last executing test programs: 1.664842937s ago: executing program 4 (id=5219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)="a7528bca037f84d1c95e8de3da1991012724f46d40bf698feaf34fed20368bbae4a1d3608237879d882ae0502db307ea57ec292a9bdf03daaf2ae7be1a2d97eb35e375556787e30122dbfe", &(0x7f0000000100), 0xa7c0, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000340)=""/10}, 0x20) 1.439796856s ago: executing program 1 (id=5223): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1.312079703s ago: executing program 1 (id=5226): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) listen(r0, 0x7) 1.188840362s ago: executing program 1 (id=5228): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f00000000c0), 0x4) 1.121743932s ago: executing program 0 (id=5230): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r1, 0x9, 0xffff1e0d, 0xa01, 0x200, 0xb5, 0xc91b, 0x3ff, {r1, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x7a9, 0x8, 0x400, 0x4}}, &(0x7f0000000180)=0xb0) 1.007347867s ago: executing program 0 (id=5231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000012c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) 990.177646ms ago: executing program 2 (id=5232): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 886.909025ms ago: executing program 4 (id=5233): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40000000) 852.633276ms ago: executing program 2 (id=5235): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) close(r0) 789.510027ms ago: executing program 3 (id=5236): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 772.631344ms ago: executing program 4 (id=5237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 692.380461ms ago: executing program 0 (id=5238): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x30, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102000000001000000000"], 0x38}}, 0x0) 606.739492ms ago: executing program 3 (id=5239): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) close(0x4) 606.321179ms ago: executing program 4 (id=5240): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r0, 0x4, r0}, 0x10) 521.789385ms ago: executing program 0 (id=5241): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000b00)=@canfd={{0x4, 0x1, 0x1}, 0x21, 0x1, 0x0, 0x0, "edda5e5ef4d544ee606976ccb636ff5c3d574b8ed71c1a8c5dead6bc4aef4a6df555c4afa6ae6b3f80c3d6aa4fe686dd1a8eb823c3f8aa38a26ce77b0217f84e"}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 520.784339ms ago: executing program 2 (id=5242): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) 505.458013ms ago: executing program 1 (id=5243): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 504.959227ms ago: executing program 3 (id=5244): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) 391.971849ms ago: executing program 4 (id=5245): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x40}}, 0x0) 361.508285ms ago: executing program 3 (id=5246): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x48, 0x0}}], 0x1, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) 360.818191ms ago: executing program 0 (id=5247): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) 344.582145ms ago: executing program 2 (id=5248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) 276.332777ms ago: executing program 1 (id=5249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 185.006161ms ago: executing program 0 (id=5250): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 184.154027ms ago: executing program 2 (id=5251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) 180.967157ms ago: executing program 3 (id=5252): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 172.676411ms ago: executing program 4 (id=5253): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 17.379559ms ago: executing program 3 (id=5254): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) 16.720517ms ago: executing program 1 (id=5255): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) 0s ago: executing program 2 (id=5256): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 77.547166][ T5610] cgroup: Unknown subsys name 'net' [ 77.643102][ T5610] cgroup: Unknown subsys name 'cpuset' [ 77.652992][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.295023][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.014710][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.036458][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.044618][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.055562][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.064324][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.072054][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.081247][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.089101][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.107311][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.114952][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.122759][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.133388][ T4940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.140878][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.149736][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.159501][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.168105][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.176857][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.185494][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.201858][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.210628][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.219772][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.230788][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.242304][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.253813][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.263273][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.079396][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.086677][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.094647][ T5633] bridge_slave_0: entered allmulticast mode [ 85.102070][ T5633] bridge_slave_0: entered promiscuous mode [ 85.135480][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.142705][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.150252][ T5625] bridge_slave_0: entered allmulticast mode [ 85.157543][ T5625] bridge_slave_0: entered promiscuous mode [ 85.166004][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.173584][ T5634] Bluetooth: hci1: command tx timeout [ 85.173683][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.186293][ T5625] bridge_slave_1: entered allmulticast mode [ 85.193753][ T5625] bridge_slave_1: entered promiscuous mode [ 85.201267][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.208393][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.216066][ T5633] bridge_slave_1: entered allmulticast mode [ 85.223619][ T5633] bridge_slave_1: entered promiscuous mode [ 85.249144][ T5623] Bluetooth: hci2: command tx timeout [ 85.249179][ T5634] Bluetooth: hci3: command tx timeout [ 85.259021][ T5623] Bluetooth: hci0: command tx timeout [ 85.329948][ T5623] Bluetooth: hci4: command tx timeout [ 85.380351][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.392139][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.419266][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.426522][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.434258][ T5628] bridge_slave_0: entered allmulticast mode [ 85.442183][ T5628] bridge_slave_0: entered promiscuous mode [ 85.452183][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.463736][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.492585][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.500172][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.507362][ T5628] bridge_slave_1: entered allmulticast mode [ 85.514808][ T5628] bridge_slave_1: entered promiscuous mode [ 85.555931][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.563250][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.571323][ T5632] bridge_slave_0: entered allmulticast mode [ 85.578679][ T5632] bridge_slave_0: entered promiscuous mode [ 85.631749][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.639106][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.646288][ T5632] bridge_slave_1: entered allmulticast mode [ 85.654023][ T5632] bridge_slave_1: entered promiscuous mode [ 85.674663][ T5625] team0: Port device team_slave_0 added [ 85.682372][ T5633] team0: Port device team_slave_0 added [ 85.688132][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.695351][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.702585][ T5622] bridge_slave_0: entered allmulticast mode [ 85.709935][ T5622] bridge_slave_0: entered promiscuous mode [ 85.731290][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.742565][ T5625] team0: Port device team_slave_1 added [ 85.750277][ T5633] team0: Port device team_slave_1 added [ 85.756059][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.763446][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.770745][ T5622] bridge_slave_1: entered allmulticast mode [ 85.778446][ T5622] bridge_slave_1: entered promiscuous mode [ 85.799545][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.856358][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.912477][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.923590][ T5628] team0: Port device team_slave_0 added [ 85.930348][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.937338][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.963659][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.976149][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.983810][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.009843][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.024797][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.048105][ T5628] team0: Port device team_slave_1 added [ 86.054455][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.061473][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.087414][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.100268][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.107333][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.133843][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.155460][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.209442][ T5632] team0: Port device team_slave_0 added [ 86.229214][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.236204][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.262574][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.298683][ T5632] team0: Port device team_slave_1 added [ 86.316200][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.323489][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.349519][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.374440][ T5622] team0: Port device team_slave_0 added [ 86.415695][ T5633] hsr_slave_0: entered promiscuous mode [ 86.423157][ T5633] hsr_slave_1: entered promiscuous mode [ 86.436966][ T5625] hsr_slave_0: entered promiscuous mode [ 86.443470][ T5625] hsr_slave_1: entered promiscuous mode [ 86.450742][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 86.456565][ T5625] Cannot create hsr debugfs directory [ 86.464560][ T5622] team0: Port device team_slave_1 added [ 86.484295][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.491716][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.517995][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.531279][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.538250][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.564219][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.648092][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.655368][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.681786][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.774233][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.782351][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.808873][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.864991][ T5628] hsr_slave_0: entered promiscuous mode [ 86.872840][ T5628] hsr_slave_1: entered promiscuous mode [ 86.879595][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 86.885383][ T5628] Cannot create hsr debugfs directory [ 86.909530][ T5632] hsr_slave_0: entered promiscuous mode [ 86.916572][ T5632] hsr_slave_1: entered promiscuous mode [ 86.923117][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 86.928933][ T5632] Cannot create hsr debugfs directory [ 87.137066][ T5622] hsr_slave_0: entered promiscuous mode [ 87.143557][ T5622] hsr_slave_1: entered promiscuous mode [ 87.150051][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 87.155817][ T5622] Cannot create hsr debugfs directory [ 87.249106][ T5623] Bluetooth: hci1: command tx timeout [ 87.328709][ T5623] Bluetooth: hci3: command tx timeout [ 87.338742][ T5623] Bluetooth: hci0: command tx timeout [ 87.344204][ T5623] Bluetooth: hci2: command tx timeout [ 87.418614][ T5623] Bluetooth: hci4: command tx timeout [ 87.629713][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.643496][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.660563][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.675391][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.683310][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.693588][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.702235][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.712652][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.799654][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.820167][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.831841][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.843095][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.861454][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.872081][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.890876][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.902239][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.991627][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.005981][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.019242][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.031542][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.041335][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.053613][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.066697][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.078425][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.152556][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.195087][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.205067][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.214172][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.225091][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.241398][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.251983][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.260341][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.271009][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.320297][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.382564][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.390191][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.412492][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.424860][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.438385][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.445652][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.466377][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.478081][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.496975][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.506730][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.515360][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.525131][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.607296][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.678324][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.702702][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.727118][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.734368][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.773395][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.780686][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.822611][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.838282][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.875784][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.882980][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.923508][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.930717][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.974291][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.044555][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.054827][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.062018][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.085933][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.093120][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.235602][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.295504][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.302733][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.329329][ T5623] Bluetooth: hci1: command tx timeout [ 89.397750][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.404970][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.410778][ T5623] Bluetooth: hci0: command tx timeout [ 89.417653][ T5634] Bluetooth: hci2: command tx timeout [ 89.423753][ T5634] Bluetooth: hci3: command tx timeout [ 89.489267][ T5623] Bluetooth: hci4: command tx timeout [ 89.916405][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.249537][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.419819][ T5625] veth0_vlan: entered promiscuous mode [ 90.474419][ T5625] veth1_vlan: entered promiscuous mode [ 90.582543][ T5625] veth0_macvtap: entered promiscuous mode [ 90.615578][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.653955][ T5625] veth1_macvtap: entered promiscuous mode [ 90.682264][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.724027][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.757476][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.799299][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.812178][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.846356][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.860344][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.876906][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.956359][ T5632] veth0_vlan: entered promiscuous mode [ 91.013822][ T5633] veth0_vlan: entered promiscuous mode [ 91.033045][ T5632] veth1_vlan: entered promiscuous mode [ 91.052205][ T5789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.061654][ T5789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.075003][ T5622] veth0_vlan: entered promiscuous mode [ 91.102914][ T5633] veth1_vlan: entered promiscuous mode [ 91.160634][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.161012][ T5628] veth0_vlan: entered promiscuous mode [ 91.181698][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.199196][ T5622] veth1_vlan: entered promiscuous mode [ 91.231794][ T5628] veth1_vlan: entered promiscuous mode [ 91.282623][ T5633] veth0_macvtap: entered promiscuous mode [ 91.293095][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.313293][ T5632] veth0_macvtap: entered promiscuous mode [ 91.335014][ T5632] veth1_macvtap: entered promiscuous mode [ 91.351681][ T5633] veth1_macvtap: entered promiscuous mode [ 91.408785][ T5623] Bluetooth: hci1: command tx timeout [ 91.438354][ T5822] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 91.466922][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.487063][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.490729][ T5623] Bluetooth: hci0: command tx timeout [ 91.500426][ T5634] Bluetooth: hci3: command tx timeout [ 91.501279][ T5637] Bluetooth: hci2: command tx timeout [ 91.558182][ T5622] veth0_macvtap: entered promiscuous mode [ 91.570259][ T5637] Bluetooth: hci4: command tx timeout [ 91.604295][ T5628] veth0_macvtap: entered promiscuous mode [ 91.621543][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.629917][ T5622] veth1_macvtap: entered promiscuous mode [ 91.642030][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.676193][ T5628] veth1_macvtap: entered promiscuous mode [ 