last executing test programs: 2m2.991196256s ago: executing program 2 (id=11200): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 2m2.723791508s ago: executing program 2 (id=11203): socketpair(0x3, 0x4, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 2m2.342780539s ago: executing program 2 (id=11204): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0xf, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x2188, 0x7, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "00fff50000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) 2m1.932600207s ago: executing program 2 (id=11209): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x50, 0x0, 0x0, 0x8, 0x3fe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c1700003100090029bd700000000000040000006817118014ffa5fa65e83435b538ae8e5a6ea3bebc1f"], 0x177c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2m0.641745836s ago: executing program 2 (id=11216): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m0.231167016s ago: executing program 2 (id=11217): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twrr'], 0xa) 1m45.026036295s ago: executing program 32 (id=11217): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twrr'], 0xa) 4.551040366s ago: executing program 5 (id=11921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 4.537618265s ago: executing program 4 (id=11922): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x3, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000310009002abd4489ef12f13801"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) close(r0) 4.247300864s ago: executing program 0 (id=11923): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0xa027, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35, 0x7fff, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 4.209269009s ago: executing program 5 (id=11925): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x30, 0x1402, 0x1, 0x70bd2c, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004801}, 0x802) 4.162098502s ago: executing program 3 (id=11926): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x3, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 3.61375448s ago: executing program 4 (id=11927): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000000c0), &(0x7f00000001c0), 0x20}, 0x20) 3.595797288s ago: executing program 1 (id=11928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.581693535s ago: executing program 5 (id=11929): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x50, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)="57fc", &(0x7f0000000580), 0x3, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r0}, 0x38) 3.1688944s ago: executing program 4 (id=11930): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"/2742], &(0x7f00000029c0)='syzkaller\x00'}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a80)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002b80)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000002c00)="b9ff030f6044238cb89e14f088a81bff803500004000638877fbac14142ce934a0a662079f4b4d2f87e56dca6aab055013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)}, 0x2c) 3.053390325s ago: executing program 0 (id=11931): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000080), &(0x7f0000000640)}, 0x20) 3.040744829s ago: executing program 1 (id=11932): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x19, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc) 2.984252232s ago: executing program 3 (id=11933): mkdir(&(0x7f0000001a80)='./file0\x00', 0x120) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x100021, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x30, 0x0) 2.741951332s ago: executing program 0 (id=11934): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x80208, 0x0, 0x1863, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000060000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 2.618950921s ago: executing program 1 (id=11935): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 2.405605446s ago: executing program 4 (id=11936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xc, &(0x7f00000004c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.386549815s ago: executing program 3 (id=11937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000010301", @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) 2.349000929s ago: executing program 5 (id=11938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[], 0x74}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x14, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}]}}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) 2.347185921s ago: executing program 1 (id=11939): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x5, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000e00), 0x4) 1.922622974s ago: executing program 4 (id=11940): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800ff80b50af8ff00000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0xd9, &(0x7f0000000340)=""/217, 0x0, 0x8}, 0x94) 1.919343136s ago: executing program 0 (id=11941): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x50, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf}, 0x0, 0x7fd, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001880)=@newsa={0x150, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "1a000b0000849a7390450024000000004403000000c3d6db"}}]}, 0x150}}, 0x44050) 1.532292528s ago: executing program 3 (id=11942): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xb, 0x42, 0x40, 0xc0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000640), &(0x7f0000000680)=""/40}, 0x20) 1.522209993s ago: executing program 5 (id=11943): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000004cc0)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000000540)="e7", 0x1}], 0x1}, 0x1) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) 1.48221576s ago: executing program 1 (id=11944): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000780), 0x8) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r0, &(0x7f0000004b80)={&(0x7f00000034c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000004840)=[{&(0x7f0000003500)="3afc1cd02a7a", 0x6}, {0x0}], 0x2}, 0x10) 1.356119944s ago: executing program 0 (id=11945): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffefffb}, 0x8, 0x80000001, 0x0, 0x7, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x1418, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140a, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000010}, 0xc0) 1.045784281s ago: executing program 3 (id=11946): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/155, 0x9b}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffc27, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec9b2a7a", 0xd}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r1) 405.63475ms ago: executing program 3 (id=11947): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={r1, &(0x7f0000000680)="4d9a811449c02d7e4a3726c8f4794914caf38ff958e13d823175c7b4", &(0x7f0000000840)=""/251}, 0x20) 387.722087ms ago: executing program 0 (id=11948): close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x54, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xc1}}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 376.67371ms ago: executing program 1 (id=11949): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="18010000310009002abd70000000000004000000040111"], 0x118}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2.327108ms ago: executing program 5 (id=11950): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a389, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xb, 0x7}, 0x4000, 0x5, 0x0, 0x4, 0x6, 0x90000006, 0x0, 0x0, 0x0, 0x0, 0x400200000000003f}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000840)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200040c0) 0s ago: executing program 4 (id=11951): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffefffb}, 0x8, 0x80000001, 0x0, 0x7, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000780)={0x1, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000007c0)=r0, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r1}, 0x8) kernel console output (not intermixed with test programs): 2895][T16900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5337'. [ 323.763310][T16910] netlink: 'syz.4.5342': attribute type 10 has an invalid length. [ 323.763336][T16910] openvswitch: netlink: Flow key attr not present in new flow. [ 323.828989][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5343'. [ 324.551470][T16933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5353'. [ 324.551500][T16933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5353'. [ 324.551516][T16933] netlink: 572 bytes leftover after parsing attributes in process `syz.4.5353'. [ 324.591348][T16936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5354'. [ 324.903120][T16952] netlink: 'syz.3.5362': attribute type 21 has an invalid length. [ 325.026527][T16957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5364'. [ 325.026554][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5364'. [ 325.310366][T16967] netlink: 312 bytes leftover after parsing attributes in process `syz.3.5369'. [ 325.815332][T16990] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5380'. [ 325.815357][T16990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 326.149942][T17008] netlink: 'syz.4.5392': attribute type 39 has an invalid length. [ 326.222910][T17014] netlink: 'syz.0.5390': attribute type 21 has an invalid length. [ 326.410657][T17025] sctp: [Deprecated]: syz.3.5394 (pid 17025) Use of int in max_burst socket option deprecated. [ 326.410657][T17025] Use struct sctp_assoc_value instead [ 326.606359][T17035] netlink: 'syz.0.5402': attribute type 1 has an invalid length. [ 326.772049][T17050] netlink: 'syz.4.5410': attribute type 16 has an invalid length. [ 326.781970][T17052] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 326.920946][T17055] Zero length message leads to an empty skb [ 327.740512][T17106] netlink: 'syz.1.5437': attribute type 16 has an invalid length. [ 327.811014][ T1173] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 258 - 0 [ 327.811064][ T1173] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 258 - 0 [ 327.811101][ T1173] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 258 - 0 [ 327.811137][ T1173] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 258 - 0 [ 328.088285][T17127] netlink: 'syz.0.5447': attribute type 9 has an invalid length. [ 328.250643][T17139] rxe_eth0 speed is unknown, defaulting to 1000 [ 328.417206][T17146] openvswitch: netlink: Duplicate or invalid key (type 0). [ 328.417243][T17146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.679632][T17164] __nla_validate_parse: 10 callbacks suppressed [ 328.679654][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5465'. [ 329.234403][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5483'. [ 329.301041][T17202] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5484'. [ 329.588825][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5495'. [ 329.649412][T17224] netlink: 'syz.1.5497': attribute type 1 has an invalid length. [ 330.543109][T17280] netlink: 540 bytes leftover after parsing attributes in process `syz.2.5523'. [ 330.766178][T17291] netlink: 'syz.4.5527': attribute type 11 has an invalid length. [ 330.766202][T17291] netlink: 'syz.4.5527': attribute type 11 has an invalid length. [ 330.770151][T17289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.115321][T17315] netlink: 'syz.4.5539': attribute type 30 has an invalid length. [ 331.323415][T17324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5547'. [ 331.510052][T17340] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5552'. [ 331.856696][T17360] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5562'. [ 331.869820][T17358] netlink: 'syz.3.5561': attribute type 21 has an invalid length. [ 331.869883][T17358] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5561'. [ 332.022115][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5569'. [ 332.349396][T17394] netlink: 'syz.0.5577': attribute type 1 has an invalid length. [ 332.533027][T17399] can: request_module (can-proto-5) failed. [ 333.788321][T17453] __nla_validate_parse: 3 callbacks suppressed [ 333.788344][T17453] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5609'. [ 334.533231][T17503] netlink: 'syz.4.5631': attribute type 17 has an invalid length. [ 334.596013][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5632'. [ 334.627729][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5633'. [ 334.738134][T17515] netlink: 'syz.0.5635': attribute type 19 has an invalid length. [ 334.738158][T17515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5635'. [ 334.884986][T17522] netlink: 'syz.2.5640': attribute type 3 has an invalid length. [ 334.910018][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5641'. [ 335.286391][T17543] netlink: 'syz.0.5647': attribute type 39 has an invalid length. [ 335.286425][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5647'. [ 335.286477][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5647'. [ 335.286495][T17543] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 335.543120][T17552] netlink: 'syz.0.5652': attribute type 21 has an invalid length. [ 335.543187][T17552] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5652'. [ 335.966860][T17566] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 335.966899][T17566] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 335.966938][T17566] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 336.377079][T17585] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5668'. [ 336.377106][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5668'. [ 337.651982][T17660] netlink: 'syz.0.5702': attribute type 5 has an invalid length. [ 338.179661][T17699] netlink: 'syz.4.5719': attribute type 7 has an invalid length. [ 338.179685][T17699] netlink: 'syz.4.5719': attribute type 8 has an invalid length. [ 338.299495][T17703] netlink: 'syz.3.5722': attribute type 21 has an invalid length. [ 338.299557][T17703] netlink: 'syz.3.5722': attribute type 6 has an invalid length. [ 338.410530][T17712] netlink: 'syz.2.5729': attribute type 10 has an invalid length. [ 338.410679][T17712] bond0: entered promiscuous mode [ 338.410701][T17712] bond_slave_0: entered promiscuous mode [ 338.434533][T17712] batadv_slave_1: entered promiscuous mode [ 338.465184][T17712] team0: Port device bond0 removed [ 338.657856][T17719] netlink: 'syz.0.5731': attribute type 62 has an invalid length. [ 339.553796][T17760] __nla_validate_parse: 13 callbacks suppressed [ 339.553818][T17760] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.5751'. [ 339.625749][T17765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5754'. [ 339.739780][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5757'. [ 339.747090][T17771] netlink: 'syz.0.5755': attribute type 3 has an invalid length. [ 339.747142][T17771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5755'. [ 339.760361][T17772] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5759'. [ 339.808082][T17775] netlink: 'syz.4.5758': attribute type 29 has an invalid length. [ 339.979690][T17786] netlink: 'syz.0.5763': attribute type 21 has an invalid length. [ 339.979754][T17786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5763'. [ 340.350310][T17809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5776'. [ 340.419185][T17811] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 340.785342][T17821] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5782'. [ 340.785374][T17821] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5782'. [ 341.157223][T17837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5791'. [ 341.315370][T17849] raw_sendmsg: syz.3.5795 forgot to set AF_INET. Fix it! [ 341.916441][T17892] .*0: renamed from veth0_to_hsr (while UP) [ 342.834966][T17943] openvswitch: netlink: Message has 4613 unknown bytes. [ 343.189430][T17955] smbdirect: ib_dev[rxe0] renamed to [syz1] [ 343.477882][T17971] validate_nla: 3 callbacks suppressed [ 343.477906][T17971] netlink: 'syz.2.5853': attribute type 27 has an invalid length. [ 343.533627][T17975] netlink: 'syz.4.5855': attribute type 1 has an invalid length. [ 343.664704][T17983] netlink: 'syz.2.5857': attribute type 9 has an invalid length. [ 343.844302][T17991] netlink: 'syz.4.5862': attribute type 10 has an invalid length. [ 344.018913][T18004] Q6`Ҙ: renamed from lo [ 344.294961][T18019] netlink: 'syz.0.5877': attribute type 2 has an invalid length. [ 344.917740][T18050] netlink: 'syz.0.5894': attribute type 21 has an invalid length. [ 344.982552][T18052] __nla_validate_parse: 8 callbacks suppressed [ 344.982572][T18052] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5892'. [ 345.132983][T18064] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5901'. [ 345.577818][T18095] netlink: 'syz.4.5916': attribute type 11 has an invalid length. [ 345.605172][T18098] netlink: 'syz.1.5915': attribute type 21 has an invalid length. [ 345.605197][T18098] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5915'. [ 345.804431][T18110] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5921'. [ 345.879856][T18114] netlink: 'syz.0.5924': attribute type 21 has an invalid length. [ 345.879881][T18114] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5924'. [ 345.879934][T18114] netlink: 'syz.0.5924': attribute type 4 has an invalid length. [ 346.229936][T18137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5933'. [ 346.698756][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5947'. [ 346.698780][T18165] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5947'. [ 346.780150][T18170] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5950'. [ 347.469915][T18203] netlink: 'syz.2.5966': attribute type 11 has an invalid length. [ 347.469941][T18203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5966'. [ 348.998667][T18294] validate_nla: 3 callbacks suppressed [ 348.998692][T18294] netlink: 'syz.4.6010': attribute type 10 has an invalid length. [ 349.019396][T18294] bond0: left allmulticast mode [ 349.060335][T18294] team0: Device bond0 is already an upper device of the team interface [ 349.570032][T18326] netlink: 'syz.2.6026': attribute type 1 has an invalid length. [ 349.687119][T18331] netlink: 'syz.1.6029': attribute type 2 has an invalid length. [ 350.618121][T18380] __nla_validate_parse: 7 callbacks suppressed [ 350.618166][T18380] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6049'. [ 350.803266][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6053'. [ 350.855392][T18398] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6056'. [ 350.927162][T18400] netlink: 'syz.4.6057': attribute type 10 has an invalid length. [ 351.130676][T18412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6063'. [ 351.214246][T18415] netlink: 'syz.2.6067': attribute type 6 has an invalid length. [ 351.347090][T18427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6070'. [ 351.593923][T18442] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 351.650330][T18444] netlink: 352 bytes leftover after parsing attributes in process `syz.4.6076'. [ 351.666524][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6078'. [ 351.924294][T18463] netlink: 'syz.0.6086': attribute type 11 has an invalid length. [ 352.608535][T18510] netlink: 'syz.2.6110': attribute type 12 has an invalid length. [ 352.651877][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6111'. [ 352.953228][T18533] netlink: 'syz.1.6120': attribute type 2 has an invalid length. [ 352.953250][T18533] netlink: 'syz.1.6120': attribute type 8 has an invalid length. [ 352.953263][T18533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6120'. [ 353.123819][T18542] xt_hashlimit: size too large, truncated to 1048576 [ 353.123839][T18542] xt_hashlimit: max too large, truncated to 1048576 [ 353.295264][T18549] netlink: 'syz.4.6129': attribute type 21 has an invalid length. [ 353.295334][T18549] netlink: 'syz.4.6129': attribute type 2 has an invalid length. [ 353.295350][T18549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6129'. [ 353.469728][T18555] tipc: Enabling of bearer rejected, media not registered [ 355.281693][T18670] validate_nla: 1 callbacks suppressed [ 355.281716][T18670] netlink: 