last executing test programs: 2.623607315s ago: executing program 3 (id=4310): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r0, 0x1) 1.745202368s ago: executing program 3 (id=4328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce63b15", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 1.381352071s ago: executing program 1 (id=4337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000191"], 0xfdef) 1.228338639s ago: executing program 0 (id=4341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) 1.155311198s ago: executing program 1 (id=4342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) 1.149414866s ago: executing program 0 (id=4343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1.018049431s ago: executing program 2 (id=4344): unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.011859545s ago: executing program 0 (id=4354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="2e9b5b0007e03dd65193dfb6c575963f88a86067", 0x14}, {&(0x7f00000006c0)="cb4c", 0x2}], 0x2) 1.011118777s ago: executing program 1 (id=4346): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0xc000}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 945.051571ms ago: executing program 1 (id=4347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) socket(0x11, 0x2, 0x0) 811.228486ms ago: executing program 3 (id=4349): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000051e6850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r0, 0x0, 0x100000}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x100}, 0x0) close(r1) 735.492464ms ago: executing program 1 (id=4350): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 734.916286ms ago: executing program 4 (id=4351): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000001580)="87", 0x1}], 0x2) 685.257029ms ago: executing program 3 (id=4352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) 684.960578ms ago: executing program 4 (id=4353): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x6) 634.892663ms ago: executing program 4 (id=4355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 609.669171ms ago: executing program 2 (id=4356): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 571.241749ms ago: executing program 1 (id=4357): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 570.880107ms ago: executing program 4 (id=4358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000027c0)=ANY=[@ANYBLOB="000086dd0000120000000000000064d6892b0f9a11"], 0xfd0) 570.114242ms ago: executing program 0 (id=4359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000100)="0232", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x18, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x401}}, 0x2e) 382.626841ms ago: executing program 2 (id=4360): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 321.981702ms ago: executing program 0 (id=4361): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000340)={'full', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) 244.363912ms ago: executing program 3 (id=4362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 184.60467ms ago: executing program 0 (id=4363): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 174.06396ms ago: executing program 2 (id=4364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 172.358615ms ago: executing program 4 (id=4365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x78, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x10, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x3, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x40}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x240000c4) 54.528334ms ago: executing program 3 (id=4366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b020007e03dd65193", 0xa}, {&(0x7f0000000200)="b700000006000000000000f1", 0xc}], 0x2) 53.924514ms ago: executing program 2 (id=4367): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x30800288}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 53.150092ms ago: executing program 4 (id=4368): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x34}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) 0s ago: executing program 2 (id=4369): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 65.911562][ T5813] cgroup: Unknown subsys name 'net' [ 66.028000][ T5813] cgroup: Unknown subsys name 'cpuset' [ 66.036410][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.407945][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.395714][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.402211][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.557919][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.564218][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.565977][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.576002][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.580936][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.594371][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.602736][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.610322][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.610836][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.625547][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.625719][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.633185][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.640387][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.648287][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.655219][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.662823][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.668573][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.675755][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.688919][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.691916][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.696799][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.706275][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.717003][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.726063][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.727742][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.361322][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 72.461625][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 72.540403][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 72.610961][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 72.637613][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 72.739513][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.747232][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.754529][ T5825] bridge_slave_0: entered allmulticast mode [ 72.762204][ T5825] bridge_slave_0: entered promiscuous mode [ 72.781406][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.788599][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.795846][ T5824] bridge_slave_0: entered allmulticast mode [ 72.802789][ T5824] bridge_slave_0: entered promiscuous mode [ 72.827404][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.834542][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.842004][ T5825] bridge_slave_1: entered allmulticast mode [ 72.849769][ T5825] bridge_slave_1: entered promiscuous mode [ 72.861957][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.869212][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.876427][ T5824] bridge_slave_1: entered allmulticast mode [ 72.883331][ T5824] bridge_slave_1: entered promiscuous mode [ 73.007338][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.031625][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.041801][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.049362][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.056617][ T5823] bridge_slave_0: entered allmulticast mode [ 73.063549][ T5823] bridge_slave_0: entered promiscuous mode [ 73.083345][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.092991][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.100246][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.107464][ T5835] bridge_slave_0: entered allmulticast mode [ 73.114368][ T5835] bridge_slave_0: entered promiscuous mode [ 73.123973][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.143066][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.150304][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.157769][ T5823] bridge_slave_1: entered allmulticast mode [ 73.164689][ T5823] bridge_slave_1: entered promiscuous mode [ 73.193741][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.201138][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.209070][ T5835] bridge_slave_1: entered allmulticast mode [ 73.216067][ T5835] bridge_slave_1: entered promiscuous mode [ 73.256139][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.263296][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.270662][ T5826] bridge_slave_0: entered allmulticast mode [ 73.277871][ T5826] bridge_slave_0: entered promiscuous mode [ 73.311675][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.322769][ T5824] team0: Port device team_slave_0 added [ 73.339651][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.347190][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.354477][ T5826] bridge_slave_1: entered allmulticast mode [ 73.361795][ T5826] bridge_slave_1: entered promiscuous mode [ 73.371097][ T5825] team0: Port device team_slave_0 added [ 73.378986][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.389471][ T5824] team0: Port device team_slave_1 added [ 73.397738][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.410168][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.444455][ T5825] team0: Port device team_slave_1 added [ 73.500740][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.559880][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.570343][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.577437][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.603393][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.616863][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.623820][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.650083][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.662776][ T5835] team0: Port device team_slave_0 added [ 73.669433][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.676445][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.703119][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.716369][ T5823] team0: Port device team_slave_0 added [ 73.739842][ T5835] team0: Port device team_slave_1 added [ 73.746161][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.753113][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.765728][ T5145] Bluetooth: hci2: command tx timeout [ 73.779124][ T5843] Bluetooth: hci3: command tx timeout [ 73.785096][ T5838] Bluetooth: hci1: command tx timeout [ 73.790570][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.809180][ T5823] team0: Port device team_slave_1 added [ 73.835261][ T5826] team0: Port device team_slave_0 added [ 73.845038][ T5838] Bluetooth: hci0: command tx timeout [ 73.850792][ T5838] Bluetooth: hci4: command tx timeout [ 73.885659][ T5826] team0: Port device team_slave_1 added [ 73.918995][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.926343][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.952315][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.964147][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.971231][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.997273][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.063709][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.071139][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.097036][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.119600][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.127054][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.153070][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.169162][ T5824] hsr_slave_0: entered promiscuous mode [ 74.175865][ T5824] hsr_slave_1: entered promiscuous mode [ 74.186654][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.193606][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.220147][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.236341][ T5825] hsr_slave_0: entered promiscuous mode [ 74.242545][ T5825] hsr_slave_1: entered promiscuous mode [ 74.249080][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 74.254945][ T5825] Cannot create hsr debugfs directory [ 74.261159][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.268198][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.294305][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.412702][ T5835] hsr_slave_0: entered promiscuous mode [ 74.419029][ T5835] hsr_slave_1: entered promiscuous mode [ 74.425914][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 74.431640][ T5835] Cannot create hsr debugfs directory [ 74.469410][ T5823] hsr_slave_0: entered promiscuous mode [ 74.475756][ T5823] hsr_slave_1: entered promiscuous mode [ 74.481751][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 74.487570][ T5823] Cannot create hsr debugfs directory [ 74.607834][ T5826] hsr_slave_0: entered promiscuous mode [ 74.614449][ T5826] hsr_slave_1: entered promiscuous mode [ 74.620811][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 74.626681][ T5826] Cannot create hsr debugfs directory [ 