91.698430][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.718230][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.738007][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.749584][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.774068][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.809785][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.820211][ T10] cfg80211: failed to load regulatory.db [ 91.840548][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.864149][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.885469][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.905584][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.951109][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.960442][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.971081][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.055573][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.070386][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.096255][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.112546][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.182610][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.204339][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.262791][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.322237][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.356220][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.406474][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.422600][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.474718][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.516445][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.544219][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.552790][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.686541][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.706243][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.849318][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.886317][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.966216][ T5789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.002212][ T5789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.036001][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.072713][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.525118][ T5867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.822673][ T5878] warning: `syz.1.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.110386][ T5890] netlink: 'syz.4.34': attribute type 5 has an invalid length. [ 94.502418][ T5904] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 94.502418][ T5904] Please contact the netfilter-devel mailing list or update your nftables rules. [ 94.645299][ T5909] netlink: 'syz.4.43': attribute type 1 has an invalid length. [ 94.685516][ T5909] netlink: 224 bytes leftover after parsing attributes in process `syz.4.43'. [ 94.780920][ T5912] Cannot find add_set index 0 as target [ 94.820120][ T5918] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 94.839219][ T5918] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 95.551595][ T5736] IPVS: starting estimator thread 0... [ 95.668593][ T5950] IPVS: using max 27 ests per chain, 64800 per kthread [ 96.064393][ T5966] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 96.092357][ T5966] bond1 (unregistering): Released all slaves [ 96.251410][ T5970] 8021q: VLANs not supported on lo [ 97.071190][ T6015] xt_socket: unknown flags 0x50 [ 97.213367][ T9] IPVS: starting estimator thread 0... [ 97.319111][ T6022] IPVS: using max 25 ests per chain, 60000 per kthread [ 97.462096][ T6034] x_tables: duplicate entry at hook 3 [ 97.876417][ T6046] xt_CT: No such helper "snmp" [ 98.177410][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 98.244402][ T6065] netlink: 2 bytes leftover after parsing attributes in process `syz.1.112'. [ 98.495801][ T6079] xt_hl: Unknown TTL match mode: 255 [ 99.013538][ T6104] netlink: 'syz.0.131': attribute type 3 has an invalid length. [ 99.376124][ T6120] netlink: 'syz.2.139': attribute type 2 has an invalid length. [ 99.417733][ T6122] wg2 speed is unknown, defaulting to 1000 [ 99.458200][ T6122] wg2 speed is unknown, defaulting to 1000 [ 99.471176][ T6122] wg2 speed is unknown, defaulting to 1000 [ 99.601351][ T6129] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 99.631272][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 100.630641][ T6122] infiniband syz2: set active [ 100.638343][ T5736] wg2 speed is unknown, defaulting to 1000 [ 100.645022][ T6122] infiniband syz2: added wg2 [ 100.754078][ T6122] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 100.806256][ T6177] openvswitch: netlink: IP tunnel dst address not specified [ 100.820003][ T6122] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 100.841452][ T6122] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 101.062086][ T6122] RDS/IB: syz2: added [ 101.083828][ T6122] smc: adding ib device syz2 with port count 1 [ 101.103410][ T6122] smc: ib device syz2 port 1 has no pnetid [ 101.134571][ T5788] wg2 speed is unknown, defaulting to 1000 [ 101.172995][ T6122] wg2 speed is unknown, defaulting to 1000 [ 101.229181][ T6194] netlink: 288 bytes leftover after parsing attributes in process `syz.3.175'. [ 101.294063][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 101.364337][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 102.001857][ T6226] SET target dimension over the limit! [ 102.281590][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 102.366590][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.375809][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.546270][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.572373][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.796540][ T6122] wg2 speed is unknown, defaulting to 1000 [ 102.875294][ T6240] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 102.909409][ T5789] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.971060][ T5789] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.007628][ T5789] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.047323][ T5789] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.098431][ T6256] ipt_REJECT: TCP_RESET invalid for non-tcp [ 103.322958][ T6268] netlink: 44 bytes leftover after parsing attributes in process `syz.4.212'. [ 103.363461][ T6268] netlink: 43 bytes leftover after parsing attributes in process `syz.4.212'. [ 103.382105][ T6268] netlink: 'syz.4.212': attribute type 6 has an invalid length. [ 103.444537][ T6268] netlink: 'syz.4.212': attribute type 5 has an invalid length. [ 103.493063][ T6268] netlink: 43 bytes leftover after parsing attributes in process `syz.4.212'. [ 103.534401][ T6122] wg2 speed is unknown, defaulting to 1000 [ 103.884883][ T6289] tipc: Trying to set illegal importance in message [ 104.211341][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 104.405243][ T6311] netlink: 244 bytes leftover after parsing attributes in process `syz.4.234'. [ 104.502347][ T6122] wg2 speed is unknown, defaulting to 1000 [ 104.629722][ T6322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.509867][ T6122] wg2 speed is unknown, defaulting to 1000 [ 105.533453][ T6358] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 105.630808][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 106.320178][ T6389] netlink: 'syz.1.273': attribute type 12 has an invalid length. [ 107.089029][ T6424] netlink: 'syz.4.290': attribute type 2 has an invalid length. [ 107.192770][ T6427] netlink: zone id is out of range [ 107.214793][ T6427] netlink: del zone limit has 4 unknown bytes [ 107.607484][ T6446] dvmrp0: entered allmulticast mode [ 107.813344][ T6459] netlink: 'syz.3.306': attribute type 34 has an invalid length. [ 107.823495][ T6460] tc_dump_action: action bad kind [ 107.840995][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 108.072339][ T6471] netlink: 64 bytes leftover after parsing attributes in process `syz.0.311'. [ 108.090017][ T6471] netlink: 64 bytes leftover after parsing attributes in process `syz.0.311'. [ 108.624074][ T6501] netlink: 'syz.0.328': attribute type 21 has an invalid length. [ 108.640517][ T6498] xt_NFQUEUE: number of total queues is 0 [ 108.646994][ T6501] netlink: 156 bytes leftover after parsing attributes in process `syz.0.328'. [ 108.764955][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 108.988307][ T6515] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 109.226626][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 109.401489][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 109.742114][ T6553] SET target dimension over the limit! [ 109.787116][ T6556] netlink: 'syz.2.354': attribute type 2 has an invalid length. [ 109.816015][ T6556] netlink: 'syz.2.354': attribute type 2 has an invalid length. [ 110.036199][ T6569] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.392032][ T6585] x_tables: duplicate entry at hook 1 [ 110.867819][ T6607] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 111.352287][ T6634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.394'. [ 111.385530][ T6636] netlink: 256 bytes leftover after parsing attributes in process `syz.2.395'. [ 111.866390][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 111.926880][ T6666] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 112.850917][ T6710] __nla_validate_parse: 1 callbacks suppressed [ 112.850937][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.431'. [ 113.159739][ T6725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.371583][ T6737] netlink: 256 bytes leftover after parsing attributes in process `syz.3.445'. [ 113.434808][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 113.474982][ T6736] bond1 (unregistering): Released all slaves [ 114.450193][ T6789] netlink: 'syz.0.471': attribute type 3 has an invalid length. [ 114.501560][ T6791] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 114.690652][ T6803] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 114.713598][ T6806] netlink: 45 bytes leftover after parsing attributes in process `syz.1.477'. [ 114.724300][ T6803] SET target dimension over the limit! [ 115.281620][ T6831] netlink: 'syz.4.491': attribute type 7 has an invalid length. [ 115.661147][ T6851] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 115.812269][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.504'. [ 115.852088][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.504'. [ 115.890617][ T6863] openvswitch: netlink: Message has 1 unknown bytes. [ 116.144199][ T6871] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 116.175079][ T6871] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 116.413426][ T6889] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 116.438098][ T6889] netlink: 224 bytes leftover after parsing attributes in process `syz.1.521'. [ 117.265982][ T6921] set match dimension is over the limit! [ 117.778259][ T6943] netlink: 'syz.1.547': attribute type 13 has an invalid length. [ 117.816350][ T6943] gretap0: refused to change device tx_queue_len [ 117.832665][ T6943] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 118.003234][ T6954] netlink: 'syz.2.552': attribute type 4 has an invalid length. [ 118.312247][ T6972] netlink: 'syz.4.561': attribute type 2 has an invalid length. [ 118.361611][ T6977] ip6t_srh: unknown srh invflags 4000 [ 118.539308][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 118.554762][ T6987] netlink: 420 bytes leftover after parsing attributes in process `syz.0.569'. [ 119.301677][ T7026] netlink: 'syz.4.586': attribute type 3 has an invalid length. [ 119.422763][ T7032] bridge0: port 3(gretap0) entered blocking state [ 119.429575][ T7032] bridge0: port 3(gretap0) entered disabled state [ 119.436270][ T7032] gretap0: entered allmulticast mode [ 119.452173][ T7032] gretap0: entered promiscuous mode [ 119.503831][ T7034] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 119.803795][ T7052] xt_hashlimit: size too large, truncated to 1048576 [ 120.583392][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 121.005634][ T7116] netlink: 224 bytes leftover after parsing attributes in process `syz.0.629'. [ 121.180769][ T7125] netlink: zone id is out of range [ 121.186449][ T7125] netlink: set zone limit has 4 unknown bytes [ 121.266851][ T7127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.498896][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 122.149060][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 122.170312][ T7174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.657'. [ 122.195997][ T7174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.657'. [ 122.704925][ T7162] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 123.419289][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 123.604941][ T7249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.841936][ T7262] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 123.865889][ T7262] netlink: 'syz.2.697': attribute type 2 has an invalid length. [ 123.888986][ T5637] Bluetooth: hci0: command 0x0c20 tx timeout [ 125.162887][ T7332] x_tables: unsorted entry at hook 3 [ 125.374005][ T7342] netlink: 'syz.3.736': attribute type 3 has an invalid length. [ 125.400302][ T7344] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 125.621713][ T7356] netlink: 44 bytes leftover after parsing attributes in process `syz.3.742'. [ 125.645370][ T7356] netlink: 21 bytes leftover after parsing attributes in process `syz.3.742'. [ 125.656547][ T7356] netlink: 21 bytes leftover after parsing attributes in process `syz.3.742'. [ 125.959944][ T7374] netlink: 524 bytes leftover after parsing attributes in process `syz.0.752'. [ 126.310324][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 126.346110][ T7388] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 127.337923][ T7443] netlink: 104 bytes leftover after parsing attributes in process `syz.2.786'. [ 127.353259][ T7445] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 127.547675][ T7453] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 127.598580][ T7453] netlink: 17 bytes leftover after parsing attributes in process `syz.2.791'. [ 127.848365][ T7469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.263532][ T7491] netlink: 'syz.1.809': attribute type 9 has an invalid length. [ 129.041654][ T7529] lo: entered promiscuous mode [ 129.071238][ T7529] tunl0: entered promiscuous mode [ 129.093049][ T7529] gre0: entered promiscuous mode [ 129.131677][ T7529] gretap0: entered promiscuous mode [ 129.152997][ T7529] erspan0: entered promiscuous mode [ 129.186470][ T7529] ip_vti0: entered promiscuous mode [ 129.241155][ T7539] netlink: zone id is out of range [ 129.668712][ T7562] netlink: 44 bytes leftover after parsing attributes in process `syz.4.844'. [ 130.638962][ T7616] netlink: 'syz.1.870': attribute type 3 has an invalid length. [ 130.701337][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'. [ 130.802800][ T7622] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 130.806304][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 130.846710][ T7621] openvswitch: netlink: Missing key (keys=40, expected=100) [ 131.028715][ T7632] openvswitch: netlink: IP tunnel dst address not specified [ 131.142094][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 131.219711][ T7642] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 131.346702][ T7650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.621427][ T7663] netlink: 'syz.0.893': attribute type 12 has an invalid length. [ 131.881921][ T7678] netlink: 64 bytes leftover after parsing attributes in process `syz.0.902'. [ 132.654180][ T7718] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 132.774118][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.785560][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.899520][ T7728] netlink: 'syz.1.927': attribute type 49 has an invalid length. [ 132.941234][ T7733] netlink: 'syz.2.928': attribute type 7 has an invalid length. [ 132.974328][ T7733] netlink: 'syz.2.928': attribute type 8 has an invalid length. [ 133.039798][ T7728] ip6gretap0: entered promiscuous mode [ 133.050577][ T7728] ip6gretap0: entered allmulticast mode [ 133.435431][ T7754] netlink: 'syz.2.938': attribute type 29 has an invalid length. [ 133.452077][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 133.525570][ T7758] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 133.653114][ T7763] Cannot find add_set index 34 as target [ 134.486547][ T7800] bond1: Removing last arp target with arp_interval on [ 134.811599][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'. [ 134.915092][ T7830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.969'. [ 135.710516][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 136.386244][ T7908] netlink: 156 bytes leftover after parsing attributes in process `syz.2.999'. [ 136.430755][ T7908] netlink: 156 bytes leftover after parsing attributes in process `syz.2.999'. [ 136.645158][ T7923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1005'. [ 137.593478][ T7967] netlink: 'syz.0.1024': attribute type 30 has an invalid length. [ 137.804351][ T7967] bond1: option arp_missed_max: invalid value (0) [ 137.842723][ T7967] bond1: option arp_missed_max: allowed values 1 - 255 [ 137.893163][ T7967] bond1 (unregistering): Released all slaves [ 138.003553][ T7989] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1032'. [ 138.749153][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 139.299082][ T8052] team0: entered promiscuous mode [ 139.305116][ T8052] team_slave_0: entered promiscuous mode [ 139.311525][ T8052] team_slave_1: entered promiscuous mode [ 139.494150][ T8062] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 139.572671][ T8064] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 139.605154][ T8064] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 139.794662][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 139.842374][ T8078] netlink: 'syz.4.1073': attribute type 15 has an invalid length. [ 140.747348][ T8128] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 140.805869][ T8128] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1096'. [ 140.844916][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 141.106687][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 141.132301][ T8144] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1105'. [ 141.159174][ T8146] xfrm1: entered allmulticast mode [ 141.330749][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 141.342418][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 141.506273][ T8165] ipt_REJECT: TCP_RESET invalid for non-tcp [ 141.970933][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1129'. [ 142.116935][ T8199] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 142.178151][ T8202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1134'. [ 142.351715][ T8212] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 142.544806][ T8213] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 142.627942][ T8213] bond1 (unregistering): Released all slaves [ 143.344893][ T8262] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 143.556503][ T8272] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 143.614370][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1170'. [ 143.646207][ T8276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.910157][ T8293] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 143.946682][ T8293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1178'. [ 144.176858][ T8297] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 144.231104][ T8297] bond2 (unregistering): Released all slaves [ 144.552874][ T8325] netlink: 'syz.0.1192': attribute type 1 has an invalid length. [ 144.604488][ T8327] netlink: 'syz.2.1194': attribute type 32 has an invalid length. [ 144.640806][ T8329] gre1: entered promiscuous mode [ 145.232011][ T8360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.733496][ T8442] __nla_validate_parse: 3 callbacks suppressed [ 146.733514][ T8442] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1242'. [ 147.019961][ T8458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.326419][ T8471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.862173][ T8502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1270'. [ 147.954272][ T8505] netlink: 'syz.3.1272': attribute type 1 has an invalid length. [ 147.963940][ T8505] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1272'. [ 147.977496][ T8505] NCSI netlink: No device for ifindex 0 [ 148.207391][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 148.525089][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1286'. [ 148.637393][ T8539] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 