'syz.4.6189': attribute type 14 has an invalid length. [ 356.265592][T18724] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.265692][T18724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.265705][T18724] IPv6: NLM_F_CREATE should be set when creating new route [ 356.660557][T18739] __nla_validate_parse: 12 callbacks suppressed [ 356.660580][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6221'. [ 357.114181][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6237'. [ 357.114211][T18766] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 357.359949][T18780] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6245'. [ 357.557123][T18792] netlink: 'syz.2.6248': attribute type 1 has an invalid length. [ 357.580031][T18794] netlink: 'syz.1.6251': attribute type 2 has an invalid length. [ 357.649137][T18802] netlink: 'syz.4.6254': attribute type 4 has an invalid length. [ 357.649161][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6254'. [ 357.817961][T18810] openvswitch: netlink: Actions may not be safe on all matching packets [ 358.666188][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6283'. [ 358.669615][T18869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6284'. [ 358.877689][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6288'. [ 359.416569][T18915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6307'. [ 359.544944][T18917] netlink: 'syz.0.6308': attribute type 4 has an invalid length. [ 359.544969][T18917] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6308'. [ 359.640539][T18921] netlink: 'syz.3.6310': attribute type 1 has an invalid length. [ 359.742465][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6313'. [ 359.871478][T18938] netlink: 'syz.3.6319': attribute type 3 has an invalid length. [ 360.189945][T18958] netlink: 'syz.0.6328': attribute type 10 has an invalid length. [ 360.635092][T18984] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 361.450734][T19026] netlink: 'syz.0.6362': attribute type 15 has an invalid length. [ 361.692338][T19042] netlink: 'syz.1.6369': attribute type 6 has an invalid length. [ 361.692362][T19042] __nla_validate_parse: 7 callbacks suppressed [ 361.692374][T19042] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6369'. [ 362.271483][T19078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6389'. [ 362.271574][T19078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6389'. [ 362.338353][T19086] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6392'. [ 362.357165][T19078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6389'. [ 362.357244][T19078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6389'. [ 362.582194][T19098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6394'. [ 362.602380][T19099] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 362.704606][T19078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6389'. [ 362.704693][T19078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6389'. [ 362.790371][T19106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6401'. [ 363.039065][T19121] openvswitch: netlink: Missing valid actions attribute. [ 363.039102][T19121] openvswitch: netlink: Actions may not be safe on all matching packets [ 363.993916][T19187] netlink: 'syz.4.6440': attribute type 1 has an invalid length. [ 363.993943][T19187] netlink: 'syz.4.6440': attribute type 1 has an invalid length. [ 364.035363][T19188] netlink: 'syz.1.6441': attribute type 8 has an invalid length. [ 364.207091][T19200] netlink: 'syz.4.6446': attribute type 21 has an invalid length. [ 364.207510][T19200] netlink: 'syz.4.6446': attribute type 1 has an invalid length. [ 364.378916][T19211] netlink: 'syz.3.6450': attribute type 2 has an invalid length. [ 364.378972][T19211] netlink: 'syz.3.6450': attribute type 2 has an invalid length. [ 365.091179][T19255] netlink: ct family unspecified [ 365.091213][T19255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.255104][T19263] netlink: 'syz.0.6480': attribute type 4 has an invalid length. [ 367.043717][T19382] __nla_validate_parse: 15 callbacks suppressed [ 367.043739][T19382] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6536'. [ 367.683760][T19409] validate_nla: 4 callbacks suppressed [ 367.683782][T19409] netlink: 'syz.4.6549': attribute type 23 has an invalid length. [ 368.255456][T19447] netlink: 'syz.0.6565': attribute type 1 has an invalid length. [ 368.457836][T19461] netlink: 'syz.1.6574': attribute type 17 has an invalid length. [ 368.457861][T19461] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6574'. [ 368.457892][T19461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.659467][T19470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6581'. [ 369.340730][T19514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.621457][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6610'. [ 370.560211][T19580] netlink: 'syz.2.6632': attribute type 2 has an invalid length. [ 370.842007][T19596] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6640'. [ 370.842033][T19596] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6640'. [ 371.195664][T19616] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6650'. [ 371.195690][T19616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6650'. [ 371.282542][T19623] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6652'. [ 371.282571][T19623] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6652'. [ 371.408686][T19628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.980590][T19668] netlink: 'syz.1.6677': attribute type 4 has an invalid length. [ 372.358537][T19691] __nla_validate_parse: 4 callbacks suppressed [ 372.358559][T19691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6687'. [ 372.358685][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6687'. [ 372.395197][T19695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6690'. [ 372.415908][T19696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6688'. [ 372.556162][T19703] netlink: 'syz.2.6693': attribute type 5 has an invalid length. [ 372.626754][T19710] netlink: 'syz.3.6695': attribute type 7 has an invalid length. [ 372.626780][T19710] netlink: 'syz.3.6695': attribute type 8 has an invalid length. [ 372.626796][T19710] netlink: 'syz.3.6695': attribute type 13 has an invalid length. [ 372.765582][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6701'. [ 372.842054][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6701'. [ 372.843625][T19717] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 373.276150][T19749] netlink: 'syz.1.6716': attribute type 4 has an invalid length. [ 373.387468][T19758] netlink: 'syz.2.6719': attribute type 16 has an invalid length. [ 373.387493][T19758] netlink: 'syz.2.6719': attribute type 4 has an invalid length. [ 373.387508][T19758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6719'. [ 373.494655][T19763] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6724'. [ 373.494683][T19763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.579589][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6723'. [ 374.000751][T19795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6738'. [ 374.403639][T19824] netlink: 'syz.4.6751': attribute type 10 has an invalid length. [ 374.987575][T19858] netlink: 'syz.0.6767': attribute type 29 has an invalid length. [ 376.318726][T19929] xt_IDLETIMER: timeout value is zero [ 377.578438][T19986] __nla_validate_parse: 11 callbacks suppressed [ 377.578463][T19986] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6830'. [ 377.583217][T19983] netlink: 'syz.0.6829': attribute type 22 has an invalid length. [ 377.583268][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6829'. [ 377.995796][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6843'. [ 378.103351][T20018] netlink: 'syz.3.6845': attribute type 4 has an invalid length. [ 378.129890][T20022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6848'. [ 378.142561][T20020] netlink: 'syz.2.6846': attribute type 1 has an invalid length. [ 378.592628][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6862'. [ 378.594432][T20054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.737812][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.737875][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.883284][T20071] openvswitch: netlink: IPv6 tunnel dst address is zero [ 379.345424][T20100] netlink: 'syz.0.6885': attribute type 21 has an invalid length. [ 379.405907][ T30] audit: type=1107 audit(1793106881.631:4): pid=20103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 379.521273][T20110] netlink: 'syz.3.6891': attribute type 1 has an invalid length. [ 379.521303][T20110] netlink: 'syz.3.6891': attribute type 1 has an invalid length. [ 379.719191][T20123] netlink: 'syz.3.6897': attribute type 22 has an invalid length. [ 379.719216][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6897'. [ 380.043839][T20141] netlink: 'syz.3.6905': attribute type 2 has an invalid length. [ 380.043866][T20141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6905'. [ 380.193586][T20149] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6907'. [ 380.267794][T20153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6909'. [ 380.267828][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6909'. [ 380.512765][T20163] netlink: 'syz.4.6911': attribute type 2 has an invalid length. [ 380.656042][T20169] netlink: 'syz.4.6914': attribute type 1 has an invalid length. [ 381.278412][T20205] netlink: 'syz.2.6923': attribute type 5 has an invalid length. [ 381.278436][T20205] netlink: 'syz.2.6923': attribute type 6 has an invalid length. [ 381.278452][T20205] netlink: 'syz.2.6923': attribute type 5 has an invalid length. [ 382.413639][T20277] netlink: 'syz.4.6955': attribute type 11 has an invalid length. [ 382.576538][T20286] veth0_to_bond: entered promiscuous mode [ 382.845462][T20304] __nla_validate_parse: 5 callbacks suppressed [ 382.845483][T20304] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6969'. [ 383.225867][T20330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6982'. [ 383.320232][T20334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6984'. [ 383.500534][T20338] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6986'. [ 384.313846][T20379] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7005'. [ 385.207929][T20427] validate_nla: 6 callbacks suppressed [ 385.207952][T20427] netlink: 'syz.4.7029': attribute type 3 has an invalid length. [ 385.401340][T20435] netlink: 'syz.1.7033': attribute type 10 has an invalid length. [ 385.922874][T20468] netlink: 'syz.4.7050': attribute type 8 has an invalid length. [ 386.028272][T20473] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7053'. [ 386.037416][T20473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.263948][T20490] netlink: 'syz.4.7058': attribute type 6 has an invalid length. [ 386.263980][T20490] netlink: 360 bytes leftover after parsing attributes in process `syz.4.7058'. [ 386.298663][T20492] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7060'. [ 386.335195][T20494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7062'. [ 386.462969][T20500] netlink: 'syz.1.7067': attribute type 4 has an invalid length. [ 386.462994][T20500] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7067'. [ 386.593464][T20508] netlink: 'syz.2.7069': attribute type 7 has an invalid length. [ 386.593492][T20508] netlink: 'syz.2.7069': attribute type 7 has an invalid length. [ 386.873074][T20528] netlink: 'syz.2.7079': attribute type 21 has an invalid length. [ 386.920320][T20532] netlink: 'syz.3.7080': attribute type 27 has an invalid length. [ 387.013253][T20532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.046864][T20532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.513959][T20565] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 387.961510][T20592] __nla_validate_parse: 3 callbacks suppressed [ 387.961532][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7107'. [ 388.535297][T20621] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 388.937147][T20645] netlink: 'syz.1.7130': attribute type 2 has an invalid length. [ 388.986593][T20645] !;: entered promiscuous mode [ 389.321325][T20670] netlink: 4331 bytes leftover after parsing attributes in process `syz.4.7140'. [ 389.951940][T20707] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7158'. [ 389.952265][T20707] netlink: get zone limit has 4 unknown bytes [ 390.202005][T20720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7164'. [ 390.317075][T20723] validate_nla: 7 callbacks suppressed [ 390.317095][T20723] netlink: 'syz.0.7166': attribute type 2 has an invalid length. [ 390.317111][T20723] netlink: 'syz.0.7166': attribute type 8 has an invalid length. [ 390.317125][T20723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7166'. [ 391.197153][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7187'. [ 391.936746][T20814] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7202'. [ 391.936774][T20814] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7202'. [ 392.417421][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7210'. [ 392.529051][T20838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7212'. [ 392.812109][T20853] netlink: 'syz.2.7219': attribute type 153 has an invalid length. [ 392.973632][T20864] __nla_validate_parse: 3 callbacks suppressed [ 392.973657][T20864] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7228'. [ 392.973676][T20864] netlink: 91 bytes leftover after parsing attributes in process `syz.4.7228'. [ 393.373212][T20890] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 393.575078][T20903] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7243'. [ 393.708351][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7246'. [ 393.928871][T20926] netlink: 'syz.2.7254': attribute type 63 has an invalid length. [ 393.928899][T20926] netlink: 'syz.2.7254': attribute type 17 has an invalid length. [ 395.594379][T20983] netlink: 'syz.1.7280': attribute type 39 has an invalid length. [ 395.769240][T20989] netlink: 'syz.0.7287': attribute type 13 has an invalid length. [ 396.466948][T21040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7310'. [ 397.012389][T21071] netlink: 'syz.3.7325': attribute type 3 has an invalid length. [ 397.012414][T21071] netlink: 'syz.3.7325': attribute type 8 has an invalid length. [ 397.740536][T21122] netlink: 'syz.3.7349': attribute type 15 has an invalid length. [ 397.788705][T21122] vxlan0: entered promiscuous mode [ 397.788729][T21122] vxlan0: entered allmulticast mode [ 397.813531][ T1173] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 31488 - 0 [ 397.814518][ T1173] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 31488 - 0 [ 397.814560][ T1173] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 31488 - 0 [ 397.814598][ T1173] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 31488 - 0 [ 398.421682][T21157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7368'. [ 398.546577][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7370'. [ 399.105641][T21177] netlink: 'syz.1.7378': attribute type 1 has an invalid length. [ 399.540211][T21203] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7387'. [ 399.586457][T21205] bpf: Bad value for 'uid' [ 399.690490][T21211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7390'. [ 400.369900][T21247] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7406'. [ 400.478571][T21256] netlink: 'syz.4.7410': attribute type 1 has an invalid length. [ 400.939921][T21285] netlink: 212400 bytes leftover after parsing attributes in process `syz.1.7421'. [ 401.088145][T21291] netlink: 'syz.2.7422': attribute type 10 has an invalid length. [ 401.938685][T21291] team0: Device wg2 is of different type [ 401.975317][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7431'. [ 402.212791][T21325] netlink: 'syz.3.7435': attribute type 1 has an invalid length. [ 402.212816][T21325] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7435'. [ 402.212863][T21325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7435'. [ 402.341557][T21327] netlink: 'syz.2.7437': attribute type 10 has an invalid length. [ 402.499766][T21327] team0 (unregistering): Port device team_slave_0 removed [ 402.954602][T21359] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7452'. [ 404.497557][T21409] netlink: 'syz.1.7478': attribute type 1 has an invalid length. [ 404.824338][T21425] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.7486'. [ 405.219538][T21444] netlink: 'syz.0.7496': attribute type 2 has an invalid length. [ 405.555862][T21461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.137659][T21490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7516'. [ 406.148725][T21484] smbdirect: ib_dev[syz2] removed [ 406.798705][T21521] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.7531'. [ 407.515861][T21563] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7552'. [ 407.515891][T21563] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 407.859675][T21583] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7561'. [ 408.809290][T21616] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.7577'. [ 409.566953][T21651] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7595'. [ 409.833294][T21668] netlink: 'syz.4.7603': attribute type 2 has an invalid length. [ 410.231794][T21691] netlink: 'syz.1.7614': attribute type 1 has an invalid length. [ 410.373036][T21699] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7617'. [ 411.430431][T21739] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7637'. [ 411.623184][T21749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7641'. [ 411.674000][T21749] bond0: (slave bond_slave_0): Releasing backup interface [ 411.683089][T21749] bond_slave_0: left promiscuous mode [ 411.814401][T21749] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 413.327854][T21809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.616464][T21816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7665'. [ 413.616502][T21816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7665'. [ 413.893068][T21826] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7667'. [ 414.711626][T21868] netlink: 'syz.3.7683': attribute type 29 has an invalid length. [ 414.711669][T21868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7683'. [ 414.711720][T21868] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7683'. [ 416.190609][T21922] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 416.341022][T21926] netlink: 'syz.0.7709': attribute type 9 has an invalid length. [ 416.511482][T21936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7712'. [ 416.513746][T21936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7712'. [ 416.575841][T21938] netlink: 'syz.0.7714': attribute type 29 has an invalid length. [ 416.576539][T21938] netlink: 'syz.0.7714': attribute type 29 has an invalid length. [ 417.067160][T21967] ref_ctr_offset mismatch. inode: 0x1df2 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 417.132739][T21973] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7730'. [ 419.233589][T22049] netlink: 29 bytes leftover after parsing attributes in process `syz.4.7768'. [ 419.233639][T22049] netlink: 29 bytes leftover after parsing attributes in process `syz.4.7768'. [ 419.707530][T22077] netlink: 'syz.4.7781': attribute type 6 has an invalid length. [ 419.707589][T22077] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7781'. [ 419.820486][T22085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7784'. [ 419.912975][T22091] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7788'. [ 420.322220][T22107] netlink: 'syz.2.7796': attribute type 10 has an invalid length. [ 420.324350][T22107] macvlan1: entered promiscuous mode [ 420.324379][T22107] macvlan1: entered allmulticast mode [ 420.398683][T22107] veth1_vlan: entered allmulticast mode [ 420.431373][T22107] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 421.496244][T22142] netlink: 'syz.4.7811': attribute type 9 has an invalid length. [ 422.067383][T22173] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7827'. [ 422.067425][T22173] netlink: 320 bytes leftover after parsing attributes in process `syz.2.7827'. [ 422.067441][T22173] netlink: 'syz.2.7827': attribute type 1 has an invalid length. [ 423.122964][T22214] netlink: 'syz.1.7845': attribute type 7 