75.037098][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.056738][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.074128][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.093852][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.162533][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.174659][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.185647][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.209585][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.266959][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.287853][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.310816][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.322658][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.401976][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.419348][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.430316][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.440602][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.465845][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.542051][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.587674][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.600007][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.612422][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.619689][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.630341][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.637582][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.658597][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.668630][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.767715][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.799399][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.811214][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.845184][ T5838] Bluetooth: hci3: command tx timeout [ 75.848997][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.855554][ T5838] Bluetooth: hci1: command tx timeout [ 75.857702][ T5145] Bluetooth: hci2: command tx timeout [ 75.878174][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.930116][ T5145] Bluetooth: hci4: command tx timeout [ 75.930124][ T5838] Bluetooth: hci0: command tx timeout [ 75.932714][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.953615][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.960837][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.983880][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.991064][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.033949][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.047664][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.054884][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.087779][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.094983][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.143436][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.179390][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.186572][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.247591][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.254810][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.288833][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.322289][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.464289][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.547403][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.554592][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.627351][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.634530][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.724593][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.850510][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.919804][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.941113][ T5823] veth0_vlan: entered promiscuous mode [ 77.018221][ T5823] veth1_vlan: entered promiscuous mode [ 77.040687][ T5824] veth0_vlan: entered promiscuous mode [ 77.066681][ T5825] veth0_vlan: entered promiscuous mode [ 77.079035][ T5824] veth1_vlan: entered promiscuous mode [ 77.136179][ T5825] veth1_vlan: entered promiscuous mode [ 77.152117][ T5826] veth0_vlan: entered promiscuous mode [ 77.178027][ T5823] veth0_macvtap: entered promiscuous mode [ 77.190154][ T5824] veth0_macvtap: entered promiscuous mode [ 77.201279][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.213507][ T5826] veth1_vlan: entered promiscuous mode [ 77.224447][ T5824] veth1_macvtap: entered promiscuous mode [ 77.241702][ T5823] veth1_macvtap: entered promiscuous mode [ 77.280749][ T5825] veth0_macvtap: entered promiscuous mode [ 77.292311][ T5825] veth1_macvtap: entered promiscuous mode [ 77.313770][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.326946][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.347833][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.377996][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.385789][ T3070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.423394][ T3070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.432788][ T3070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.457497][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.466404][ T3070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.476256][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.497256][ T5826] veth0_macvtap: entered promiscuous mode [ 77.513704][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.521641][ T3070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.531481][ T3070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.567201][ T5826] veth1_macvtap: entered promiscuous mode [ 77.580072][ T3070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.589344][ T3070] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.612517][ T5835] veth0_vlan: entered promiscuous mode [ 77.635276][ T3070] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.645252][ T3070] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.654205][ T3070] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.683123][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.691784][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.704411][ T5835] veth1_vlan: entered promiscuous mode [ 77.717494][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.729120][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.779747][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.789757][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.805745][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.829596][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.838452][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.869222][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.918271][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.925631][ T5145] Bluetooth: hci2: command tx timeout [ 77.928599][ T5838] Bluetooth: hci1: command tx timeout [ 77.931512][ T5843] Bluetooth: hci3: command tx timeout [ 77.942961][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.983005][ T5835] veth0_macvtap: entered promiscuous mode [ 77.993971][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.005045][ T5145] Bluetooth: hci4: command tx timeout [ 78.010459][ T5843] Bluetooth: hci0: command tx timeout [ 78.016839][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.040494][ T5835] veth1_macvtap: entered promiscuous mode [ 78.063712][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.075369][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.102825][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.121057][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.161643][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.205377][ T3070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.238021][ T3070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.251737][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.273627][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.302257][ T3070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.323680][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.342484][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.358055][ T3070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.492286][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.517622][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.595105][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.623842][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.693713][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.703205][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.818072][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.936307][ T5998] ip6gretap0: entered promiscuous mode [ 79.942081][ T5998] macsec1: entered promiscuous mode [ 80.005641][ T5843] Bluetooth: hci2: command tx timeout [ 80.011968][ T5145] Bluetooth: hci3: command tx timeout [ 80.015342][ T5838] Bluetooth: hci1: command tx timeout [ 80.053484][ T5998] ip6gretap0: left promiscuous mode [ 80.085080][ T5838] Bluetooth: hci0: command tx timeout [ 80.085627][ T5843] Bluetooth: hci4: command tx timeout [ 80.194409][ T6000] warning: `syz.2.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.178003][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.49'. [ 82.839200][ T6074] netlink: 152 bytes leftover after parsing attributes in process `syz.2.57'. [ 82.882786][ T6076] netlink: 152 bytes leftover after parsing attributes in process `syz.1.59'. [ 83.068627][ T6082] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 83.098996][ T6082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.291249][ T6088] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.64'. [ 83.952808][ T6116] bond0: entered promiscuous mode [ 83.984893][ T6116] bond_slave_0: entered promiscuous mode [ 83.998502][ T6116] bond_slave_1: entered promiscuous mode [ 84.037205][ T6116] batadv0: entered promiscuous mode [ 84.056651][ T6116] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 84.131113][ T6116] bond0: left promiscuous mode [ 84.164945][ T6116] bond_slave_0: left promiscuous mode [ 84.173809][ T6116] bond_slave_1: left promiscuous mode [ 84.199388][ T6116] batadv0: left promiscuous mode [ 84.829645][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 85.708392][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 86.090714][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 86.125161][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 86.399501][ T6220] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 86.438350][ T6220] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 86.733639][ T43] cfg80211: failed to load regulatory.db [ 86.978889][ T6253] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.055242][ T5195] udevd[5195]: worker [5833] terminated by signal 33 (Unknown signal 33) [ 87.056663][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 87.094897][ T5195] udevd[5195]: worker [5833] failed while handling '/devices/virtual/block/loop3' [ 88.172607][ T6294] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 88.196285][ T6294] syzkaller1: linktype set to 778 [ 88.352406][ T6299] sctp: [Deprecated]: syz.3.161 (pid 6299) Use of int in maxseg socket option. [ 88.352406][ T6299] Use struct sctp_assoc_value instead [ 88.886190][ T6324] Zero length message leads to an empty skb [ 89.097201][ T6334] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 89.109718][ T6336] netlink: 71 bytes leftover after parsing attributes in process `syz.2.179'. [ 89.317474][ T6346] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 89.560968][ T6360] netlink: 'syz.4.191': attribute type 8 has an invalid length. [ 89.607451][ T6362] netlink: 'syz.1.190': attribute type 6 has an invalid length. [ 90.036550][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 90.487976][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.516382][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.546919][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.579543][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.687151][ T6411] Bluetooth: MGMT ver 1.23 [ 90.785578][ T6417] netlink: 'syz.2.217': attribute type 6 has an invalid length. [ 91.145622][ T6441] macvlan0: entered promiscuous mode [ 91.165597][ T6441] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 91.184857][ T6441] netlink: 'syz.0.225': attribute type 2 has an invalid length. [ 91.211962][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 91.319342][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 91.366349][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 91.950810][ T5843] block nbd0: Receive control failed (result -32) [ 92.630107][ T6517] netlink: 'syz.0.263': attribute type 2 has an invalid length. [ 92.653076][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 92.727935][ T6521] block nbd1: server does not support multiple connections per device. [ 92.747668][ T6521] block nbd1: shutting down sockets [ 92.976645][ T6536] Bluetooth: MGMT ver 1.23 [ 93.133343][ T6546] netlink: 64 bytes leftover after parsing attributes in process `syz.4.277'. [ 93.439400][ T6561] netlink: 168 bytes leftover after parsing attributes in process `syz.3.285'. [ 93.485130][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.286'. [ 93.554658][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.286'. [ 93.576577][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.286'. [ 94.074228][ T6594] syz.3.299 uses obsolete (PF_INET,SOCK_PACKET) [ 96.014080][ T6670] bond1: ARP target 9.0.0.0 is already present [ 96.020617][ T6670] bond1: option arp_ip_target: invalid value (9) [ 96.053837][ T6670] bond1 (unregistering): Released all slaves [ 96.270377][ T6682] __nla_validate_parse: 5 callbacks suppressed [ 96.270392][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 96.551773][ T6695] netlink: 64 bytes leftover after parsing attributes in process `syz.3.347'. [ 96.971552][ T6711] tap0: tun_chr_ioctl cmd 1074025677 [ 96.986372][ T6711] tap0: linktype set to 6 [ 97.187705][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.358'. [ 97.305547][ T6728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.372'. [ 97.891730][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.376'. [ 98.115538][ T6769] veth0_vlan: entered allmulticast mode [ 98.175413][ T6770] : renamed from vlan0 [ 99.065658][ T6794] sctp: [Deprecated]: syz.3.393 (pid 6794) Use of int in max_burst socket option deprecated. [ 99.065658][ T6794] Use struct sctp_assoc_value instead [ 99.512171][ T6819] veth0_vlan: entered allmulticast mode [ 99.553090][ T6819] : renamed from vlan0 [ 99.802316][ T6825] tap0: tun_chr_ioctl cmd 1074025677 [ 99.820175][ T6825] tap0: linktype set to 6 [ 100.020602][ T6835] sctp: [Deprecated]: syz.0.411 (pid 6835) Use of int in max_burst socket option deprecated. [ 100.020602][ T6835] Use struct sctp_assoc_value instead [ 100.449597][ T6845] ip6gretap0: entered promiscuous mode [ 100.475274][ T6845] macsec1: entered promiscuous mode [ 100.518289][ T6845] ip6gretap0: left promiscuous mode [ 100.559099][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 100.822811][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 100.858021][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 101.179540][ T5835] cgroup: fork rejected by pids controller in /syz0 [ 101.935926][ T6912] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 101.956970][ T6912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.473314][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.482143][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.490466][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.499319][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.507161][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.888707][ T6931] chnl_net:caif_netlink_parms(): no params data found [ 103.224970][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.232138][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.265953][ T6931] bridge_slave_0: entered allmulticast mode [ 103.279464][ T6931] bridge_slave_0: entered promiscuous mode [ 103.320526][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.368382][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.385177][ T6931] bridge_slave_1: entered allmulticast mode [ 103.392873][ T6931] bridge_slave_1: entered promiscuous mode [ 103.576555][ T6931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.608431][ T6931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.784067][ T6931] team0: Port device team_slave_0 added [ 103.810932][ T6931] team0: Port device team_slave_1 added [ 103.896722][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.912013][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.947867][ T6931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.987960][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.003069][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.044639][ T6931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.143572][ T6931] hsr_slave_0: entered promiscuous mode [ 104.153757][ T6931] hsr_slave_1: entered promiscuous mode [ 104.160873][ T6931] debugfs: 'hsr0' already exists in 'hsr' [ 104.174863][ T6931] Cannot create hsr debugfs directory [ 104.529628][ T6931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.566787][ T5838] Bluetooth: hci4: command tx timeout [ 104.633822][ T6931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.702515][ T7024] netlink: 'syz.3.497': attribute type 15 has an invalid length. [ 104.753081][ T6931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.764187][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 104.972070][ T6931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.292059][ T6931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.368848][ T6931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.397442][ T6931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.419891][ T6931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.578307][ T7075] tap0: tun_chr_ioctl cmd 1074025678 [ 105.583881][ T7075] tap0: group set to 0 [ 105.632922][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.696069][ T6931] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.721243][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.728431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.773330][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.780545][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.940641][ T7092] netlink: 'syz.1.523': attribute type 15 has an invalid length. [ 106.212898][ T7107] pim6reg: entered allmulticast mode [ 106.258605][ T7106] pim6reg: left allmulticast mode [ 106.364717][ T7115] sctp: [Deprecated]: syz.3.533 (pid 7115) Use of int in max_burst socket option. [ 106.364717][ T7115] Use struct sctp_assoc_value instead [ 106.432157][ T6931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.438908][ T7118] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 106.534373][ T6931] veth0_vlan: entered promiscuous mode [ 106.560957][ T6931] veth1_vlan: entered promiscuous mode [ 106.645124][ T5838] Bluetooth: hci4: command tx timeout [ 106.668528][ T6931] veth0_macvtap: entered promiscuous mode [ 106.691522][ T6931] veth1_macvtap: entered promiscuous mode [ 106.788212][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.824763][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.865706][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.896482][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.934088][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.544'. [ 106.972563][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.012773][ T7143] sctp: [Deprecated]: syz.1.547 (pid 7143) Use of int in max_burst socket option. [ 107.012773][ T7143] Use struct sctp_assoc_value instead [ 107.064296][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.196113][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.213901][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.257028][ T7153] netlink: 'syz.1.551': attribute type 25 has an invalid length. [ 107.290827][ T7153] netlink: 'syz.1.551': attribute type 7 has an invalid length. [ 107.356995][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.378663][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.492036][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.558'. [ 107.536056][ T7166] nbd: couldn't find a device at index 65546 [ 107.953697][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 108.032984][ T7191] macvlan0: entered promiscuous mode [ 108.053852][ T7191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.579'. [ 108.099272][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 108.247901][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 108.294125][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.576'. [ 108.339500][ T7216] netlink: 300 bytes leftover after parsing attributes in process `syz.1.580'. [ 108.588349][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 108.622641][ T7231] sctp: [Deprecated]: syz.2.588 (pid 7231) Use of int in max_burst socket option. [ 108.622641][ T7231] Use struct sctp_assoc_value instead [ 108.725217][ T5838] Bluetooth: hci4: command tx timeout [ 109.156568][ T7263] xt_hashlimit: max too large, truncated to 1048576 [ 109.218474][ T7265] sctp: [Deprecated]: syz.3.603 (pid 7265) Use of int in max_burst socket option. [ 109.218474][ T7265] Use struct sctp_assoc_value instead [ 109.947023][ T7314] netlink: 'syz.0.626': attribute type 5 has an invalid length. [ 110.102813][ T7326] netem: incorrect ge model size [ 110.134972][ T7326] netem: change failed [ 110.337405][ T7339] tap0: tun_chr_ioctl cmd 1074025676 [ 110.344902][ T7339] tap0: owner set to 0 [ 110.459275][ T7349] netlink: 'syz.3.642': attribute type 5 has an invalid length. [ 110.661798][ T7365] __nla_validate_parse: 3 callbacks suppressed [ 110.661814][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 110.700844][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 110.805199][ T5838] Bluetooth: hci4: command tx timeout [ 110.968338][ T7382] netlink: 36 bytes leftover after parsing attributes in process `syz.3.658'. [ 110.973965][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 111.015790][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.659'. [ 111.025250][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 111.384049][ T7401] netlink: 'syz.4.667': attribute type 12 has an invalid length. [ 111.399361][ T7401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.667'. [ 111.852094][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 112.008593][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 112.148268][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 113.457116][ T7529] batadv_slave_1: entered promiscuous mode [ 113.466057][ T7529] batman_adv: batadv0: Adding interface: macvlan3 [ 113.472573][ T7529] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.502746][ T7529] batman_adv: batadv0: Interface activated: macvlan3 [ 114.679340][ T7575] netlink: 'syz.0.747': attribute type 2 has an invalid length. [ 115.820690][ T7635] __nla_validate_parse: 7 callbacks suppressed [ 115.820710][ T7635] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.776'. [ 115.864151][ T7639] batadv_slave_1: entered promiscuous mode [ 115.872210][ T7639] batman_adv: batadv0: Adding interface: macvlan2 [ 115.878977][ T7639] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.930024][ T7639] batman_adv: batadv0: Interface activated: macvlan2 [ 116.115206][ T7654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.785'. [ 116.159919][ T7656] netlink: 7906 bytes leftover after parsing attributes in process `syz.0.786'. [ 116.596056][ T7678] batadv_slave_1: entered promiscuous mode [ 116.605902][ T7678] batman_adv: batadv0: Adding interface: macvlan2 [ 116.612651][ T7678] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.638615][ T7678] batman_adv: batadv0: Interface activated: macvlan2 [ 117.142024][ T7696] netlink: 272 bytes leftover after parsing attributes in process `syz.4.806'. [ 117.961532][ T7746] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 118.985699][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'. [ 119.025200][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.853'. [ 119.055587][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'. [ 119.085739][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.853'. [ 119.094640][ T7798] netlink: 'syz.3.853': attribute type 6 has an invalid length. [ 119.414816][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 119.686645][ T7845] batadv_slave_1: entered promiscuous mode [ 119.704099][ T7844] batadv_slave_1: left promiscuous mode [ 120.107449][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 120.162812][ T10] hid-generic 0005:046D:05DF.0001: item fetching failed at offset 0/1 [ 120.215488][ T10] hid-generic 0005:046D:05DF.0001: probe with driver hid-generic failed with error -22 [ 121.177152][ T7949] __nla_validate_parse: 1 callbacks suppressed [ 121.177169][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'. [ 121.277399][ T7950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.288702][ T7950] bond0: (slave bond1): Enslaving as an active interface with an up link [ 121.901957][ T7979] bond1: option ad_user_port_key: invalid value (65535) [ 121.928765][ T7979] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 121.956365][ T7979] bond1 (unregistering): Released all slaves [ 122.413203][ T5882] IPVS: starting estimator thread 0... [ 122.544969][ T8006] IPVS: using max 27 ests per chain, 64800 per kthread [ 122.705489][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 122.726665][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 123.067540][ T5882] IPVS: starting estimator thread 0... [ 123.156517][ T8041] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 123.171265][ T8041] syzkaller1: linktype set to 823 [ 123.176473][ T8036] IPVS: using max 35 ests per chain, 84000 per kthread [ 123.187793][ T5896] hid-generic 0005:046D:05DF.0002: item fetching failed at offset 0/1 [ 123.202060][ T5896] hid-generic 0005:046D:05DF.0002: probe with driver hid-generic failed with error -22 [ 123.300853][ T8047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.310835][ T8047] bond0: (slave bond1): Enslaving as an active interface with an up link [ 123.331013][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 123.356627][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 124.453216][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 124.803762][ T8138] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 124.817044][ T8138] syzkaller1: linktype set to 823 [ 125.037828][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1012'. [ 125.063995][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 125.085393][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1012'. [ 125.285901][ T8169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 125.413471][ T8176] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1032'. [ 125.455353][ T8178] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 125.461388][ T8178] syzkaller1: linktype set to 823 [ 126.453926][ T8237] __nla_validate_parse: 3 callbacks suppressed [ 126.453945][ T8237] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1053'. [ 127.017603][ T8268] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1068'. [ 127.649611][ T8310] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 127.921074][ T8324] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 128.260106][ T8336] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 128.453859][ T8346] bridge0: entered promiscuous mode [ 128.486944][ T8346] bridge0: port 3(macvtap1) entered blocking state [ 128.493633][ T8346] bridge0: port 3(macvtap1) entered disabled state [ 128.536100][ T8346] macvtap1: entered allmulticast mode [ 128.541552][ T8346] bridge0: entered allmulticast mode [ 128.583129][ T8346] macvtap1: left allmulticast mode [ 128.592642][ T8346] bridge0: left allmulticast mode [ 128.618767][ T8346] bridge0: left promiscuous mode [ 128.791096][ T8364] netlink: 'syz.2.1115': attribute type 6 has an invalid length. [ 129.911089][ T8416] netlink: 1076 bytes leftover after parsing attributes in process `syz.4.1137'. [ 129.936869][ T8416] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 131.468643][ T8512] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1183'. [ 132.221690][ T8550] bond0: Unable to set up delay as MII monitoring is disabled [ 132.373244][ T8559] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1206'. [ 132.399601][ T8559] openvswitch: netlink: Message has 