148.645590][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 150.354156][ T8629] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 150.383902][ T8629] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1326'. [ 150.554532][ T8638] ksmbd: Unknown IPC event: 1, ignore. [ 150.822445][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 151.130044][ T8668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1344'. [ 151.756396][ T8703] netlink: 'syz.0.1358': attribute type 10 has an invalid length. [ 152.229190][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1368'. [ 152.268002][ T8726] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1368'. [ 152.297687][ T8726] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1368'. [ 152.547475][ T8739] netlink: 'syz.0.1373': attribute type 1 has an invalid length. [ 152.832930][ T8757] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 152.850631][ T8757] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1381'. [ 152.991280][ T8765] netlink: 'syz.0.1385': attribute type 2 has an invalid length. [ 153.023963][ T8765] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 153.195703][ T8773] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 153.210813][ T8776] netlink: 'syz.1.1390': attribute type 21 has an invalid length. [ 153.233717][ T8776] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1390'. [ 153.267592][ T8776] netlink: 'syz.1.1390': attribute type 5 has an invalid length. [ 153.295641][ T8776] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1390'. [ 153.413801][ T8785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.176082][ T8823] netlink: 'syz.4.1415': attribute type 21 has an invalid length. [ 154.201492][ T8823] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1415'. [ 154.228903][ T8823] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1415'. [ 154.341529][ T8830] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1417'. [ 154.435595][ T8836] netlink: 'syz.4.1420': attribute type 6 has an invalid length. [ 156.010113][ T8917] netlink: 'syz.4.1460': attribute type 32 has an invalid length. [ 156.237699][ T8934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1466'. [ 156.822354][ T8960] netlink: 'syz.0.1481': attribute type 2 has an invalid length. [ 156.849503][ T8960] netlink: 'syz.0.1481': attribute type 8 has an invalid length. [ 156.864957][ T8964] netlink: 'syz.4.1483': attribute type 2 has an invalid length. [ 157.190878][ T8939] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.384070][ T8992] netlink: 'syz.3.1497': attribute type 11 has an invalid length. [ 157.592473][ T9001] __nla_validate_parse: 5 callbacks suppressed [ 157.592492][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 157.623276][ T8998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'. [ 157.996998][ T9021] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 158.142450][ T9030] netlink: 'syz.0.1516': attribute type 2 has an invalid length. [ 158.448600][ T5637] Bluetooth: hci0: command 0x0c20 tx timeout [ 158.527573][ T9049] netlink: 'syz.4.1527': attribute type 4 has an invalid length. [ 158.544076][ T9049] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1527'. [ 158.565674][ T9051] bond0: (slave bond_slave_1): Releasing backup interface [ 158.744770][ T9059] gre1: entered promiscuous mode [ 158.770895][ T9059] gre1: entered allmulticast mode [ 159.073357][ T9077] nftables ruleset with unbound chain [ 159.299205][ T9089] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1546'. [ 159.312046][ T9090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.634519][ T9104] bridge1: entered promiscuous mode [ 159.656896][ T9109] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 159.674372][ T9104] bridge1: entered allmulticast mode [ 159.695476][ T9105] tunl0: entered promiscuous mode [ 159.701090][ T9105] netlink: 'syz.1.1553': attribute type 3 has an invalid length. [ 159.726487][ T9105] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1553'. [ 159.752174][ T9111] netlink: 'syz.4.1556': attribute type 3 has an invalid length. [ 159.935567][ T9123] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1562'. [ 159.966875][ T9123] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1562'. [ 160.653368][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 160.727048][ T9164] netlink: 'syz.3.1583': attribute type 1 has an invalid length. [ 160.944359][ T9175] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.243703][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 161.454127][ T9203] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 161.466930][ T9203] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1602'. [ 162.077427][ T9235] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 162.205001][ T9201] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 162.817900][ T9273] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 162.842252][ T9273] netlink: 'syz.0.1637': attribute type 2 has an invalid length. [ 163.325340][ T9299] __nla_validate_parse: 1 callbacks suppressed [ 163.325360][ T9299] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.1648'. [ 163.413784][ T9302] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1651'. [ 163.767621][ T9320] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 163.827497][ T9322] netlink: 'syz.2.1662': attribute type 3 has an invalid length. [ 163.829748][ T9324] netlink: 'syz.3.1661': attribute type 2 has an invalid length. [ 163.884748][ T9322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1662'. [ 164.295500][ T9350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.375227][ T9353] syz.2.1676 uses obsolete (PF_INET,SOCK_PACKET) [ 164.511123][ T9361] netlink: 'syz.1.1680': attribute type 7 has an invalid length. [ 165.518293][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1706'. [ 166.300089][ T9459] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1729'. [ 166.481272][ T9466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.889427][ T9491] netlink: 'syz.0.1743': attribute type 21 has an invalid length. [ 167.041828][ T9496] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 167.057159][ T9497] openvswitch: netlink: IP tunnel dst address not specified [ 167.225144][ T9505] Cannot find add_set index 65532 as target [ 168.066635][ T9549] set match dimension is over the limit! [ 168.088298][ T9553] netlink: 'syz.2.1776': attribute type 11 has an invalid length. [ 168.111664][ T9555] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 168.118104][ T9553] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1776'. [ 168.297825][ T9562] netlink: 'syz.0.1778': attribute type 4 has an invalid length. [ 169.266118][ T9620] netlink: 'syz.4.1807': attribute type 11 has an invalid length. [ 169.278634][ T9620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1807'. [ 169.524377][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1811'. [ 169.569025][ T9632] netlink: 'syz.0.1813': attribute type 9 has an invalid length. [ 169.820490][ T9647] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.893636][ T9649] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 170.211905][ T9665] openvswitch: netlink: IPv4 tun info is not correct [ 170.272317][ T9667] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 170.309766][ T9667] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 170.311311][ T9673] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 170.571576][ T9683] netlink: 'syz.4.1838': attribute type 2 has an invalid length. [ 170.596392][ T9687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1839'. [ 171.683740][ T9697] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 171.836658][ T9748] xt_hl: Unknown Hop Limit match mode: 206 [ 172.308213][ T9776] Cannot find map_set index 135 as target [ 172.395855][ T9780] netlink: 'syz.0.1885': attribute type 9 has an invalid length. [ 172.440273][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 173.055515][ T9772] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 173.116719][ T9818] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 173.179189][ T9820] openvswitch: netlink: Duplicate key (type 6). [ 173.188877][ T9818] netlink: 'syz.3.1904': attribute type 2 has an invalid length. [ 173.892183][ T9858] netlink: ct family unspecified [ 173.925995][ T9858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.184019][ T9875] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1930'. [ 174.196922][ T9870] bond2 (unregistering): Released all slaves [ 174.377515][ T9873] team0: left promiscuous mode [ 174.393442][ T9873] team_slave_0: left promiscuous mode [ 174.404172][ T9873] team_slave_1: left promiscuous mode [ 174.414076][ T9873] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.603378][ T9873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.621010][ T9873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.687554][ T9882] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 175.428376][ T9925] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 175.805175][ T9947] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 175.837488][ T9947] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1967'. [ 175.862675][ T9947] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 175.898980][ T9955] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1971'. [ 176.242329][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 176.653742][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 176.816816][ T9995] Bluetooth: MGMT ver 1.23 [ 177.225228][T10018] macvlan0: entered promiscuous mode [ 177.235044][ T5637] Bluetooth: hci4: link tx timeout [ 177.243712][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.571890][T10034] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 178.368308][T10073] tipc: Enabling of bearer rejected, failed to enable media [ 178.589895][T10084] netlink: 'syz.4.2033': attribute type 1 has an invalid length. [ 178.820765][T10092] siw: device registration error -23 [ 178.936805][T10092] smc: removing ib device syz2 [ 179.084269][T10092] smbdirect: ib_dev[syz2] removed [ 179.332487][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 179.544655][T10122] netlink: 'syz.1.2051': attribute type 1 has an invalid length. [ 179.557558][T10122] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2051'. [ 