909000KHz? [ 195.878142][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 195.945902][T11656] gtp0: entered promiscuous mode [ 195.955116][T11656] gtp0: entered allmulticast mode [ 195.955920][T11659] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2643'. [ 196.098255][T11663] netlink: 'syz.2.2645': attribute type 10 has an invalid length. [ 196.127834][T11663] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.148210][T11663] bridge_slave_1: left allmulticast mode [ 196.165886][T11663] bridge_slave_1: left promiscuous mode [ 196.196446][T11663] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.217810][T11663] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 197.401415][T11740] vlan2: entered allmulticast mode [ 197.420385][T11740] hsr0: entered allmulticast mode [ 197.425473][T11740] hsr_slave_0: entered allmulticast mode [ 197.457262][T11740] hsr_slave_1: entered allmulticast mode [ 197.484451][T11747] openvswitch: netlink: IPv4 tun info is not correct [ 197.496760][T11744] veth0: entered promiscuous mode [ 197.515306][T11744] veth0: left promiscuous mode [ 197.966966][T11778] bridge_slave_0: default FDB implementation only supports local addresses [ 198.358011][T11792] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2706'. [ 198.447548][T11796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2708'. [ 198.570061][T11799] syzkaller1: entered promiscuous mode [ 198.577172][T11799] syzkaller1: entered allmulticast mode [ 198.594118][T11799] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 198.663327][T11808] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2712'. [ 199.405922][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2728'. [ 199.563712][T11850] syzkaller1: entered promiscuous mode [ 199.587968][T11850] syzkaller1: entered allmulticast mode [ 200.061899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.389629][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 200.404310][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 200.586031][T11912] sctp: [Deprecated]: syz.2.2761 (pid 11912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.586031][T11912] Use struct sctp_sack_info instead [ 200.603602][T11908] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2757'. [ 201.034352][T11941] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.2771'. [ 201.053592][T11942] netlink: 'syz.0.2772': attribute type 4 has an invalid length. [ 201.441490][T11963] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2782'. [ 201.473914][T11964] syzkaller1: entered promiscuous mode [ 201.479433][T11964] syzkaller1: entered allmulticast mode [ 201.669800][T11977] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2788'. [ 201.704952][T11971] syzkaller1: entered promiscuous mode [ 201.712209][T11971] syzkaller1: entered allmulticast mode [ 202.146677][ T5882] Bluetooth: hci0: command 0x0406 tx timeout [ 202.147094][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 202.153986][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 202.159698][ T5187] Bluetooth: hci2: command 0x0406 tx timeout [ 202.306143][T12011] netlink: 'syz.0.2802': attribute type 11 has an invalid length. [ 202.403119][T12015] syzkaller1: entered promiscuous mode [ 202.408731][T12015] syzkaller1: entered allmulticast mode [ 202.999071][T12055] sctp: [Deprecated]: syz.0.2822 (pid 12055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.999071][T12055] Use struct sctp_sack_info instead [ 203.059436][T12058] vxcan1: tx address claim with dlc 0 [ 203.202409][T12063] IPv6: sit2: Disabled Multicast RS [ 203.208824][T12063] sit2: entered allmulticast mode [ 203.562392][T12084] __nla_validate_parse: 4 callbacks suppressed [ 203.562417][T12084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2837'. [ 204.419007][T12126] netlink: 'syz.2.2856': attribute type 17 has an invalid length. [ 204.427871][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2856'. [ 204.448722][T12126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 204.687683][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 204.956795][T12151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2868'. [ 205.366090][T12177] geneve2: entered promiscuous mode [ 205.371951][T12177] geneve2: entered allmulticast mode [ 205.382366][ T1343] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 205.410869][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 205.440610][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 205.581642][T12177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.474923][T12230] netlink: 'syz.4.2894': attribute type 10 has an invalid length. [ 206.518612][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.541934][T12230] bridge_slave_1: left allmulticast mode [ 206.547975][T12230] bridge_slave_1: left promiscuous mode [ 206.557216][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.595416][T12230] bridge_slave_1: entered promiscuous mode [ 206.616209][T12230] bridge_slave_1: entered allmulticast mode [ 206.638916][T12230] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 206.978836][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2904'. [ 207.006300][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2904'. [ 207.166091][T12177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.228313][T12177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 207.277022][T12272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2909'. [ 207.408881][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2911'. [ 207.420105][T12277] netlink: 'syz.3.2911': attribute type 7 has an invalid length. [ 207.438838][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2911'. [ 207.443519][T12177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.468376][T12177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 207.657817][T12177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.672953][T12177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 