16 unknown bytes. [ 132.732231][ T8565] tap0: tun_chr_ioctl cmd 1074025681 [ 132.810631][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.817148][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.383237][ T8603] erspan0: entered promiscuous mode [ 133.488670][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 134.437791][ T3070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.562582][ T3070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.694454][ T3070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.852471][ T3070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.056918][ T8664] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.205777][ T3070] bridge_slave_1: left allmulticast mode [ 135.211645][ T3070] bridge_slave_1: left promiscuous mode [ 135.240083][ T3070] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.276809][ T3070] bridge_slave_0: left allmulticast mode [ 135.282498][ T3070] bridge_slave_0: left promiscuous mode [ 135.311928][ T3070] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.330991][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.340944][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.349442][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.358411][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.369879][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.904707][ T3070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.920455][ T3070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.933046][ T3070] bond0 (unregistering): (slave bond1): Releasing backup interface [ 135.942893][ T3070] bond0 (unregistering): Released all slaves [ 136.046818][ T3070] bond1 (unregistering): Released all slaves [ 136.901640][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1259'. [ 137.071746][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 137.444960][ T5843] Bluetooth: hci4: command tx timeout [ 137.548511][ T8716] tap0: tun_chr_ioctl cmd 1074025677 [ 137.562377][ T8716] tap0: linktype set to 825 [ 137.758431][ T3070] hsr_slave_0: left promiscuous mode [ 137.771527][ T3070] hsr_slave_1: left promiscuous mode [ 137.778893][ T3070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.787299][ T3070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.808565][ T3070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.825589][ T3070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.849240][ T3070] batman_adv: batadv0: Interface deactivated: macvlan2 [ 137.869363][ T3070] batman_adv: batadv0: Removing interface: macvlan2 [ 137.894510][ T3070] batadv_slave_1: left promiscuous mode [ 137.900860][ T3070] veth1_macvtap: left promiscuous mode [ 137.906891][ T3070] veth0_macvtap: left promiscuous mode [ 137.912507][ T3070] veth1_vlan: left promiscuous mode [ 137.918237][ T3070] veth0_vlan: left promiscuous mode [ 138.323991][ T3070] team0 (unregistering): Port device team_slave_1 removed [ 138.354367][ T3070] team0 (unregistering): Port device team_slave_0 removed [ 138.685842][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 138.826010][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 139.141851][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.159535][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.179813][ T8674] bridge_slave_0: entered allmulticast mode [ 139.200596][ T8674] bridge_slave_0: entered promiscuous mode [ 139.242460][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.261525][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.270628][ T8674] bridge_slave_1: entered allmulticast mode [ 139.278554][ T8674] bridge_slave_1: entered promiscuous mode [ 139.452250][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.493645][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.527482][ T5843] Bluetooth: hci4: command tx timeout [ 139.638575][ T8674] team0: Port device team_slave_0 added [ 139.653058][ T8674] team0: Port device team_slave_1 added [ 139.722175][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 139.807156][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.821254][ T8808] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1321'. [ 139.831729][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.894536][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.916884][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.923855][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.955912][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.002187][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1325'. [ 140.059584][ T8674] hsr_slave_0: entered promiscuous mode [ 140.076696][ T8674] hsr_slave_1: entered promiscuous mode [ 140.083100][ T8674] debugfs: 'hsr0' already exists in 'hsr' [ 140.110979][ T8674] Cannot create hsr debugfs directory [ 140.488098][ T8840] netlink: 'syz.1.1336': attribute type 24 has an invalid length. [ 140.497204][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1336'. [ 140.506400][ T8840] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 140.567150][ T1154] bond0: (slave bond1): link status definitely down, disabling slave [ 140.718125][ T8674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.737970][ T8674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.763255][ T8674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.786801][ T8674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.008201][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.110459][ T8867] delete_channel: no stack [ 141.246110][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 141.267156][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1347'. [ 141.323284][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.357860][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.365043][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.403912][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 141.405020][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.419971][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.606764][ T5838] Bluetooth: hci4: command tx timeout [ 141.742099][ T8900] tipc: Started in network mode [ 141.749035][ T8900] tipc: Node identity fed47bf78c70f607, cluster identity 4711 [ 141.759006][ T8900] tipc: Enabling of bearer rejected, failed to enable media [ 141.817362][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.935303][ T8674] veth0_vlan: entered promiscuous mode [ 141.950744][ T8674] veth1_vlan: entered promiscuous mode [ 141.997774][ T8674] veth0_macvtap: entered promiscuous mode [ 142.015445][ T8674] veth1_macvtap: entered promiscuous mode [ 142.047716][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.067953][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.087671][ T3070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.106742][ T3070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.124022][ T3070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.134152][ T3070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.249402][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.275360][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.285210][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'. [ 142.296163][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 142.306546][ T8911] netlink: 'syz.2.1361': attribute type 18 has an invalid length. [ 142.337564][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.346121][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.402078][ T8892] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 142.544867][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 142.673037][ T8931] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 142.707618][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 142.893581][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 142.919363][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 143.121475][ T8953] tipc: Started in network mode [ 143.137853][ T8953] tipc: Node identity 4246, cluster identity 4711 [ 143.148355][ T8953] tipc: Node number set to 16966 [ 143.157362][ T8953] tipc: Cannot configure node identity twice [ 143.604395][ T8979] netlink: 'syz.3.1393': attribute type 9 has an invalid length. [ 143.658521][ T8979] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1393'. [ 143.686810][ T5843] Bluetooth: hci4: command tx timeout [ 144.072595][ T8999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.037107][ T9062] netlink: 'syz.1.1430': attribute type 1 has an invalid length. [ 145.063859][ T9062] netlink: 'syz.1.1430': attribute type 7 has an invalid length. [ 145.094545][ T9062] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1430'. [ 145.285593][ T9069] nbd1: detected capacity change from 0 to 127 [ 145.295813][ T5843] block nbd1: Receive control failed (result -32) [ 145.314953][ T9074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1437'. [ 145.457791][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 146.536658][ T9150] netlink: 'syz.1.1471': attribute type 4 has an invalid length. [ 146.906860][ T9171] openvswitch: netlink: Message has 16 unknown bytes. [ 147.552195][ T9208] netlink: 'syz.4.1494': attribute type 3 has an invalid length. [ 147.569184][ T9208] __nla_validate_parse: 12 callbacks suppressed [ 147.569208][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 148.000766][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 148.544960][ T9253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.795989][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 148.811365][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 148.824400][ T9269] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1523'. [ 149.156468][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1532'. [ 149.666159][ T9309] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 149.950199][ T9327] sctp: [Deprecated]: syz.4.1549 (pid 9327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.950199][ T9327] Use struct sctp_sack_info instead [ 150.331290][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'. [ 151.112116][ T9409] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 151.180381][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1592'. [ 151.343705][ T9427] netlink: 'syz.0.1598': attribute type 64 has an invalid length. [ 151.487889][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 151.889056][ T9457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1613'. [ 152.125840][ T9472] team0: No ports can be present during mode change [ 152.497259][ T9491] pimreg1: tun_chr_ioctl cmd 1074025677 [ 152.503237][ T9491] pimreg1: linktype set to 804 [ 152.634299][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'. [ 152.650574][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'. [ 152.745093][ T9504] nbd2: detected capacity change from 0 to 127 [ 152.757677][ T5843] block nbd2: Receive control failed (result -32) [ 152.996933][ T9524] veth0_to_bridge: entered promiscuous mode [ 153.005338][ T9523] veth0_to_bridge: left promiscuous mode [ 153.368083][ T9538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1651'. [ 153.934487][ T9578] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 153.962009][ T9578] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1671'. [ 153.971818][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 154.023196][ T9586] netlink: 'syz.4.1674': attribute type 1 has an invalid length. [ 154.033862][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 154.156625][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 154.459841][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1687'. [ 154.887153][ T1082] wlan1: Trigger new scan to find an IBSS to join [ 155.747495][ T9686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.920820][ T9689] delete_channel: no stack [ 155.932947][ T9695] bridge0: entered promiscuous mode [ 155.947805][ T9695] bridge0: port 3(macvtap1) entered blocking state [ 155.956149][ T9695] bridge0: port 3(macvtap1) entered disabled state [ 155.962903][ T9695] macvtap1: entered allmulticast mode [ 156.016070][ T9695] bridge0: entered allmulticast mode [ 156.023995][ T9695] macvtap1: left allmulticast mode [ 156.029818][ T9695] bridge0: left allmulticast mode [ 156.044099][ T9695] bridge0: left promiscuous mode [ 156.217479][ T9710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1728'. [ 156.609678][ T9737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1743'. [ 157.769818][ T9815] __nla_validate_parse: 7 callbacks suppressed [ 157.769842][ T9815] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1780'. [ 157.838714][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 158.123639][ T9842] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1791'. [ 158.365845][ T9858] vlan0: entered promiscuous mode [ 158.375952][ T9858] bond0: entered promiscuous mode [ 158.381159][ T9858] bond_slave_0: entered promiscuous mode [ 158.395100][ T9858] bond_slave_1: entered promiscuous mode [ 158.847194][ T9875] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1803'. [ 159.145913][ T9885] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1808'. [ 159.317282][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 159.455110][ T9905] bond1 (unregistering): Released all slaves [ 159.648453][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'. [ 160.347264][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1845'. [ 160.465464][ T9964] bond2: entered promiscuous mode [ 160.475589][ T9964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.596515][ T9964] bond2 (unregistering): Released all slaves [ 161.013094][ T9996] netlink: 'syz.2.1860': attribute type 32 has an invalid length. [ 161.043782][ T9996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1860'. [ 161.069541][ T9996] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 161.194358][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fabf800: rx timeout, send abort [ 161.357324][T10016] netlink: 'syz.3.1871': attribute type 25 has an invalid length. [ 161.365542][T10016] netlink: 'syz.3.1871': attribute