179.796102][T10134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.828821][T10136] tipc: Started in network mode [ 179.834956][T10136] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 179.851284][T10136] tipc: Enabled bearer , priority 10 [ 180.021000][T10142] netlink: 'syz.3.2061': attribute type 1 has an invalid length. [ 180.036228][T10142] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2061'. [ 180.072519][T10142] netlink: 'syz.3.2061': attribute type 1 has an invalid length. [ 180.443383][T10156] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 180.495549][T10156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.517985][T10162] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 181.557323][ T5356] tipc: Node number set to 10136234 [ 181.680302][T10168] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 182.078662][T10208] netlink: 'syz.1.2087': attribute type 23 has an invalid length. [ 182.792503][T10233] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.801265][T10233] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.967595][T10233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.984624][T10233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.062949][T10233] tipc: Resetting bearer [ 183.200922][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.229163][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.276664][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.305914][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.145277][T10292] macvtap1: entered promiscuous mode [ 184.152610][T10292] macvtap1: entered allmulticast mode [ 184.158283][T10292] veth1_vlan: entered allmulticast mode [ 184.205320][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 185.093849][T10335] xt_l2tp: missing protocol rule (udp|l2tpip) [ 185.542092][T10359] Cannot find add_set index 46338 as target [ 185.601359][T10365] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.991439][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2168'. [ 186.450716][T10409] Zero length message leads to an empty skb [ 186.669916][T10422] Bluetooth: MGMT ver 1.23 [ 186.977447][T10439] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2193'. [ 187.009778][T10441] atomic_op ffff88803621b998 conn xmit_atomic 0000000000000000 [ 187.141651][T10446] tipc: Enabled bearer , priority 11 [ 187.321958][ T9] IPVS: starting estimator thread 0... [ 187.374931][T10460] netlink: 'syz.0.2203': attribute type 4 has an invalid length. [ 187.397179][T10460] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2203'. [ 187.431155][T10457] IPVS: using max 25 ests per chain, 60000 per kthread [ 187.513743][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 187.895190][T10488] openvswitch: netlink: Missing key (keys=40, expected=100) [ 188.067150][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 188.108803][T10500] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2223'. [ 188.325301][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2227'. [ 188.389369][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2229'. [ 188.930255][T10534] sock: sock_timestamping_bind_phc: sock not bind to device [ 189.298344][T10550] netlink: 'syz.4.2247': attribute type 2 has an invalid length. [ 189.375737][T10550] : entered promiscuous mode [ 189.472464][T10557] xt_hashlimit: size too large, truncated to 1048576 [ 190.886833][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'. [ 191.744913][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2309'. [ 192.076904][T10692] openvswitch: netlink: Unknown key attributes 20 [ 192.770709][T10725] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2333'. [ 193.707725][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2354'. [ 193.825352][T10771] macsec0: entered promiscuous mode [ 193.832320][T10772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2356'. [ 193.842430][T10771] macsec0: entered allmulticast mode [ 193.870642][T10771] veth1_macvtap: entered allmulticast mode [ 193.899828][T10771] macsec0: left promiscuous mode [ 193.923221][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 193.936343][T10771] macsec0: left allmulticast mode [ 193.947615][T10771] veth1_macvtap: left allmulticast mode [ 194.179269][T10787] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 194.214860][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.215553][T10787] netlink: 'syz.2.2363': attribute type 2 has an invalid length. [ 194.226461][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.402249][T10795] openvswitch: netlink: Message has 4 unknown bytes. [ 194.421193][T10795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.442576][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2368'. [ 194.525864][ T1105] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 194.555507][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 194.564760][ T1105] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 194.893661][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 194.946076][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2380'. [ 195.018655][T10822] tipc: Invalid UDP bearer configuration [ 195.018717][T10822] tipc: Enabling of bearer rejected, failed to enable media [ 195.157303][T10831] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 195.249020][ T5750] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.268040][ T5750] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 196.068007][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 196.663720][T10911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2423'. [ 197.248922][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 198.608892][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 200.753880][T11100] xt_limit: Overflow, try lower: 604147548/4200216962 [ 201.818002][T11146] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 201.831571][T11146] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2534'. [ 201.841648][T11146] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 201.924009][T11152] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2537'. [ 202.193291][T11164] xt_limit: Overflow, try lower: 271964/0 [ 202.241576][T11166] bridge0: port 3(syz_tun) entered blocking state [ 202.267797][T11166] bridge0: port 3(syz_tun) entered disabled state [ 202.296983][T11166] syz_tun: entered allmulticast mode [ 202.320206][T11166] syz_tun: entered promiscuous mode [ 202.332125][T11166] bridge0: port 3(syz_tun) entered blocking state [ 202.339667][T11166] bridge0: port 3(syz_tun) entered forwarding state [ 202.516340][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2549'. [ 203.313556][T11225] netlink: 170676 bytes leftover after parsing attributes in process `syz.2.2572'. [ 203.339714][T11225] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 203.377257][T11225] openvswitch: netlink: Message has 512 unknown bytes. [ 203.465340][T11234] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2577'. [ 204.064095][T11263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2592'. [ 204.331512][T11279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2600'. [ 204.342343][T11279] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2600'. [ 204.352628][T11279] netlink: 'syz.1.2600': attribute type 5 has an invalid length. [ 204.374622][T11279] netlink: 'syz.1.2600': attribute type 6 has an invalid length. [ 204.405028][T11279] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2600'. [ 205.002615][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2617'. [ 205.462688][T11338] IPVS: ip_vs_edit_dest(): server weight less than zero [ 205.471728][ T5788] IPVS: starting estimator thread 0... [ 205.569338][T11341] IPVS: using max 25 ests per chain, 60000 per kthread [ 205.854293][T11357] netlink: 'syz.3.2637': attribute type 11 has an invalid length. [ 206.428019][T11386] macsec1: entered promiscuous mode [ 206.434150][T11386] bridge0: entered promiscuous mode [ 206.440386][T11386] macsec1: entered allmulticast mode [ 206.445982][T11386] bridge0: entered allmulticast mode [ 206.454300][T11390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.458379][T11386] bridge0: port 4(macsec1) entered blocking state [ 206.470098][T11386] bridge0: port 4(macsec1) entered disabled state [ 206.484438][T11386] bridge0: left allmulticast mode [ 206.497851][T11393] netlink: 'syz.0.2653': attribute type 1 has an invalid length. [ 206.525541][T11387] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 206.535377][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 206.541605][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 206.549042][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 206.564816][ T5737] bridge0: left promiscuous mode [ 206.698054][T11399] vlan1: entered allmulticast mode [ 206.714487][T11399] veth0_vlan: entered allmulticast mode [ 206.922445][T11410] __nla_validate_parse: 3 callbacks suppressed [ 206.922465][T11410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2661'. [ 207.008722][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.558235][T11440] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.2676'. [ 207.596156][T11440] netlink: 'syz.4.2676': attribute type 2 has an invalid length. [ 207.622504][T11443] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.152878][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'. [ 208.967814][T11510] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2711'. [ 209.573731][ C0] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.591916][T11542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2727'. [ 209.969053][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 209.993927][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2736'. [ 211.276017][T11623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.532425][T11635] vcan1: entered promiscuous mode [ 211.547935][T11635] vcan1: entered allmulticast mode [ 211.815798][T11653] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2782'. [ 212.116837][T11667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2789'. [ 212.141168][T11665] netlink: 'syz.4.2788': attribute type 18 has an invalid length. [ 212.203462][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.215190][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.233481][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.258750][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.454066][T11682] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2797'. [ 