last executing test programs: 2m52.105938877s ago: executing program 0 (id=2539): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x19, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x8040) 2m51.785802691s ago: executing program 0 (id=2546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ID={0x8}]}, 0x30}}, 0x0) 2m51.610841138s ago: executing program 0 (id=2550): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000800)={0xf, 0x2, 0x1, 0x590}, 0x10) 2m51.321848713s ago: executing program 0 (id=2554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 2m51.032620366s ago: executing program 0 (id=2559): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0x7, 0x0, &(0x7f0000000180)) 2m50.781928472s ago: executing program 0 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 2m42.064497685s ago: executing program 3 (id=2698): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b06c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m41.653895129s ago: executing program 3 (id=2706): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x700) 2m41.106460423s ago: executing program 3 (id=2713): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) 2m40.758425962s ago: executing program 3 (id=2717): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x7, 0x0, 0x0) 2m40.477730111s ago: executing program 3 (id=2721): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) 2m39.466308978s ago: executing program 3 (id=2731): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m35.696970263s ago: executing program 32 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 2m24.094295016s ago: executing program 33 (id=2731): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m22.234935199s ago: executing program 6 (id=3669): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) 1m16.910401111s ago: executing program 6 (id=3675): r0 = socket(0x10, 0x2, 0x6) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) 1m13.939521563s ago: executing program 6 (id=3680): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) 1m10.373053436s ago: executing program 6 (id=3685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@empty, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m5.855076517s ago: executing program 6 (id=3688): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0x9, 0x8, 0x6, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800) 1m2.002536207s ago: executing program 6 (id=3695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x3}}, 0x14}}, 0x4040080) 45.72784805s ago: executing program 34 (id=3695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x3}}, 0x14}}, 0x4040080) 11.157760495s ago: executing program 5 (id=3773): r0 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x6}}) 11.083048532s ago: executing program 4 (id=3774): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000f904001a"], 0x24}}, 0x0) 10.747102877s ago: executing program 2 (id=3775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) 10.59720948s ago: executing program 1 (id=3776): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xa18, @local}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x87, 0x0, 0x1, 0x5}}}], 0x18}}], 0x2, 0x4000800) 10.006544449s ago: executing program 4 (id=3777): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 9.746005572s ago: executing program 2 (id=3778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e0890620006000ff21000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 9.570431457s ago: executing program 5 (id=3779): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) 8.608637214s ago: executing program 1 (id=3780): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) 7.83309414s ago: executing program 5 (id=3781): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.51064446s ago: executing program 4 (id=3782): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) 6.683638025s ago: executing program 2 (id=3783): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c0009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 3.119868952s ago: executing program 1 (id=3784): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam}) 2.898353714s ago: executing program 2 (id=3785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 2.554522318s ago: executing program 5 (id=3786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r0}, 0x38) 2.484086955s ago: executing program 4 (id=3787): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, 0x0, 0x0) 1.906863795s ago: executing program 1 (id=3788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f00000001c0), 0x1000000}, 0x20) 1.478122972s ago: executing program 5 (id=3789): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) 1.458695879s ago: executing program 4 (id=3790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 1.42962839s ago: executing program 2 (id=3791): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x101}, &(0x7f0000001200)=0x10) 909.698926ms ago: executing program 1 (id=3792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 456.01479ms ago: executing program 5 (id=3793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) 425.503966ms ago: executing program 4 (id=3794): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x1ff}) 388.861656ms ago: executing program 2 (id=3795): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000000c0)="dc188619b95d02ff4284860188a86a4e0800b976", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=3796): r0 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 81.925494][ T5605] cgroup: Unknown subsys name 'net' [ 82.001174][ T5605] cgroup: Unknown subsys name 'cpuset' [ 82.009168][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.716204][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.702653][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.704761][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.719448][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.720941][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.722137][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.739583][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.740729][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.763669][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.783010][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.791112][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.793432][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.807614][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.809574][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.816964][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.820406][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.857262][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.869428][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.876841][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.887908][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.897739][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.908074][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.916742][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.925117][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.944278][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.957279][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.837824][ T5625] Bluetooth: hci0: command tx timeout [ 89.916580][ T52] Bluetooth: hci2: command tx timeout [ 89.916916][ T5625] Bluetooth: hci1: command tx timeout [ 89.996901][ T5625] Bluetooth: hci3: command tx timeout [ 89.997621][ T5625] Bluetooth: hci4: command tx timeout [ 90.052205][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.052495][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.052943][ T5617] bridge_slave_0: entered allmulticast mode [ 90.063558][ T5617] bridge_slave_0: entered promiscuous mode [ 90.079957][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.082497][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.082962][ T5631] bridge_slave_0: entered allmulticast mode [ 90.089598][ T5631] bridge_slave_0: entered promiscuous mode [ 90.098492][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.098813][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.099182][ T5619] bridge_slave_0: entered allmulticast mode [ 90.115899][ T5619] bridge_slave_0: entered promiscuous mode [ 90.148501][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.148948][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.149380][ T5617] bridge_slave_1: entered allmulticast mode [ 90.155902][ T5617] bridge_slave_1: entered promiscuous mode [ 90.166074][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.169111][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.169566][ T5631] bridge_slave_1: entered allmulticast mode [ 90.174171][ T5631] bridge_slave_1: entered promiscuous mode [ 90.207959][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.208405][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.208814][ T5619] bridge_slave_1: entered allmulticast mode [ 90.213918][ T5619] bridge_slave_1: entered promiscuous mode [ 90.321123][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.353768][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.354661][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.354913][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.355259][ T5618] bridge_slave_0: entered allmulticast mode [ 90.365457][ T5618] bridge_slave_0: entered promiscuous mode [ 90.382584][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.392649][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.394543][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.394829][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.395186][ T5629] bridge_slave_0: entered allmulticast mode [ 90.403875][ T5629] bridge_slave_0: entered promiscuous mode [ 90.422211][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.423000][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.423457][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.423871][ T5618] bridge_slave_1: entered allmulticast mode [ 90.430799][ T5618] bridge_slave_1: entered promiscuous mode [ 90.480175][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.480718][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.481019][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.481366][ T5629] bridge_slave_1: entered allmulticast mode [ 90.490949][ T5629] bridge_slave_1: entered promiscuous mode [ 90.583862][ T5617] team0: Port device team_slave_0 added [ 90.603248][ T5631] team0: Port device team_slave_0 added [ 90.630659][ T5617] team0: Port device team_slave_1 added [ 90.638057][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.648130][ T5631] team0: Port device team_slave_1 added [ 90.664471][ T5619] team0: Port device team_slave_0 added [ 90.672548][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.692950][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.713140][ T5619] team0: Port device team_slave_1 added [ 90.720403][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.752892][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.753070][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.753135][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.811774][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.811821][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.813022][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.860094][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.860792][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.860869][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.919529][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.920138][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.920244][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.932767][ T5618] team0: Port device team_slave_0 added [ 90.973084][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.973131][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.974072][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.988241][ T5629] team0: Port device team_slave_0 added [ 91.024455][ T5618] team0: Port device team_slave_1 added [ 91.031245][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.031299][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.031328][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.046101][ T5629] team0: Port device team_slave_1 added [ 91.152020][ T5631] hsr_slave_0: entered