type 7 has an invalid length. [ 161.401126][T10019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1872'. [ 161.703668][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fabf800: abort rx timeout. Force session deactivation [ 162.070674][T10065] pimreg: entered allmulticast mode [ 162.103232][T10068] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 162.118067][T10065] pimreg: left allmulticast mode [ 162.639363][T10104] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 162.897175][T10125] bridge_slave_0: invalid flags given to default FDB implementation [ 162.951048][T10128] netlink: 'syz.4.1924': attribute type 11 has an invalid length. [ 162.995042][T10128] __nla_validate_parse: 2 callbacks suppressed [ 162.995061][T10128] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1924'. [ 163.175210][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 163.473796][T10165] openvswitch: netlink: Missing key (keys=40, expected=80) [ 163.559373][T10169] netlink: 'syz.3.1944': attribute type 2 has an invalid length. [ 163.570765][T10172] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1947'. [ 163.591442][T10172] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 163.644974][T10176] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 164.496852][T10199] netlink: 'syz.4.1959': attribute type 1 has an invalid length. [ 164.514910][T10199] netlink: 'syz.4.1959': attribute type 2 has an invalid length. [ 164.745892][T10217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1966'. [ 164.769894][T10217] netem: unknown loss type 13 [ 164.779650][T10217] netem: change failed [ 165.044117][T10236] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 165.061924][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1978'. [ 165.480666][T10263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1989'. [ 165.508592][T10263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1989'. [ 165.699788][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1994'. [ 165.699791][T10274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1993'. [ 165.699821][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1994'. [ 165.782415][T10274] bond1: entered promiscuous mode [ 165.790208][T10274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.010003][T10274] bond1 (unregistering): Released all slaves [ 166.199226][T10298] pimreg: entered allmulticast mode [ 166.205826][T10292] nbd3: detected capacity change from 0 to 127 [ 166.216347][T10298] pimreg: left allmulticast mode [ 166.222007][ T5843] block nbd3: Receive control failed (result -32) [ 166.697657][T10322] bond1: entered promiscuous mode [ 166.703232][T10322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.959935][T10322] bond1 (unregistering): Released all slaves [ 166.985444][T10336] pimreg: entered allmulticast mode [ 167.007574][T10336] pimreg: left allmulticast mode [ 167.105535][T10340] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 167.133422][T10342] bridge0: entered promiscuous mode [ 167.141203][T10342] bridge0: port 3(macvtap1) entered blocking state [ 167.149303][T10342] bridge0: port 3(macvtap1) entered disabled state [ 167.156829][T10342] macvtap1: entered allmulticast mode [ 167.162306][T10342] bridge0: entered allmulticast mode [ 167.170948][T10342] macvtap1: left allmulticast mode [ 167.176737][T10342] bridge0: left allmulticast mode [ 167.183199][T10342] bridge0: left promiscuous mode [ 167.834563][T10377] pimreg: entered allmulticast mode [ 167.843438][T10377] pimreg: left allmulticast mode [ 168.199913][T10389] __nla_validate_parse: 4 callbacks suppressed [ 168.199933][T10389] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2044'. [ 168.878134][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 169.043880][T10427] pimreg: entered allmulticast mode [ 169.082636][T10427] pimreg: left allmulticast mode [ 169.385107][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 169.404074][T10444] macvlan0: entered promiscuous mode [ 169.442815][T10444] netlink: 'syz.0.2067': attribute type 1 has an invalid length. [ 169.478246][T10444] netlink: 'syz.0.2067': attribute type 2 has an invalid length. [ 169.497234][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 169.690382][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 169.716916][T10467] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 170.108760][T10492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2090'. [ 170.342965][T10496] tap0: tun_chr_ioctl cmd 2147767521 [ 171.640377][T10545] geneve2: entered promiscuous mode [ 171.648089][T10545] geneve2: entered allmulticast mode [ 171.943739][T10560] bridge0: entered promiscuous mode [ 171.974597][T10560] bridge0: port 3(macvtap2) entered blocking state [ 172.031025][T10560] bridge0: port 3(macvtap2) entered disabled state [ 172.053912][T10560] macvtap2: entered allmulticast mode [ 172.079291][T10560] bridge0: entered allmulticast mode [ 172.087632][T10560] macvtap2: left allmulticast mode [ 172.092780][T10560] bridge0: left allmulticast mode [ 172.105259][T10560] bridge0: left promiscuous mode [ 172.982724][T10615] netlink: 'syz.0.2141': attribute type 1 has an invalid length. [ 173.152958][T10625] ip6tnl1: entered allmulticast mode [ 173.252921][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 173.504456][T10644] netlink: 'syz.3.2156': attribute type 23 has an invalid length. [ 174.265629][T10683] erspan0: entered promiscuous mode [ 175.440221][T10711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.535193][T10714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.967391][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'. [ 176.115594][T10764] netlink: 'syz.1.2206': attribute type 4 has an invalid length. [ 176.573649][T10791] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2219'. [ 176.654718][T10795] blkio.reset_stats is deprecated [ 176.689298][T10799] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2223'. [ 176.742133][T10804] veth0_to_bridge: entered promiscuous mode [ 176.749749][T10804] veth0_to_bridge: left promiscuous mode [ 176.871694][T10812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2228'. [ 176.963254][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2228'. [ 177.036206][T10817] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2230'. [ 177.277060][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2234'. [ 177.393484][T10840] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2243'. [ 177.418100][T10840] netlink: 'syz.3.2243': attribute type 9 has an invalid length. [ 177.438016][T10840] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2243'. [ 177.857201][T10868] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 178.312944][T10888] __nla_validate_parse: 1 callbacks suppressed [ 178.312993][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 178.959059][T10928] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 178.980726][T10928] netlink: 'syz.1.2283': attribute type 2 has an invalid length. [ 179.004542][T10928] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 179.013357][T10928] netlink: 'syz.1.2283': attribute type 2 has an invalid length. [ 179.738232][T10974] netlink: 'syz.3.2303': attribute type 83 has an invalid length. [ 180.372155][ T43] hid-generic 0005:16C0:05DF.0003: unknown main item tag 0x0 [ 180.428676][ T43] hid-generic 0005:16C0:05DF.0003: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 183.161081][T11162] netlink: 'syz.4.2385': attribute type 3 has an invalid length. [ 183.323713][T11166] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2389'. [ 183.862606][T11198] netlink: 'syz.0.2405': attribute type 14 has an invalid length. [ 184.111606][T11212] sctp: [Deprecated]: syz.3.2410 (pid 11212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.111606][T11212] Use struct sctp_sack_info instead [ 184.361305][T11231] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 184.637024][T11242] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 184.776506][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 185.210003][T11260] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2432'. [ 185.508782][T11280] netlink: 'syz.3.2443': attribute type 2 has an invalid length. [ 185.559348][T11280] !: entered promiscuous mode [ 185.598570][T11280] netlink: 'syz.3.2443': attribute type 2 has an invalid length. [ 185.631598][T11280] !: left promiscuous mode [ 185.646451][T11292] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2448'. [ 185.700643][T11294] sctp: [Deprecated]: syz.1.2449 (pid 11294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.700643][T11294] Use struct sctp_sack_info instead [ 186.241602][T11326] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2462'. [ 186.787584][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 186.814241][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 187.345497][T11378] syz.2.2487 (11378) used greatest stack depth: 18248 bytes left [ 187.397333][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 187.540709][T11398] netlink: 'syz.4.2497': attribute type 2 has an invalid length. [ 187.590361][T11402] netlink: 'syz.4.2497': attribute type 2 has an invalid length. [ 187.678686][T11398] !: entered promiscuous mode [ 187.690951][T11402] !: left promiscuous mode [ 187.839452][T11414] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 187.933119][T11419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2507'. [ 187.992246][T11423] netlink: 'syz.1.2509': attribute type 8 has an invalid length. [ 188.224698][T11439] netlink: 'syz.2.2518': attribute type 2 has an invalid length. [ 188.249361][T11439] !: entered promiscuous mode [ 188.254474][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'. [ 188.259842][T11439] netlink: 'syz.2.2518': attribute type 2 has an invalid length. [ 188.271852][T11439] !: left promiscuous mode [ 188.573728][T11459] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2526'. [ 188.821983][T11473] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2533'. [ 189.247559][T11495] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.958468][T11537] raw_sendmsg: syz.2.2563 forgot to set AF_INET. Fix it! [ 190.411881][T11567] netlink: 'syz.0.2578': attribute type 3 has an invalid length. [ 190.719799][T11581] netlink: 'syz.4.2584': attribute type 12 has an invalid length. [ 190.737224][T11581] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2584'. [ 190.917402][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.383124][T11620] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 192.022687][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2618'. [ 192.331660][T11654] team0 (unregistering): Port device team_slave_0 removed [ 192.379276][T11654] team0 (unregistering): Port device team_slave_1 removed [ 192.793716][T11680] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 192.809544][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2630'. [ 193.041612][ T43] IPVS: starting estimator thread 0... [ 193.042253][T11696] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 193.066898][T11698] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 193.070547][T11696] netlink: 'syz.1.2638': attribute type 2 has an invalid length. [ 193.145322][T11699] IPVS: using max 26 ests per chain, 62400 per kthread [ 193.368460][ T5843] Bluetooth: hci4: command tx timeout [ 193.692260][T11718] tap0: tun_chr_ioctl cmd 1074812118 [ 194.169100][T11720] netlink: 'syz.2.2648': attribute type 11 has an invalid length. [ 194.193740][T11720] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2648'. [ 194.258564][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.360787][T11730] syzkaller1: entered promiscuous mode [ 194.404222][T11730] syzkaller1: entered allmulticast mode [ 194.493099][ T30] audit: type=1800 audit(1763533068.589:2): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2654" name="memory.events" dev="tmpfs" ino=2680 res=0 errno=0 [ 194.596935][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2660'. [ 194.631725][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.674069][T11747] bridge_slave_1 (unregistering): left allmulticast mode [ 194.684707][T11747] bridge_slave_1 (unregistering): left promiscuous mode [ 194.692482][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.737853][ T5836] Bluetooth: hci4: link tx timeout [ 194.744324][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.103154][ T983] hid-generic 0005:0007:0008.0004: item fetching failed at offset 1/2 [ 195.123701][ T983] hid-generic 0005:0007:0008.0004: probe with driver hid-generic failed with error -22 [ 195.183038][T11787] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2676'. [ 195.301355][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 195.331737][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2680'. [ 195.587004][T11812] syz_tun: entered allmulticast mode [ 195.645174][T11812] dvmrp6: entered allmulticast mode [ 195.687126][T11814] sctp: [Deprecated]: syz.2.2688 (pid 11814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.687126][T11814] Use struct sctp_sack_info instead [ 195.729371][T11810] syz_tun: left allmulticast mode [ 195.906052][T11828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2695'. [ 196.089771][T11837] netlink: 'syz.1.2698': attribute type 3 has an invalid length. [ 196.112257][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 196.330608][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.334811][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 196.342920][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 196.458693][T11860] syzkaller1: entered promiscuous mode [ 196.464199][T11860] syzkaller1: entered allmulticast mode [ 196.744055][T11873] sctp: [Deprecated]: syz.0.2713 (pid 11873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.744055][T11873] Use struct sctp_sack_info instead [ 196.805964][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 197.314574][ T5903] hid-generic 0005:16C0:5505.0005: item fetching failed