212.495762][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'. [ 212.545455][T11682] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2797'. [ 212.591954][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'. [ 212.630122][T11682] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2797'. [ 212.648061][T11690] tipc: Started in network mode [ 212.657680][T11690] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 212.669306][T11690] tipc: Enabled bearer , priority 24 [ 213.057125][T11712] netlink: 'syz.2.2809': attribute type 2 has an invalid length. [ 213.086436][T11712] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2809'. [ 213.378184][T11731] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2821'. [ 213.778587][ T5750] tipc: Node number set to 10005162 [ 213.812901][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'. [ 213.891028][T11757] sock: sock_set_timeout: `syz.0.2834' (pid 11757) tries to set negative timeout [ 213.960721][T11759] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 214.257208][T11775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2843'. [ 215.237113][T11820] vcan0: entered allmulticast mode [ 215.512152][T11831] tipc: Enabled bearer , priority 10 [ 215.704354][T11840] netlink: 'syz.3.2873': attribute type 13 has an invalid length. [ 215.819477][T11840] macsec0: entered allmulticast mode [ 216.141460][T11863] tipc: Started in network mode [ 216.158246][T11863] tipc: Node identity 0004, cluster identity 4711 [ 217.792997][T11953] Illegal XDP return value 16128 on prog (id 142) dev syz_tun, expect packet loss! [ 217.913588][T11957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.292663][T11974] __nla_validate_parse: 2 callbacks suppressed [ 218.292682][T11974] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2941'. [ 218.502817][T11979] netlink: 'syz.0.2942': attribute type 3 has an invalid length. [ 218.518006][T11979] netlink: 'syz.0.2942': attribute type 1 has an invalid length. [ 218.526629][T11979] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2942'. [ 218.742158][T11993] netlink: 'syz.0.2950': attribute type 3 has an invalid length. [ 218.757386][T11993] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2950'. [ 218.924381][T11999] netlink: 'syz.2.2953': attribute type 11 has an invalid length. [ 219.430549][T12030] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2968'. [ 219.867619][T12055] nbd: must specify at least one socket [ 220.079584][T12064] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2985'. [ 220.115812][T12064] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2985'. [ 220.278853][T12071] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2988'. [ 220.427382][T12079] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2993'. [ 221.293737][T12126] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 221.569822][T12137] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3020'. [ 222.332096][T12178] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3039'. [ 222.368704][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 222.992986][T12213] netlink: 'syz.4.3059': attribute type 1 has an invalid length. [ 223.005451][T12213] netlink: 'syz.4.3059': attribute type 1 has an invalid length. [ 223.610219][T12246] pimreg3: entered allmulticast mode [ 224.142795][T12264] syz.2.3082 (12264) used greatest stack depth: 17808 bytes left [ 224.176275][T12272] __nla_validate_parse: 2 callbacks suppressed [ 224.176297][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 224.327682][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3088'. [ 224.624266][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 224.677263][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 224.741548][T12302] netlink: 'syz.1.3101': attribute type 1 has an invalid length. [ 224.749750][T12302] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3101'. [ 225.721400][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 226.148050][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3124'. [ 226.265679][T12358] nftables ruleset with unbound set [ 226.572165][T12371] vlan2: entered allmulticast mode [ 226.594370][T12371] bond0: entered allmulticast mode [ 226.613042][T12371] bond_slave_0: entered allmulticast mode [ 226.639319][T12371] bond_slave_1: entered allmulticast mode [ 226.668236][T12377] vlan3: entered promiscuous mode [ 226.677197][T12377] bridge0: entered promiscuous mode [ 226.916079][T12387] openvswitch: netlink: Unknown nsh attribute 0 [ 227.223652][ T30] audit: type=1800 audit(1784695027.728:2): pid=12405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3148" name="memory.events" dev="tmpfs" ino=3273 res=0 errno=0 [ 227.259731][ T30] audit: type=1804 audit(1784695027.758:3): pid=12405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3148" name="/newroot/650/memory.events" dev="tmpfs" ino=3273 res=1 errno=0 [ 227.606278][T12424] netlink: 'syz.0.3156': attribute type 23 has an invalid length. [ 227.709557][T12430] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3160'. [ 228.920162][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'. [ 229.097095][T12493] xt_hashlimit: size too large, truncated to 1048576 [ 229.498237][T12517] IPVS: ip_vs_add_dest(): server weight less than zero [ 229.655994][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 229.667380][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 229.999108][T12548] netlink: 'syz.4.3209': attribute type 178 has an invalid length. [ 230.651754][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 231.283150][T12619] tipc: Failed to obtain node identity [ 231.300957][T12619] tipc: Enabling of bearer rejected, failed to enable media [ 232.272276][T12673] vlan2: entered allmulticast mode [ 232.277568][T12673] bond0: entered allmulticast mode [ 232.283413][T12673] bond_slave_0: entered allmulticast mode [ 232.300102][T12673] bond_slave_1: entered allmulticast mode [ 232.799387][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3287'. [ 234.388650][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3335'. [ 234.418692][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3335'. [ 234.577503][T12806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3338'. [ 234.636084][T12808] geneve2: entered promiscuous mode [ 234.797275][T12818] Bluetooth: MGMT ver 1.23 [ 235.194458][T12840] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3354'. [ 235.226213][T12840] nbd: illegal input index 65508 [ 235.511403][ T37] tipc: Subscription rejected, illegal request [ 236.007410][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3376'. [ 236.398097][T12900] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3383'. [ 236.750493][T12924] netlink: 'syz.2.3395': attribute type 83 has an invalid length. [ 236.998027][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 237.883569][T12982] nbd: couldn't find device at index 134217728 [ 237.931759][T12984] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3421'. [ 238.221892][T13002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3429'. [ 238.372939][T13008] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 238.382829][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3432'. [ 238.617892][T13024] netlink: 'syz.2.3439': attribute type 3 has an invalid length. [ 239.362409][T13061] team0: Device gtp0 is up. Set it down before adding it as a team port [ 239.533824][T13065] batadv0: entered promiscuous mode [ 239.540986][T13065] macsec1: entered promiscuous mode [ 239.550296][T13065] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 239.559254][T13065] batadv0: left promiscuous mode [ 240.904270][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 241.105131][T13142] xt_l2tp: wrong L2TP version: 0 [ 241.142201][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 241.445912][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'. [ 241.674451][T13165] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3507'. [ 242.251359][T13189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.436143][T13200] netlink: 'syz.4.3525': attribute type 1 has an invalid length. [ 242.576784][T13205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3527'. [ 242.864730][T13214] veth3: entered allmulticast mode [ 243.834687][T13274] nbd: socks must be embedded in a SOCK_ITEM attr [ 243.966740][T13282] netlink: 'syz.1.3566': attribute type 142 has an invalid length. [ 244.237577][T13296] vlan2: entered allmulticast mode [ 244.242939][T13296] bond0: entered allmulticast mode [ 244.248204][T13296] bond_slave_0: entered allmulticast mode [ 244.333650][T13302] xt_l2tp: v2 tid > 0xffff: 1114244 [ 244.526511][T13312] netlink: 'syz.2.3580': attribute type 1 has an invalid length. [ 244.556513][T13312] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3580'. [ 244.593747][T13317] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3582'. [ 244.715858][T13323] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3585'. [ 244.787941][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3587'. [ 245.268352][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3601'. [ 246.256465][T13407] ipvlan2: entered promiscuous mode [ 246.649864][T13432] __nla_validate_parse: 4 callbacks suppressed [ 246.649883][T13432] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.3640'. [ 246.702761][T13432] netlink: 'syz.4.3640': attribute type 1 has an invalid length. [ 246.914941][T13448] netlink: 'syz.3.3647': attribute type 1 has an invalid length. [ 246.923036][T13448] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3647'. [ 246.937509][T13448] netlink: 'syz.3.3647': attribute type 1 has an invalid length. [ 247.385832][T13470] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3660'. [ 247.841156][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3671'. [ 248.002884][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3673'. [ 248.020279][T13503] netlink: 'syz.2.3672': attribute type 2 has an invalid length. [ 248.162608][T13510] netlink: 'syz.0.3676': attribute type 11 has an invalid length. [ 248.281754][T13517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3679'. [ 249.215975][T13567] netlink: 'syz.2.3702': attribute