has an invalid length. [ 423.122990][T22214] netlink: 'syz.1.7845': attribute type 5 has an invalid length. [ 423.123006][T22214] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7845'. [ 423.479608][T22233] netlink: 'syz.1.7854': attribute type 19 has an invalid length. [ 423.629958][T22241] xt_time: unknown flags 0x74 [ 423.643307][T22243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7859'. [ 423.643330][T22243] tc_dump_action: action bad kind [ 425.778971][T22329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7895'. [ 425.779060][T22329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7895'. [ 425.928914][T22335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7896'. [ 426.859243][T22365] netlink: 'syz.2.7905': attribute type 3 has an invalid length. [ 427.178630][T22384] tunl0: left allmulticast mode [ 428.382045][T22451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7942'. [ 428.929389][T22482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7956'. [ 428.929432][T22482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7956'. [ 429.393478][T22499] xt_hashlimit: max too large, truncated to 1048576 [ 430.190726][ T30] audit: type=1107 audit(1793106932.411:5): pid=22510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='[j' [ 430.208336][T22514] netlink: 'syz.3.7969': attribute type 10 has an invalid length. [ 430.247974][T22514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.262656][T22516] netlink: 'syz.3.7969': attribute type 10 has an invalid length. [ 430.263967][T22514] team0: Port device netdevsim1 added [ 430.522177][T22527] siw: device registration error -23 [ 430.875547][T22553] netlink: 17023 bytes leftover after parsing attributes in process `syz.4.7990'. [ 431.057409][T22558] netlink: 428 bytes leftover after parsing attributes in process `syz.1.7993'. [ 431.328411][T22571] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7999'. [ 431.801695][T22596] netlink: 'syz.0.8012': attribute type 21 has an invalid length. [ 431.801775][T22596] netlink: 'syz.0.8012': attribute type 6 has an invalid length. [ 431.801791][T22596] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8012'. [ 431.805263][T22598] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8013'. [ 432.023366][T22610] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8018'. [ 432.082597][T22614] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8018'. [ 433.087106][T22640] netlink: 'syz.4.8031': attribute type 10 has an invalid length. [ 433.087165][T22640] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 433.128813][T22640] team0: Port device wlan0 added [ 433.540672][T22662] netlink: 'syz.4.8042': attribute type 21 has an invalid length. [ 435.088085][T22719] netlink: 5180 bytes leftover after parsing attributes in process `syz.2.8066'. [ 435.088192][T22719] block nbd0: not configured, cannot reconfigure [ 435.723005][T22743] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8080'. [ 437.559823][T22837] netlink: 'syz.2.8124': attribute type 6 has an invalid length. [ 437.559871][T22837] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8124'. [ 437.839152][T22853] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8129'. [ 438.634968][T22898] netlink: 'syz.1.8150': attribute type 1 has an invalid length. [ 438.634994][T22898] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8150'. [ 439.179700][T22925] netlink: 'syz.1.8164': attribute type 29 has an invalid length. [ 439.180657][T22925] netlink: 'syz.1.8164': attribute type 29 has an invalid length. [ 439.402321][T22936] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8171'. [ 439.403584][T22936] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8171'. [ 439.434255][T22938] TCP: TCP_TX_DELAY enabled [ 440.173206][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.173267][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.086210][T23042] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8217'. [ 443.187183][T23090] xt_IDLETIMER: label is empty or not nul-terminated [ 445.637690][T23092] netlink: 'syz.4.8241': attribute type 29 has an invalid length. [ 445.638602][T23092] netlink: 'syz.4.8241': attribute type 29 has an invalid length. [ 445.738817][T23096] xt_LOG: prefix is not null-terminated [ 445.787174][T23098] netlink: 'syz.3.8243': attribute type 2 has an invalid length. [ 445.787198][T23098] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.8243'. [ 445.876620][T23106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8248'. [ 445.877479][T23106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8248'. [ 446.015407][T23113] nbd: socks must be embedded in a SOCK_ITEM attr [ 446.230669][T23128] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.8259'. [ 446.232683][T23128] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.8259'. [ 446.266631][T23130] tmpfs: Bad value for 'mode' [ 446.418258][T23136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8262'. [ 449.533766][T23155] netlink: 'syz.0.8271': attribute type 10 has an invalid length. [ 449.575911][T23159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8274'. [ 449.739796][T23165] netlink: 'syz.2.8276': attribute type 29 has an invalid length. [ 450.347070][T23170] netlink: 'syz.2.8276': attribute type 29 has an invalid length. [ 450.418049][T23178] netlink: 'syz.4.8282': attribute type 10 has an invalid length. [ 450.459264][T23178] bond0: (slave team0): Releasing backup interface [ 450.501754][T23178] team0 (unregistering): Port device team_slave_0 removed [ 450.528618][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8283'. [ 450.549269][T23178] team0 (unregistering): Port device wlan0 removed [ 451.139501][T23197] tmpfs: Unknown parameter 'WZ֏PVeȯj [ 451.139501][T23197] z7tI*0"{7LZ1,0вj/i' [ 451.218388][T23199] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.8292'. [ 451.403798][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8299'. [ 451.812094][T23233] netlink: 'syz.3.8309': attribute type 1 has an invalid length. [ 452.821860][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8334'. [ 452.822134][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8334'. [ 452.822158][T23288] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 453.238166][T23311] netlink: 'syz.1.8346': attribute type 10 has an invalid length. [ 453.238193][T23311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8346'. [ 453.238375][T23311] team0: entered promiscuous mode [ 453.238394][T23311] team_slave_0: entered promiscuous mode [ 453.238615][T23311] team_slave_1: entered promiscuous mode [ 453.238797][T23311] team0: entered allmulticast mode [ 453.238812][T23311] team_slave_0: entered allmulticast mode [ 453.238828][T23311] team_slave_1: entered allmulticast mode [ 453.246659][T23311] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.846455][T23324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8352'. [ 454.034581][T23311] .: (slave team0): Releasing backup interface [ 454.077205][T23311] bridge0: port 3(team0) entered blocking state [ 454.077407][T23311] bridge0: port 3(team0) entered disabled state [ 454.443935][T23342] netlink: 'syz.0.8361': attribute type 11 has an invalid length. [ 454.443994][T23342] netlink: 'syz.0.8361': attribute type 5 has an invalid length. [ 454.846135][T23357] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8367'. [ 455.049914][T23369] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8374'. [ 455.214761][T23376] xt_l2tp: missing protocol rule (udp|l2tpip) [ 455.366887][T23385] netlink: 'syz.2.8382': attribute type 1 has an invalid length. [ 455.366913][T23385] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8382'. [ 455.799528][T23400] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8388'. [ 455.799563][T23400] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8388'. [ 455.831820][T23399] netlink: 452 bytes leftover after parsing attributes in process `syz.1.8387'. [ 456.245240][T23416] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8395'. [ 456.289036][T23419] netlink: 'syz.1.8398': attribute type 12 has an invalid length. [ 456.289080][T23419] netlink: 14532 bytes leftover after parsing attributes in process `syz.1.8398'. [ 456.325077][T23420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8397'. [ 456.874950][T23451] netlink: 'syz.1.8413': attribute type 21 has an invalid length. [ 456.874974][T23451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8413'. [ 457.234812][T23470] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 457.268818][T23476] netlink: 'syz.4.8425': attribute type 2 has an invalid length. [ 457.268852][T23476] block nbd15: not configured, cannot reconfigure [ 457.482524][T23484] netlink: 'syz.0.8427': attribute type 2 has an invalid length. [ 457.736362][T23497] netlink: 'syz.0.8434': attribute type 29 has an invalid length. [ 457.739406][T23497] netlink: 'syz.0.8434': attribute type 29 has an invalid length. [ 458.629778][T23544] netlink: 'syz.0.8454': attribute type 29 has an invalid length. [ 458.630634][T23544] netlink: 'syz.0.8454': attribute type 29 has an invalid length. [ 459.185222][T23580] xt_hashlimit: size too large, truncated to 1048576 [ 459.185435][T23580] xt_hashlimit: overflow, rate too high: 0 [ 459.319602][T23588] netlink: zone id is out of range [ 459.319629][T23588] netlink: zone id is out of range [ 459.319649][T23588] netlink: del zone limit has 8 unknown bytes [ 459.708954][T23612] netlink: 'syz.2.8488': attribute type 4 has an invalid length. [ 460.198303][T23642] netlink: 'syz.4.8503': attribute type 21 has an invalid length. [ 460.198331][T23642] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.224866][T23643] netlink: 'syz.3.8504': attribute type 3 has an invalid length. [ 460.224887][T23643] __nla_validate_parse: 4 callbacks suppressed [ 460.224900][T23643] netlink: 16086 bytes leftover after parsing attributes in process `syz.3.8504'. [ 461.985578][T23726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.927060][T23784] validate_nla: 1 callbacks suppressed [ 462.927082][T23784] netlink: 'syz.0.8573': attribute type 21 has an invalid length. [ 462.927100][T23784] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8573'. [ 463.224838][T23800] netlink: 'syz.3.8581': attribute type 4 has an invalid length. [ 463.390078][T23806] netlink: get zone limit has 4 unknown bytes [ 463.830038][T23829] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8595'. [ 463.843950][T23829] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8595'. [ 464.411652][T23843] netlink: 'syz.0.8602': attribute type 46 has an invalid length. [ 465.409316][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8621'. [ 465.737959][T23903] tmpfs: Bad value for 'uid' [ 465.737980][T23903] tmpfs: Bad value for 'uid' [ 466.041261][T23917] netlink: 16863 bytes leftover after parsing attributes in process `syz.1.8635'. [ 466.501235][T23946] netlink: 'syz.2.8649': attribute type 10 has an invalid length. [ 466.558976][T23950] netlink: 'syz.3.8652': attribute type 1 has an invalid length. [ 466.614429][T23954] netlink: 'syz.1.8653': attribute type 15 has an invalid length. [ 466.753470][T23963] netlink: 'syz.0.8656': attribute type 8 has an invalid length. [ 466.941361][T23977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8663'. [ 467.344535][T23996] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8674'. [ 468.576487][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8682'. [ 470.386427][T24020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8684'. [ 470.554477][T24033] netlink: 'syz.0.8691': attribute type 6 has an invalid length. [ 470.554503][T24033] netlink: 352 bytes leftover after parsing attributes in process `syz.0.8691'. [ 470.725120][T24044] netlink: 'syz.3.8698': attribute type 6 has an invalid length. [ 470.725147][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8698'. [ 470.922381][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8702'. [ 471.259805][T24072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8711'. [ 471.860300][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8726'. [ 472.410618][T24138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8740'. [ 472.542055][T24142] netlink: 'syz.2.8742': attribute type 29 has an invalid length. [ 472.549929][T24142] netlink: 'syz.2.8742': attribute type 29 has an invalid length. [ 473.629622][T24171] netlink: 'syz.2.8754': attribute type 2 has an invalid length. [ 473.629651][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8754'. [ 473.724486][T24175] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8755'. [ 474.084703][T24200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8767'. [ 474.117338][T24203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8769'. [ 474.966774][T24209] netlink: zone id is out of range [ 474.966793][T24209] netlink: zone id is out of range [ 474.967010][T24209] netlink: set zone limit has 4 unknown bytes [ 477.177151][T24285] netlink: 'syz.4.8808': attribute type 29 has an invalid length. [ 477.190456][T24285] netlink: 'syz.4.8808': attribute type 29 has an invalid length. [ 477.573737][T24299] netlink: 16114 bytes leftover after parsing attributes in process `syz.4.8815'. [ 477.800001][T24304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8816'. [ 478.207186][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8830'. [ 478.579457][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8832'. [ 479.885418][T24368] netlink: 'syz.1.8849': attribute type 21 has an invalid length. [ 479.885449][T24368] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8849'. [ 480.799366][T24408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8866'. [ 481.333511][T24438] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8881'. [ 481.398201][T24446] nftables ruleset with unbound set [ 481.991101][T24480] netlink: 'syz.4.8901': attribute type 2 has an invalid length. [ 482.157826][T24482] rxe_eth0 speed is unknown, defaulting to 1000 [ 482.601315][T24513] tmpfs: Unknown parameter 'measure' [ 482.686697][T24482] lo speed is unknown, defaulting to 1000 [ 483.624453][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8926'. [ 483.670433][T24541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8927'. [ 484.500684][T24570] netlink: 'syz.0.8940': attribute type 19 has an invalid length. [ 484.500712][T24570] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8940'. [ 485.291234][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8956'. [ 485.749780][T24607] netlink: 'syz.0.8957': attribute type 1 has an invalid length. [ 485.749805][T24607] netlink: 'syz.0.8957': attribute type 2 has an invalid length. [ 486.407350][T24632] netlink: 'syz.3.8970': attribute type 2 has an invalid length. [ 487.405720][T24669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8988'. [ 487.405772][T24669] netlink: 'syz.2.8988': attribute type 2 has an invalid length. [ 487.566566][T24677] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8994'. [ 488.430206][T24718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9012'. [ 488.532327][T24724] netlink: 'syz.1.9015': attribute type 21 has an invalid length. [ 488.997547][T24756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9031'. [ 489.493358][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9046'. [ 489.808410][T24803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9053'. [ 490.639094][T24837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9071'. [ 490.639122][T24837] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9071'. [ 490.639139][T24837] netlink: 'syz.2.9071': attribute type 5 has an invalid length. [ 490.639153][T24837] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9071'. [ 490.747043][T24841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9073'. [ 490.819113][T24845] netlink: 'syz.0.9076': attribute type 1 has an invalid length. [ 490.871142][T24847] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9075'. [ 490.876015][T24843] netlink: 'syz.2.9074': attribute type 29 has an invalid length. [ 490.876048][T24843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9074'. [ 490.876075][T24843] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9074'. [ 494.529565][T24881] __nla_validate_parse: 5 callbacks suppressed [ 494.529589][T24881] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9090'. [ 494.548277][T24881] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9090'. [ 495.467446][T24937] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9119'. [ 495.468708][T24937] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9119'. [ 495.516815][T24941] netlink: set zone limit has 4 unknown bytes [ 495.688284][T24949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9122'. [ 496.236462][T24966] netlink: 'syz.4.9133': attribute type 15 has an invalid length. [ 496.236487][T24966] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.9133'. [ 496.390458][T24975] netlink: 'syz.4.9137': attribute type 4 has an invalid length. [ 496.531903][T24983] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9144'. [ 497.041070][T25003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9151'. [ 497.798343][T25024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9162'. [ 497.798392][T25024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9162'. [ 497.874776][T25027] netlink: 'syz.2.9161': attribute type 10 has an invalid length. [ 497.953769][T25035] xt_hashlimit: max too large, truncated to 1048576 [ 498.392792][T25057] netlink: 'syz.0.9179': attribute type 12 has an invalid length. [ 499.328378][T25098] netlink: 'syz.1.9196': attribute type 21 has an invalid length. [ 499.328458][T25098] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.284640][T25115] xt_nfacct: accounting object `' does not exist [ 500.462291][T25124] __nla_validate_parse: 3 callbacks suppressed [ 500.462315][T25124] netlink: 165 bytes leftover after parsing attributes in process `syz.1.9208'. [ 501.567811][T25161] netlink: 272 bytes leftover after parsing attributes in process `syz.2.9224'. [ 501.613617][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.613678][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.104667][T25192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9241'. [ 502.137677][T25195] netlink: 'syz.4.9242': attribute type 153 has an invalid length. [ 502.193256][T25197] netlink: 'syz.0.9243': attribute type 2 has an invalid length. [ 502.341087][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 503.275995][T25247] netlink: 'syz.3.9265': attribute type 29 has an invalid length. [ 503.277074][T25247] netlink: 'syz.3.9265': attribute type 29 has an invalid length. [ 503.401513][T25249] netlink: 'syz.4.9267': attribute type 1 has an invalid length. [ 503.812024][T25265] netlink: 'syz.4.9274': attribute type 8 has an invalid length. [ 504.072823][T25283] netlink: 'syz.3.9282': attribute type 29 has an invalid length. [ 504.085760][T25283] netlink: 'syz.3.9282': attribute type 29 has an invalid length. [ 504.169242][T25288] netlink: 4992 bytes leftover after parsing attributes in process `syz.2.9284'. [ 504.510108][T25311] netlink: 'syz.1.9297': attribute type 27 has an invalid length. [ 504.510136][T25311] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9297'. [ 504.616734][T25316] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9298'. [ 504.881284][T25330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9306'. [ 505.387032][T25366] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9323'. [ 505.387852][T25366] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9323'. [ 505.541441][T25371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9329'. [ 505.725124][T25384] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9331'. [ 505.822342][T25391] netlink: 'syz.0.9334': attribute type 10 has an invalid length. [ 505.822389][T25391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9334'. [ 506.518072][T25421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9350'. [ 506.545938][T25422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9349'. [ 506.726211][T25428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9355'. [ 506.774729][T25432] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9352'. [ 507.634395][T25472] validate_nla: 1 callbacks suppressed [ 507.634419][T25472] netlink: 'syz.2.9376': attribute type 9 has an invalid length. [ 507.634446][T25472] netlink: 186032 