at offset 0/1 [ 197.333324][ T5903] hid-generic 0005:16C0:5505.0005: probe with driver hid-generic failed with error -22 [ 197.516712][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 197.615683][T11919] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 197.972400][T11947] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2733'. [ 198.039149][T11943] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2733'. [ 198.308407][T11967] syzkaller1: entered promiscuous mode [ 198.319695][T11967] syzkaller1: entered allmulticast mode [ 199.456274][T12047] __nla_validate_parse: 1 callbacks suppressed [ 199.456292][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 200.653040][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.727256][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.101139][T12146] dummy0: entered promiscuous mode [ 201.120235][T12146] bond0: entered promiscuous mode [ 201.129014][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 201.140123][T12146] bond_slave_0: entered promiscuous mode [ 201.146457][T12146] bond_slave_1: entered promiscuous mode [ 201.152454][T12146] bond1: entered promiscuous mode [ 201.161294][T12146] hsr1: entered allmulticast mode [ 201.166536][T12146] dummy0: entered allmulticast mode [ 201.172562][T12146] bond0: entered allmulticast mode [ 201.182156][T12146] bond_slave_0: entered allmulticast mode [ 201.188275][T12146] bond_slave_1: entered allmulticast mode [ 201.194272][T12146] bond1: entered allmulticast mode [ 201.289709][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.298072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.608977][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.775094][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.419981][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 202.635667][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.939087][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.298983][T12228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.470066][T12235] netlink: 'syz.3.2865': attribute type 4 has an invalid length. [ 203.480629][T12235] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2865'. [ 203.676724][T12245] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2868'. [ 203.830607][T12251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2870'. [ 204.336459][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.791808][T12290] geneve2: entered promiscuous mode [ 204.806103][T12290] geneve2: entered allmulticast mode [ 205.090175][T12301] netlink: 'syz.2.2893': attribute type 4 has an invalid length. [ 205.118853][T12301] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2893'. [ 205.125435][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 206.358193][T12368] netlink: 'syz.0.2922': attribute type 3 has an invalid length. [ 206.367172][T12368] netlink: 'syz.0.2922': attribute type 7 has an invalid length. [ 206.385068][T12368] netlink: 'syz.0.2922': attribute type 8 has an invalid length. [ 206.405438][T12368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2922'. [ 206.420950][ T5896] net_ratelimit: 2 callbacks suppressed [ 206.420966][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.610506][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2928'. [ 207.050892][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.176973][T12369] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 207.215380][T12405] vlan2: entered allmulticast mode [ 207.226661][T12405] bridge0: port 3(vlan2) entered blocking state [ 207.240558][T12405] bridge0: port 3(vlan2) entered disabled state [ 207.256788][T12405] vlan2: entered promiscuous mode [ 207.450482][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.686487][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.033763][T12444] tipc: New replicast peer: 0.0.0.0 [ 208.039846][T12444] tipc: Enabled bearer , priority 10 [ 208.047999][T12444] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 208.096488][T12447] sctp: [Deprecated]: syz.1.2970 (pid 12447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.096488][T12447] Use struct sctp_sack_info instead [ 208.341275][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'. [ 208.424190][T12470] sctp: [Deprecated]: syz.4.2966 (pid 12470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.424190][T12470] Use struct sctp_sack_info instead [ 208.441668][T12468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2968'. [ 208.490558][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.561113][T12473] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 208.650661][T12480] netlink: 'syz.2.2975': attribute type 14 has an invalid length. [ 209.255177][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 209.434916][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2999'. [ 209.474911][T12538] netlink: 'syz.4.3002': attribute type 2 has an invalid length. [ 209.532246][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.567127][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3004'. [ 209.925483][T12566] netlink: 'syz.4.3015': attribute type 1 has an invalid length. [ 209.953665][T12566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.179838][T12577] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3018'. [ 210.468335][T12589] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 210.488187][T12589] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 210.587834][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 210.598318][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.725322][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.878385][T12607] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3033'. [ 211.060736][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3037'. [ 211.600718][T12639] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3049'. [ 211.624787][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.643136][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3048'. [ 212.165310][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.654461][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.168975][T12693] netlink: 'syz.0.3085': attribute type 12 has an invalid length. [ 213.189779][T12693] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3085'. [ 213.705050][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.765564][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.631417][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3099'. [ 214.743037][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.755564][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.799241][T12752] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3111'. [ 215.109821][T12766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.482588][T12783] lo: entered allmulticast mode [ 215.504687][T12783] lo: left allmulticast mode [ 215.658865][T12794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.773993][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.549780][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3147'. [ 216.806417][ T5910] net_ratelimit: 1025 callbacks suppressed [ 216.806437][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.821616][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.206647][T12873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.453034][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 217.570242][T12889] hsr_slave_1 (unregistering): left promiscuous mode [ 218.121899][T12923] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3179'. [ 218.429695][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3186'. [ 218.481588][T12941] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.567867][T12941] bridge_slave_1 (unregistering): left allmulticast mode [ 218.575286][T12941] bridge_slave_1 (unregistering): left promiscuous mode [ 218.582461][T12941] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.617253][T12952] syz_tun: entered allmulticast mode [ 218.636718][T12948] dvmrp6: entered allmulticast mode [ 218.654070][T12946] syz_tun: left allmulticast mode [ 218.742976][T12954] netlink: 'syz.2.3195': attribute type 3 has an invalid length. [ 218.765446][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 219.094333][T12971] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.396887][T12990] Bluetooth: MGMT ver 1.23 [ 219.619511][ T30] audit: type=1800 audit(1763533093.719:3): pid=12999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3213" name="memory.events" dev="tmpfs" ino=3413 res=0 errno=0 [ 219.690450][T13004] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 219.915901][T13018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3220'. [ 220.003408][T13025] syzkaller1: entered promiscuous mode [ 220.010170][T13025] syzkaller1: entered allmulticast mode [ 220.249704][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'. [ 220.900820][ T983] hid-generic 0005:16C0:5505.0006: item fetching failed at offset 0/1 [ 220.961674][ T983] hid-generic 0005:16C0:5505.0006: probe with driver hid-generic failed with error -22 [ 220.970365][T13072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3255'. [ 221.013057][T13072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3255'. [ 222.750626][T13175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3293'. [ 222.995582][T13185] syzkaller1: entered promiscuous mode [ 223.012172][T13185] syzkaller1: entered allmulticast mode [ 223.819476][T13243] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 223.829970][ T983] IPVS: starting estimator thread 0... [ 223.912323][T13246] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3330'. [ 223.935578][T13244] IPVS: using max 29 ests per chain, 69600 per kthread [ 224.359523][T13276] dummy0: entered promiscuous mode [ 224.375418][T13276] bond0: entered promiscuous mode [ 224.380698][T13276] bond_slave_0: entered promiscuous mode [ 224.415948][T13276] bond_slave_1: entered promiscuous mode [ 224.423231][T13276] debugfs: 'hsr1' already exists in 'hsr' [ 224.496805][T13276] Cannot create hsr debugfs directory [ 224.503044][T13276] hsr1: entered allmulticast mode [ 224.514983][T13276] dummy0: entered allmulticast mode [ 224.520212][T13276] bond0: entered allmulticast mode [ 224.525789][T13276] bond_slave_0: entered allmulticast mode [ 224.531532][T13276] bond_slave_1: entered allmulticast mode [ 224.820016][T13298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3362'. [ 225.915162][T13331] netlink: 'syz.2.3365': attribute type 64 has an invalid length. [ 226.002038][T13335] netlink: 'syz.4.3368': attribute type 4 has an invalid length. [ 226.039232][T13335] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3368'. [ 227.106994][T13379] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3386'. [ 227.468609][T13396] netlink: 'syz.3.3398': attribute type 3 has an invalid length. [ 227.504984][T13396] netlink: 'syz.3.3398': attribute type 7 has an invalid length. [ 227.513761][T13397] syzkaller1: entered promiscuous mode [ 227.522999][T13396] netlink: 'syz.3.3398': attribute type 8 has an invalid length. [ 227.531054][T13397] syzkaller1: entered allmulticast mode [ 227.548310][T13396] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3398'. [ 228.007379][T13412] vlan2: entered allmulticast mode [ 228.012985][T13412] bridge0: port 2(vlan2) entered blocking state [ 228.019567][T13412] bridge0: port 2(vlan2) entered disabled state [ 228.029480][T13412] vlan2: entered promiscuous mode [ 228.421513][T13438] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 228.929019][T13466] netlink: 'syz.2.3428': attribute type 2 has an invalid length. [ 229.196896][T13484] dummy0: entered promiscuous mode [ 229.222049][T13484] bond0: entered promiscuous mode [ 229.227834][T13484] bond_slave_0: entered promiscuous mode [ 229.233838][T13484] bond_slave_1: entered promiscuous mode [ 229.243415][T13484] debugfs: 'hsr1' already exists in 'hsr' [ 229.250449][T13484] Cannot create hsr debugfs directory [ 229.256804][T13484] hsr1: entered allmulticast mode [ 229.261985][T13484] dummy0: entered allmulticast mode [ 229.268079][T13484] bond0: entered allmulticast mode [ 229.273410][T13484] bond_slave_0: entered allmulticast mode [ 229.279957][T13484] bond_slave_1: entered allmulticast mode [ 229.937956][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 230.003052][T13536] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3460'. [ 230.212465][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3465'. [ 230.257539][T13549] netlink: 'syz.4.3466': attribute type 3 has an invalid length. [ 230.437371][T13561] syzkaller1: entered promiscuous mode [ 230.448716][T13561] syzkaller1: entered allmulticast mode [ 231.967002][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3512'. [ 231.979903][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3512'. [ 232.420042][T13672] netlink: 'syz.2.3523': attribute type 1 has an invalid length. [ 232.428880][T13672] netlink: 'syz.2.3523': attribute type 2 has an invalid length. [ 233.669447][T13715] netlink: 'syz.3.3543': attribute type 11 has an invalid length. [ 233.705158][T13715] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3543'. [ 233.987974][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3549'. [ 234.014576][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.123567][T13730] bridge_slave_1 (unregistering): left allmulticast mode [ 234.145463][T13730] bridge_slave_1 (unregistering): left promiscuous mode [ 234.154404][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.530069][T13759] syzkaller1: entered promiscuous mode [ 234.551191][T13759] syzkaller1: entered allmulticast mode [ 234.555064][ T30] audit: type=1800 audit(1763533108.649:4): pid=13757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3559" name="memory.events" dev="tmpfs" ino=3815 res=0 errno=0 [ 234.761710][T13772] syzkaller1: entered promiscuous mode [ 234.778349][T13772] syzkaller1: entered allmulticast mode [ 234.864311][T13777] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.986430][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3572'. [ 