207.839823][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 207.854410][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.889294][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 207.908312][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.967855][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 207.987616][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 208.012783][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 208.021638][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 208.308438][T12304] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 208.586708][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2932'. [ 208.696258][T12331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2936'. [ 208.844378][T12334] netlink: 'syz.4.2937': attribute type 12 has an invalid length. [ 208.866753][T12334] netlink: 'syz.4.2937': attribute type 29 has an invalid length. [ 208.878308][T12334] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2937'. [ 208.890246][T12334] netlink: 'syz.4.2937': attribute type 2 has an invalid length. [ 208.905810][T12334] netlink: 23 bytes leftover after parsing attributes in process `syz.4.2937'. [ 209.419088][T12354] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2946'. [ 209.466297][T12362] veth0: entered promiscuous mode [ 209.492538][T12358] veth0: left promiscuous mode [ 210.004494][T12393] netlink: 'syz.0.2961': attribute type 1 has an invalid length. [ 211.464679][T12439] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 212.325416][T12496] netlink: 'syz.3.3009': attribute type 11 has an invalid length. [ 212.888925][T12521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3021'. [ 213.361725][T12543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3031'. [ 213.431993][T12548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3033'. [ 213.576974][T12559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3039'. [ 213.611729][T12559] netlink: 'syz.3.3039': attribute type 7 has an invalid length. [ 213.620889][T12559] netlink: 'syz.3.3039': attribute type 8 has an invalid length. [ 213.654039][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3039'. [ 213.699356][T12559] gretap0: entered promiscuous mode [ 213.720736][T12559] batadv_slave_1: entered promiscuous mode [ 213.754456][T12559] gretap0: left promiscuous mode [ 213.768101][T12559] batadv_slave_1: left promiscuous mode [ 214.009466][T12581] syzkaller1: entered promiscuous mode [ 214.017022][T12578] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 214.031646][T12581] syzkaller1: entered allmulticast mode [ 214.074296][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'. [ 214.083729][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3053'. [ 214.104894][T12585] netlink: 'syz.1.3053': attribute type 11 has an invalid length. [ 214.283909][T12591] syzkaller1: entered promiscuous mode [ 214.297203][T12591] syzkaller1: entered allmulticast mode [ 214.308444][T12597] vxcan1: tx address claim with dest, not broadcast [ 214.362994][T12601] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3059'. [ 214.372677][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3059'. [ 214.972382][ C1] ------------[ cut here ]------------ [ 214.978526][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 214.989858][ C1] WARNING: CPU: 1 PID: 5863 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 215.002136][ C1] Modules linked in: [ 215.006342][ C1] CPU: 1 UID: 0 PID: 5863 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 215.017002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.027851][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 215.034219][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 91 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 f2 8a 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 215.054256][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 215.060511][ C1] RAX: ad7dee5d70d3d400 RBX: 000000000000000c RCX: ffff888031eb3c00 [ 215.068560][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 215.076889][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 215.085139][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88807d06d2a8 [ 215.089341][T12640] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 215.093286][ C1] R13: 0000000000000000 R14: ffff888079d50e40 R15: ffff888079d530d8 [ 215.093316][ C1] FS: 0000555560bc7500(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 215.093333][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.093343][ C1] CR2: 0000555569ebc588 CR3: 00000000726e4000 CR4: 00000000003526f0 [ 215.093358][ C1] Call Trace: [ 215.093367][ C1] [ 215.139518][ C1] rate_control_send_low+0x194/0x7a0 [ 215.145030][ C1] rate_control_get_rate+0x20b/0x5d0 [ 215.150530][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 215.156552][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 215.163155][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 215.168708][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 215.174706][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 215.180543][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 215.186677][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.192409][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.198018][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.203757][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 215.209443][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.215336][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 215.220888][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 215.227056][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 215.232883][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 215.240217][ C1] __iterate_interfaces+0x2ab/0x590 [ 215.245617][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 215.251875][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 215.259201][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 