bytes leftover after parsing attributes in process `syz.2.9376'. [ 508.688857][T25493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9384'. [ 508.688889][T25493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9384'. [ 510.578517][T25598] __nla_validate_parse: 3 callbacks suppressed [ 510.578541][T25598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9436'. [ 511.083438][T25630] tipc: Enabling of bearer rejected, media not registered [ 511.297566][T25637] smc: removing ib device syz1 [ 511.594854][T25637] smbdirect: ib_dev[syz1] removed [ 511.756290][T25650] netlink: 'syz.2.9460': attribute type 3 has an invalid length. [ 511.756340][T25650] netlink: 'syz.2.9460': attribute type 3 has an invalid length. [ 511.977974][T25656] netlink: 'syz.2.9463': attribute type 3 has an invalid length. [ 511.978003][T25656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9463'. [ 513.464827][T25684] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9476'. [ 514.266084][T25711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9489'. [ 514.812969][T25735] netlink: 'syz.2.9500': attribute type 29 has an invalid length. [ 514.814972][T25735] netlink: 'syz.2.9500': attribute type 29 has an invalid length. [ 514.951010][T25740] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9503'. [ 514.951039][T25740] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9503'. [ 514.951055][T25740] netlink: 'syz.3.9503': attribute type 5 has an invalid length. [ 514.951069][T25740] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9503'. [ 515.400244][T25763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9514'. [ 517.697416][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9550'. [ 520.071563][T25956] netlink: zone id is out of range [ 520.071584][T25956] netlink: zone id is out of range [ 520.071662][T25956] netlink: set zone limit has 4 unknown bytes [ 520.323956][T25971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9612'. [ 520.661562][T25989] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9619'. [ 520.918087][T26001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9627'. [ 521.060592][T26012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9632'. [ 521.247167][T26023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9638'. [ 521.654835][T26047] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9650'. [ 522.124024][T26071] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9663'. [ 522.128714][T26071] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9663'. [ 523.573710][T26119] C: renamed from veth1_to_team (while UP) [ 523.601233][T26119] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9686'. [ 523.872768][T26134] netlink: 802 bytes leftover after parsing attributes in process `syz.4.9695'. [ 526.388075][T26253] netlink: 'syz.4.9753': attribute type 39 has an invalid length. [ 526.610156][T26261] netlink: 'syz.4.9757': attribute type 4 has an invalid length. [ 526.610183][T26261] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9757'. [ 526.610218][T26261] .: renamed from bond0 [ 527.299028][T26285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9768'. [ 527.376471][T26288] netlink: 'syz.3.9771': attribute type 1 has an invalid length. [ 527.376497][T26288] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9771'. [ 527.376547][T26288] netlink: 'syz.3.9771': attribute type 1 has an invalid length. [ 527.376562][T26288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9771'. [ 528.073608][T26316] netlink: 'syz.3.9782': attribute type 13 has an invalid length. [ 528.073636][T26316] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.9782'. [ 528.663157][T26356] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9799'. [ 530.929119][T26422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.316211][T26449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9842'. [ 532.218278][T26492] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9859'. [ 532.661375][T26523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9875'. [ 532.704265][T26527] netlink: 'syz.2.9877': attribute type 12 has an invalid length. [ 533.063559][T26546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9886'. [ 533.552067][T26572] netlink: 'syz.1.9898': attribute type 1 has an invalid length. [ 534.835739][T26617] netlink: 'syz.3.9917': attribute type 21 has an invalid length. [ 534.908859][T26621] netlink: 'syz.0.9921': attribute type 46 has an invalid length. [ 534.908884][T26621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9921'. [ 534.908901][T26621] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9921'. [ 535.999129][T26648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.252691][T26674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9944'. [ 536.951830][T26712] netlink: 'syz.4.9964': attribute type 1 has an invalid length. [ 537.487794][T26742] netlink: 'syz.1.9980': attribute type 16 has an invalid length. [ 537.487896][T26742] netlink: 'syz.1.9980': attribute type 17 has an invalid length. [ 538.235853][T26770] netlink: 'syz.0.9993': attribute type 3 has an invalid length. [ 538.626185][T26794] netlink: 'syz.2.10003': attribute type 2 has an invalid length. [ 539.077380][T26813] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10013'. [ 539.078536][T26813] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10013'. [ 539.519311][T26828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10020'. [ 539.519395][T26828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10020'. [ 540.296699][T26851] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10032'. [ 540.598807][T26867] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 541.797451][T26900] netlink: 'syz.3.10055': attribute type 2 has an invalid length. [ 542.737782][T26933] netlink: 'syz.3.10072': attribute type 3 has an invalid length. [ 543.171372][T26949] netlink: 'syz.2.10080': attribute type 1 has an invalid length. [ 544.687772][T26989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10099'. [ 544.704821][T26990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10100'. [ 549.285764][T27080] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10143'. [ 549.943125][T27096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.943147][T27096] IPv6: NLM_F_CREATE should be set when creating new route [ 549.943242][T27096] IPv6: NLM_F_CREATE should be set when creating new route [ 549.943293][T27096] IPv6: NLM_F_CREATE should be set when creating new route [ 550.512796][T27112] netlink: 8628 bytes leftover after parsing attributes in process `syz.0.10160'. [ 551.097878][T27138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10171'. [ 551.098050][T27138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10171'. [ 551.242408][T27142] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10173'. [ 554.485835][T27165] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10183'. [ 554.485873][T27165] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10183'. [ 554.511491][T27164] netlink: 'syz.3.10182': attribute type 25 has an invalid length. [ 554.511513][T27164] netlink: 'syz.3.10182': attribute type 3 has an invalid length. [ 554.511526][T27164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10182'. [ 556.598910][T27232] syz.1.10216 (27232) used greatest stack depth: 18024 bytes left [ 556.916911][T27250] netlink: 'syz.2.10224': attribute type 1 has an invalid length. [ 556.916939][T27250] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10224'. [ 556.916977][T27250] netlink: 'syz.2.10224': attribute type 1 has an invalid length. [ 557.275358][T27262] netlink: 'syz.4.10230': attribute type 1 has an invalid length. [ 558.481263][T27290] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.10244'. [ 558.551559][T27289] syz.3.10243 (27289) used obsolete PPPIOCDETACH ioctl [ 559.389013][T27317] netlink: 'syz.3.10257': attribute type 10 has an invalid length. [ 559.389041][T27317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10257'. [ 559.389955][T27317] team0: entered promiscuous mode [ 559.389976][T27317] team_slave_0: entered promiscuous mode [ 559.390500][T27317] team_slave_1: entered promiscuous mode [ 559.427593][T27317] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 559.428227][T27317] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 559.429873][T27317] team0: entered allmulticast mode [ 559.429892][T27317] team_slave_0: entered allmulticast mode [ 559.429913][T27317] team_slave_1: entered allmulticast mode [ 559.429939][T27317] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 559.476544][T27317] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 563.054734][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.054963][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.713867][T27426] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10308'. [ 565.716072][T27426] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10308'. [ 567.316475][T27478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10331'. [ 567.316654][T27478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10331'. [ 567.471059][T27484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10333'. [ 568.576262][T27517] netlink: 'syz.3.10349': attribute type 16 has an invalid length. [ 568.576326][T27517] netlink: 'syz.3.10349': attribute type 17 has an invalid length. [ 569.057354][T27524] netlink: 'syz.2.10352': attribute type 1 has an invalid length. [ 569.057380][T27524] netlink: 'syz.2.10352': attribute type 2 has an invalid length. [ 569.057397][T27524] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.10352'. [ 569.464055][T27532] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10356'. [ 569.627283][T27539] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10359'. [ 569.627315][T27539] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10359'. [ 570.193907][T27560] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10369'. [ 571.498185][T27592] netlink: 'syz.4.10384': attribute type 5 has an invalid length. [ 571.498212][T27592] __nla_validate_parse: 1 callbacks suppressed [ 571.498225][T27592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10384'. [ 572.887031][T27642] netlink: 'syz.2.10407': attribute type 2 has an invalid length. [ 574.907722][T27702] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10435'. [ 574.974161][T27705] xt_LOG: level 115 >= 8 [ 575.536728][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10443'. [ 575.746169][T27730] netlink: 'syz.1.10449': attribute type 1 has an invalid length. [ 575.746196][T27730] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10449'. [ 575.746234][T27730] netlink: 'syz.1.10449': attribute type 1 has an invalid length. [ 575.746249][T27730] netlink: 'syz.1.10449': attribute type 2 has an invalid length. [ 576.752215][T27762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10462'. [ 576.752247][T27762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10462'. [ 577.199278][T27782] netlink: 'syz.4.10472': attribute type 21 has an invalid length. [ 577.650987][T27803] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.10481'. [ 577.824319][T27812] netlink: 165 bytes leftover after parsing attributes in process `syz.2.10486'. [ 579.166341][T27839] netlink: 'syz.4.10499': attribute type 11 has an invalid length. [ 579.495922][T27849] netlink: 'syz.1.10503': attribute type 1 has an invalid length. [ 579.495947][T27849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10503'. [ 579.496456][T27849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10503'. [ 580.918977][T27903] netlink: 'syz.0.10527': attribute type 29 has an invalid length. [ 581.105933][T27904] netlink: 'syz.0.10527': attribute type 29 has an invalid length. [ 582.734735][T27961] netlink: 'syz.0.10555': attribute type 1 has an invalid length. [ 582.734760][T27961] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10555'. [ 583.124106][T27972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10560'. [ 584.063799][T28005] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10575'. [ 584.063876][T28005] netlink: get zone limit has 4 unknown bytes [ 584.573868][T28019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10582'. [ 585.075297][T28040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10592'. [ 585.075327][T28040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10592'. [ 585.234802][T28049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10595'. [ 585.234830][T28049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10595'. [ 585.234848][T28049] netlink: 'syz.0.10595': attribute type 4 has an invalid length. [ 586.124242][T28077] netlink: 'syz.0.10609': attribute type 29 has an invalid length. [ 586.125890][T28077] netlink: 'syz.0.10609': attribute type 29 has an invalid length. [ 586.824487][T28098] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10619'. [ 586.916829][T28103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10621'. [ 588.724279][T28146] netlink: 'syz.1.10641': attribute type 46 has an invalid length. [ 590.083131][T28191] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10665'. [ 593.157103][T28270] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10701'. [ 593.260109][T28275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10704'. [ 594.369311][T28300] netlink: 'syz.0.10716': attribute type 21 has an invalid length. [ 594.369339][T28300] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10716'. [ 594.641911][T28307] netlink: 'syz.0.10719': attribute type 2 has an invalid length. [ 594.641937][T28307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10719'. [ 594.785684][T28314] netlink: 'syz.4.10722': attribute type 3 has an invalid length. [ 594.785709][T28314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10722'. [ 595.077665][T28328] netlink: 'syz.1.10729': attribute type 1 has an invalid length. [ 596.783995][T28372] netlink: 'syz.0.10750': attribute type 10 has an invalid length. [ 596.784022][T28372] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10750'. [ 598.113504][T28395] netlink: 'syz.4.10758': attribute type 5 has an invalid length. [ 598.113532][T28395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10758'. [ 598.759314][T28405] x_tables: ip6_tables: DNAT target: only valid in nat table, not syz1 [ 602.382167][T28457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10789'. [ 602.728253][T28471] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10796'. [ 602.826416][T28475] netlink: 763 bytes leftover after parsing attributes in process `syz.2.10798'. [ 602.966895][T28484] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10801'. [ 602.966938][T28484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10801'. [ 602.966957][T28484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10801'. [ 604.277658][T28506] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10810'. [ 604.318689][T28506] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10810'. [ 604.622057][T28508] netlink: 'syz.3.10811': attribute type 17 has an invalid length. [ 605.796739][T28548] netlink: 'syz.1.10830': attribute type 29 has an invalid length. [ 605.798012][T28548] netlink: 'syz.1.10830': attribute type 29 has an invalid length. [ 605.879740][T28550] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10831'. [ 607.462926][T28581] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10845'. [ 607.623331][T28586] netlink: 'syz.3.10847': attribute type 2 has an invalid length. [ 607.729623][T28592] netlink: 'syz.0.10849': attribute type 4 has an invalid length. [ 609.127096][T28640] netlink: 'syz.0.10874': attribute type 4 has an invalid length. [ 609.378769][T28646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10877'. [ 610.525840][T28694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10900'. [ 611.004413][T28710] tmpfs: Bad value for 'uid' [ 611.004434][T28710] tmpfs: Bad value for 'uid' [ 611.219322][T28719] tmpfs: Bad value for 'uid' [ 611.219344][T28719] tmpfs: Bad value for 'uid' [ 612.364219][T28747] netlink: 'syz.1.10925': attribute type 2 has an invalid length. [ 612.364246][T28747] netlink: 51 bytes leftover after parsing attributes in process `syz.1.10925'. [ 613.875671][T28787] netlink: 'syz.2.10945': attribute type 17 has an invalid length. [ 614.046939][T28787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.166748][T28796] netlink: 'syz.0.10949': attribute type 29 has an invalid length. [ 614.371005][T28787] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 614.401697][T28799] netlink: 'syz.0.10949': attribute type 29 has an invalid length. [ 614.410510][T28800] netlink: 'syz.0.10949': attribute type 29 has an invalid length. [ 614.952217][T28810] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.10954'. [ 615.061842][T28814] netlink: 'syz.1.10956': attribute type 10 has an invalid length. [ 615.062282][T28814] team0: left allmulticast mode [ 615.062320][T28814] team_slave_0: left allmulticast mode [ 615.062344][T28814] team_slave_1: left allmulticast mode [ 615.062370][T28814] team0: left promiscuous mode [ 615.062386][T28814] team_slave_0: left promiscuous mode [ 615.063026][T28814] team_slave_1: left promiscuous mode [ 615.067572][T28814] bridge0: port 3(team0) entered disabled state [ 615.163744][T28814] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.168774][T28814] .: (slave team0): Enslaving as an active interface with an up link [ 615.298465][T28820] netlink: 'syz.0.10959': attribute type 29 has an invalid length. [ 615.299695][T28820] netlink: 'syz.0.10959': attribute type 29 has an invalid length. [ 615.300671][T28820] netlink: 'syz.0.10959': attribute type 29 has an invalid length. [ 616.007195][T28842] netlink: 'syz.4.10970': attribute type 2 has an invalid length. [ 616.007221][T28842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10970'. [ 617.139997][T28878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.151990][T28878] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.174253][T28878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.241509][T28878] batman_adv: batadv0: Interface activated: 30 [ 617.244422][T28878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.266973][T28878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.266999][T28878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.270009][T28878] veth1_vlan: left promiscuous mode [ 617.299063][T28878] veth0_vlan: left promiscuous mode [ 617.307221][T28878] veth0_vlan: entered promiscuous mode [ 617.310446][T28878] veth1_vlan: entered promiscuous mode [ 617.339836][T28878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 617.349984][T28878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.359252][T28878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 617.360646][T28878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.399179][ T5762] lo speed is unknown, defaulting to 1000 [ 617.399239][ T5762] syz0: Port: 1 Link ACTIVE [ 617.399325][ T5762] lo speed is unknown, defaulting to 1000 [ 617.517757][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10992'. [ 617.820991][ T1173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.821042][ T1173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.821079][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.821116][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.409134][T28917] netlink: 220 bytes leftover after parsing attributes in process `syz.2.11006'. [ 620.007394][T28949] tap0: tun_chr_ioctl cmd 1074025677 [ 620.007556][T28949] tap0: linktype set to 780 [ 622.131851][T28995] validate_nla: 1 callbacks suppressed [ 622.131874][T28995] netlink: 'syz.1.11041': attribute type 10 has an invalid length. [ 622.131893][T28995] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.11041'. [ 623.456314][T29009] netlink: 'syz.0.11047': attribute type 3 has an invalid length. [ 623.456338][T29009] netlink: 'syz.0.11047': attribute type 2 has an invalid length. [ 624.494702][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.494944][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.697404][ T5631] cgroup: fork rejected by pids controller in /syz0 [ 625.211259][T29047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11065'. [ 627.899008][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.165369][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.418075][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.683252][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.828403][T29079] tap0: tun_chr_ioctl cmd 1074025677 [ 628.828534][T29079] tap0: linktype set to 805 [ 629.091380][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 629.104112][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 629.120092][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 629.130282][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 629.144869][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 629.504129][T29092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11081'. [ 629.629161][T29098] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11084'. [ 630.443173][T29115] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11089'. [ 630.568956][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.602329][ T13] bond_slave_0: left allmulticast mode [ 630.627890][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.646130][ T13] bond_slave_1: left allmulticast mode [ 630.671653][ T13] bond0 (unregistering): Released all slaves [ 630.884609][ T13] !;: left promiscuous mode [ 631.212235][ T4950] Bluetooth: hci1: command tx timeout [ 631.968320][T29084] rxe_eth0 speed is unknown, defaulting to 1000 [ 632.177214][T29084] rxe_eth0 speed is unknown, defaulting to 1000 [ 632.178812][T29084] rxe_eth0 speed is unknown, defaulting to 1000 [ 632.205490][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 633.195717][T29084] infiniband rxe0: set active [ 633.195794][T29084] infiniband rxe0: added rxe_eth0 [ 633.268407][T29084] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 633.268450][T29084] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 633.268496][T29084] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 633.305335][ T4950] Bluetooth: hci1: command tx timeout [ 633.331506][ T193] rxe_eth0 speed is unknown, defaulting to 1000 [ 633.419136][T29084] RDS/IB: rxe0: added [ 633.419207][T29084] smc: adding ib device rxe0 with port count 1 [ 633.419227][T29084] smc: ib device rxe0 port 1 has no pnetid [ 633.479531][ T193] rxe_eth0 speed is unknown, defaulting to 1000 [ 633.480602][T29084] rxe_eth0 speed is unknown, defaulting to 1000 [ 634.335827][T29084] rxe_eth0 speed is unknown, defaulting to 1000 [ 634.878569][T29217] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11122'. [ 635.371010][ T4950] Bluetooth: hci1: command tx timeout [ 635.757222][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 635.768972][T29084] rxe_eth0 speed is unknown, defaulting to 1000 [ 636.457062][T29084] rxe_eth0 speed is unknown, defaulting to 1000 [ 637.451653][ T4950] Bluetooth: hci1: command tx timeout [ 637.725736][T29084] rxe_eth0 speed is unknown, defaulting to 1000 [ 638.110349][T29286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11145'. [ 638.125421][T29286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11145'. [ 638.129771][T29286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11145'. [ 638.427140][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 638.840460][T29084] lo speed is unknown, defaulting to 1000 [ 640.791177][ T13] hsr_slave_0: left promiscuous mode [ 640.914429][ T13] hsr_slave_1: left promiscuous mode [ 640.915766][ T13] batman_adv: batadv0: Interface deactivated: 30 [ 640.915805][ T13] batman_adv: batadv0: Removing interface: 30 [ 640.945618][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.945641][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.117453][ T13] veth1_vlan: left promiscuous mode [ 641.119004][ T13] veth0_vlan: left promiscuous mode [ 642.720031][T29367] netlink: 'syz.3.11172': attribute type 16 has an invalid length. [ 642.720099][T29367] netlink: 'syz.3.11172': attribute type 17 has an invalid length. [ 644.128705][ T13] team0 (unregistering): Port device team_slave_1 removed [ 644.158222][ T13] team0 (unregistering): Port device team_slave_0 removed [ 644.388764][T29084] rxe_eth0 speed is unknown, defaulting to 1000 [ 644.399278][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 644.495430][T29389] tap0: tun_chr_ioctl cmd 1074025677 [ 644.495654][T29389] tap0: linktype set to 768 [ 644.653786][ T5831] infiniband syz0: ib_query_port failed (-19) [ 645.050499][ T62] smc: removing ib device syz0 [ 645.258855][ T62] smbdirect: ib_dev[syz0] removed [ 647.773964][T29463] netlink: 'syz.2.11203': attribute type 2 has an invalid length. [ 647.806753][T29084] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.807727][T29084] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.808933][T29084] bridge_slave_0: entered allmulticast mode [ 647.839240][T29084] bridge_slave_0: entered promiscuous mode [ 647.869915][T29084] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.870380][T29084] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.878569][T29084] bridge_slave_1: entered allmulticast mode [ 647.916651][T29084] bridge_slave_1: entered promiscuous mode [ 648.325414][T29084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.377723][T29084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.800558][T29084] team0: Port device team_slave_0 added [ 648.827028][T29084] team0: Port device team_slave_1 added [ 649.218804][T29084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.218824][T29084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.218856][T29084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.258393][T29084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.258442][T29084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.258515][T29084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.832848][T29084] hsr_slave_0: entered promiscuous mode [ 649.853214][T29084] hsr_slave_1: entered promiscuous mode [ 649.897544][T29084] debugfs: 'hsr0' already exists in 'hsr' [ 649.897571][T29084] Cannot create hsr debugfs directory [ 650.481846][T29500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11220'. [ 652.948887][T29546] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.11233'. [ 653.181081][T29550] tap0: tun_chr_ioctl cmd 1074025680 [ 653.867793][T29084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 653.947499][T29084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 653.948800][T29084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 653.993082][T29084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 654.002312][T29084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 654.033880][T29084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.047539][T29084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 654.085175][T29084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.445315][T29084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.520259][T29084] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.579023][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.579137][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.609183][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.609294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.857910][T29084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.121801][T29084] veth0_vlan: entered promiscuous mode [ 657.157857][T29084] veth1_vlan: entered promiscuous mode [ 657.313105][T29084] veth0_macvtap: entered promiscuous mode [ 657.353437][T29084] veth1_macvtap: entered promiscuous mode [ 657.446097][T29084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.478789][T29084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.783136][ T1173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.783537][ T1173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.783963][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.784319][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.071762][T29655] xt_hashlimit: size too large, truncated to 1048576 [ 658.071786][T29655] xt_hashlimit: max too large, truncated to 1048576 [ 658.136866][T29657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11257'. [ 658.241743][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.241772][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.604432][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.604459][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.326403][T29681] netlink: 'syz.3.11265': attribute type 6 has an invalid length. [ 660.973153][T29731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11281'. [ 662.052083][T29749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11286'. [ 662.366822][T29754] tap0: tun_chr_ioctl cmd 1074025675 [ 662.366850][T29754] tap0: persist disabled [ 662.652780][T29761] netlink: 'syz.1.11290': attribute type 10 has an invalid length. [ 662.652806][T29761] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11290'. [ 662.688113][T29761] team0: Device wg2 is of different type [ 662.838523][T29769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11292'. [ 662.838574][T29769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11292'. [ 664.641073][T29815] tap0: tun_chr_ioctl cmd 1074025677 [ 664.641195][T29815] tap0: linktype set to 825 [ 665.895556][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.900554][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.915569][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.927271][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.940069][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.332768][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.714556][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.014136][ T4950] Bluetooth: hci5: command tx timeout [ 668.019547][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.108003][T29849] rxe_eth0 speed is unknown, defaulting to 1000 [ 668.281806][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.090960][ T4950] Bluetooth: hci5: command tx timeout [ 670.554825][T29849] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.556038][T29849] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.556204][T29849] bridge_slave_0: entered allmulticast mode [ 670.566613][T29849] bridge_slave_0: entered promiscuous mode [ 670.596020][T29849] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.596161][T29849] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.600248][T29849] bridge_slave_1: entered allmulticast mode [ 670.607911][T29849] bridge_slave_1: entered promiscuous mode [ 670.794579][T29849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.818907][T29849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.935768][T29849] team0: Port device team_slave_0 added [ 670.953592][T29849] team0: Port device team_slave_1 added [ 671.031789][T29849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.031810][T29849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.031848][T29849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.037960][T29849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.037976][T29849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.038006][T29849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.805370][T29964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11349'. [ 672.170917][ T4950] Bluetooth: hci5: command tx timeout [ 673.360260][T29988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11356'. [ 673.618245][T29991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11357'. [ 673.618388][T29991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11357'. [ 673.755136][ T31] bond0 (unregistering): (slave batadv_slave_1): Releasing backup interface [ 673.757205][ T31] batadv_slave_1: left promiscuous mode [ 673.796849][ T31] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 673.811094][ T31] veth1_vlan: left allmulticast mode [ 673.827508][ T31] bond0 (unregistering): Released all slaves [ 673.874363][T29849] hsr_slave_0: entered promiscuous mode [ 673.875865][T29849] hsr_slave_1: entered promiscuous mode [ 673.876683][T29849] debugfs: 'hsr0' already exists in 'hsr' [ 673.876704][T29849] Cannot create hsr debugfs directory [ 673.921571][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 674.250868][ T4950] Bluetooth: hci5: command tx timeout [ 675.822424][T30040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11373'. [ 676.772653][T29849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 676.808942][T29849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 676.810120][T29849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 676.848349][T29849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.897918][T29849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 676.963088][T29849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.970324][T29849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 677.083841][T29849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 677.429967][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 677.856473][T29849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.927931][T29849] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.104706][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.107984][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.192581][ T31] veth1_macvtap: left promiscuous mode [ 678.192643][ T31] veth0_macvtap: left promiscuous mode [ 678.194392][ T31] veth1_vlan: left promiscuous mode [ 678.194474][ T31] veth0_vlan: left promiscuous mode [ 680.739189][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.739305][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.799167][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 680.974974][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.975100][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.777746][T29849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.608341][T29849] veth0_vlan: entered promiscuous mode [ 683.658584][T29849] veth1_vlan: entered promiscuous mode [ 683.732390][T29849] veth0_macvtap: entered promiscuous mode [ 683.749684][T29849] veth1_macvtap: entered promiscuous mode [ 683.794019][T29849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.798238][T29849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.942417][ T1173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.943066][ T1173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.943105][ T1173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.943140][ T1173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.413407][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 684.463469][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.463492][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.563360][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.563384][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.722520][T30208] netlink: 'syz.0.11419': attribute type 12 has an invalid length. [ 684.722546][T30208] netlink: 112 bytes leftover after parsing attributes in process `syz.0.11419'. [ 685.074928][T30220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11425'. [ 685.935151][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.935376][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.727610][T30253] netlink: 'syz.4.11433': attribute type 15 has an invalid length. [ 686.895793][T30257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11435'. [ 687.679230][T30280] netlink: 'syz.0.11451': attribute type 16 has an invalid length. [ 687.679256][T30280] netlink: 'syz.0.11451': attribute type 17 has an invalid length. [ 688.357567][T30253] bridge0: port 3(team_slave_1) entered disabled state [ 688.358081][T30253] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.358362][T30253] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.889341][T30297] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11455'. [ 690.449526][T30280] lo: entered allmulticast mode [ 690.459415][T30280] tunl0: entered allmulticast mode [ 690.468716][T30280] gre0: entered allmulticast mode [ 690.476643][T30280] gretap0: entered allmulticast mode [ 690.486260][T30280] erspan0: entered allmulticast mode [ 690.489289][T30280] ip_vti0: entered allmulticast mode [ 690.513367][T30280] ip6_vti0: entered allmulticast mode [ 690.516006][T30280] sit0: entered allmulticast mode [ 690.518619][T30280] ip6tnl0: entered allmulticast mode [ 690.622933][T30280] ip6gre0: entered allmulticast mode [ 690.623724][T30280] syz_tun: entered allmulticast mode [ 690.637655][T30280] ip6gretap0: entered allmulticast mode [ 690.647236][T30280] bridge0: entered allmulticast mode [ 690.659277][T30280] vcan0: entered allmulticast mode [ 690.659961][T30280] bond0: entered allmulticast mode [ 690.659979][T30280] bond_slave_0: entered allmulticast mode [ 690.659997][T30280] bond_slave_1: entered allmulticast mode [ 690.690022][T30280] team0: entered allmulticast mode [ 690.690043][T30280] team_slave_0: entered allmulticast mode [ 690.690060][T30280] team_slave_1: entered allmulticast mode [ 690.718560][T30280] dummy0: entered allmulticast mode [ 690.719311][T30280] nlmon0: entered allmulticast mode [ 690.736812][T30280] batadv0: entered allmulticast mode [ 690.738433][T30280] vxcan0: entered allmulticast mode [ 690.740522][T30280] vxcan1: entered allmulticast mode [ 690.758929][T30280] veth0: entered allmulticast mode [ 690.760167][T30280] veth1: entered allmulticast mode [ 690.775942][T30280] wg0: entered allmulticast mode [ 690.776630][T30280] wg1: entered allmulticast mode [ 690.777304][T30280] wg2: entered allmulticast mode [ 690.778084][T30280] veth0_to_bridge: entered allmulticast mode [ 690.809195][T30280] veth1_to_bridge: entered allmulticast mode [ 690.819009][T30280] veth0_to_bond: entered allmulticast mode [ 690.838589][T30280] veth1_to_bond: entered allmulticast mode [ 690.848133][T30280] veth0_to_team: entered allmulticast mode [ 690.861621][T30280] veth1_to_team: entered allmulticast mode [ 690.864591][T30280] veth0_to_batadv: entered allmulticast mode [ 690.868814][T30280] batadv_slave_0: entered allmulticast mode [ 690.870331][T30280] veth1_to_batadv: entered allmulticast mode [ 690.899459][T30280] batadv_slave_1: entered allmulticast mode [ 690.912715][T30280] xfrm0: entered allmulticast mode [ 690.913420][T30280] veth0_to_hsr: entered allmulticast mode [ 690.914781][T30280] hsr_slave_0: entered allmulticast mode [ 690.915700][T30280] veth1_to_hsr: entered allmulticast mode [ 690.920215][T30280] hsr_slave_1: entered allmulticast mode [ 690.926811][T30280] hsr0: entered allmulticast mode [ 690.967660][T30280] veth1_virt_wifi: entered allmulticast mode [ 690.970551][T30280] veth0_virt_wifi: entered allmulticast mode [ 690.988498][T30280] virt_wifi0: entered allmulticast mode [ 690.990468][T30280] veth1_vlan: entered allmulticast mode [ 691.007813][T30280] veth0_vlan: entered allmulticast mode [ 691.018663][T30280] vlan0: entered allmulticast mode [ 691.029716][T30280] vlan1: entered allmulticast mode [ 691.037964][T30280] macvlan0: entered allmulticast mode [ 691.040145][T30280] macvlan1: entered allmulticast mode [ 691.057519][T30280] ipvlan0: entered allmulticast mode [ 691.070487][T30280] ipvlan1: entered allmulticast mode [ 691.088742][T30280] veth1_macvtap: entered allmulticast mode [ 691.089886][T30280] veth0_macvtap: entered allmulticast mode [ 691.106842][T30280] macvtap0: entered allmulticast mode [ 691.108141][T30280] macsec0: entered allmulticast mode [ 691.109656][T30280] geneve0: entered allmulticast mode [ 691.129606][T30280] geneve1: entered allmulticast mode [ 691.142332][T30280] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 691.144799][T30280] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 691.146212][T30280] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 691.175768][T30280] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 691.177220][T30280] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 691.178288][T30280] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode [ 691.208306][ T62] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 6081 - 0 [ 691.398753][T30339] netlink: 'syz.5.11458': attribute type 29 has an invalid length. [ 691.596551][T30340] netlink: 'syz.5.11458': attribute type 29 has an invalid length. [ 691.620539][T30341] netlink: 'syz.5.11458': attribute type 29 has an invalid length. [ 691.632011][ T62] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 6081 - 0 [ 691.632184][ T62] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 6081 - 0 [ 691.632298][ T62] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 691.632336][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.632372][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.405139][T30361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11467'. [ 