promiscuous mode [ 91.154786][ T5631] hsr_slave_1: entered promiscuous mode [ 91.172804][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.172950][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.173044][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.182337][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.182381][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.182443][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.267916][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.268275][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.268361][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.272132][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.272168][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.272241][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.345212][ T5617] hsr_slave_0: entered promiscuous mode [ 91.348698][ T5617] hsr_slave_1: entered promiscuous mode [ 91.351012][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 91.351294][ T5617] Cannot create hsr debugfs directory [ 91.401546][ T5619] hsr_slave_0: entered promiscuous mode [ 91.404369][ T5619] hsr_slave_1: entered promiscuous mode [ 91.406370][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 91.407744][ T5619] Cannot create hsr debugfs directory [ 91.517591][ T5629] hsr_slave_0: entered promiscuous mode [ 91.521390][ T5629] hsr_slave_1: entered promiscuous mode [ 91.523859][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 91.523912][ T5629] Cannot create hsr debugfs directory [ 91.578407][ T5618] hsr_slave_0: entered promiscuous mode [ 91.581148][ T5618] hsr_slave_1: entered promiscuous mode [ 91.583206][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 91.583259][ T5618] Cannot create hsr debugfs directory [ 91.918326][ T5625] Bluetooth: hci0: command tx timeout [ 91.937784][ T9] cfg80211: failed to load regulatory.db [ 91.996581][ T52] Bluetooth: hci2: command tx timeout [ 91.997288][ T5625] Bluetooth: hci1: command tx timeout [ 92.076815][ T52] Bluetooth: hci3: command tx timeout [ 92.077273][ T5625] Bluetooth: hci4: command tx timeout [ 92.144946][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.158189][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.165882][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.177906][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.182625][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.196248][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.212857][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.222205][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.292892][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.304613][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.312905][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.324791][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.329195][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.341159][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.364356][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.374537][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.467814][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.479612][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.482020][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.495095][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.512234][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.523221][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.535611][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.549731][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.644331][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.656100][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.674391][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.685377][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.692648][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.703067][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.719346][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.728989][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.740305][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.843088][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.862923][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.874299][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.889547][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.900179][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.912560][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.912899][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.930094][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.942614][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.952703][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.972645][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.972769][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.977958][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.996841][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.050666][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.102216][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.102323][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.139272][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.163013][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.163178][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.224504][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.282242][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.282370][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.315681][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.315806][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.363651][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.435103][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.443620][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.497420][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.497548][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.556110][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.557189][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.612004][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.650043][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.650299][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.705362][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.705620][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.861474][ T5618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.002216][ T5625] Bluetooth: hci0: command tx timeout [ 94.088031][ T52] Bluetooth: hci2: command tx timeout [ 94.090660][ T5625] Bluetooth: hci1: command tx timeout [ 94.159084][ T52] Bluetooth: hci3: command tx timeout [ 94.159304][ T5625] Bluetooth: hci4: command tx timeout [ 94.540336][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.756868][ T5631] veth0_vlan: entered promiscuous mode [ 94.783911][ T5631] veth1_vlan: entered promiscuous mode [ 94.809921][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.938014][ T5631] veth0_macvtap: entered promiscuous mode [ 94.967272][ T5631] veth1_macvtap: entered promiscuous mode [ 95.031369][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.074975][ T5619] veth0_vlan: entered promiscuous mode [ 95.082917][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.121394][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.140976][ T5619] veth1_vlan: entered promiscuous mode [ 95.155154][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.174924][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.210645][ T3379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.365126][ T5619] veth0_macvtap: entered promiscuous mode [ 95.401882][ T5617] veth0_vlan: entered promiscuous mode [ 95.423789][ T5619] veth1_macvtap: entered promiscuous mode [ 95.442236][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.442875][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.487505][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.515981][ T5617] veth1_vlan: entered promiscuous mode [ 95.540659][ T5618] veth0_vlan: entered promiscuous mode [ 95.548267][ T3379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.548311][ T3379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.602600][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.623112][ T5618] veth1_vlan: entered promiscuous mode [ 95.635155][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.671539][ T3379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.683196][ T3379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.716899][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.716975][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.717091][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.717193][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.784386][ T5617] veth0_macvtap: entered promiscuous mode [ 95.800930][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.835101][ T5617] veth1_macvtap: entered promiscuous mode [ 95.942873][ T5629] veth0_vlan: entered promiscuous mode [ 95.981104][ T5618] veth0_macvtap: entered promiscuous mode [ 96.033262][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.084703][ T5618] veth1_macvtap: entered promiscuous mode [ 96.089549][ T5625] Bluetooth: hci0: command tx timeout [ 96.110356][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.121411][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.121466][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.157161][ T52] Bluetooth: hci2: command tx timeout [ 96.157235][ T5625] Bluetooth: hci1: command tx timeout [ 96.164912][ T5629] veth1_vlan: entered promiscuous mode [ 96.238678][ T52] Bluetooth: hci3: command tx timeout [ 96.240581][ T5625] Bluetooth: hci4: command tx timeout [ 96.322412][ T27] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.324554][ T1160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.324685][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.324785][ T1160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.386102][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.423507][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.432213][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.456589][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.571715][ T1121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.571832][ T1121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.571951][ T1121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.572071][ T1121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.619153][ T5629] veth0_macvtap: entered promiscuous mode [ 96.646980][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.654965][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.675896][ T5629] veth1_macvtap: entered promiscuous mode [ 96.882928][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.882969][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.978546][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.050686][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.130858][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.130910][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.176908][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.187085][ T1160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.191623][ T1160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.370666][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.370707][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.525640][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.742403][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.751553][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.837692][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.837734][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.502422][ T5875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.011642][ T5938] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 113.956073][ T6575] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 121.025227][ T6886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.988653][ T7315] IPv6: addrconf: prefix option has invalid lifetime [ 130.988688][ T7315] IPv6: addrconf: prefix option has invalid lifetime [ 131.276248][ T7329] IPv6: addrconf: prefix option has invalid lifetime [ 132.878450][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878548][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.261032][ T7480] IPv6: addrconf: prefix option has invalid lifetime [ 135.633631][ T7541] can: request_module (can-proto-0) failed. [ 136.682950][ T7599] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 138.202589][ T5625] Bluetooth: unknown link type 231 [ 138.202670][ T5625] Bluetooth: hci0: connection err: -111 [ 140.129051][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 140.968122][ T7814] netlink: 144 bytes leftover after parsing attributes in process `syz.3.998'. [ 141.221538][ T7826] openvswitch: netlink: Duplicate or invalid key (type 0). [ 141.544345][ T7840] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 142.006019][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1023'. [ 142.556204][ T7890] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1036'. [ 142.874709][ T7908] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1045'. [ 143.477273][ T7932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 144.280316][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 144.323625][ T7961] bond1 (unregistering): Released all slaves [ 144.455510][ T7981] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 144.924950][ T8001] netlink: 'syz.0.1090': attribute type 12 has an invalid length. [ 145.013706][ T8001] bond1: option primary_reselect: invalid value (255) [ 145.121979][ T8001] bond1 (unregistering): Released all slaves [ 145.148861][ T8010] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1093'. [ 145.332093][ T8014] netlink: 'syz.4.1094': attribute type 2 has an invalid length. [ 145.793487][ T8028] geneve2: entered promiscuous mode [ 146.066032][ T8044] netlink: 'syz.0.1110': attribute type 21 has an invalid length. [ 146.066090][ T8044] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1110'. [ 146.066324][ T8044] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1110'. [ 146.364327][ T8057] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 146.927064][ T8075] bond1 (unregistering): Released all slaves [ 147.296853][ T8097] netlink: 'syz.1.1136': attribute type 3 has an invalid length. [ 147.565225][ T8109] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 148.254695][ T8142] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1157'. [ 148.254756][ T8142] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1157'. [ 148.530319][ T8151] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1162'. [ 148.792177][ T8163] : renamed from vlan1 (while UP) [ 148.918603][ T8167] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 148.994741][ T8171] openvswitch: netlink: Multiple metadata blocks provided [ 149.110250][ T8177] warning: `syz.3.1174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.425061][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 149.425305][ T8195] openvswitch: netlink: Message has 4 unknown bytes. [ 149.655391][ T8206] netlink: 'syz.3.1190': attribute type 4 has an invalid length. [ 150.170838][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1199'. [ 150.261494][ T8230] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1201'. [ 150.582950][ T8248] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1210'. [ 150.583141][ T8248] 0: renamed from hsr0 (while UP) [ 150.618136][ T8248] 0: entered allmulticast mode [ 150.618199][ T8248] hsr_slave_0: entered allmulticast mode [ 150.618236][ T8248] hsr_slave_1: entered allmulticast mode [ 150.618789][ T8248] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 150.923596][ T8261] netlink: 'syz.2.1216': attribute type 3 has an invalid length. [ 151.132364][ T8270] ip6t_rt: too many addresses specified [ 151.187915][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1222'. [ 151.187974][ T8273] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 151.207245][ T8276] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 151.421486][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 151.523388][ T8288] xt_TCPMSS: Only works on TCP SYN packets [ 151.719226][ T8294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.825341][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 151.859255][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 152.290626][ T8321] netlink: NAT attribute has 1 unknown bytes [ 152.290686][ T8321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.323539][ T8319] ip6gre1: entered allmulticast mode [ 152.429673][ T8325] netlink: 'syz.2.1247': attribute type 21 has an invalid length. [ 152.429853][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 153.087726][ T8356] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.225177][ T8363] xt_hashlimit: size too large, truncated to 1048576 [ 153.225306][ T8363] xt_hashlimit: max too large, truncated to 1048576 [ 153.225403][ T8363] xt_hashlimit: invalid rate [ 154.446534][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 154.446838][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 154.657414][ T8390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.133959][ T8443] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 155.375918][ T8460] lo: entered promiscuous mode [ 155.393317][ T8460] netlink: 'syz.1.1314': attribute type 2 has an invalid length. [ 155.402906][ T8460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.581758][ T8465] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 155.674368][ T8469] netlink: 'syz.3.1317': attribute type 2 has an invalid length. [ 155.722921][ T8472] __nla_validate_parse: 1 callbacks suppressed [ 155.722974][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'. [ 155.759096][ T8475] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 155.821920][ T8477] netlink: 'syz.4.1321': attribute type 1 has an invalid length. [ 155.830373][ T8477] netlink: 'syz.4.1321': attribute type 268 has an invalid length. [ 155.830400][ T8477] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1321'. [ 155.920319][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.164456][ T8541] netlink: 'syz.2.1349': attribute type 1 has an invalid length. [ 157.885416][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 157.885478][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 157.885573][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 158.316767][ T1160] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.408350][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 158.466009][ T8601] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1380'. [ 158.640993][ T8610] openvswitch: netlink: Flow key attr not present in new flow. [ 158.680773][ T8611] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1385'. [ 158.757329][ T8614] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1384'. [ 159.023594][ T8627] : renamed from bond0 (while UP) [ 159.204318][ T8634] x_tables: unsorted underflow at hook 1 [ 159.243798][ T8635] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 159.375982][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 159.616326][ T8653] ip6t_rpfilter: unknown options [ 159.861435][ T8665] SET target dimension over the limit! [ 159.943217][ T8668] netlink: 'syz.2.1409': attribute type 3 has an invalid length. [ 160.709417][ T8709] netlink: ct_mark mask cannot be 0 [ 160.709475][ T8709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.205182][ T8731] __nla_validate_parse: 7 callbacks suppressed [ 161.205245][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 161.205278][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'. [ 161.353656][ T8737] tipc: Can't bind to reserved service type 1 [ 161.604257][ T8751] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1448'. [ 161.713075][ T8757] netlink: 'syz.4.1451': attribute type 9 has an invalid length. [ 161.758372][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 161.952056][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 161.952144][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 162.434171][ T8794] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1471'. [ 163.060771][ T8826] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 163.061720][ T8826] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1485'. [ 165.571910][ T8956] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 166.115098][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 166.378797][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 166.528281][ T8994] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 166.536811][ T8994] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1568'. [ 166.678982][ T8996] netlink: 'syz.0.1569': attribute type 2 has an invalid length. [ 167.057356][ T9012] netlink: 'syz.4.1577': attribute type 10 has an invalid length. [ 167.097115][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 167.506296][ T9038] netlink: 'syz.0.1590': attribute type 7 has an invalid length. [ 167.746168][ T9052] netlink: 'syz.4.1597': attribute type 11 has an invalid length. [ 167.746215][ T9052] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1597'. [ 168.685155][ T9102] pimreg: entered allmulticast mode [ 168.769544][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1623'. [ 168.954676][ T9116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.058207][ T9123] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 169.078432][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1631'. [ 169.078492][ T9121] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1631'. [ 169.153317][ T9121] gretap1: entered promiscuous mode [ 169.153371][ T9121] gretap1: entered allmulticast mode [ 170.570364][ T9203] netlink: 'syz.3.1672': attribute type 11 has an invalid length. [ 170.570408][ T9203] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1672'. [ 170.777892][ T9217] syz.3.1676 uses obsolete (PF_INET,SOCK_PACKET) [ 171.009750][ T9229] netlink: 'syz.0.1684': attribute type 30 has an invalid length. [ 171.129950][ T9229] bond1: option arp_missed_max: invalid value (0) [ 171.138078][ T9229] bond1: option arp_missed_max: allowed values 1 - 255 [ 171.154482][ T9229] bond1 (unregistering): Released all slaves [ 171.323119][ T9246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.745295][ T9267] netlink: 'syz.4.1704': attribute type 1 has an invalid length. [ 172.165731][ T9292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'. [ 172.264094][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'. [ 172.391665][ T9302] x_tables: unsorted entry at hook 2 [ 172.399942][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1719'. [ 172.627195][ T9314] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 172.673157][ T9318] sctp: [Deprecated]: syz.3.1727 (pid 9318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.673157][ T9318] Use struct sctp_sack_info instead [ 173.244230][ T9347] sctp: [Deprecated]: syz.4.1740 (pid 9347) Use of int in maxseg socket option. [ 173.244230][ T9347] Use struct sctp_assoc_value instead [ 173.505375][ T9360] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1749'. [ 173.554228][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1748'. [ 173.554285][ T9363] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 173.582838][ T9362] syz.4.1747: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 173.583198][ T9362] CPU: 1 UID: 0 PID: 9362 Comm: syz.4.1747 Not tainted syzkaller #0 PREEMPT(full) [ 173.583283][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.583366][ T9362] Call Trace: [ 173.583386][ T9362] [ 173.583417][ T9362] dump_stack_lvl+0xe8/0x150 [ 173.583538][ T9362] warn_alloc+0x24d/0x270 [ 173.583643][ T9362] ? kasan_save_track+0x4f/0x80 [ 173.583690][ T9362] ? kasan_save_track+0x3e/0x80 [ 173.583752][ T9362] ? __pfx_warn_alloc+0x10/0x10 [ 173.583830][ T9362] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 173.583886][ T9362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.583996][ T9362] __vmalloc_node_range_noprof+0x127/0x1540 [ 173.584149][ T9362] ? rcu_is_watching+0x16/0xb0 [ 173.584237][ T9362] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.584321][ T9362] ? __kmalloc_cache_noprof+0x321/0x600 [ 173.584415][ T9362] ? __kmalloc_cache_noprof+0x14d/0x600 [ 173.584497][ T9362] ? xskq_create+0x56/0x220 [ 173.584598][ T9362] xskq_create+0x148/0x220 [ 173.584668][ T9362] ? xsk_init_queue+0x8a/0xe0 [ 173.584762][ T9362] xsk_init_queue+0x8a/0xe0 [ 173.584869][ T9362] xsk_setsockopt+0x52a/0x960 [ 173.584952][ T9362] ? __pfx_xsk_setsockopt+0x10/0x10 [ 173.585026][ T9362] ? __pfx_aa_sk_perm+0x10/0x10 [ 173.585160][ T9362] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 173.585234][ T9362] ? __pfx_xsk_setsockopt+0x10/0x10 [ 173.585309][ T9362] do_sock_setsockopt+0x17c/0x1b0 [ 173.585383][ T9362] __x64_sys_setsockopt+0x13d/0x1b0 [ 173.585458][ T9362] do_syscall_64+0x166/0x520 [ 173.585543][ T9362] ? trace_irq_disable+0x3b/0x140 [ 173.585597][ T9362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.585653][ T9362] ? clear_bhb_loop+0x70/0xc0 [ 173.585727][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.585782][ T9362] RIP: 0033:0x7f4007b9e159 [ 173.585843][ T9362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.585888][ T9362] RSP: 002b:00007f4008a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.585951][ T9362] RAX: ffffffffffffffda RBX: 00007f4007e25fa0 RCX: 00007f4007b9e159 [ 173.585994][ T9362] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 173.586034][ T9362] RBP: 00007f4007c3503b R08: 0000000000000004 R09: 0000000000000000 [ 173.586068][ T9362] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.586123][ T9362] R13: 00007f4007e26038 R14: 00007f4007e25fa0 R15: 00007ffc2b8fc968 [ 173.586232][ T9362] [ 173.808046][ T9362] Mem-Info: [ 173.808065][ T9362] active_anon:5490 inactive_anon:0 isolated_anon:0 [ 173.808065][ T9362] active_file:2 inactive_file:42916 isolated_file:0 [ 173.808065][ T9362] unevictable:0 dirty:183 writeback:0 [ 173.808065][ T9362] slab_reclaimable:10211 slab_unreclaimable:94834 [ 173.808065][ T9362] mapped:29072 shmem:519 pagetables:1233 [ 173.808065][ T9362] sec_pagetables:0 bounce:0 [ 173.808065][ T9362] kernel_misc_reclaimable:0 [ 173.808065][ T9362] free:1334525 free_pcp:10240 free_cma:0 [ 173.808127][ T9362] Node 0 active_anon:21960kB inactive_anon:0kB active_file:8kB inactive_file:171456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116288kB dirty:732kB writeback:0kB shmem:2076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11904kB pagetables:4804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.808198][ T9362] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.808263][ T9362] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.808332][ T9362] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 173.808377][ T9362] Node 0 DMA32 free:1383768kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21960kB inactive_anon:0kB active_file:8kB inactive_file:171456kB unevictable:0kB writepending:732kB zspages:0kB present:3129332kB managed:2546720kB mlocked:0kB bounce:0kB free_pcp:40952kB local_pcp:18912kB free_cma:0kB [ 173.808446][ T9362] lowmem_reserve[]: 0 0 0 0 0 [ 173.808487][ T9362] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.808549][ T9362] lowmem_reserve[]: 0 0 0 0 0 [ 173.808589][ T9362] Node 1 Normal free:3938972kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.808654][ T9362] lowmem_reserve[]: 0 0 0 0 0 [ 173.808694][ T9362] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.808887][ T9362] Node 0 DMA32: 1500*4kB (UME) 1071*8kB (UM) 339*16kB (UME) 438*32kB (UM) 177*64kB (UME) 101*128kB (UE) 38*256kB (UM) 16*512kB (UME) 9*1024kB (UM) 8*2048kB (ME) 313*4096kB (UM) = 1383832kB [ 173.815477][ T9362] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 173.815787][ T9362] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 4*16kB (UM) 5*32kB (UM) 8*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3938972kB [ 173.816313][ T9362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.819106][ T9362] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.846893][ T9362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.846959][ T9362] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.847010][ T9362] 43433 total pagecache pages [ 173.847042][ T9362] 0 pages in swap cache [ 173.847063][ T9362] Free swap = 124996kB [ 173.847085][ T9362] Total swap = 124996kB [ 173.847115][ T9362] 2097051 pages RAM [ 173.847136][ T9362] 0 pages HighMem/MovableOnly [ 173.847150][ T9362] 428755 pages reserved [ 173.847181][ T9362] 0 pages cma reserved [ 174.486111][ T9379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1755'. [ 174.575223][ T9386] netlink: 'syz.3.1760': attribute type 1 has an invalid length. [ 174.575279][ T9386] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1760'. [ 174.819598][ T9397] Unsupported ieee802154 address type: 0 [ 174.861113][ T9400] tc_dump_action: action bad kind [ 174.962204][ T9402] netlink: 'syz.2.1768': attribute type 10 has an invalid length. [ 174.962247][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1768'. [ 174.963253][ T9402] team0: entered allmulticast mode [ 174.963308][ T9402] team_slave_0: entered allmulticast mode [ 174.963353][ T9402] team_slave_1: entered allmulticast mode [ 174.980979][ T9402] bridge0: port 3(team0) entered blocking state [ 174.981285][ T9402] bridge0: port 3(team0) entered disabled state [ 175.021425][ T9402] team0: entered promiscuous mode [ 175.021473][ T9402] team_slave_0: entered promiscuous mode [ 175.029407][ T9402] team_slave_1: entered promiscuous mode [ 175.040436][ T9402] bridge0: port 3(team0) entered blocking state [ 175.040579][ T9402] bridge0: port 3(team0) entered forwarding state [ 175.479653][ T9428] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 175.698472][ T9440] netlink: 'syz.3.1787': attribute type 1 has an invalid length. [ 176.385094][ T9479] netlink: 'syz.1.1806': attribute type 11 has an invalid length. [ 176.385135][ T9479] netlink: 'syz.1.1806': attribute type 4 has an invalid length. [ 176.385167][ T9479] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1806'. [ 176.390494][ T9478] netlink: 'syz.0.1805': attribute type 21 has an invalid length. [ 176.390689][ T9478] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1805'. [ 176.498991][ T9483] wg0 speed is unknown, defaulting to 1000 [ 176.505462][ T9483] wg0 speed is unknown, defaulting to 1000 [ 176.545275][ T9485] team0: entered promiscuous mode [ 176.550682][ T9485] team_slave_0: entered promiscuous mode [ 176.556797][ T9485] team_slave_1: entered promiscuous mode [ 176.594352][ T9483] wg0 speed is unknown, defaulting to 1000 [ 176.627837][ T9483] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 176.627902][ T9483] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 176.627965][ T9483] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 176.692044][ T9483] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.721888][ T9483] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 176.761049][ T9483] wg0 speed is unknown, defaulting to 1000 [ 176.782031][ T9483] wg0 speed is unknown, defaulting to 1000 [ 176.797804][ T9483] wg0 speed is unknown, defaulting to 1000 [ 176.813441][ T9483] wg0 speed is unknown, defaulting to 1000 [ 176.826982][ T9483] wg0 speed is unknown, defaulting to 1000 [ 177.045169][ T9503] erspan0: entered promiscuous mode [ 177.052510][ T9503] erspan0: entered allmulticast mode [ 177.125304][ T9506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.363131][ T9520] netlink: 'syz.3.1826': attribute type 21 has an invalid length. [ 177.396090][ T9520] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 177.419818][ T9520] bond2 (unregistering): Released all slaves [ 177.754017][ T9537] Unsupported ieee802154 address type: 0 [ 177.957955][ T9549] netlink: 'syz.0.1840': attribute type 64 has an invalid length. [ 177.957997][ T9549] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1840'. [ 178.247505][ T9561] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.300518][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'. [ 178.590716][ T9582] Unknown options in mask 4 [ 178.867196][ T9599] netlink: 'syz.4.1863': attribute type 10 has an invalid length. [ 178.886084][ T9599] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 178.971739][ T9604] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 179.461689][ T9631] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1877'. [ 179.461745][ T9631] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1877'. [ 179.461787][ T9631] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1877'. [ 179.982620][ T9657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.653256][ T9694] openvswitch: netlink: IP tunnel dst address not specified [ 180.800906][ T9700] netlink: 'syz.0.1909': attribute type 10 has an invalid length. [ 180.845460][ T9700] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.871952][ T9700] bond0: (slave team0): Enslaving as an active interface with an up link [ 181.174827][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1917'. [ 181.696025][ T9743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1930'. [ 182.594944][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1954'. [ 183.008775][ T9814] netlink: 'syz.2.1964': attribute type 11 has an invalid length. [ 183.552599][ T9841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.057425][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1987'. [ 184.057482][ T9866] netlink: 'syz.1.1987': attribute type 8 has an invalid length. [ 184.095004][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 184.294792][ T9880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.014238][ T9918] netlink: 'syz.3.2013': attribute type 6 has an invalid length. [ 185.720793][ T9954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2033'. [ 185.847201][ T9962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.214961][ T9978] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 186.286869][ T9983] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2045'. [ 186.646844][T10001] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 187.191482][T10026] netlink: 'syz.2.2066': attribute type 10 has an invalid length. [ 187.271072][T10026] vxcan1: entered promiscuous mode [ 187.272217][T10026] vxcan1: entered allmulticast mode [ 187.272792][T10026] team0: Device vxcan1 is of different type [ 188.069360][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2081'. [ 188.089082][T10053] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 189.112180][T10091] x_tables: duplicate underflow at hook 3 [ 190.180924][T10126] netlink: 'syz.4.2115': attribute type 12 has an invalid length. [ 190.196688][T10129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2117'. [ 190.196748][T10129] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2117'. [ 191.346212][T10156] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2130'. [ 191.778441][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2136'. [ 192.698379][T10195] SET target dimension over the limit! [ 193.131896][T10209] xt_TCPMSS: Only works on TCP SYN packets [ 193.271399][T10214] netlink: 'syz.0.2159': attribute type 21 has an invalid length. [ 194.019385][T10232] xt_l2tp: v2 doesn't support IP mode [ 194.323125][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.537406][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2178'. [ 194.537465][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2178'. [ 194.537523][T10253] netlink: 'syz.0.2178': attribute type 3 has an invalid length. [ 195.355465][T10289] netlink: 'syz.1.2192': attribute type 1 has an invalid length. [ 195.364595][T10289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2192'. [ 195.374181][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2192'. [ 197.737905][T10354] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2226'. [ 197.750495][T10355] sctp: [Deprecated]: syz.0.2225 (pid 10355) Use of int in max_burst socket option. [ 197.750495][T10355] Use struct sctp_assoc_value instead [ 198.106256][T10365] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 198.505031][T10377] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 199.473084][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 199.634903][T10422] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2259'. [ 199.676988][T10420] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2258'. [ 199.975320][T10432] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 201.018236][T10472] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 201.021195][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2284'. [ 201.624641][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2294'. [ 201.748751][T10496] ipt_ECN: cannot use operation on non-tcp rule [ 202.671706][T10527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2310'. [ 202.915973][T10534] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 203.367948][T10541] bond2: invalid ARP target 0.0.0.0 specified