215.265314][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 215.272591][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 215.277811][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 215.283645][ C1] __hrtimer_run_queues+0x529/0xc60 [ 215.288848][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 215.294596][ C1] ? read_tsc+0x9/0x20 [ 215.298670][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 215.303902][ C1] handle_softirqs+0x283/0x870 [ 215.308672][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 215.313581][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 215.318868][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 215.324110][ C1] __irq_exit_rcu+0xca/0x1f0 [ 215.328740][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 215.334105][ C1] irq_exit_rcu+0x9/0x30 [ 215.338472][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 215.344329][ C1] [ 215.347300][ C1] [ 215.350228][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.356273][ C1] RIP: 0010:check_preemption_disabled+0x35/0x120 [ 215.362656][ C1] Code: 48 8b 05 be 6e 26 07 48 89 44 24 08 65 8b 05 c6 6e 26 07 65 8b 0d bb 6e 26 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d 9b 6e 26 07 <48> 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 [ 215.382389][ C1] RSP: 0018:ffffc90003def2a8 EFLAGS: 00000206 [ 215.388468][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ad7dee5d70d3d400 [ 215.396580][ C1] RDX: 0000000000000000 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0 [ 215.404610][ C1] RBP: 0000000000068abc R08: 0000000000000000 R09: ffffffff822e631d [ 215.412640][ C1] R10: dffffc0000000000 R11: fffff940003455e1 R12: 0000000000068abc [ 215.420812][ C1] R13: dffffc0000000000 R14: ffff88813fffa5b0 R15: 0000000000001000 [ 215.428826][ C1] ? page_table_check_set+0x18d/0x730 [ 215.434468][ C1] rcu_lockdep_current_cpu_online+0x37/0x120 [ 215.440534][ C1] rcu_read_lock_held+0x1e/0x50 [ 215.445427][ C1] page_ext_lookup+0xe7/0x180 [ 215.450134][ C1] ? page_table_check_set+0x18d/0x730 [ 215.455546][ C1] page_table_check_set+0x27e/0x730 [ 215.460853][ C1] copy_pmd_range+0x4439/0x71d0 [ 215.465833][ C1] ? stack_depot_save_flags+0x40/0x860 [ 215.471473][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 215.476745][ C1] copy_page_range+0xc14/0x1270 [ 215.481664][ C1] ? __lock_acquire+0xab9/0xd20 [ 215.486550][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 215.491904][ C1] ? up_write+0x1c4/0x420 [ 215.496248][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 215.503098][ C1] dup_mmap+0xf57/0x1ac0 [ 215.507400][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 215.512227][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 215.518123][ C1] ? mm_init+0xcc3/0xef0 [ 215.522754][ C1] copy_mm+0x13c/0x4b0 [ 215.526848][ C1] copy_process+0x1706/0x3c00 [ 215.531604][ C1] ? copy_process+0x97f/0x3c00 [ 215.536486][ C1] ? __pfx_copy_process+0x10/0x10 [ 215.541586][ C1] kernel_clone+0x21e/0x840 [ 215.546119][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 215.551279][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 215.556326][ C1] __x64_sys_clone+0x18b/0x1e0 [ 215.561663][ C1] ? count_memcg_event_mm+0x21/0x260 [ 215.566970][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 215.572324][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 215.577641][ C1] ? do_syscall_64+0xbe/0x3b0 [ 215.582447][ C1] do_syscall_64+0xfa/0x3b0 [ 215.586983][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.592275][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.598361][ C1] ? clear_bhb_loop+0x60/0xb0 [ 215.603089][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.609114][ C1] RIP: 0033:0x7f973bb85493 [ 215.613602][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 215.633256][ C1] RSP: 002b:00007ffedf92ee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 215.641733][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f973bb85493 [ 215.649736][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 215.657767][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 215.665822][ C1] R10: 0000555560bc77d0 R11: 0000000000000246 R12: 0000000000000000 [ 215.673847][ C1] R13: 00000000000927c0 R14: 000000000003472e R15: 00007ffedf92eff0 [ 215.681980][ C1] [ 215.685078][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.692464][ C1] CPU: 1 UID: 0 PID: 5863 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 215.702047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.712202][ C1] Call Trace: [ 215.715491][ C1] [ 215.718343][ C1] dump_stack_lvl+0x99/0x250 [ 215.722973][ C1] ? __asan_memcpy+0x40/0x70 [ 215.727605][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.732952][ C1] ? __pfx__printk+0x10/0x10 [ 215.737568][ C1] vpanic+0x281/0x750 [ 215.741750][ C1] ? __pfx__printk+0x10/0x10 [ 215.746378][ C1] ? __pfx_vpanic+0x10/0x10 [ 215.750999][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 215.756334][ C1] panic+0xb9/0xc0 [ 215.760055][ C1] ? __pfx_panic+0x10/0x10 [ 215.764476][ C1] __warn+0x31b/0x4b0 [ 215.768457][ C1] ? __rate_control_send_low+0x5df/0x820 [ 215.774094][ C1] ? __rate_control_send_low+0x5df/0x820 [ 215.779739][ C1] report_bug+0x2be/0x4f0 [ 215.784096][ C1] ? __rate_control_send_low+0x5df/0x820 [ 215.789832][ C1] ? __rate_control_send_low+0x5df/0x820 [ 215.795486][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 215.801162][ C1] handle_bug+0x84/0x160 [ 215.805764][ C1] exc_invalid_op+0x1a/0x50 [ 215.810296][ C1] asm_exc_invalid_op+0x1a/0x20 [ 215.815249][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 215.821606][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 91 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 f2 8a 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 215.841240][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 215.847336][ C1] RAX: ad7dee5d70d3d400 RBX: 000000000000000c RCX: ffff888031eb3c00 [ 215.855305][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 