235.185536][T13801] syzkaller1: entered promiscuous mode [ 235.198589][T13801] syzkaller1: entered allmulticast mode [ 235.292549][ T5910] hid-generic 0005:16C0:5505.0007: item fetching failed at offset 0/1 [ 235.303630][ T5910] hid-generic 0005:16C0:5505.0007: probe with driver hid-generic failed with error -22 [ 235.407262][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3583'. [ 235.557076][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3585'. [ 236.853055][T13898] block nbd4: Unsupported socket: should be TCP or UNIX. [ 237.039921][T13908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3622'. [ 237.164406][T13921] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 237.174255][T13918] IPVS: stopping master sync thread 13921 ... [ 237.659852][T13948] netlink: 'syz.2.3640': attribute type 1 has an invalid length. [ 237.676520][T13948] netlink: 'syz.2.3640': attribute type 3 has an invalid length. [ 237.684692][T13948] netlink: 'syz.2.3640': attribute type 1 has an invalid length. [ 237.694139][T13948] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3640'. [ 237.809013][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3646'. [ 237.883029][T13957] bond2: entered promiscuous mode [ 237.889518][T13957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.011653][T13963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.051589][T13963] bond3: entered promiscuous mode [ 238.065616][T13963] bond2: (slave bond3): Enslaving as an active interface with an up link [ 238.193222][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 238.563900][T14008] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3667'. [ 238.590154][T14008] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 238.618889][T14014] sock: sock_set_timeout: `syz.3.3670' (pid 14014) tries to set negative timeout [ 238.922610][T14033] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 239.292900][T14054] netlink: 'syz.1.3686': attribute type 4 has an invalid length. [ 239.303407][T14054] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3686'. [ 240.191791][T14108] netlink: 'syz.4.3714': attribute type 1 has an invalid length. [ 240.994656][T14148] netlink: 'syz.3.3731': attribute type 4 has an invalid length. [ 241.015710][T14148] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3731'. [ 241.297146][T14162] netlink: 'syz.1.3748': attribute type 64 has an invalid length. [ 241.710837][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3742'. [ 241.861135][T14181] netlink: 'syz.0.3743': attribute type 2 has an invalid length. [ 242.080103][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3752'. [ 242.089733][T14193] netlink: 'syz.3.3752': attribute type 20 has an invalid length. [ 242.131048][T14193] netlink: 'syz.3.3752': attribute type 21 has an invalid length. [ 242.173681][T14200] tipc: Enabling of bearer rejected, failed to enable media [ 242.351508][T14208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3762'. [ 242.373967][T14208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3762'. [ 242.560471][T14221] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3764'. [ 243.375214][T14268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.122375][T14310] pim6reg: entered allmulticast mode [ 244.133180][T14310] pim6reg: left allmulticast mode [ 244.354472][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3806'. [ 245.338710][T14371] erspan0: entered promiscuous mode [ 245.364333][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3831'. [ 245.558357][T14380] netlink: 'syz.2.3835': attribute type 4 has an invalid length. [ 246.593540][T14436] batadv_slave_0: entered promiscuous mode [ 246.604597][T14435] batadv_slave_0: left promiscuous mode [ 248.003323][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3892'. [ 248.025482][T14509] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.067538][T14509] bridge_slave_1 (unregistering): left allmulticast mode [ 248.074677][T14509] bridge_slave_1 (unregistering): left promiscuous mode [ 248.083331][T14509] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.731527][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 248.780153][T14542] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.829030][T14542] bridge_slave_1 (unregistering): left allmulticast mode [ 248.837157][T14547] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 248.845676][T14542] bridge_slave_1 (unregistering): left promiscuous mode [ 248.852887][T14542] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.203194][T14570] netlink: 'syz.2.3919': attribute type 5 has an invalid length. [ 249.610238][T14585] tun1: tun_chr_ioctl cmd 1074025675 [ 249.620804][T14585] tun1: persist enabled [ 249.631097][T14585] tun1: tun_chr_ioctl cmd 1074025675 [ 249.647794][T14585] tun1: persist enabled [ 249.959991][T14605] openvswitch: netlink: Message has 4 unknown bytes. [ 252.553543][T14694] netlink: 'syz.3.3978': attribute type 2 has an invalid length. [ 254.175755][T14728] netlink: 'syz.1.3993': attribute type 4 has an invalid length. [ 254.413915][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4001'. [ 254.463933][T14742] bond1: entered promiscuous mode [ 254.469618][T14742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.534641][T14742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.543847][T14742] bond2: entered promiscuous mode [ 254.549788][T14742] bond1: (slave bond2): Enslaving as an active interface with an up link [ 254.572649][T14750] netem: change failed [ 254.704482][T14761] netlink: 'syz.2.4005': attribute type 1 has an invalid length. [ 255.142237][T14785] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 255.626649][T14806] pim6reg1: entered allmulticast mode [ 255.691055][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.515453][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4057'. [ 257.546330][T14882] block nbd4: shutting down sockets [ 258.266949][T14904] sch_fq: defrate 2 ignored. [ 259.576024][T14970] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4094'. [ 261.373022][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4119'. [ 261.486312][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4121'. [ 262.178207][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'. [ 262.201295][T15102] netlink: 'syz.2.4140': attribute type 21 has an invalid length. [ 262.785398][T15135] syzkaller1: entered promiscuous mode [ 262.800768][T15135] syzkaller1: entered allmulticast mode [ 264.214357][T15170] syzkaller1: entered promiscuous mode [ 264.235244][T15170] syzkaller1: entered allmulticast mode [ 264.366597][T15178] netlink: 'syz.0.4175': attribute type 1 has an invalid length. [ 264.463013][T15182] netlink: 'syz.2.4177': attribute type 29 has an invalid length. [ 264.516417][T15182] netlink: 'syz.2.4177': attribute type 29 has an invalid length. [ 264.533136][T15182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4177'. [ 265.916289][T15243] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4205'. [ 266.283129][T15262] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4213'. [ 266.829913][T15296] netlink: 'syz.0.4226': attribute type 29 has an invalid length. [ 266.861619][T15296] netlink: 'syz.0.4226': attribute type 29 has an invalid length. [ 266.898394][T15296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4226'. [ 267.259743][T15320] gre0: entered promiscuous mode [ 267.266891][T15320] gre0: entered allmulticast mode [ 267.499209][T15336] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4246'. [ 268.574035][T15397] trusted_key: syz.0.4274 sent an empty control message without MSG_MORE. [ 268.687228][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4275'. [ 268.700210][T15401] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4275'. [ 268.858787][T15411] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4280'. [ 269.261535][T15426] syz.0.4285 (15426) used obsolete PPPIOCDETACH ioctl [ 269.561621][T15444] batadv_slave_1: entered promiscuous mode [ 269.603670][T15449] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4296'. [ 269.614122][T15443] batadv_slave_1: left promiscuous mode [ 269.754203][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'. [ 269.943763][T15468] bridge0: port 2(syz_tun) entered blocking state [ 269.976976][T15468] bridge0: port 2(syz_tun) entered disabled state [ 270.008325][T15471] netlink: 'syz.0.4305': attribute type 10 has an invalid length. [ 270.032461][T15468] syz_tun: entered allmulticast mode [ 270.098431][T15468] syz_tun: entered promiscuous mode [ 270.166495][T15468] bridge0: port 2(syz_tun) entered blocking state [ 270.173358][T15468] bridge0: port 2(syz_tun) entered forwarding state [ 270.257606][T15471] bridge0: port 2(syz_tun) entered disabled state [ 270.298132][T15471] bridge0: port 2(syz_tun) entered blocking state [ 270.304787][T15471] bridge0: port 2(syz_tun) entered forwarding state [ 270.311662][T15471] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.318903][T15471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.330806][T15471] bridge0: entered promiscuous mode [ 270.337037][T15471] bridge0: entered allmulticast mode [ 270.346246][T15471] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 271.330503][T15536] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4332'. [ 271.413291][T15538] netlink: 'syz.2.4334': attribute type 11 has an invalid length. [ 271.718485][T15554] syzkaller1: entered promiscuous mode [ 271.746906][T15554] syzkaller1: entered allmulticast mode [ 271.892229][ T5838] Bluetooth: hci4: link tx timeout [ 271.898799][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 271.908250][ T5838] Bluetooth: hci4: link tx timeout [ 271.913478][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 272.018168][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4348'. [ 272.334269][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 272.826460][ C0] ------------[ cut here ]------------ [ 272.831986][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 272.842817][ C0] WARNING: CPU: 0 PID: 5824 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 272.852896][ C0] Modules linked in: [ 272.857118][ C0] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 272.866631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.876751][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 272.883025][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 97 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 5f 37 c5 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 272.894642][T15616] syzkaller1: entered promiscuous mode [ 272.902693][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 272.902727][ C0] RAX: 5f27a96c552c0700 RBX: 000000000000000c RCX: ffff88803202bc80 [ 272.902740][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 272.902751][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 272.902763][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff88804dde3528 [ 272.902776][ C0] R13: 0000000000000000 R14: ffff88807bc00e80 R15: ffff88807bc03138 [ 272.902790][ C0] FS: 000055555f92e500(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 272.902804][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.902816][ C0] CR2: 00007f6d589b12f8 CR3: 00000000276f6000 CR4: 00000000003526f0 [ 272.902832][ C0] Call Trace: [ 272.902841][ C0] [ 272.902867][ C0] rate_control_send_low+0x1a7/0x7b0 [ 272.902902][ C0] rate_control_get_rate+0x20b/0x5d0 [ 272.902935][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 272.902974][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 272.903002][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 272.903033][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 272.903067][ C0] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 272.903118][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 272.903162][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 272.903190][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 272.903226][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 272.903253][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 272.903283][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 272.903319][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 272.903347][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 272.903383][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 272.931445][T15616] syzkaller1: entered allmulticast mode [ 272.938973][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 272.939016][ C0] __iterate_interfaces+0x2ab/0x590 [ 272.939042][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 272.939072][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 272.939099][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 272.939128][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 272.939158][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 272.939183][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 272.939206][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 272.939229][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 272.939281][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 272.939303][ C0] ? read_tsc+0x9/0x20 [ 272.939332][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 272.939365][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 272.939394][ C0] handle_softirqs+0x286/0x870 [ 272.939428][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 272.939458][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 272.939489][ C0] __irq_exit_rcu+0xca/0x1f0 [ 272.939508][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 272.939536][ C0] irq_exit_rcu+0x9/0x30 [ 272.939554][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 272.939579][ C0] [ 272.939586][ C0] [ 272.939595][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.939616][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 272.939635][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 2d d1 