for addition [ 203.367996][T10541] bond2: option arp_ip_target: invalid value (0) [ 203.398873][T10541] bond2 (unregistering): Released all slaves [ 203.573067][T10552] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 204.192499][T10571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.315443][T10577] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2334'. [ 204.834671][T10595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2343'. [ 204.867773][T10596] openvswitch: netlink: IPv4 tun info is not correct [ 206.562814][T10652] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 206.714461][T10655] netlink: 'syz.1.2373': attribute type 21 has an invalid length. [ 206.714517][T10655] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2373'. [ 206.714620][T10655] netlink: 'syz.1.2373': attribute type 5 has an invalid length. [ 206.714640][T10655] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2373'. [ 206.738034][T10656] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 207.216139][T10664] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2375'. [ 207.547560][T10674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2383'. [ 207.547790][T10674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2383'. [ 207.859591][T10686] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 208.376992][T10705] ipt_REJECT: TCP_RESET invalid for non-tcp [ 208.439313][T10712] x_tables: ip_tables: osf match: only valid for protocol 6 [ 209.051356][T10735] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.163449][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2416'. [ 209.272056][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'. [ 210.279301][T10781] netlink: 'syz.3.2434': attribute type 2 has an invalid length. [ 211.410653][T10822] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 211.772552][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 211.772626][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 211.772691][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.772722][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 211.772751][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 211.962346][T10839] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 211.962652][T10839] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2462'. [ 213.056977][T10876] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2481'. [ 213.215797][T10880] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2482'. [ 213.418363][T10880] bond2 (unregistering): Released all slaves [ 214.314200][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2503'. [ 214.422643][T10924] tc_dump_action: action bad kind [ 214.573117][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 214.862371][T10944] IPVS: stopping master sync thread 8475 ... [ 215.864680][T10978] netlink: 'syz.2.2531': attribute type 23 has an invalid length. [ 216.207523][T10990] ipt_ah: unknown flags FF [ 216.726282][T11013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2548'. [ 217.707035][T11050] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2566'. [ 217.960153][T11062] xt_ecn: cannot match TCP bits for non-tcp packets [ 218.100244][T11067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2573'. [ 218.688766][T11085] netlink: 'syz.4.2581': attribute type 4 has an invalid length. [ 219.072280][T11093] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 219.213517][T11093] bond2 (unregistering): Released all slaves [ 219.445028][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2593'. [ 219.746055][T11123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2599'. [ 219.746530][T11123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2599'. [ 219.908291][T11128] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2603'. [ 220.203088][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'. [ 220.600671][T11150] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2612'. [ 220.659212][T11152] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 220.967612][T11166] netlink: 'syz.1.2620': attribute type 8 has an invalid length. [ 221.221061][T11175] netlink: 'syz.3.2625': attribute type 21 has an invalid length. [ 221.380306][T11176] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2624'. [ 221.380752][T11176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.534517][T11182] netlink: 'syz.2.2631': attribute type 11 has an invalid length. [ 221.543393][T11182] netlink: 'syz.2.2631': attribute type 11 has an invalid length. [ 221.555417][T11182] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2631'. [ 221.752901][T11192] netlink: 'syz.1.2629': attribute type 2 has an invalid length. [ 222.006814][T11200] ip6t_srh: unknown srh match flags 5F28 [ 222.054028][T11202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.558822][T11221] netlink: 'syz.2.2647': attribute type 2 has an invalid length. [ 222.558894][T11221] netlink: 'syz.2.2647': attribute type 2 has an invalid length. [ 222.850653][T11231] xt_socket: unknown flags 0x50 [ 224.121520][T11270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.672410][T11286] __nla_validate_parse: 1 callbacks suppressed [ 224.672470][T11286] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2674'. [ 225.944583][T11327] netlink: 'syz.2.2692': attribute type 1 has an invalid length. [ 225.953654][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2692'. [ 225.962973][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2692'. [ 226.055071][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2695'. [ 226.283215][T11310] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 226.400902][T11342] netlink: 'syz.3.2698': attribute type 11 has an invalid length. [ 226.400947][T11342] netlink: 'syz.3.2698': attribute type 4 has an invalid length. [ 226.400987][T11342] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2698'. [ 226.708352][T11354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2703'. [ 226.767880][T11357] netlink: 'syz.4.2707': attribute type 1 has an invalid length. [ 226.775876][T11357] netlink: 'syz.4.2707': attribute type 2 has an invalid length. [ 228.155388][T11385] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 228.185836][T11385] bond3 (unregistering): Released all slaves [ 228.416202][T11396] netlink: 'syz.1.2726': attribute type 1 has an invalid length. [ 228.425589][T11396] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2726'. [ 228.735052][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2728'. [ 229.175820][T11418] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 229.571190][T11429] veth1_macvtap: left promiscuous mode [ 229.571246][T11429] macsec0: entered promiscuous mode [ 229.896951][T11436] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 229.926001][T11436] bond2 (unregistering): Released all slaves [ 230.590731][T11463] netlink: 'syz.1.2759': attribute type 1 has an invalid length. [ 230.665474][T11465] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 230.677500][T11465] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2760'. [ 230.878178][T11473] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 232.060034][T11511] netlink: 'syz.2.2783': attribute type 1 has an invalid length. [ 232.118883][T11513] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2784'. [ 232.156728][T11515] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2785'. [ 233.081082][T11535] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2796'. [ 233.081132][T11535] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2796'. [ 233.081181][T11535] netlink: 'syz.2.2796': attribute type 6 has an invalid length. [ 233.081199][T11535] netlink: 'syz.2.2796': attribute type 5 has an invalid length. [ 233.081217][T11535] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2796'. [ 233.266912][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.276652][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.286295][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.304070][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.342074][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.465155][T11545] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 234.470414][T11568] netlink: 'syz.1.2807': attribute type 3 has an invalid length. [ 234.581224][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2810'. [ 234.591302][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2810'. [ 235.021390][T11538] wg0 speed is unknown, defaulting to 1000 [ 235.436804][ T5627] Bluetooth: hci5: command tx timeout [ 235.695728][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 236.179764][T11617] netlink: NAT attribute has 5 unknown bytes [ 236.180294][T11617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.326279][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.335727][T11538] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.344698][T11538] bridge_slave_0: entered allmulticast mode [ 236.370870][T11538] bridge_slave_0: entered promiscuous mode [ 236.417995][T11538] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.425610][T11538] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.433060][T11538] bridge_slave_1: entered allmulticast mode [ 236.441444][T11538] bridge_slave_1: entered promiscuous mode [ 236.486205][T11538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.501094][T11538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.544532][T11538] team0: Port device team_slave_0 added [ 236.648653][T11538] team0: Port device team_slave_1 added [ 236.802441][T11538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.811926][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.838166][T11538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.856523][T11538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.856560][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.856593][T11538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.149074][T11538] hsr_slave_0: entered promiscuous mode [ 237.159183][T11538] hsr_slave_1: entered promiscuous mode [ 237.165766][T11538] debugfs: 'hsr0' already exists in 'hsr' [ 237.178003][T11538] Cannot create hsr debugfs directory [ 237.517503][ T5627] Bluetooth: hci5: command tx timeout [ 237.939670][T11538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.975369][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.986453][T11538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.018570][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.027714][T11538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.051974][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.071504][T11538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.394202][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.840903][T11538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.884120][T11538] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.969620][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.969884][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.003159][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.003447][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.597399][ T5627] Bluetooth: hci5: command tx timeout [ 239.899115][T11719] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 240.241670][T11730] netlink: 'syz.1.2878': attribute type 6 has an invalid length. [ 240.798155][T11538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.636797][T11748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.638108][T11748] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 241.686920][ T5627] Bluetooth: hci5: command tx timeout [ 241.850173][T11748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.859636][T11748] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 241.903647][T11748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.903696][T11748] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 242.031963][T11748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.032432][T11748] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 242.069511][T11786] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2896'. [ 242.078758][T11786] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2896'. [ 242.499362][T11792] smbdirect: ib_dev[syz0] removed [ 242.890509][T11802] Illegal XDP return value 4294967274 on prog (id 243) dev N/A, expect packet loss! [ 242.995941][T11538] veth0_vlan: entered promiscuous mode [ 243.217747][T11748] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 