692.426937][T30361] netlink: 'syz.3.11467': attribute type 12 has an invalid length. [ 692.426961][T30361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11467'. [ 693.358302][T30384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11475'. [ 694.437174][T30419] netlink: 'syz.3.11488': attribute type 2 has an invalid length. [ 694.604346][T30423] netlink: 176 bytes leftover after parsing attributes in process `syz.4.11489'. [ 697.654681][ T5647] bond0: (slave syz_tun): Releasing backup interface [ 698.558614][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.558653][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 31488 - 0 [ 698.558682][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.877663][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.877706][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 31488 - 0 [ 698.877739][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.115507][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 699.115545][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 699.117695][T30541] netlink: 84 bytes leftover after parsing attributes in process `syz.5.11529'. [ 699.164345][ T12] team0: Port device netdevsim1 removed [ 699.167380][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.167417][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 31488 - 0 [ 699.168865][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.360782][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 699.362925][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 699.363728][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 699.365034][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 699.365967][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 699.609755][T30553] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11531'. [ 699.634388][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.634426][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 31488 - 0 [ 699.634456][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.156522][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.170954][ T12] bond0 (unregistering): Released all slaves [ 701.451063][ T4950] Bluetooth: hci3: command tx timeout [ 701.979913][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 702.116788][ T12] : left promiscuous mode [ 702.341548][T30546] rxe_eth0 speed is unknown, defaulting to 1000 [ 702.347365][T30617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11547'. [ 703.010295][T30631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11554'. [ 703.530727][ T4950] Bluetooth: hci3: command tx timeout [ 705.610768][ T4950] Bluetooth: hci3: command tx timeout [ 707.701129][ T4950] Bluetooth: hci3: command tx timeout [ 707.807321][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6 [ 708.717162][T30724] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11583'. [ 709.187420][T30546] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.189145][T30546] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.189289][T30546] bridge_slave_0: entered allmulticast mode [ 709.214843][T30546] bridge_slave_0: entered promiscuous mode [ 709.303150][T30546] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.303257][T30546] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.303413][T30546] bridge_slave_1: entered allmulticast mode [ 709.306558][T30546] bridge_slave_1: entered promiscuous mode [ 709.362289][T30741] tap0: tun_chr_ioctl cmd 1074025677 [ 709.362569][T30741] tap0: linktype set to 52 [ 709.528035][ T12] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 709.547571][ T12] team0: Port device wlan0 removed [ 709.743300][T30751] netlink: 'syz.4.11591': attribute type 29 has an invalid length. [ 709.789099][ T5294] 8021q: adding VLAN 0 to HW filter on device eth7 [ 709.823526][T30546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.871151][T30546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.909079][T30753] netlink: 'syz.4.11591': attribute type 29 has an invalid length. [ 710.225690][T30546] team0: Port device team_slave_0 added [ 710.255474][T30546] team0: Port device team_slave_1 added [ 710.633736][T30546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.633755][T30546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.633784][T30546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.706391][T30546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.706408][T30546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.706437][T30546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.053030][ T12] hsr_slave_0: left promiscuous mode [ 711.060727][ T12] hsr_slave_1: left promiscuous mode [ 711.068215][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.068431][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.250836][ T12] veth1_vlan: left promiscuous mode [ 711.250938][ T12] veth0_vlan: left promiscuous mode [ 712.516413][ T12] team_slave_1 (unregistering): left promiscuous mode [ 712.516444][ T12] team_slave_1 (unregistering): left allmulticast mode [ 712.518160][ T12] team0 (unregistering): Port device team_slave_1 removed [ 712.585362][ T12] team_slave_0 (unregistering): left promiscuous mode [ 712.585391][ T12] team_slave_0 (unregistering): left allmulticast mode [ 712.588979][ T12] team0 (unregistering): Port device team_slave_0 removed [ 713.013995][T30546] hsr_slave_0: entered promiscuous mode [ 713.016933][T30546] hsr_slave_1: entered promiscuous mode [ 713.018803][T30546] debugfs: 'hsr0' already exists in 'hsr' [ 713.018836][T30546] Cannot create hsr debugfs directory [ 713.077705][ T5294] 8021q: adding VLAN 0 to HW filter on device eth8 [ 714.049918][T30844] netlink: 'syz.1.11622': attribute type 21 has an invalid length. [ 714.049949][T30844] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11622'. [ 714.050015][T30844] netlink: 'syz.1.11622': attribute type 4 has an invalid length. [ 714.050031][T30844] netlink: 'syz.1.11622': attribute type 5 has an invalid length. [ 714.050046][T30844] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11622'. [ 714.996669][T30871] netlink: 'syz.1.11630': attribute type 3 has an invalid length. [ 714.996690][T30871] netlink: 'syz.1.11630': attribute type 1 has an invalid length. [ 714.996703][T30871] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.11630'. [ 715.574590][T30546] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.597945][T30546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.610220][T30546] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.637575][T30546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.640892][T30546] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.668322][T30546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.669508][T30546] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 715.704891][T30546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.876635][T30916] netlink: 'syz.0.11646': attribute type 29 has an invalid length. [ 716.378574][T30546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.505540][T30546] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.535009][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.535113][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.618489][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.618600][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.071528][ T62] bridge_slave_1: left allmulticast mode [ 717.071558][ T62] bridge_slave_1: left promiscuous mode [ 717.072315][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.105956][ T62] bridge_slave_0: left allmulticast mode [ 717.105984][ T62] bridge_slave_0: left promiscuous mode [ 717.107436][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.473494][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.478360][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.501829][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.518267][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.530749][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.924935][ T62] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.927048][ T62] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.929620][ T62] . (unregistering): (slave team0): Releasing backup interface [ 717.958232][ T62] . (unregistering): Released all slaves [ 717.993048][T30976] netlink: 271 bytes leftover after parsing attributes in process `syz.4.11658'. [ 717.993073][T30976] veth0_to_bond: default FDB implementation only supports local addresses [ 718.077840][ T62] !;: left promiscuous mode [ 718.594536][T30993] proc: Unknown parameter 'fowner<00000000000000000000' [ 719.216710][T30965] rxe_eth0 speed is unknown, defaulting to 1000 [ 719.285389][T30546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.492132][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11669'. [ 719.610981][ T53] Bluetooth: hci0: command tx timeout [ 719.866093][T30546] veth0_vlan: entered promiscuous mode [ 719.975580][T30546] veth1_vlan: entered promiscuous mode [ 720.569652][T30546] veth0_macvtap: entered promiscuous mode [ 720.626336][ T62] hsr_slave_0: left promiscuous mode [ 720.629175][ T62] hsr_slave_1: left promiscuous mode [ 720.630042][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.652484][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.807140][ T62] team0 (unregistering): Port device team_slave_1 removed [ 720.836845][ T62] team0 (unregistering): Port device team_slave_0 removed [ 720.890176][T31064] IPv6: NLM_F_CREATE should be specified when creating new route [ 720.890276][T31064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.890289][T31064] IPv6: NLM_F_CREATE should be set when creating new route [ 721.098820][T30546] veth1_macvtap: entered promiscuous mode [ 721.153067][T31060] netlink: 'syz.4.11679': attribute type 13 has an invalid length. [ 721.153090][T31060] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.11679'. [ 721.267788][T30546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.303835][T30546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.335925][ T155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.350884][ T155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.351879][ T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.352020][ T155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.691282][ T53] Bluetooth: hci0: command tx timeout [ 721.859825][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.859850][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.367691][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.367714][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.416405][T30965] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.416601][T30965] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.416733][T30965] bridge_slave_0: entered allmulticast mode [ 722.418479][T30965] bridge_slave_0: entered promiscuous mode [ 722.454616][T30965] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.454707][T30965] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.454835][T30965] bridge_slave_1: entered allmulticast mode [ 722.457873][T30965] bridge_slave_1: entered promiscuous mode [ 722.573925][T30965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.578094][T30965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.633005][T30965] team0: Port device team_slave_0 added [ 722.635700][T30965] team0: Port device team_slave_1 added [ 722.708557][T30965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.708576][T30965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.708604][T30965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.767534][T30965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.767554][T30965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.767585][T30965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.949277][T31132] netlink: 'syz.4.11696': attribute type 1 has an invalid length. [ 722.949320][T31132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11696'. [ 723.554279][T30965] hsr_slave_0: entered promiscuous mode [ 723.556535][T30965] hsr_slave_1: entered promiscuous mode [ 723.929172][ T53] Bluetooth: hci0: command tx timeout [ 724.622047][T31152] tap0: tun_chr_ioctl cmd 1074025677 [ 724.622180][T31152] tap0: linktype set to 0 [ 725.298303][T31161] netlink: 'syz.3.11705': attribute type 10 has an invalid length. [ 725.878712][T31161] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 726.253347][ T53] Bluetooth: hci0: command tx timeout [ 726.290743][T31176] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.11707'. [ 727.543537][T31208] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11719'. [ 727.665226][T31207] dummy0: left allmulticast mode [ 730.316948][T30965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 730.468878][T30965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.479804][T30965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 730.501944][T30965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.503190][T30965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 730.508531][T30965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.510589][T30965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 730.929268][T30965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 730.939020][T31270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11738'. [ 731.348537][T31284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11740'. [ 731.360604][T30965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.474602][T30965] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.507390][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.507523][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.637401][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.637540][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.852948][T30965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 731.852977][T30965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.706879][T31305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11746'. [ 732.706907][T31305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11746'. [ 732.708315][T31308] netlink: 'syz.0.11745': attribute type 10 has an invalid length. [ 732.708335][T31308] netlink: 'syz.0.11745': attribute type 19 has an invalid length. [ 732.708349][T31308] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11745'. [ 733.038213][T31305] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11746'. [ 733.038244][T31305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11746'. [ 733.058193][T31305] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11746'. [ 733.058220][T31305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11746'. [ 733.926570][T31336] netlink: 'syz.4.11751': attribute type 2 has an invalid length. [ 733.926596][T31336] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11751'. [ 733.926616][T31336] nbd: must specify an index to disconnect [ 735.218129][T30965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.547041][T30965] veth0_vlan: entered promiscuous mode [ 735.589300][T30965] veth1_vlan: entered promiscuous mode [ 735.861632][T30965] veth0_macvtap: entered promiscuous mode [ 735.874106][T30965] veth1_macvtap: entered promiscuous mode [ 735.915182][T30965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.922492][T30965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.598804][ T146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.777341][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.777366][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.867524][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.867546][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.174268][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.176770][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.177311][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.293570][T31410] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11774'. [ 741.513919][T31429] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11780'. [ 741.996805][T31439] Cannot find set identified by id 0 to match [ 743.718949][T31469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11798'. [ 746.759391][T31512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11817'. [ 746.828808][T31520] netlink: 'syz.1.11819': attribute type 29 has an invalid length. [ 746.842549][T31520] netlink: 'syz.1.11819': attribute type 29 has an invalid length. [ 746.845083][T31520] netlink: 'syz.1.11819': attribute type 29 has an invalid length. [ 747.613476][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.613536][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.294912][ T4950] Bluetooth: hci1: command 0x0406 tx timeout [ 758.942899][T31641] netlink: 'syz.5.11869': attribute type 29 has an invalid length. [ 758.943845][T31641] netlink: 'syz.5.11869': attribute type 29 has an invalid length. [ 758.944614][T31641] netlink: 'syz.5.11869': attribute type 29 has an invalid length. [ 760.608616][T31670] netlink: 'syz.3.11883': attribute type 10 has an invalid length. [ 760.608642][T31670] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.11883'. [ 761.384264][T31686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11888'. [ 761.385373][T31686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11888'. [ 761.386287][T31686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11888'. [ 765.809115][T31763] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11920'. [ 766.140611][T31771] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 766.140649][T31771] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 766.140692][T31771] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 766.260037][T31765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.420546][T31807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11937'. [ 874.431095][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 113s! [syz.1.11949:31833] [ 874.431138][ C1] Modules linked in: [ 874.431164][ C1] irq event stamp: 53031 [ 874.447897][ C1] hardirqs last enabled at (53030): [] perf_swevent_event+0x71f/0x810 [ 874.457861][ C1] hardirqs last disabled at (53031): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 874.468384][ C1] softirqs last enabled at (12410): [] __alloc_skb+0x18d/0x7a0 [ 874.477749][ C1] softirqs last disabled at (15247): [] __irq_exit_rcu+0xc6/0x220 [ 874.487231][ C1] CPU: 1 UID: 0 PID: 31833 Comm: syz.1.11949 Not tainted syzkaller #0 PREEMPT(full) [ 874.487299][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 874.487317][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 874.487390][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 34 3a ad 0c 48 89 de 5b e9 e3 c3 6a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d c8 f9 d3 12 65 48 8b 15 c8 f9 [ 874.487409][ C1] RSP: 0018:ffffc90000a08458 EFLAGS: 00000293 [ 874.487462][ C1] RAX: ffffffff81d35b84 RBX: 000000000000002c RCX: ffff888053d11f40 [ 874.487478][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000004 [ 874.487492][ C1] RBP: 0000000000000001 R08: 0000000000000100 R09: 0000000000000000 [ 874.487506][ C1] R10: ffffc90000a086f8 R11: fffff520001410e1 R12: ffffffff8e7627d8 [ 874.487523][ C1] R13: dffffc0000000000 R14: ffffc90000a08500 R15: 0000000000000001 [ 874.487538][ C1] FS: 00007f2c60b366c0(0000) GS:ffff888123b51000(0000) knlGS:0000000000000000 [ 874.487557][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.487572][ C1] CR2: 0000560a4a46e190 CR3: 000000006f080000 CR4: 00000000003526f0 [ 874.487590][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 874.487603][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 874.487622][ C1] Call Trace: [ 874.487680][ C1] [ 874.487719][ C1] perf_trace_buf_alloc+0x142/0x280 [ 874.487840][ C1] perf_trace_lock+0x1a1/0x410 [ 874.487967][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 874.488075][ C1] ? lock_acquire+0x115/0x350 [ 874.488153][ C1] ? unwind_next_frame+0x8f/0x2550 [ 874.488203][ C1] ? unwind_next_frame+0x8f/0x2550 [ 874.488241][ C1] lock_release+0x396/0x3c0 [ 874.488295][ C1] ? deref_stack_reg+0x18e/0x220 [ 874.488354][ C1] ? unwind_next_frame+0x8f/0x2550 [ 874.488406][ C1] unwind_next_frame+0x1baa/0x2550 [ 874.488502][ C1] ? lock_release+0x396/0x3c0 [ 874.488550][ C1] ? unwind_next_frame+0x8f/0x2550 [ 874.488620][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 874.488688][ C1] arch_stack_walk+0x11b/0x150 [ 874.488814][ C1] ? unwind_next_frame+0x1baa/0x2550 [ 874.488900][ C1] stack_trace_save+0xa9/0x100 [ 874.488948][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 874.489100][ C1] kasan_save_track+0x3e/0x80 [ 874.489161][ C1] ? kasan_save_track+0x3e/0x80 [ 874.489189][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 874.489218][ C1] ? kmem_cache_alloc_node_noprof+0x34f/0x600 [ 874.489257][ C1] ? __alloc_skb+0x1db/0x7a0 [ 874.489286][ C1] ? ndisc_alloc_skb+0xa0/0x480 [ 874.489383][ C1] ? ndisc_send_rs+0x288/0x6b0 [ 874.489413][ C1] ? addrconf_rs_timer+0x2d2/0x6c0 [ 874.489464][ C1] ? call_timer_fn+0x18d/0x5f0 [ 874.489500][ C1] ? __run_timer_base+0x652/0x8b0 [ 874.489533][ C1] ? run_timer_softirq+0xb7/0x170 [ 874.489565][ C1] ? handle_softirqs+0x265/0x8d0 [ 874.489598][ C1] ? __irq_exit_rcu+0xc6/0x220 [ 874.489629][ C1] ? irq_exit_rcu+0x9/0x30 [ 874.489660][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 874.489693][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 874.489742][ C1] ? perf_swevent_event+0x75f/0x810 [ 874.489772][ C1] ? perf_tp_event+0x5fe/0x29d0 [ 874.489800][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 874.489830][ C1] ? perf_trace_lock+0x32e/0x410 [ 874.489860][ C1] ? lock_release+0x396/0x3c0 [ 874.490243][ C1] __kasan_slab_alloc+0x6c/0x80 [ 874.490304][ C1] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 874.490366][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 874.490404][ C1] ? __alloc_skb+0x1db/0x7a0 [ 874.490437][ C1] ? __alloc_skb+0x1db/0x7a0 [ 874.490541][ C1] __alloc_skb+0x1db/0x7a0 [ 874.490648][ C1] ndisc_alloc_skb+0xa0/0x480 [ 874.490733][ C1] ndisc_send_rs+0x288/0x6b0 [ 874.490788][ C1] ? ipv6_get_lladdr+0x2b/0x3f0 [ 874.490882][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 874.490928][ C1] ? lock_acquire+0x115/0x350 [ 874.491007][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 874.491054][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 874.491168][ C1] call_timer_fn+0x18d/0x5f0 [ 874.491221][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 874.491247][ C1] ? call_timer_fn+0xd5/0x5f0 [ 874.491295][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 874.491445][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 874.491507][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 874.491568][ C1] __run_timer_base+0x652/0x8b0 [ 874.491611][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 874.491800][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 874.492001][ C1] run_timer_softirq+0xb7/0x170 [ 874.492059][ C1] handle_softirqs+0x265/0x8d0 [ 874.492218][ C1] __irq_exit_rcu+0xc6/0x220 [ 874.492274][ C1] irq_exit_rcu+0x9/0x30 [ 874.492308][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 874.492351][ C1] [ 874.492360][ C1] [ 874.492384][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 874.492416][ C1] RIP: 0010:perf_swevent_event+0x75f/0x810 [ 874.492454][ C1] Code: e6 00 02 00 00 75 51 e8 6f e4 c0 ff 4d 89 fe 4d 85 e4 75 07 e8 62 e4 c0 ff eb 06 e8 5b e4 c0 ff fb 48 c7 44 24 40 0e 36 e0 45 <4a> c7 04 33 00 00 00 00 65 48 8b 05 39 de 94 12 48 3b 84 24 80 00 [ 874.492472][ C1] RSP: 0018:ffffc9001028e320 EFLAGS: 00000246 [ 874.492494][ C1] RAX: ffffffff820811d5 RBX: 1ffff92002051c6c RCX: 0000000000080000 [ 874.492511][ C1] RDX: ffffc900054e9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 874.492526][ C1] RBP: ffffc9001028e3f0 R08: ffffffff917c77bf R09: 1ffffffff22f8ef7 [ 874.492543][ C1] R10: dffffc0000000000 R11: fffffbfff22f8ef8 R12: 0000000000000200 [ 874.492560][ C1] R13: ffffc9001028e4c8 R14: dffffc0000000000 R15: dffffc0000000000 [ 874.492645][ C1] ? perf_swevent_event+0x755/0x810 [ 874.492809][ C1] ? __pfx_perf_swevent_event+0x10/0x10 [ 874.492838][ C1] ? perf_tp_event+0x77d/0x29d0 [ 874.492880][ C1] ? tracing_gen_ctx_irq_test+0xc1/0x160 [ 874.493001][ C1] perf_tp_event+0x5fe/0x29d0 [ 874.493157][ C1] ? __pfx_perf_tp_event+0x10/0x10 [ 874.493275][ C1] ? lock_release+0x396/0x3c0 [ 874.493597][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 874.493732][ C1] perf_trace_run_bpf_submit+0xee/0x170 [ 874.493830][ C1] perf_trace_lock+0x32e/0x410 [ 874.493944][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 874.494021][ C1] ? lock_acquire+0x115/0x350 [ 874.494095][ C1] ? unwind_next_frame+0x8f/0x2550 [ 874.494133][ C1] ? unwind_next_frame+0x8f/0x2550 [ 874.494170][ C1] lock_release+0x396/0x3c0 [ 874.494209][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 874.494247][ C1] ? deref_stack_reg+0x18e/0x220 [ 874.494304][ C1] ? unwind_next_frame+0x8f/0x2550 [ 874.494354][ C1] unwind_next_frame+0x1baa/0x2550 [ 874.494448][ C1] ? stack_trace_save+0xa9/0x100 [ 874.494483][ C1] ? unwind_next_frame+0x8f/0x2550 [ 874.494547][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 874.494582][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 874.494626][ C1] arch_stack_walk+0x11b/0x150 [ 874.494718][ C1] ? kasan_save_track+0x3e/0x80 [ 874.494772][ C1] ? security_inode_alloc+0x39/0x310 [ 874.494878][ C1] stack_trace_save+0xa9/0x100 [ 874.494923][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 874.495059][ C1] kasan_save_track+0x3e/0x80 [ 874.495560][ C1] __kasan_slab_alloc+0x6c/0x80 [ 874.495619][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 874.495664][ C1] ? security_inode_alloc+0x39/0x310 [ 874.495692][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 874.495740][ C1] ? security_inode_alloc+0x39/0x310 [ 874.495840][ C1] security_inode_alloc+0x39/0x310 [ 874.495904][ C1] inode_init_always_gfp+0x97e/0xd30 [ 874.496020][ C1] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 874.496105][ C1] alloc_inode+0x82/0x1b0 [ 874.496174][ C1] new_inode+0x1f/0x170 [ 874.496248][ C1] __debugfs_create_file+0xb8/0x400 [ 874.496337][ C1] debugfs_create_file_short+0x3f/0x60 [ 874.496436][ C1] debugfs_hw_add+0x1a2/0x380 [ 874.496550][ C1] ieee80211_register_hw+0x3d8d/0x4b30 [ 874.496761][ C1] ? ieee80211_register_hw+0x1951/0x4b30 [ 874.497010][ C1] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 874.497085][ C1] ? __asan_memset+0x22/0x50 [ 874.497130][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 874.497162][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 874.497301][ C1] mac80211_hwsim_new_radio+0x32f1/0x5990 [ 874.497505][ C1] ? rcu_is_watching+0x16/0xb0 [ 874.497657][ C1] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 874.497692][ C1] ? kstrndup+0xbd/0x160 [ 874.497783][ C1] ? kstrndup+0xbd/0x160 [ 874.497847][ C1] hwsim_new_radio_nl+0xd8b/0xf90 [ 874.498032][ C1] genl_family_rcv_msg_doit+0x233/0x340 [ 874.498205][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 874.498356][ C1] ? bpf_lsm_capable+0x9/0x20 [ 874.498390][ C1] ? security_capable+0x7e/0x2c0 [ 874.498507][ C1] genl_rcv_msg+0x614/0x7a0 [ 874.498614][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.498658][ C1] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 874.498830][ C1] netlink_rcv_skb+0x226/0x4a0 [ 874.498885][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.498951][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 874.499128][ C1] ? down_read+0x2b9/0x320 [ 874.499215][ C1] genl_rcv+0x28/0x40 [ 874.499254][ C1] netlink_unicast+0x8ef/0xa80 [ 874.499486][ C1] netlink_sendmsg+0x7f0/0xb20 [ 874.499582][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.499655][ C1] ? aa_sock_msg_perm+0x144/0x210 [ 874.499764][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 874.499799][ C1] ? perf_trace_lock+0x32e/0x410 [ 874.499855][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.499889][ C1] sock_sendmsg_nosec+0x14e/0x190 [ 874.499991][ C1] ____sys_sendmsg+0x54e/0x850 [ 874.500090][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 874.500220][ C1] ? import_iovec+0x73/0xa0 [ 874.500338][ C1] ___sys_sendmsg+0x2a5/0x360 [ 874.500384][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 874.500465][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.500711][ C1] ? __fget_files+0x2a/0x420 [ 874.500864][ C1] ? __fget_files+0x3a2/0x420 [ 874.500895][ C1] ? __fget_files+0x2a/0x420 [ 874.501021][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 874.501094][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.501324][ C1] do_syscall_64+0x166/0x520 [ 874.501359][ C1] ? trace_irq_disable+0x3b/0x140 [ 874.501392][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.501431][ C1] ? clear_bhb_loop+0x70/0xc0 [ 874.501498][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.501529][ C1] RIP: 0033:0x7f2c5fb9f559 [ 874.501573][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.501591][ C1] RSP: 002b:00007f2c60b36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.501615][ C1] RAX: ffffffffffffffda RBX: 00007f2c5fe25fa0 RCX: 00007f2c5fb9f559 [ 874.501631][ C1] RDX: 0000000000000084 RSI: 0000200000000a80 RDI: 0000000000000003 [ 874.501645][ C1] RBP: 00007f2c5fc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 874.501677][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.501691][ C1] R13: 00007f2c5fe26038 R14: 00007f2c5fe25fa0 R15: 00007ffcbc41a118 [ 874.501864][ C1] [ 874.501884][ C1] Sending NMI from CPU 1 to CPUs 0: [ 874.501934][ C0] NMI backtrace for cpu 0 [ 874.501947][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 874.501969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 874.501980][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 874.502010][ C0] RIP: 0010:smp_call_function_many_cond+0x1132/0x1500 [ 874.502051][ C0] Code: 78 44 8b 2b 44 89 ee 83 e6 01 31 ff e8 67 66 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 52 61 0c 00 eb 35 f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 38 61 0c 00 [ 874.502066][ C0] RSP: 0018:ffffc90000116120 EFLAGS: 00000293 [ 874.502081][ C0] RAX: ffffffff81bc94f8 RBX: ffff8880b8541b08 RCX: ffff88801f2c0000 [ 874.502095][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 874.502107][ C0] RBP: ffffc90000116270 R08: ffff8880367648c7 R09: 1ffff11006cec918 [ 874.502121][ C0] R10: dffffc0000000000 R11: ffffffff817a5570 R12: 1ffff110170a8361 [ 874.502135][ C0] R13: dffffc0000000000 R14: 1ffff11003e582b3 R15: 0000000000000001 [ 874.502148][ C0] FS: 0000000000000000(0000) GS:ffff888123a51000(0000) knlGS:0000000000000000 [ 874.502164][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.502177][ C0] CR2: 00007ff0e01f4158 CR3: 000000007f418000 CR4: 00000000003526f0 [ 874.502193][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 874.502212][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 874.502223][ C0] Call Trace: [ 874.502230][ C0] [ 874.502236][ C0] ? smp_call_function_many_cond+0x851/0x1500 [ 874.502288][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 874.502320][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 874.502341][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 874.502375][ C0] ? rcu_is_watching+0x16/0xb0 [ 874.502403][ C0] ? trace_tlb_flush+0x3c/0x160 [ 874.502440][ C0] flush_tlb_mm_range+0x910/0x10b0 [ 874.502465][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 874.502494][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 874.502512][ C0] ? lock_acquire+0x115/0x350 [ 874.502544][ C0] ? page_table_check_clear+0x1d0/0x590 [ 874.502571][ C0] ? page_table_check_clear+0x1d0/0x590 [ 874.502594][ C0] ? page_table_check_clear+0x530/0x590 [ 874.502616][ C0] ? page_table_check_clear+0x1d0/0x590 [ 874.502643][ C0] ptep_clear_flush+0x120/0x170 [ 874.502680][ C0] page_vma_mkclean_one+0x4b4/0x830 [ 874.502713][ C0] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 874.502732][ C0] ? __lock_acquire+0x747/0x2de0 [ 874.502761][ C0] ? lock_acquire+0x115/0x350 [ 874.502789][ C0] page_mkclean_one+0x20c/0x2e0 [ 874.502812][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 874.502845][ C0] ? mapping_rmap_tree_iter_first+0x219/0x230 [ 874.502878][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 874.502897][ C0] __rmap_walk_file+0x4c8/0x6a0 [ 874.502933][ C0] folio_mkclean+0x2d5/0x3f0 [ 874.502952][ C0] ? __pfx_folio_mkclean+0x10/0x10 [ 874.502973][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 874.502992][ C0] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 874.503015][ C0] ? folio_mapping+0x16f/0x1f0 [ 874.503039][ C0] folio_clear_dirty_for_io+0x190/0x820 [ 874.503079][ C0] ? filemap_get_folios_tag+0x118/0x720 [ 874.503107][ C0] mpage_submit_folio+0x83/0x2a0 [ 874.503187][ C0] mpage_process_page_bufs+0x6bd/0x8a0 [ 874.503224][ C0] mpage_prepare_extent_to_map+0xf8d/0x1880 [ 874.503251][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 874.503304][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 874.503354][ C0] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 874.503383][ C0] ? ext4_init_io_end+0x29/0x130 [ 874.503425][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 874.503457][ C0] ? ext4_init_io_end+0x29/0x130 [ 874.503488][ C0] ext4_do_writepages+0xb8a/0x4770 [ 874.503513][ C0] ? lock_acquire+0x115/0x350 [ 874.503549][ C0] ? unwind_next_frame+0x8f/0x2550 [ 874.503583][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 874.503615][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 874.503649][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 874.503668][ C0] ? __lock_acquire+0x747/0x2de0 [ 874.503693][ C0] ? skb_clone+0x212/0x3a0 [ 874.503715][ C0] ? kmem_cache_alloc_noprof+0xd1/0x600 [ 874.503742][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 874.503806][ C0] ? skb_clone+0x212/0x3a0 [ 874.503827][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 874.503853][ C0] ? __bfs+0x153/0x290 [ 874.503872][ C0] ? __pfx_hlock_conflict+0x10/0x10 [ 874.503902][ C0] ? lock_acquire+0x115/0x350 [ 874.503964][ C0] ext4_writepages+0x1fe/0x4e0 [ 874.504004][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 874.504026][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 874.504063][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 874.504081][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 874.504125][ C0] do_writepages+0x338/0x560 [ 874.504163][ C0] ? writeback_sb_inodes+0x450/0x1af0 [ 874.504196][ C0] __writeback_single_inode+0x136/0x1220 [ 874.504228][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 874.504250][ C0] writeback_sb_inodes+0x9de/0x1af0 [ 874.504300][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 874.504360][ C0] ? __pfx_down_read_trylock+0x10/0x10 [ 874.504401][ C0] __writeback_inodes_wb+0x114/0x240 [ 874.504439][ C0] wb_writeback+0x42f/0xad0 [ 874.504469][ C0] ? queue_io+0x1f1/0x470 [ 874.504502][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 874.504527][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 874.504570][ C0] wb_workfn+0xc92/0x10f0 [ 874.504610][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 874.504649][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 874.504677][ C0] ? lock_acquire+0x115/0x350 [ 874.504706][ C0] ? rcu_is_watching+0x16/0xb0 [ 874.504734][ C0] ? process_scheduled_works+0x97a/0x1630 [ 874.504761][ C0] process_scheduled_works+0xc3d/0x1630 [ 874.504816][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 874.504849][ C0] ? assign_work+0x3cf/0x5d0 [ 874.504880][ C0] worker_thread+0xa47/0xfb0 [ 874.504938][ C0] kthread+0x38b/0x480 [ 874.504960][ C0] ? __pfx_worker_thread+0x10/0x10 [ 874.504985][ C0] ? __pfx_kthread+0x10/0x10 [ 874.505007][ C0] ret_from_fork+0x514/0xb70 [ 874.505030][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 874.505050][ C0] ? __switch_to+0xc78/0x1410 [ 874.505081][ C0] ? __pfx_kthread+0x10/0x10 [ 874.505102][ C0] ret_from_fork_asm+0x1a/0x30 [ 874.505152][ C0] [ 874.505929][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 875.350688][ C1] NMI backtrace for cpu 1 [ 875.350724][ C1] CPU: 1 UID: 0 PID: 31833 Comm: syz.1.11949 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.350754][ C1] Tainted: [L]=SOFTLOCKUP [ 875.350764][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 875.350780][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 875.350906][ C1] Code: e8 ee a0 4a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f 01 c1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 875.350926][ C1] RSP: 0018:ffffc90000a07800 EFLAGS: 00000002 [ 875.350949][ C1] RAX: 1ffffffff37b7720 RBX: 00000000000003fd RCX: 0000000000000000 [ 875.350966][ C1] RDX: 00000000000003fd RSI: 0000000001000101 RDI: 0000000000000020 [ 875.350981][ C1] RBP: dffffc0000000000 R08: 0000000001000101 R09: 0000000000000004 [ 875.350997][ C1] R10: dffffc0000000000 R11: ffffffff857e54f0 R12: dffffc0000000000 [ 875.351014][ C1] R13: 0000000000000000 R14: ffffffff9bdbb9a0 R15: 0000000000000000 [ 875.351029][ C1] FS: 00007f2c60b366c0(0000) GS:ffff888123b51000(0000) knlGS:0000000000000000 [ 875.351049][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 875.351065][ C1] CR2: 0000560a4a46e190 CR3: 000000006f080000 CR4: 00000000003526f0 [ 875.351084][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 875.351098][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 875.351114][ C1] Call Trace: [ 875.351128][ C1] [ 875.351166][ C1] wait_for_lsr+0x184/0x2f0 [ 875.351257][ C1] wait_for_xmitr+0x2c/0x340 [ 875.351346][ C1] serial8250_console_write+0xb82/0x1200 [ 875.351395][ C1] ? __pfx_perf_event_output_forward+0x10/0x10 [ 875.351491][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 875.351572][ C1] ? desc_read+0x2ce/0x3f0 [ 875.351696][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 875.351842][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 875.351922][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 875.352061][ C1] ? __pfx_desc_update_last_finalized+0x10/0x10 [ 875.352167][ C1] __nbcon_atomic_flush_pending_con+0x1d2/0x370 [ 875.352239][ C1] ? __pfx___nbcon_atomic_flush_pending_con+0x10/0x10 [ 875.352424][ C1] __nbcon_atomic_flush_pending+0x23c/0x440 [ 875.352520][ C1] ? __pfx___nbcon_atomic_flush_pending+0x10/0x10 [ 875.352589][ C1] ? panic_on_this_cpu+0x32/0x40 [ 875.352671][ C1] vprintk_emit+0x1a6/0x5f0 [ 875.352744][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 875.352876][ C1] _printk+0xdd/0x130 [ 875.352975][ C1] ? __pfx__printk+0x10/0x10 [ 875.353126][ C1] vpanic+0x477/0xa60 [ 875.353190][ C1] ? __pfx_vpanic+0x10/0x10 [ 875.353344][ C1] panic+0xc5/0xd0 [ 875.353385][ C1] ? __pfx_panic+0x10/0x10 [ 875.353421][ C1] ? printk_trigger_flush+0x174/0x1d0 [ 875.353592][ C1] watchdog_timer_fn+0x785/0x790 [ 875.353652][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 875.353726][ C1] __hrtimer_run_queues+0x371/0xa10 [ 875.353934][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 875.354228][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 875.354293][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 875.354351][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 875.354386][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 875.354420][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 34 3a ad 0c 48 89 de 5b e9 e3 c3 6a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d c8 f9 d3 12 65 48 8b 15 c8 f9 [ 875.354440][ C1] RSP: 0018:ffffc90000a08458 EFLAGS: 00000293 [ 875.354464][ C1] RAX: ffffffff81d35b84 RBX: 000000000000002c RCX: ffff888053d11f40 [ 875.354481][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000004 [ 875.354497][ C1] RBP: 0000000000000001 R08: 0000000000000100 R09: 0000000000000000 [ 875.354512][ C1] R10: ffffc90000a086f8 R11: fffff520001410e1 R12: ffffffff8e7627d8 [ 875.354531][ C1] R13: dffffc0000000000 R14: ffffc90000a08500 R15: 0000000000000001 [ 875.354615][ C1] ? perf_trace_buf_alloc+0x134/0x280 [ 875.354713][ C1] perf_trace_buf_alloc+0x142/0x280 [ 875.354792][ C1] perf_trace_lock+0x1a1/0x410 [ 875.354896][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 875.354983][ C1] ? lock_acquire+0x115/0x350 [ 875.355077][ C1] ? unwind_next_frame+0x8f/0x2550 [ 875.355118][ C1] ? unwind_next_frame+0x8f/0x2550 [ 875.355167][ C1] lock_release+0x396/0x3c0 [ 875.355217][ C1] ? deref_stack_reg+0x18e/0x220 [ 875.355273][ C1] ? unwind_next_frame+0x8f/0x2550 [ 875.355323][ C1] unwind_next_frame+0x1baa/0x2550 [ 875.355412][ C1] ? lock_release+0x396/0x3c0 [ 875.355447][ C1] ? unwind_next_frame+0x8f/0x2550 [ 875.355515][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 875.355559][ C1] arch_stack_walk+0x11b/0x150 [ 875.355648][ C1] ? unwind_next_frame+0x1baa/0x2550 [ 875.355728][ C1] stack_trace_save+0xa9/0x100 [ 875.355773][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 875.355938][ C1] kasan_save_track+0x3e/0x80 [ 875.355997][ C1] ? kasan_save_track+0x3e/0x80 [ 875.356027][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 875.356058][ C1] ? kmem_cache_alloc_node_noprof+0x34f/0x600 [ 875.356099][ C1] ? __alloc_skb+0x1db/0x7a0 [ 875.356130][ C1] ? ndisc_alloc_skb+0xa0/0x480 [ 875.356163][ C1] ? ndisc_send_rs+0x288/0x6b0 [ 875.356194][ C1] ? addrconf_rs_timer+0x2d2/0x6c0 [ 875.356222][ C1] ? call_timer_fn+0x18d/0x5f0 [ 875.356259][ C1] ? __run_timer_base+0x652/0x8b0 [ 875.356293][ C1] ? run_timer_softirq+0xb7/0x170 [ 875.356327][ C1] ? handle_softirqs+0x265/0x8d0 [ 875.356366][ C1] ? __irq_exit_rcu+0xc6/0x220 [ 875.356399][ C1] ? irq_exit_rcu+0x9/0x30 [ 875.356432][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 875.356466][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 875.356496][ C1] ? perf_swevent_event+0x75f/0x810 [ 875.356526][ C1] ? perf_tp_event+0x5fe/0x29d0 [ 875.356556][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 875.356586][ C1] ? perf_trace_lock+0x32e/0x410 [ 875.356637][ C1] ? lock_release+0x396/0x3c0 [ 875.357054][ C1] __kasan_slab_alloc+0x6c/0x80 [ 875.357116][ C1] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 875.357179][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 875.357218][ C1] ? __alloc_skb+0x1db/0x7a0 [ 875.357248][ C1] ? __alloc_skb+0x1db/0x7a0 [ 875.357355][ C1] __alloc_skb+0x1db/0x7a0 [ 875.357441][ C1] ndisc_alloc_skb+0xa0/0x480 [ 875.357516][ C1] ndisc_send_rs+0x288/0x6b0 [ 875.357570][ C1] ? ipv6_get_lladdr+0x2b/0x3f0 [ 875.357641][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 875.357686][ C1] ? lock_acquire+0x115/0x350 [ 875.357762][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 875.357810][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 875.357923][ C1] call_timer_fn+0x18d/0x5f0 [ 875.357976][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 875.358004][ C1] ? call_timer_fn+0xd5/0x5f0 [ 875.358053][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 875.358198][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 875.358234][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 875.358291][ C1] __run_timer_base+0x652/0x8b0 [ 875.358336][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 875.358492][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 875.358702][ C1] run_timer_softirq+0xb7/0x170 [ 875.358759][ C1] handle_softirqs+0x265/0x8d0 [ 875.358914][ C1] __irq_exit_rcu+0xc6/0x220 [ 875.358970][ C1] irq_exit_rcu+0x9/0x30 [ 875.359005][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 875.359049][ C1] [ 875.359060][ C1] [ 875.359083][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 875.359117][ C1] RIP: 0010:perf_swevent_event+0x75f/0x810 [ 875.359149][ C1] Code: e6 00 02 00 00 75 51 e8 6f e4 c0 ff 4d 89 fe 4d 85 e4 75 07 e8 62 e4 c0 ff eb 06 e8 5b e4 c0 ff fb 48 c7 44 24 40 0e 36 e0 45 <4a> c7 04 33 00 00 00 00 65 48 8b 05 39 de 94 12 48 3b 84 24 80 00 [ 875.359168][ C1] RSP: 0018:ffffc9001028e320 EFLAGS: 00000246 [ 875.359192][ C1] RAX: ffffffff820811d5 RBX: 1ffff92002051c6c RCX: 0000000000080000 [ 875.359210][ C1] RDX: ffffc900054e9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 875.359227][ C1] RBP: ffffc9001028e3f0 R08: ffffffff917c77bf R09: 1ffffffff22f8ef7 [ 875.359246][ C1] R10: dffffc0000000000 R11: fffffbfff22f8ef8 R12: 0000000000000200 [ 875.359263][ C1] R13: ffffc9001028e4c8 R14: dffffc0000000000 R15: dffffc0000000000 [ 875.359352][ C1] ? perf_swevent_event+0x755/0x810 [ 875.359511][ C1] ? __pfx_perf_swevent_event+0x10/0x10 [ 875.359542][ C1] ? perf_tp_event+0x77d/0x29d0 [ 875.359584][ C1] ? tracing_gen_ctx_irq_test+0xc1/0x160 [ 875.359701][ C1] perf_tp_event+0x5fe/0x29d0 [ 875.359853][ C1] ? __pfx_perf_tp_event+0x10/0x10 [ 875.359976][ C1] ? lock_release+0x396/0x3c0 [ 875.360256][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 875.360358][ C1] perf_trace_run_bpf_submit+0xee/0x170 [ 875.360451][ C1] perf_trace_lock+0x32e/0x410 [ 875.360558][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 875.360631][ C1] ? lock_acquire+0x115/0x350 [ 875.360702][ C1] ? unwind_next_frame+0x8f/0x2550 [ 875.360739][ C1] ? unwind_next_frame+0x8f/0x2550 [ 875.360776][ C1] lock_release+0x396/0x3c0 [ 875.360814][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 875.360852][ C1] ? deref_stack_reg+0x18e/0x220 [ 875.360929][ C1] ? unwind_next_frame+0x8f/0x2550 [ 875.360982][ C1] unwind_next_frame+0x1baa/0x2550 [ 875.361071][ C1] ? stack_trace_save+0xa9/0x100 [ 875.361109][ C1] ? unwind_next_frame+0x8f/0x2550 [ 875.361175][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 875.361213][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 875.361259][ C1] arch_stack_walk+0x11b/0x150 [ 875.361359][ C1] ? kasan_save_track+0x3e/0x80 [ 875.361416][ C1] ? security_inode_alloc+0x39/0x310 [ 875.361467][ C1] stack_trace_save+0xa9/0x100 [ 875.361515][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 875.361659][ C1] kasan_save_track+0x3e/0x80 [ 875.362194][ C1] __kasan_slab_alloc+0x6c/0x80 [ 875.362255][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 875.362304][ C1] ? security_inode_alloc+0x39/0x310 [ 875.362349][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 875.362401][ C1] ? security_inode_alloc+0x39/0x310 [ 875.362503][ C1] security_inode_alloc+0x39/0x310 [ 875.362569][ C1] inode_init_always_gfp+0x97e/0xd30 [ 875.362670][ C1] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 875.362714][ C1] alloc_inode+0x82/0x1b0 [ 875.362785][ C1] new_inode+0x1f/0x170 [ 875.362861][ C1] __debugfs_create_file+0xb8/0x400 [ 875.362951][ C1] debugfs_create_file_short+0x3f/0x60 [ 875.363035][ C1] debugfs_hw_add+0x1a2/0x380 [ 875.363103][ C1] ieee80211_register_hw+0x3d8d/0x4b30 [ 875.363269][ C1] ? ieee80211_register_hw+0x1951/0x4b30 [ 875.363519][ C1] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 875.363596][ C1] ? __asan_memset+0x22/0x50 [ 875.363643][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 875.363677][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 875.363757][ C1] mac80211_hwsim_new_radio+0x32f1/0x5990 [ 875.363976][ C1] ? rcu_is_watching+0x16/0xb0 [ 875.364127][ C1] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 875.364167][ C1] ? kstrndup+0xbd/0x160 [ 875.364256][ C1] ? kstrndup+0xbd/0x160 [ 875.364324][ C1] hwsim_new_radio_nl+0xd8b/0xf90 [ 875.364517][ C1] genl_family_rcv_msg_doit+0x233/0x340 [ 875.364625][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 875.364793][ C1] ? bpf_lsm_capable+0x9/0x20 [ 875.364830][ C1] ? security_capable+0x7e/0x2c0 [ 875.364930][ C1] genl_rcv_msg+0x614/0x7a0 [ 875.365037][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.365083][ C1] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 875.365276][ C1] netlink_rcv_skb+0x226/0x4a0 [ 875.365341][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.365409][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 875.365593][ C1] ? down_read+0x2b9/0x320 [ 875.365685][ C1] genl_rcv+0x28/0x40 [ 875.365728][ C1] netlink_unicast+0x8ef/0xa80 [ 875.365938][ C1] netlink_sendmsg+0x7f0/0xb20 [ 875.366037][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.366113][ C1] ? aa_sock_msg_perm+0x144/0x210 [ 875.366205][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 875.366244][ C1] ? perf_trace_lock+0x32e/0x410 [ 875.366305][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.366345][ C1] sock_sendmsg_nosec+0x14e/0x190 [ 875.366430][ C1] ____sys_sendmsg+0x54e/0x850 [ 875.366557][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.366687][ C1] ? import_iovec+0x73/0xa0 [ 875.366772][ C1] ___sys_sendmsg+0x2a5/0x360 [ 875.366821][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 875.366899][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.367136][ C1] ? __fget_files+0x2a/0x420 [ 875.367281][ C1] ? __fget_files+0x3a2/0x420 [ 875.367314][ C1] ? __fget_files+0x2a/0x420 [ 875.367445][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 875.367520][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.367751][ C1] do_syscall_64+0x166/0x520 [ 875.367790][ C1] ? trace_irq_disable+0x3b/0x140 [ 875.367825][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.367861][ C1] ? clear_bhb_loop+0x70/0xc0 [ 875.367931][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.367964][ C1] RIP: 0033:0x7f2c5fb9f559 [ 875.368003][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.368023][ C1] RSP: 002b:00007f2c60b36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.368049][ C1] RAX: ffffffffffffffda RBX: 00007f2c5fe25fa0 RCX: 00007f2c5fb9f559 [ 875.368068][ C1] RDX: 0000000000000084 RSI: 0000200000000a80 RDI: 0000000000000003 [ 875.368084][ C1] RBP: 00007f2c5fc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 875.368100][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.368116][ C1] R13: 00007f2c5fe26038 R14: 00007f2c5fe25fa0 R15: 00007ffcbc41a118 [ 875.368285][ C1] [ 877.560814][ C1] CPU: 1 UID: 0 PID: 31833 Comm: syz.1.11949 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.571960][ C1] Tainted: [L]=SOFTLOCKUP [ 877.576302][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 877.586396][ C1] Call Trace: [ 877.589707][ C1] [ 877.592585][ C1] vpanic+0x56d/0xa60 [ 877.596664][ C1] ? __pfx_vpanic+0x10/0x10 [ 877.601307][ C1] panic+0xc5/0xd0 [ 877.605073][ C1] ? __pfx_panic+0x10/0x10 [ 877.609534][ C1] ? printk_trigger_flush+0x174/0x1d0 [ 877.615112][ C1] watchdog_timer_fn+0x785/0x790 [ 877.620147][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 877.625727][ C1] __hrtimer_run_queues+0x371/0xa10 [ 877.631230][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 877.636533][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 877.642595][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 877.648338][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.654364][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 877.660496][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 34 3a ad 0c 48 89 de 5b e9 e3 c3 6a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d c8 f9 d3 12 65 48 8b 15 c8 f9 [ 877.680135][ C1] RSP: 0018:ffffc90000a08458 EFLAGS: 00000293 [ 877.686226][ C1] RAX: ffffffff81d35b84 RBX: 000000000000002c RCX: ffff888053d11f40 [ 877.694245][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000004 [ 877.702238][ C1] RBP: 0000000000000001 R08: 0000000000000100 R09: 0000000000000000 [ 877.710239][ C1] R10: ffffc90000a086f8 R11: fffff520001410e1 R12: ffffffff8e7627d8 [ 877.718329][ C1] R13: dffffc0000000000 R14: ffffc90000a08500 R15: 0000000000000001 [ 877.726433][ C1] ? perf_trace_buf_alloc+0x134/0x280 [ 877.731959][ C1] perf_trace_buf_alloc+0x142/0x280 [ 877.737266][ C1] perf_trace_lock+0x1a1/0x410 [ 877.742152][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 877.747533][ C1] ? lock_acquire+0x115/0x350 [ 877.752310][ C1] ? unwind_next_frame+0x8f/0x2550 [ 877.757469][ C1] ? unwind_next_frame+0x8f/0x2550 [ 877.762650][ C1] lock_release+0x396/0x3c0 [ 877.767228][ C1] ? deref_stack_reg+0x18e/0x220 [ 877.772236][ C1] ? unwind_next_frame+0x8f/0x2550 [ 877.777422][ C1] unwind_next_frame+0x1baa/0x2550 [ 877.782639][ C1] ? lock_release+0x396/0x3c0 [ 877.787366][ C1] ? unwind_next_frame+0x8f/0x2550 [ 877.792554][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 877.798761][ C1] arch_stack_walk+0x11b/0x150 [ 877.803638][ C1] ? unwind_next_frame+0x1baa/0x2550 [ 877.809024][ C1] stack_trace_save+0xa9/0x100 [ 877.813859][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 877.819403][ C1] kasan_save_track+0x3e/0x80 [ 877.824130][ C1] ? kasan_save_track+0x3e/0x80 [ 877.829036][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 877.834135][ C1] ? kmem_cache_alloc_node_noprof+0x34f/0x600 [ 877.840262][ C1] ? __alloc_skb+0x1db/0x7a0 [ 877.844913][ C1] ? ndisc_alloc_skb+0xa0/0x480 [ 877.849842][ C1] ? ndisc_send_rs+0x288/0x6b0 [ 877.854689][ C1] ? addrconf_rs_timer+0x2d2/0x6c0 [ 877.859843][ C1] ? call_timer_fn+0x18d/0x5f0 [ 877.864672][ C1] ? __run_timer_base+0x652/0x8b0 [ 877.869747][ C1] ? run_timer_softirq+0xb7/0x170 [ 877.874836][ C1] ? handle_softirqs+0x265/0x8d0 [ 877.879825][ C1] ? __irq_exit_rcu+0xc6/0x220 [ 877.884632][ C1] ? irq_exit_rcu+0x9/0x30 [ 877.889088][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 877.894939][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.901152][ C1] ? perf_swevent_event+0x75f/0x810 [ 877.906394][ C1] ? perf_tp_event+0x5fe/0x29d0 [ 877.911286][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 877.917041][ C1] ? perf_trace_lock+0x32e/0x410 [ 877.922017][ C1] ? lock_release+0x396/0x3c0 [ 877.927244][ C1] __kasan_slab_alloc+0x6c/0x80 [ 877.932202][ C1] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 877.938194][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 877.944307][ C1] ? __alloc_skb+0x1db/0x7a0 [ 877.948926][ C1] ? __alloc_skb+0x1db/0x7a0 [ 877.953650][ C1] __alloc_skb+0x1db/0x7a0 [ 877.958163][ C1] ndisc_alloc_skb+0xa0/0x480 [ 877.962916][ C1] ndisc_send_rs+0x288/0x6b0 [ 877.967570][ C1] ? ipv6_get_lladdr+0x2b/0x3f0 [ 877.972499][ C1] addrconf_rs_timer+0x2d2/0x6c0 [ 877.977487][ C1] ? lock_acquire+0x115/0x350 [ 877.982268][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 877.987812][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 877.993242][ C1] call_timer_fn+0x18d/0x5f0 [ 877.997911][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 878.003408][ C1] ? call_timer_fn+0xd5/0x5f0 [ 878.008160][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 878.013431][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 878.018697][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 878.024224][ C1] __run_timer_base+0x652/0x8b0 [ 878.029152][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 878.034389][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 878.039974][ C1] run_timer_softirq+0xb7/0x170 [ 878.044906][ C1] handle_softirqs+0x265/0x8d0 [ 878.049858][ C1] __irq_exit_rcu+0xc6/0x220 [ 878.054519][ C1] irq_exit_rcu+0x9/0x30 [ 878.058814][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 878.064501][ C1] [ 878.067461][ C1] [ 878.070433][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 878.076466][ C1] RIP: 0010:perf_swevent_event+0x75f/0x810 [ 878.082309][ C1] Code: e6 00 02 00 00 75 51 e8 6f e4 c0 ff 4d 89 fe 4d 85 e4 75 07 e8 62 e4 c0 ff eb 06 e8 5b e4 c0 ff fb 48 c7 44 24 40 0e 36 e0 45 <4a> c7 04 33 00 00 00 00 65 48 8b 05 39 de 94 12 48 3b 84 24 80 00 [ 878.101944][ C1] RSP: 0018:ffffc9001028e320 EFLAGS: 00000246 [ 878.108093][ C1] RAX: ffffffff820811d5 RBX: 1ffff92002051c6c RCX: 0000000000080000 [ 878.116095][ C1] RDX: ffffc900054e9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 878.124092][ C1] RBP: ffffc9001028e3f0 R08: ffffffff917c77bf R09: 1ffffffff22f8ef7 [ 878.132095][ C1] R10: dffffc0000000000 R11: fffffbfff22f8ef8 R12: 0000000000000200 [ 878.140109][ C1] R13: ffffc9001028e4c8 R14: dffffc0000000000 R15: dffffc0000000000 [ 878.148205][ C1] ? perf_swevent_event+0x755/0x810 [ 878.153599][ C1] ? __pfx_perf_swevent_event+0x10/0x10 [ 878.159185][ C1] ? perf_tp_event+0x77d/0x29d0 [ 878.164087][ C1] ? tracing_gen_ctx_irq_test+0xc1/0x160 [ 878.169847][ C1] perf_tp_event+0x5fe/0x29d0 [ 878.174719][ C1] ? __pfx_perf_tp_event+0x10/0x10 [ 878.179994][ C1] ? lock_release+0x396/0x3c0 [ 878.185029][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 878.190870][ C1] perf_trace_run_bpf_submit+0xee/0x170 [ 878.196523][ C1] perf_trace_lock+0x32e/0x410 [ 878.201434][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 878.206826][ C1] ? lock_acquire+0x115/0x350 [ 878.211594][ C1] ? unwind_next_frame+0x8f/0x2550 [ 878.216768][ C1] ? unwind_next_frame+0x8f/0x2550 [ 878.221936][ C1] lock_release+0x396/0x3c0 [ 878.226493][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 878.231828][ C1] ? deref_stack_reg+0x18e/0x220 [ 878.236860][ C1] ? unwind_next_frame+0x8f/0x2550 [ 878.242071][ C1] unwind_next_frame+0x1baa/0x2550 [ 878.247304][ C1] ? stack_trace_save+0xa9/0x100 [ 878.252310][ C1] ? unwind_next_frame+0x8f/0x2550 [ 878.257500][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 878.263177][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 878.269396][ C1] arch_stack_walk+0x11b/0x150 [ 878.274274][ C1] ? kasan_save_track+0x3e/0x80 [ 878.279187][ C1] ? security_inode_alloc+0x39/0x310 [ 878.284531][ C1] stack_trace_save+0xa9/0x100 [ 878.289357][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 878.294901][ C1] kasan_save_track+0x3e/0x80 [ 878.300146][ C1] __kasan_slab_alloc+0x6c/0x80 [ 878.305072][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 878.310584][ C1] ? security_inode_alloc+0x39/0x310 [ 878.315932][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 878.321630][ C1] ? security_inode_alloc+0x39/0x310 [ 878.327048][ C1] security_inode_alloc+0x39/0x310 [ 878.332240][ C1] inode_init_always_gfp+0x97e/0xd30 [ 878.337676][ C1] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 878.343389][ C1] alloc_inode+0x82/0x1b0 [ 878.347816][ C1] new_inode+0x1f/0x170 [ 878.352073][ C1] __debugfs_create_file+0xb8/0x400 [ 878.357372][ C1] debugfs_create_file_short+0x3f/0x60 [ 878.362924][ C1] debugfs_hw_add+0x1a2/0x380 [ 878.367692][ C1] ieee80211_register_hw+0x3d8d/0x4b30 [ 878.373361][ C1] ? ieee80211_register_hw+0x1951/0x4b30 [ 878.379254][ C1] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 878.385154][ C1] ? __asan_memset+0x22/0x50 [ 878.389826][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 878.394824][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 878.400732][ C1] mac80211_hwsim_new_radio+0x32f1/0x5990 [ 878.406664][ C1] ? rcu_is_watching+0x16/0xb0 [ 878.411596][ C1] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 878.417712][ C1] ? kstrndup+0xbd/0x160 [ 878.422051][ C1] ? kstrndup+0xbd/0x160 [ 878.426368][ C1] hwsim_new_radio_nl+0xd8b/0xf90 [ 878.431564][ C1] genl_family_rcv_msg_doit+0x233/0x340 [ 878.437205][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 878.443427][ C1] ? bpf_lsm_capable+0x9/0x20 [ 878.448156][ C1] ? security_capable+0x7e/0x2c0 [ 878.453220][ C1] genl_rcv_msg+0x614/0x7a0 [ 878.457837][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 878.462922][ C1] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 878.468639][ C1] netlink_rcv_skb+0x226/0x4a0 [ 878.473457][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 878.478560][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 878.484032][ C1] ? down_read+0x2b9/0x320 [ 878.488545][ C1] genl_rcv+0x28/0x40 [ 878.492567][ C1] netlink_unicast+0x8ef/0xa80 [ 878.497525][ C1] netlink_sendmsg+0x7f0/0xb20 [ 878.502398][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.507760][ C1] ? aa_sock_msg_perm+0x144/0x210 [ 878.512885][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 878.518469][ C1] ? perf_trace_lock+0x32e/0x410 [ 878.523469][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.528797][ C1] sock_sendmsg_nosec+0x14e/0x190 [ 878.533912][ C1] ____sys_sendmsg+0x54e/0x850 [ 878.538779][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.544251][ C1] ? import_iovec+0x73/0xa0 [ 878.548872][ C1] ___sys_sendmsg+0x2a5/0x360 [ 878.553627][ C1] ? perf_trace_run_bpf_submit+0xee/0x170 [ 878.559451][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.564920][ C1] ? __fget_files+0x2a/0x420 [ 878.569672][ C1] ? __fget_files+0x3a2/0x420 [ 878.574388][ C1] ? __fget_files+0x2a/0x420 [ 878.579122][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 878.584152][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.589869][ C1] do_syscall_64+0x166/0x520 [ 878.594538][ C1] ? trace_irq_disable+0x3b/0x140 [ 878.599610][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.605726][ C1] ? clear_bhb_loop+0x70/0xc0 [ 878.610511][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.616456][ C1] RIP: 0033:0x7f2c5fb9f559 [ 878.620931][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.640583][ C1] RSP: 002b:00007f2c60b36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.649079][ C1] RAX: ffffffffffffffda RBX: 00007f2c5fe25fa0 RCX: 00007f2c5fb9f559 [ 878.657078][ C1] RDX: 0000000000000084 RSI: 0000200000000a80 RDI: 0000000000000003 [ 878.665073][ C1] RBP: 00007f2c5fc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 878.673069][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.681063][ C1] R13: 00007f2c5fe26038 R14: 00007f2c5fe25fa0 R15: 00007ffcbc41a118 [ 878.689213][ C1] [ 878.692864][ C1] Kernel Offset: disabled [ 878.697222][ C1] Rebooting in 86400 seconds..