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 272.939652][ C0] RSP: 0018:ffffc9000401eed8 EFLAGS: 00000206 [ 272.939682][ C0] RAX: 5f27a96c552c0700 RBX: 0000000000000000 RCX: 5f27a96c552c0700 [ 272.939695][ C0] RDX: 0000000000000000 RSI: ffffffff8d8f756f RDI: ffffffff8bbf0760 [ 272.939708][ C0] RBP: ffffffff81738c45 R08: 0000000000000000 R09: ffffffff81738c45 [ 272.939722][ C0] R10: ffffc9000401f098 R11: ffffffff81ac2ea0 R12: 0000000000000002 [ 272.939734][ C0] R13: ffffffff8df3d6a0 R14: 0000000000000000 R15: 0000000000000246 [ 272.939748][ C0] ? unwind_next_frame+0xa5/0x2390 [ 272.939769][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.939792][ C0] ? unwind_next_frame+0xa5/0x2390 [ 273.296464][ C0] ? unwind_next_frame+0xa5/0x2390 [ 273.301595][ C0] ? __reset_page_owner+0x71/0x1f0 [ 273.306812][ C0] ? unwind_next_frame+0xa5/0x2390 [ 273.311944][ C0] unwind_next_frame+0xc2/0x2390 [ 273.316938][ C0] ? unwind_next_frame+0xa5/0x2390 [ 273.322076][ C0] ? unwind_next_frame+0xa5/0x2390 [ 273.327232][ C0] ? save_stack+0xf5/0x1f0 [ 273.331647][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.338026][ C0] arch_stack_walk+0x11c/0x150 [ 273.342809][ C0] ? __reset_page_owner+0x71/0x1f0 [ 273.347944][ C0] stack_trace_save+0x9c/0xe0 [ 273.352615][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 273.358048][ C0] save_stack+0xf5/0x1f0 [ 273.362291][ C0] ? __pfx_save_stack+0x10/0x10 [ 273.367175][ C0] ? page_ext_put+0x97/0xc0 [ 273.371676][ C0] __reset_page_owner+0x71/0x1f0 [ 273.376658][ C0] __free_frozen_pages+0xbc4/0xd30 [ 273.381796][ C0] kasan_populate_vmalloc+0x1db/0x270 [ 273.387202][ C0] alloc_vmap_area+0xd7a/0x14c0 [ 273.392056][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 273.397362][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 273.402126][ C0] ? __get_vm_area_node+0x13f/0x300 [ 273.407350][ C0] ? alloc_counters+0xd3/0x6d0 [ 273.412116][ C0] __get_vm_area_node+0x1f8/0x300 [ 273.417175][ C0] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 273.423063][ C0] ? alloc_counters+0xd3/0x6d0 [ 273.427875][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 273.433791][ C0] ? rcu_is_watching+0x15/0xb0 [ 273.438595][ C0] ? trace_contention_end+0x39/0x120 [ 273.443909][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.450305][ C0] ? alloc_counters+0xd3/0x6d0 [ 273.455118][ C0] vzalloc_noprof+0xb2/0xf0 [ 273.459648][ C0] ? alloc_counters+0xd3/0x6d0 [ 273.464403][ C0] alloc_counters+0xd3/0x6d0 [ 273.469020][ C0] ? net_generic+0x1e/0x240 [ 273.473517][ C0] ? net_generic+0x1e/0x240 [ 273.478038][ C0] ? __pfx_alloc_counters+0x10/0x10 [ 273.483251][ C0] ? xt_find_table_lock+0x35e/0x3e0 [ 273.488469][ C0] do_ipt_get_ctl+0xaac/0x1180 [ 273.493232][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 273.498453][ C0] ? __mutex_trylock_common+0x153/0x260 [ 273.503991][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 273.509904][ C0] ? rcu_is_watching+0x15/0xb0 [ 273.514703][ C0] ? trace_contention_end+0x39/0x120 [ 273.520043][ C0] ? nf_getsockopt+0x224/0x290 [ 273.524848][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 273.530476][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.536497][ C0] ? __might_fault+0xb0/0x130 [ 273.541206][ C0] nf_getsockopt+0x26e/0x290 [ 273.545826][ C0] ip_getsockopt+0x1c4/0x220 [ 273.550412][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 273.555558][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 273.560963][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 273.566878][ C0] do_sock_getsockopt+0x372/0x450 [ 273.571895][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 273.577474][ C0] ? do_syscall_64+0xa0/0xfa0 [ 273.582180][ C0] __x64_sys_getsockopt+0x1a5/0x250 [ 273.587435][ C0] ? do_syscall_64+0xa0/0xfa0 [ 273.592133][ C0] ? do_syscall_64+0xa0/0xfa0 [ 273.596875][ C0] do_syscall_64+0xfa/0xfa0 [ 273.601396][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.606797][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.612972][ C0] ? clear_bhb_loop+0x60/0xb0 [ 273.617711][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.623621][ C0] RIP: 0033:0x7f6d5879140a [ 273.628086][ C0] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 273.647711][ C0] RSP: 002b:00007fff52659568 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 273.656147][ C0] RAX: ffffffffffffffda RBX: 00007fff526595f0 RCX: 00007f6d5879140a [ 273.664120][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 273.672122][ C0] RBP: 0000000000000003 R08: 00007fff5265958c R09: 0079746972756365 [ 273.680117][ C0] R10: 00007fff526595f0 R11: 0000000000000216 R12: 00007f6d589b6960 [ 273.688117][ C0] R13: 00007fff5265958c R14: 0000000000000000 R15: 00007f6d589b7020 [ 273.696150][ C0] [ 273.699187][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.706460][ C0] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 273.715908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.725947][ C0] Call Trace: [ 273.729214][ C0] [ 273.732047][ C0] dump_stack_lvl+0x99/0x250 [ 273.736646][ C0] ? __asan_memcpy+0x40/0x70 [ 273.741227][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.746414][ C0] ? __pfx__printk+0x10/0x10 [ 273.751012][ C0] vpanic+0x237/0x6d0 [ 273.755013][ C0] ? __pfx_vpanic+0x10/0x10 [ 273.759540][ C0] panic+0xb9/0xc0 [ 273.763267][ C0] ? __pfx_panic+0x10/0x10 [ 273.767699][ C0] __warn+0x31b/0x4b0 [ 273.771675][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 273.777309][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 273.782929][ C0] report_bug+0x2be/0x4f0 [ 273.787248][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 273.792868][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 273.798486][ C0] ? __rate_control_send_low+0x5e4/0x820 [ 273.804101][ C0] handle_bug+0x84/0x160 [ 273.808387][ C0] exc_invalid_op+0x1a/0x50 [ 273.812880][ C0] asm_exc_invalid_op+0x1a/0x20 [ 273.817714][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 273.823941][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 97 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 5f 37 c5 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 273.843530][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 273.849593][ C0] RAX: 5f27a96c552c0700 RBX: 000000000000000c RCX: ffff88803202bc80 [ 273.857558][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 273.865517][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 273.873471][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff88804dde3528 [ 273.881430][ C0] R13: 0000000000000000 R14: ffff88807bc00e80 R15: ffff88807bc03138 [ 273.889401][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 273.895037][ C0] rate_control_send_low+0x1a7/0x7b0 [ 273.900351][ C0] rate_control_get_rate+0x20b/0x5d0 [ 273.905629][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 273.911432][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 273.917757][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 273.923121][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 273.928841][ C0] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 273.934476][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 273.940453][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 273.945986][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 273.951527][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 273.957064][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 273.962606][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 273.968150][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 273.973613][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 273.979701][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 273.985240][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 273.992516][ C0] __iterate_interfaces+0x2ab/0x590 [ 273.997705][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 274.003763][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 274.010946][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 274.017002][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 274.024015][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 274.029202][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 274.034992][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 274.040177][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 274.046163][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 274.051865][ C0] ? read_tsc+0x9/0x20 [ 274.055927][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 274.061730][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 274.066840][ C0] handle_softirqs+0x286/0x870 [ 274.071592][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 274.076343][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 274.081621][ C0] __irq_exit_rcu+0xca/0x1f0 [ 274.086199][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 274.091391][ C0] irq_exit_rcu+0x9/0x30 [ 274.095616][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 274.101241][ C0] [ 274.104245][ C0] [ 274.107173][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.113138][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 274.118410][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 2d d1 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 274.137998][ C0] RSP: 0018:ffffc9000401eed8 EFLAGS: 00000206 [ 274.144053][ C0] RAX: 5f27a96c552c0700 RBX: 0000000000000000 RCX: 5f27a96c552c0700 [ 274.152009][ C0] RDX: 0000000000000000 RSI: ffffffff8d8f756f RDI: ffffffff8bbf0760 [ 274.159964][ C0] RBP: ffffffff81738c45 R08: 0000000000000000 R09: ffffffff81738c45 [ 274.167924][ C0] R10: ffffc9000401f098 R11: ffffffff81ac2ea0 R12: 0000000000000002 [ 274.175978][ C0] R13: ffffffff8df3d6a0 R14: 0000000000000000 R15: 0000000000000246 [ 274.183942][ C0] ? unwind_next_frame+0xa5/0x2390 [ 274.189044][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 274.195184][ C0] ? unwind_next_frame+0xa5/0x2390 [ 274.200295][ C0] ? unwind_next_frame+0xa5/0x2390 [ 274.205391][ C0] ? __reset_page_owner+0x71/0x1f0 [ 274.210491][ C0] ? unwind_next_frame+0xa5/0x2390 [ 274.215593][ C0] unwind_next_frame+0xc2/0x2390 [ 274.220518][ C0] ? unwind_next_frame+0xa5/0x2390 [ 274.225618][ C0] ? unwind_next_frame+0xa5/0x2390 [ 274.230728][ C0] ? save_stack+0xf5/0x1f0 [ 274.235248][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 274.241414][ C0] arch_stack_walk+0x11c/0x150 [ 274.246178][ C0] ? __reset_page_owner+0x71/0x1f0 [ 274.251288][ C0] stack_trace_save+0x9c/0xe0 [ 274.255969][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 274.261345][ C0] save_stack+0xf5/0x1f0 [ 274.265599][ C0] ? __pfx_save_stack+0x10/0x10 [ 274.270469][ C0] ? page_ext_put+0x97/0xc0 [ 274.274994][ C0] __reset_page_owner+0x71/0x1f0 [ 274.279940][ C0] __free_frozen_pages+0xbc4/0xd30 [ 274.285060][ C0] kasan_populate_vmalloc+0x1db/0x270 [ 274.290434][ C0] alloc_vmap_area+0xd7a/0x14c0 [ 274.295292][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 274.300564][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 274.305328][ C0] ? __get_vm_area_node+0x13f/0x300 [ 274.310540][ C0] ? alloc_counters+0xd3/0x6d0 [ 274.315314][ C0] __get_vm_area_node+0x1f8/0x300 [ 274.320348][ C0] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 274.326240][ C0] ? alloc_counters+0xd3/0x6d0 [ 274.331003][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 274.336890][ C0] ? rcu_is_watching+0x15/0xb0 [ 274.341646][ C0] ? trace_contention_end+0x39/0x120 [ 274.346922][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.353249][ C0] ? alloc_counters+0xd3/0x6d0 [ 274.358005][ C0] vzalloc_noprof+0xb2/0xf0 [ 274.362509][ C0] ? alloc_counters+0xd3/0x6d0 [ 274.367269][ C0] alloc_counters+0xd3/0x6d0 [ 274.371851][ C0] ? net_generic+0x1e/0x240 [ 274.376349][ C0] ? net_generic+0x1e/0x240 [ 274.380847][ C0] ? __pfx_alloc_counters+0x10/0x10 [ 274.386037][ C0] ? xt_find_table_lock+0x35e/0x3e0 [ 274.391229][ C0] do_ipt_get_ctl+0xaac/0x1180 [ 274.395992][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 274.401187][ C0] ? __mutex_trylock_common+0x153/0x260 [ 274.406726][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 274.412614][ C0] ? rcu_is_watching+0x15/0xb0 [ 274.417366][ C0] ? trace_contention_end+0x39/0x120 [ 274.422647][ C0] ? nf_getsockopt+0x224/0x290 [ 274.427406][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 274.433032][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.439015][ C0] ? __might_fault+0xb0/0x130 [ 274.443709][ C0] nf_getsockopt+0x26e/0x290 [ 274.448363][ C0] ip_getsockopt+0x1c4/0x220 [ 274.452968][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 274.458090][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 274.463470][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 274.469370][ C0] do_sock_getsockopt+0x372/0x450 [ 274.474392][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 274.479928][ C0] ? do_syscall_64+0xa0/0xfa0 [ 274.484608][ C0] __x64_sys_getsockopt+0x1a5/0x250 [ 274.489795][ C0] ? do_syscall_64+0xa0/0xfa0 [ 274.494461][ C0] ? do_syscall_64+0xa0/0xfa0 [ 274.499126][ C0] do_syscall_64+0xfa/0xfa0 [ 274.503614][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.508798][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.514857][ C0] ? clear_bhb_loop+0x60/0xb0 [ 274.519550][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.525431][ C0] RIP: 0033:0x7f6d5879140a [ 274.529843][ C0] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 274.549449][ C0] RSP: 002b:00007fff52659568 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 274.557869][ C0] RAX: ffffffffffffffda RBX: 00007fff526595f0 RCX: 00007f6d5879140a [ 274.565829][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 274.573788][ C0] RBP: 0000000000000003 R08: 00007fff5265958c R09: 0079746972756365 [ 274.581745][ C0] R10: 00007fff526595f0 R11: 0000000000000216 R12: 00007f6d589b6960 [ 274.589703][ C0] R13: 00007fff5265958c R14: 0000000000000000 R15: 00007f6d589b7020 [ 274.597678][ C0] [ 274.601027][ C0] Kernel Offset: disabled [ 274.605341][ C0] Rebooting in 86400 seconds..