243.223087][T11538] veth1_vlan: entered promiscuous mode [ 243.240868][T11748] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 243.482683][T11538] veth0_macvtap: entered promiscuous mode [ 243.511383][T11538] veth1_macvtap: entered promiscuous mode [ 243.574646][T11538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.587908][T11538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.605860][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2910'. [ 243.781978][ T1160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.782083][ T1160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.782158][ T1160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.825674][ T1176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.376026][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.395395][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.491332][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.491792][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.787631][T11843] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 244.903492][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.919581][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.927725][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.950129][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.960410][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.472881][T11869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.540378][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 245.891217][T11888] netlink: zone id is out of range [ 245.891255][T11888] netlink: zone id is out of range [ 245.891293][T11888] netlink: zone id is out of range [ 245.891305][T11888] netlink: zone id is out of range [ 245.891316][T11888] netlink: zone id is out of range [ 245.891329][T11888] netlink: zone id is out of range [ 245.891340][T11888] netlink: zone id is out of range [ 245.891352][T11888] netlink: zone id is out of range [ 245.891364][T11888] netlink: zone id is out of range [ 246.031998][T11893] TCP: TCP_TX_DELAY enabled [ 246.521749][T11907] netlink: 'syz.5.2938': attribute type 15 has an invalid length. [ 247.036874][ T5625] Bluetooth: hci6: command tx timeout [ 247.099502][T11925] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2945'. [ 247.099549][T11925] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2945'. [ 247.629747][T11945] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 247.742351][T11950] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2956'. [ 247.807974][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 247.923405][T11956] xt_CONNSECMARK: invalid mode: 0 [ 248.611281][T11848] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.612044][T11848] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.612599][T11848] bridge_slave_0: entered allmulticast mode [ 248.621100][T11848] bridge_slave_0: entered promiscuous mode [ 248.685908][T11848] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.689278][T11848] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.693016][T11848] bridge_slave_1: entered allmulticast mode [ 248.744011][T11848] bridge_slave_1: entered promiscuous mode [ 248.885029][T11848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.904083][T11848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.994892][T11848] team0: Port device team_slave_0 added [ 249.003933][T11848] team0: Port device team_slave_1 added [ 249.050978][T11848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.058356][T11848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.086460][T11848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.099519][T11848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.106716][T11848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.117468][ T5625] Bluetooth: hci6: command tx timeout [ 249.133309][T11848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.563192][T11848] hsr_slave_0: entered promiscuous mode [ 249.574135][T11848] hsr_slave_1: entered promiscuous mode [ 249.575053][T11848] debugfs: 'hsr0' already exists in 'hsr' [ 249.575078][T11848] Cannot create hsr debugfs directory [ 250.268845][T12018] netlink: 'syz.1.2979': attribute type 8 has an invalid length. [ 250.835618][T12036] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2986'. [ 250.984234][T12039] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2987'. [ 251.104768][T11848] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 251.185186][T11848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.201995][ T5625] Bluetooth: hci6: command tx timeout [ 251.317036][T11848] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 251.465029][T11848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.466055][T11848] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.553190][T11848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.576429][T11848] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.638580][T11848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.101817][T11848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.178876][T11848] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.222538][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.222782][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.301798][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.302066][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.808096][T12099] xfrm1: entered allmulticast mode [ 253.277756][ T5625] Bluetooth: hci6: command tx timeout [ 253.853543][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3021'. [ 254.373739][T12150] net_ratelimit: 5 callbacks suppressed [ 254.373785][T12150] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 254.846716][T12164] netlink: 'syz.2.3032': attribute type 34 has an invalid length. [ 254.846762][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3032'. [ 255.077369][T12173] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.088791][T12173] netlink: 'syz.5.3033': attribute type 1 has an invalid length. [ 255.207691][T11848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.284148][T12178] xt_nat: multiple ranges no longer supported [ 255.760774][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.366544][T11848] veth0_vlan: entered promiscuous mode [ 256.513450][T11848] veth1_vlan: entered promiscuous mode [ 256.732263][T11848] veth0_macvtap: entered promiscuous mode [ 256.770282][T11848] veth1_macvtap: entered promiscuous mode [ 256.948044][T11848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.994021][T11848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.157110][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.174660][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.410759][T12243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3066'. [ 257.421269][T12243] unsupported nlmsg_type 40 [ 257.746605][T12249] bridge2: entered promiscuous mode [ 257.755093][T12249] bridge2: entered allmulticast mode [ 257.817433][ T1160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.890965][ T1160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.047036][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.047249][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.118451][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.118677][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.808355][T12267] netlink: 'syz.6.2914': attribute type 2 has an invalid length. [ 258.808396][T12267] netlink: 'syz.6.2914': attribute type 8 has an invalid length. [ 258.808427][T12267] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2914'. [ 259.262429][T12283] netlink: 'syz.1.3085': attribute type 23 has an invalid length. [ 259.280787][T12281] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3084'. [ 259.583013][T12294] netlink: Unknown conntrack attr (type=774, max=9) [ 259.590384][T12294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.822308][T12304] x_tables: unsorted underflow at hook 4 [ 259.892755][T12305] x_tables: unsorted entry at hook 1 [ 260.082487][T12308] netlink: 'syz.1.3098': attribute type 2 has an invalid length. [ 260.363921][T12320] netlink: 'syz.5.3103': attribute type 27 has an invalid length. [ 260.682910][T12331] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3109'. [ 260.741412][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3112'. [ 260.775061][T12334] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3110'. [ 261.090641][T12348] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3116'. [ 261.090857][T12348] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3116'. [ 261.090900][T12348] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3116'. [ 261.751942][T12372] xt_HMARK: proto mask must be zero with L3 mode [ 261.920240][T12377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.041340][T12418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3152'. [ 263.288902][ T982] IPVS: starting estimator thread 0... [ 263.409852][T12429] IPVS: using max 27 ests per chain, 64800 per kthread [ 264.455194][T12462] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3174'. [ 264.455428][T12462] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3174'. [ 265.006893][T12475] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3181'. [ 265.024281][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3182'. [ 265.937448][T12500] netlink: 'syz.2.3192': attribute type 13 has an invalid length. [ 266.405640][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3198'. [ 266.405692][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3198'. [ 266.405734][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3198'. [ 267.756171][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3215'. [ 268.508171][T12567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3225'. [ 269.747136][T12598] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3241'. [ 270.956552][T12634] netlink: 808 bytes leftover after parsing attributes in process `syz.5.3259'. [ 271.485739][T12648] netlink: 'syz.4.3266': attribute type 21 has an invalid length. [ 271.485867][T12648] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3266'. [ 271.916149][T12662] Cannot find add_set index 0 as target [ 272.263244][T12672] lo speed is unknown, defaulting to 1000 [ 272.263371][T12672] lo speed is unknown, defaulting to 1000 [ 272.264261][T12672] lo speed is unknown, defaulting to 1000 [ 272.308215][T12672] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 272.345015][T12672] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 272.345101][T12672] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 272.454218][T12672] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 272.760698][T12672] lo speed is unknown, defaulting to 1000 [ 272.800549][T12686] xt_hl: Unknown TTL match mode: 255 [ 272.809727][T12672] lo speed is unknown, defaulting to 1000 [ 272.918979][T12672] lo speed is unknown, defaulting to 1000 [ 272.938708][T12672] lo speed is unknown, defaulting to 1000 [ 273.090599][T12672] lo speed is unknown, defaulting to 1000 [ 273.144826][T12672] lo speed is unknown, defaulting to 1000 [ 273.182416][T12672] lo speed is unknown, defaulting to 1000 [ 274.889147][T12716] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 276.051356][T12784] IPv6: Can't replace route, no match found [ 276.562332][T12800] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3329'. [ 276.653022][T12804] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.3331'. [ 276.872965][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3333'. [ 277.116904][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3336'. [ 277.126071][T12819] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3336'. [ 277.413623][T12831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3343'. [ 278.224619][T12858] lo: entered promiscuous mode [ 278.255236][T12858] tunl0: entered promiscuous mode [ 278.277713][T12858] gre0: entered promiscuous mode [ 278.331319][T12858] gretap0: entered promiscuous mode [ 278.344500][T12858] erspan0: entered promiscuous mode [ 278.365514][T12858] ip_vti0: entered promiscuous mode [ 278.389083][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 280.673152][T12953] xt_recent: Unsupported userspace flags (000000b1) [ 280.857076][T12950] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 280.906037][T12950] bond2 (unregistering): Released all slaves [ 281.595369][T12974] xt_hashlimit: size too