215.863361][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 215.871331][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88807d06d2a8 [ 215.879307][ C1] R13: 0000000000000000 R14: ffff888079d50e40 R15: ffff888079d530d8 [ 215.887311][ C1] ? __rate_control_send_low+0x5de/0x820 [ 215.892972][ C1] rate_control_send_low+0x194/0x7a0 [ 215.898745][ C1] rate_control_get_rate+0x20b/0x5d0 [ 215.904136][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 215.910080][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 215.916465][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 215.921886][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 215.927901][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 215.933671][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 215.939676][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.945247][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.950838][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.956416][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 215.962019][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 215.967581][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 215.973184][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 215.979365][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 215.984926][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 215.992766][ C1] __iterate_interfaces+0x2ab/0x590 [ 215.998357][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 216.004560][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 216.011789][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 216.018164][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 216.025299][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 216.030586][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 216.036527][ C1] __hrtimer_run_queues+0x529/0xc60 [ 216.041945][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 216.047710][ C1] ? read_tsc+0x9/0x20 [ 216.052445][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 216.057743][ C1] handle_softirqs+0x283/0x870 [ 216.062531][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 216.067302][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 216.072585][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 216.077794][ C1] __irq_exit_rcu+0xca/0x1f0 [ 216.082393][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 216.087754][ C1] irq_exit_rcu+0x9/0x30 [ 216.092045][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 216.097727][ C1] [ 216.100695][ C1] [ 216.103650][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.109637][ C1] RIP: 0010:check_preemption_disabled+0x35/0x120 [ 216.116098][ C1] Code: 48 8b 05 be 6e 26 07 48 89 44 24 08 65 8b 05 c6 6e 26 07 65 8b 0d bb 6e 26 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d 9b 6e 26 07 <48> 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 [ 216.136854][ C1] RSP: 0018:ffffc90003def2a8 EFLAGS: 00000206 [ 216.142967][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ad7dee5d70d3d400 [ 216.151518][ C1] RDX: 0000000000000000 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0 [ 216.159759][ C1] RBP: 0000000000068abc R08: 0000000000000000 R09: ffffffff822e631d [ 216.167819][ C1] R10: dffffc0000000000 R11: fffff940003455e1 R12: 0000000000068abc [ 216.175960][ C1] R13: dffffc0000000000 R14: ffff88813fffa5b0 R15: 0000000000001000 [ 216.184151][ C1] ? page_table_check_set+0x18d/0x730 [ 216.189598][ C1] rcu_lockdep_current_cpu_online+0x37/0x120 [ 216.195797][ C1] rcu_read_lock_held+0x1e/0x50 [ 216.200698][ C1] page_ext_lookup+0xe7/0x180 [ 216.206473][ C1] ? page_table_check_set+0x18d/0x730 [ 216.211917][ C1] page_table_check_set+0x27e/0x730 [ 216.217335][ C1] copy_pmd_range+0x4439/0x71d0 [ 216.222502][ C1] ? stack_depot_save_flags+0x40/0x860 [ 216.228263][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 216.233647][ C1] copy_page_range+0xc14/0x1270 [ 216.239041][ C1] ? __lock_acquire+0xab9/0xd20 [ 216.244028][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 216.249441][ C1] ? up_write+0x1c4/0x420 [ 216.253779][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 216.260648][ C1] dup_mmap+0xf57/0x1ac0 [ 216.264907][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 216.269595][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 216.275759][ C1] ? mm_init+0xcc3/0xef0 [ 216.280214][ C1] copy_mm+0x13c/0x4b0 [ 216.284420][ C1] copy_process+0x1706/0x3c00 [ 216.289528][ C1] ? copy_process+0x97f/0x3c00 [ 216.294323][ C1] ? __pfx_copy_process+0x10/0x10 [ 216.299567][ C1] kernel_clone+0x21e/0x840 [ 216.304084][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 216.309210][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 216.314433][ C1] __x64_sys_clone+0x18b/0x1e0 [ 216.319296][ C1] ? count_memcg_event_mm+0x21/0x260 [ 216.324946][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 216.330348][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 216.335656][ C1] ? do_syscall_64+0xbe/0x3b0 [ 216.340347][ C1] do_syscall_64+0xfa/0x3b0 [ 216.344891][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.350302][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.356583][ C1] ? clear_bhb_loop+0x60/0xb0 [ 216.361534][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.367517][ C1] RIP: 0033:0x7f973bb85493 [ 216.371941][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 216.391812][ C1] RSP: 002b:00007ffedf92ee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 216.400340][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f973bb85493 [ 216.408319][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 216.416396][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 216.424477][ C1] R10: 0000555560bc77d0 R11: 0000000000000246 R12: 0000000000000000 [ 216.432457][ C1] R13: 00000000000927c0 R14: 000000000003472e R15: 00007ffedf92eff0 [ 216.440790][ C1] [ 216.444114][ C1] Kernel Offset: disabled [ 216.448798][ C1] Rebooting in 86400 seconds..