large, truncated to 1048576 [ 282.118891][T12991] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 282.770076][T13008] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 283.081350][T13019] netlink: 'syz.6.3426': attribute type 1 has an invalid length. [ 283.081844][T13019] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3426'. [ 283.081914][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3426'. [ 283.387973][T13031] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 283.515452][T13035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.170834][T13051] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 284.171058][T13051] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 285.452059][T13093] netlink: 'syz.5.3461': attribute type 4 has an invalid length. [ 285.794896][T13105] netlink: 'syz.1.3467': attribute type 2 has an invalid length. [ 285.930735][T13105] : entered promiscuous mode [ 286.798098][T13140] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 287.074061][T13148] netlink: 'syz.5.3489': attribute type 1 has an invalid length. [ 287.687970][T13158] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 287.690894][T13158] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 287.690959][T13158] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 287.860695][T13168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.222424][T13219] IPv6: sit1: Disabled Multicast RS [ 289.710051][T13236] netlink: 'syz.2.3534': attribute type 10 has an invalid length. [ 289.710411][T13236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3534'. [ 289.713091][T13236] dummy0: entered promiscuous mode [ 289.713357][T13236] dummy0: entered allmulticast mode [ 289.728189][T13236] bridge0: port 4(dummy0) entered blocking state [ 289.737672][T13236] bridge0: port 4(dummy0) entered disabled state [ 289.840992][T13236] bridge0: port 4(dummy0) entered blocking state [ 289.841127][T13236] bridge0: port 4(dummy0) entered forwarding state [ 289.895303][T13244] x_tables: duplicate entry at hook 2 [ 290.163841][T13254] netlink: 'syz.5.3541': attribute type 1 has an invalid length. [ 290.175453][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3541'. [ 290.573391][T13268] netlink: 'syz.1.3549': attribute type 5 has an invalid length. [ 290.771852][T13276] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3554'. [ 292.271286][T13321] netlink: 'syz.1.3574': attribute type 11 has an invalid length. [ 292.271330][T13321] netlink: 'syz.1.3574': attribute type 11 has an invalid length. [ 292.271369][T13321] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3574'. [ 292.694488][T13337] netlink: 'syz.6.3580': attribute type 10 has an invalid length. [ 293.143382][T13337] team0: Device veth0_macvtap failed to register rx_handler [ 294.262088][T13386] ip6t_ah: unknown flags 5 [ 294.936387][T13408] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3615'. [ 295.257507][T13418] xt_l2tp: invalid flags combination: 8 [ 296.649410][T13468] netlink: 'syz.5.3644': attribute type 2 has an invalid length. [ 301.685946][T13499] openvswitch: netlink: Invalid VLAN frame [ 304.115040][T13507] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 304.253488][T13505] netlink: 'syz.5.3662': attribute type 11 has an invalid length. [ 304.261837][T13505] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3662'. [ 305.979510][T13506] syz.6.3663 (13506) used greatest stack depth: 18088 bytes left [ 313.810794][T13535] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3673'. [ 313.811023][T13535] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3673'. [ 314.987323][T13541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3677'. [ 315.176314][ C1] sched: DL replenish lagged too much [ 317.202483][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.172323][T13558] netlink: 'syz.1.3683': attribute type 12 has an invalid length. [ 320.172551][T13558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3683'. [ 320.616686][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3686'. [ 327.244475][T13577] Cannot find add_set index 65532 as target [ 327.665236][T13582] openvswitch: netlink: Multiple metadata blocks provided [ 328.577924][T13592] xt_MASQUERADE: bad MAP_IPS. [ 329.526196][T13601] netlink: 'syz.5.3704': attribute type 7 has an invalid length. [ 336.663774][T13614] xt_TCPMSS: Only works on TCP SYN packets [ 337.779384][T13616] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3711'. [ 338.749977][T13622] netlink: 'syz.2.3714': attribute type 11 has an invalid length. [ 339.707103][T13630] 8021q: VLANs not supported on lo [ 344.688750][T13648] bridge3: entered promiscuous mode [ 344.694424][T13648] bridge3: entered allmulticast mode [ 345.216804][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.270692][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.281694][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.319261][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.333555][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.437420][ T5627] Bluetooth: hci7: command tx timeout [ 349.566561][ T5627] Bluetooth: hci7: command tx timeout [ 350.015814][T13681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.665535][ T5627] Bluetooth: hci7: command tx timeout [ 352.882501][T13689] x_tables: duplicate underflow at hook 1 [ 353.345597][T13693] netlink: 'syz.4.3745': attribute type 6 has an invalid length. [ 353.756459][ T5627] Bluetooth: hci7: command tx timeout [ 359.681435][T13655] lo speed is unknown, defaulting to 1000 [ 367.976955][T13729] netlink: 'syz.1.3760': attribute type 11 has an invalid length. [ 367.977177][T13729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3760'. [ 368.535653][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3759'. [ 377.104746][T13760] xt_TCPMSS: Only works on TCP SYN packets [ 377.178605][T13762] xt_hl: Unknown Hop Limit match mode: 206 [ 377.787248][T13767] netlink: 'syz.4.3774': attribute type 26 has an invalid length. [ 377.910396][T13655] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.911078][T13655] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.911628][T13655] bridge_slave_0: entered allmulticast mode [ 377.965606][T13655] bridge_slave_0: entered promiscuous mode [ 378.058402][T13655] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.080490][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.111579][T13655] bridge_slave_1: entered allmulticast mode [ 378.142757][T13655] bridge_slave_1: entered promiscuous mode [ 378.641849][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.223664][T13655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.321473][T13655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.902839][T13655] team0: Port device team_slave_0 added [ 384.419854][T13655] team0: Port device team_slave_1 added [ 385.488855][T13655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.496169][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.526179][T13655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.631492][T13655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.638725][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.638756][T13655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.580660][T13655] hsr_slave_0: entered promiscuous mode [ 386.628332][T13655] hsr_slave_1: entered promiscuous mode [ 386.630525][T13655] debugfs: 'hsr0' already exists in 'hsr' [ 386.630758][T13655] Cannot create hsr debugfs directory [ 388.480035][T13812] mac80211_hwsim hwsim11 : renamed from wlan1 [ 388.877748][ T32] INFO: task syz.3.2731:11406 blocked for more than 143 seconds. [ 388.878203][ T32] Not tainted syzkaller #0 [ 388.878415][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.878612][ T32] task:syz.3.2731 state:D stack:27200 pid:11406 tgid:11405 ppid:5631 task_flags:0x400140 flags:0x00080002 [ 388.879089][ T32] Call Trace: [ 388.879284][ T32] [ 388.879485][ T32] __schedule+0x17db/0x58f0 [ 388.879742][ T32] ? __pfx___schedule+0x10/0x10 [ 388.879977][ T32] ? schedule+0x90/0x2b0 [ 388.880201][ T32] schedule+0x164/0x2b0 [ 388.880421][ T32] schedule_preempt_disabled+0x13/0x30 [ 388.880642][ T32] __mutex_lock+0x7c1/0x1550 [ 388.880869][ T32] ? __mutex_lock+0x5d4/0x1550 [ 388.881097][ T32] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 388.881313][ T32] ? __pfx___mutex_lock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 388.881550][ T32] ? rcu_is_watching+0x16/0xb0 [ 388.881770][ T32] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 388.881990][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 388.882217][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 388.882432][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 388.882657][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 388.882887][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 388.883126][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 388.883363][ T32] ? bpf_lsm_capable+0x9/0x20 [ 388.883584][ T32] ? security_capable+0x7e/0x2c0 [ 388.883787][ T32] genl_rcv_msg+0x614/0x7a0 [ 388.884017][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.884237][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 388.884449][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 388.884659][ T32] ? __asan_memcpy+0x40/0x70 [ 388.884877][ T32] ? __skb_clone+0x5c/0x6c0 [ 388.885103][ T32] netlink_rcv_skb+0x226/0x4a0 [ 388.885318][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.885538][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.885768][ T32] ? down_read+0x2be/0x330 [ 388.885985][ T32] genl_rcv+0x28/0x40 [ 388.886199][ T32] netlink_unicast+0x7bd/0x940 [ 388.886324][ T32] netlink_sendmsg+0x813/0xb40 [ 388.886575][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.886798][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 388.887042][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.887246][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 388.887467][ T32] ____sys_sendmsg+0x54e/0x850 [ 388.887684][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.887899][ T32] ? import_iovec+0x73/0xa0 [ 388.888112][ T32] ___sys_sendmsg+0x2a5/0x360 [ 388.888308][ T32] ? __lock_acquire+0x6df/0x2e50 [ 388.888521][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.888738][ T32] ? futex_wait+0x2a2/0x390 [ 388.888995][ T32] ? __fget_files+0x2a/0x420 [ 388.889211][ T32] ? __fget_files+0x3a2/0x420 [ 388.889438][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 388.889656][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.889891][ T32] do_syscall_64+0x166/0x520 [ 388.890117][ T32] ? trace_irq_disable+0x3b/0x140 [ 388.890327][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.890537][ T32] ? clear_bhb_loop+0x70/0xc0 [ 388.890752][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.890962][ T32] RIP: 0033:0x7ffaa599e159 [ 388.891176][ T32] RSP: 002b:00007ffaa68c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.891571][ T32] RAX: ffffffffffffffda RBX: 00007ffaa5c25fa0 RCX: 00007ffaa599e159 [ 388.891775][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 388.891981][ T32] RBP: 00007ffaa5a3503b R08: 0000000000000000 R09: 0000000000000000 [ 388.892182][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.892380][ T32] R13: 00007ffaa5c26038 R14: 00007ffaa5c25fa0 R15: 00007ffdc4e8b558 [ 388.892602][ T32] [ 388.892834][ T32] [ 388.892834][ T32] Showing all locks held in the system: [ 388.893040][ T32] locks held by kworker/u8:2/27: 3, last CPU#1: [ 388.893243][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.894424][ T32] #1: ffffc90000a27c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.895606][ T32] #2: ffff88807766d258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 388.955884][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 388.955902][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 388.955972][ T32] locks held by kworker/1:1/44: 2, last CPU#1: [ 388.955989][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.956054][ T32] #1: ffffc90000b47c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.956119][ T32] locks held by kworker/u8:3/50: 3, last CPU#0: [ 388.956134][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 388.956197][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.121984][ T32] #2: ffff888031694258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 389.122070][ T32] locks held by kworker/u8:7/982: 4, last CPU#0: [ 389.122087][ T32] #0: ffff88801f287940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.122150][ T32] #1: ffffc90004e47c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.122213][ T32] #2: ffff88807fe6e0e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 389.122279][ T32] #3: ffff88807fe6cc98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 389.122571][ T32] locks held by kworker/u8:10/1164: 7, last CPU#1: [ 389.122588][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.122650][ T32] #1: ffffc900054b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.122713][ T32] #2: ffff888077765258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 389.122777][ T32] #3: ffff888068cc08e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x19e/0xb40 [ 389.122837][ T32] #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 389.122901][ T32] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 389.122960][ T32] #6: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_check_no_obj_freed+0xcb/0x450 [ 389.123232][ T32] locks held by kworker/u8:11/1176: 2, last CPU#0: [ 389.123249][ T32] #0: ffff8880324ad140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.123311][ T32] #1: ffffc90005397c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.123387][ T32] locks held by kworker/u8:12/3379: 3, last CPU#0: [ 389.123403][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.123465][ T32] #1: ffffc9000efd7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.123528][ T32] #2: ffff88802971f258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 389.123596][ T32] locks held by getty/5370: 2, on CPU#0: [ 389.123611][ T32] #0: ffff8880322fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 389.123672][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 389.361048][ T32] locks held by syz-executor/5605: 2, last CPU#0: [ 389.361073][ T32] #0: ffff8880324503b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 389.361143][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 389.361215][ T32] locks held by syz-executor/5617: 4, last CPU#0: [ 389.361230][ T32] #0: ffffffff8ee35c10 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 389.361288][ T32] #1: ffff8880121b36b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 389.361347][ T32] #2: ffff8880352e4378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 389.361412][ T32] #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 389.361483][ T32] locks held by kworker/1:6/5773: 3, last CPU#1: [ 389.361498][ T32] #0: ffff888022768140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.361562][ T32] #1: ffffc900052e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.361635][ T32] #2: ffff88807ca6d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22d/0xbd0 [ 389.361699][ T32] locks held by syz.0.2564/11046: 2, on CPU#0: [ 389.361714][ T32] #0: ffffffff902c1ce8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 389.361774][ T32] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 389.361830][ T32] locks held by syz.3.2731/11406: 2, on CPU#0: [ 389.361845][ T32] #0: ffffffff902c1ce8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 389.361904][ T32] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 389.361960][ T32] locks held by kworker/u8:13/12774: 3, on CPU#0: [ 389.361975][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.362041][ T32] #1: ffffc900032bfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 389.362099][ T32] #2: ffffffff90250dc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 389.362155][ T32] locks held by syz.6.3695/13584: 2, on CPU#0: [ 389.362170][ T32] #0: ffffffff902c1ce8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 389.362230][ T32] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 389.362283][ T32] locks held by syz-executor/13655: 2, on CPU#0: [ 389.362298][ T32] #0: ffffffff8f9b82c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 389.362356][ T32] #1: ffffffff90250dc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 389.362407][ T32] locks held by syz.4.3794/13812: 2, last CPU#0: [ 389.362422][ T32] #0: ffffffff90250dc0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x5dc/0x1150 [ 389.362483][ T32] #1: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 389.362546][ T32] locks held by syz.5.3793/13814: 2, last CPU#0: [ 389.362561][ T32] #0: ffff8880352e5038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 389.362619][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 389.362676][ T32] locks held by syz.2.3795/13813: 1, last CPU#0: [ 389.362692][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 389.362752][ T32] [ 389.362758][ T32] ============================================= [ 389.362758][ T32] [ 389.362784][ T32] NMI backtrace for cpu 0 [ 389.362801][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 389.362836][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.362848][ T32] Call Trace: [ 389.362856][ T32] [ 389.362866][ T32] dump_stack_lvl+0xe8/0x150 [ 389.362899][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 389.362926][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 389.362962][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 389.362991][ T32] sys_info+0x135/0x170 [ 389.363014][ T32] watchdog+0xfd7/0x1030 [ 389.363048][ T32] ? watchdog+0x1c7/0x1030 [ 389.363078][ T32] kthread+0x38b/0x480 [ 389.363099][ T32] ? __pfx_watchdog+0x10/0x10 [ 389.363123][ T32] ? __pfx_kthread+0x10/0x10 [ 389.363145][ T32] ret_from_fork+0x514/0xb70 [ 389.363169][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 389.363202][ T32] ? __switch_to+0xc89/0x1420 [ 389.363235][ T32] ? __pfx_kthread+0x10/0x10 [ 389.363257][ T32] ret_from_fork_asm+0x1a/0x30 [ 389.363306][ T32] [ 389.363355][ T32] Sending NMI from CPU 0 to CPUs 1: [ 389.363392][ C1] NMI backtrace for cpu 1 [ 389.363404][ C1] CPU: 1 UID: 0 PID: 1164 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 389.363425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.363436][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 389.363462][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2e/0x80 [ 389.363490][ C1] Code: 48 8b 04 24 65 48 8b 0d d8 b4 cc 11 65 48 8b 15 d8 b4 cc 11 f7 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 <40> 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 3c 17 [ 389.363506][ C1] RSP: 0018:ffffc90000a17e70 EFLAGS: 00000246 [ 389.363520][ C1] RAX: ffffffff8a626094 RBX: ffff888026173800 RCX: ffff8880260d9f40 [ 389.363540][ C1] RDX: 8000000000000102 RSI: 0000000000000100 RDI: ffff888026173800 [ 389.363552][ C1] RBP: ffffc90000a180d0 R08: 0000000000000100 R09: 0000000000000000 [ 389.363564][ C1] R10: ffffc90000a18020 R11: fffff5200014300a R12: dffffc0000000000 [ 389.363577][ C1] R13: ffff888026173800 R14: dffffc0000000000 R15: 1ffff92000142ff4 [ 389.363590][ C1] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 389.363605][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.363617][ C1] CR2: 00007f5de622cff8 CR3: 0000000057056000 CR4: 00000000003526f0 [ 389.363632][ C1] Call Trace: [ 389.363638][ C1] [ 389.363644][ C1] fib_table_lookup+0x44/0x16e0 [ 389.363677][ C1] __inet_dev_addr_type+0x2fc/0x560 [ 389.363698][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 389.363726][ C1] ? __inet_dev_addr_type+0x159/0x560 [ 389.363747][ C1] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 389.363772][ C1] ? inet_addr_type_dev_table+0x25/0x190 [ 389.363796][ C1] ? inet_addr_type_dev_table+0x25/0x190 [ 389.363819][ C1] ? inet_addr_type_dev_table+0x25/0x190 [ 389.363842][ C1] ip_route_me_harder+0x45a/0xfe0 [ 389.363872][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 389.363898][ C1] ? __alloc_skb+0x27a/0x7a0 [ 389.363929][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 389.363957][ C1] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 389.363989][ C1] synproxy_send_tcp+0x332/0x670 [ 389.364018][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 389.364054][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 389.364081][ C1] ? nft_symhash_init+0x2b8/0x2c0 [ 389.364107][ C1] ? synproxy_pernet+0x45/0x270 [ 389.364128][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 389.364149][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 389.364168][ C1] ? nf_ip_checksum+0x13c/0x510 [ 389.364189][ C1] nft_synproxy_do_eval+0x335/0x550 [ 389.364205][ C1] ? unwind_next_frame+0x8f/0x2550 [ 389.364227][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 389.364254][ C1] nft_do_chain+0x48d/0x1b10 [ 389.364272][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 389.364303][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 389.364333][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 389.364355][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 389.364398][ C1] nft_do_chain_inet+0x360/0x4b0 [ 389.364417][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 389.364434][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 389.364464][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 389.364489][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 389.364508][ C1] nf_hook_slow+0xc5/0x220 [ 389.364542][ C1] NF_HOOK+0x21f/0x3c0 [ 389.364560][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 389.364578][ C1] ? NF_HOOK+0x9e/0x3c0 [ 389.364594][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 389.364612][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 389.364633][ C1] ? ip_local_deliver+0x113/0x190 [ 389.364652][ C1] NF_HOOK+0x336/0x3c0 [ 389.364669][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 389.364686][ C1] ? NF_HOOK+0x9e/0x3c0 [ 389.364702][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 389.364737][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 389.364754][ C1] ? ip_rcv_core+0x88d/0xd50 [ 389.364773][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 389.364790][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 389.364808][ C1] process_backlog+0xa6b/0x18b0 [ 389.364838][ C1] ? process_backlog+0x3de/0x18b0 [ 389.364873][ C1] __napi_poll+0xaa/0x330 [ 389.364914][ C1] net_rx_action+0x61d/0xf50 [ 389.364948][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 389.364992][ C1] handle_softirqs+0x226/0x860 [ 389.365017][ C1] ? do_softirq+0x77/0xd0 [ 389.365044][ C1] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 389.365068][ C1] do_softirq+0x77/0xd0 [ 389.365090][ C1] [ 389.365096][ C1] [ 389.365102][ C1] __local_bh_enable_ip+0x100/0x140 [ 389.365127][ C1] nsim_dev_trap_report_work+0x7a4/0xb40 [ 389.365158][ C1] ? process_scheduled_works+0x97a/0x1630 [ 389.365183][ C1] process_scheduled_works+0xc3d/0x1630 [ 389.365224][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.365252][ C1] ? assign_work+0x3cf/0x5d0 [ 389.365278][ C1] worker_thread+0xa47/0xfb0 [ 389.365319][ C1] kthread+0x38b/0x480 [ 389.365336][ C1] ? __pfx_worker_thread+0x10/0x10 [ 389.365359][ C1] ? __pfx_kthread+0x10/0x10 [ 389.365377][ C1] ret_from_fork+0x514/0xb70 [ 389.365395][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 389.365424][ C1] ? __switch_to+0xc89/0x1420 [ 389.365450][ C1] ? __pfx_kthread+0x10/0x10 [ 389.365467][ C1] ret_from_fork_asm+0x1a/0x30 [ 389.365505][ C1] [ 390.323779][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 391.308947][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.318090][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.328172][ T32] Call Trace: [ 391.331480][ T32] [ 391.334437][ T32] vpanic+0x56d/0xa60 [ 391.338477][ T32] ? __pfx___schedule+0x10/0x10 [ 391.343376][ T32] ? __pfx_vpanic+0x10/0x10 [ 391.347952][ T32] panic+0xc5/0xd0 [ 391.351712][ T32] ? __pfx_panic+0x10/0x10 [ 391.356172][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 391.361672][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 391.367089][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 391.373316][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 391.379520][ T32] watchdog+0x1030/0x1030 [ 391.383895][ T32] ? watchdog+0x1c7/0x1030 [ 391.388360][ T32] kthread+0x38b/0x480 [ 391.392462][ T32] ? __pfx_watchdog+0x10/0x10 [ 391.397173][ T32] ? __pfx_kthread+0x10/0x10 [ 391.401802][ T32] ret_from_fork+0x514/0xb70 [ 391.406513][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 391.411674][ T32] ? __switch_to+0xc89/0x1420 [ 391.416398][ T32] ? __pfx_kthread+0x10/0x10 [ 391.421026][ T32] ret_from_fork_asm+0x1a/0x30 [ 391.425857][ T32] [ 391.429541][ T32] Kernel Offset: disabled [ 391.433881][ T32] Rebooting in 86400 seconds..