type 29 has an invalid length. [ 249.809693][T13600] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3718'. [ 249.838601][T13600] netlink: 'syz.3.3718': attribute type 9 has an invalid length. [ 250.029046][T13614] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 250.068904][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3726'. [ 250.823729][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3745'. [ 250.863888][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3745'. [ 251.808711][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 252.270168][T13736] netlink: 'syz.2.3785': attribute type 1 has an invalid length. [ 252.298992][T13736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.306324][T13736] IPv6: NLM_F_CREATE should be set when creating new route [ 252.313690][T13736] IPv6: NLM_F_CREATE should be set when creating new route [ 252.474651][T13743] __nla_validate_parse: 2 callbacks suppressed [ 252.474671][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3788'. [ 252.577333][T13745] netlink: 'syz.4.3789': attribute type 3 has an invalid length. [ 253.133856][T13769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3802'. [ 253.145649][T13769] unsupported nla_type 7424 [ 253.189342][T13773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.487749][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'. [ 253.629613][T13793] openvswitch: netlink: Missing key (keys=40, expected=100) [ 253.682661][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 253.691854][T13799] netlink: 'syz.1.3812': attribute type 5 has an invalid length. [ 253.700688][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3812'. [ 254.331793][T13826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.339136][T13826] IPv6: NLM_F_CREATE should be set when creating new route [ 254.346429][T13826] IPv6: NLM_F_CREATE should be set when creating new route [ 254.353782][T13826] IPv6: NLM_F_CREATE should be set when creating new route [ 254.411258][T13826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.587281][T13835] netlink: 'syz.4.3830': attribute type 1 has an invalid length. [ 255.135949][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.154010][T13861] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 255.175530][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.204136][ T137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.217556][ T137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.457720][T13871] netlink: 'syz.4.3847': attribute type 1 has an invalid length. [ 255.652440][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.658897][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.760151][T13886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.989121][T13897] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 256.054185][T13903] netlink: 'syz.3.3863': attribute type 1 has an invalid length. [ 256.088665][T13903] netlink: 'syz.3.3863': attribute type 3 has an invalid length. [ 256.113048][T13903] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3863'. [ 256.151578][T13903] NCSI netlink: No device for ifindex 813332851 [ 256.567418][T13929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3876'. [ 256.714414][T13935] netlink: zone id is out of range [ 256.739933][T13935] netlink: zone id is out of range [ 256.758114][T13935] netlink: zone id is out of range [ 257.386789][T13972] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3898'. [ 257.544702][T13980] netlink: 'syz.0.3901': attribute type 3 has an invalid length. [ 257.842281][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3908'. [ 257.913859][T14001] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3911'. [ 258.040990][T14004] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 258.060198][T14004] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3912'. [ 258.083894][T14004] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 258.118303][T14008] sctp: [Deprecated]: syz.4.3914 (pid 14008) Use of int in maxseg socket option. [ 258.118303][T14008] Use struct sctp_assoc_value instead [ 258.315229][T14017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3919'. [ 258.391883][T14021] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3920'. [ 258.999898][T14056] netlink: 'syz.3.3937': attribute type 25 has an invalid length. [ 259.169980][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 259.247319][T14068] tipc: Enabling of bearer rejected, failed to enable media [ 260.295371][T14132] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3973'. [ 261.353119][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4005'. [ 261.469557][T14201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4008'. [ 261.645937][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 261.656013][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4013'. [ 263.230757][T14293] __nla_validate_parse: 3 callbacks suppressed [ 263.230778][T14293] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4054'. [ 263.345191][T14300] tipc: Enabling of bearer rejected, media not registered [ 263.434956][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4059'. [ 263.973731][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4073'. [ 264.157972][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4077'. [ 264.404587][T14358] netlink: 'syz.2.4084': attribute type 3 has an invalid length. [ 265.324379][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4104'. [ 265.359266][T14401] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 265.384174][T14401] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4104'. [ 265.668333][T14417] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4111'. [ 265.713481][T14417] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4111'. [ 265.833031][T14427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4115'. [ 265.992317][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4116'. [ 266.036790][T14437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.548654][T14522] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 268.054596][ T5356] IPVS: starting estimator thread 0... [ 268.105629][T14549] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 268.161214][T14553] IPVS: using max 26 ests per chain, 62400 per kthread [ 268.177155][T14549] bond3 (unregistering): Released all slaves [ 268.790629][T14592] netlink: 'syz.2.4190': attribute type 3 has an invalid length. [ 269.366215][T14624] netlink: 'syz.4.4207': attribute type 2 has an invalid length. [ 269.508835][T14631] __nla_validate_parse: 2 callbacks suppressed [ 269.508854][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4211'. [ 269.860478][T14652] block nbd1: not configured, cannot reconfigure [ 269.919921][T14656] raw_sendmsg: syz.4.4222 forgot to set AF_INET. Fix it! [ 270.081300][T14664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.673039][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 270.691024][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 270.728782][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 270.745086][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 270.767684][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 270.807895][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 270.831444][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 270.861189][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 270.889349][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 273.117875][T14825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.205731][T14888] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 275.090428][T14930] __nla_validate_parse: 34 callbacks suppressed [ 275.090450][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4337'. [ 275.527166][T14953] netlink: 'syz.3.4345': attribute type 83 has an invalid length. [ 275.728292][T14964] netlink: 'syz.2.4350': attribute type 14 has an invalid length. [ 276.299821][T14994] netlink: 'syz.3.4362': attribute type 83 has an invalid length. [ 276.731240][T15017] netlink: 'syz.4.4371': attribute type 8 has an invalid length. [ 276.776286][T15017] sch_fq: defrate 0 ignored. [ 277.149997][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4378'. [ 278.263081][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4398'. [ 278.560366][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4404'. [ 278.566558][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4403'. [ 278.599129][T15105] openvswitch: netlink: Flow key attribute not present in set flow. [ 280.072255][T15180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4431'. [ 280.431542][T15193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.464462][T15193] batman_adv: batadv0: Adding interface: bond0 [ 280.495279][T15193] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.564092][T15193] batman_adv: batadv0: Interface activated: bond0 [ 281.317876][T15243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4462'. [ 281.429189][T15249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4463'. [ 281.876010][T15276] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4477'. [ 282.000231][T15282] netlink: 'syz.3.4479': attribute type 1 has an invalid length. [ 282.028804][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4479'. [ 282.045032][T15284] block nbd0: Unsupported socket: should be TCP or UNIX. [ 282.469908][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4491'. [ 282.503078][T15305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4491'. [ 282.522539][T15307] TCP: TCP_TX_DELAY enabled [ 282.657302][T15313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'. [ 282.730902][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4498'. [ 282.756438][T15319] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4498'. [ 282.789465][T15319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4498'. [ 282.986471][T15329] netlink: 'syz.2.4503': attribute type 30 has an invalid length. [ 283.639482][T15366] netlink: 'syz.4.4521': attribute type 83 has an invalid length. [ 284.301140][T15403] Bluetooth: hci1: too big key_count value 32778 [ 284.922222][T15442] netlink: 'syz.1.4555': attribute type 4 has an invalid length. [ 286.420003][T15526] __nla_validate_parse: 8 callbacks suppressed [ 286.420024][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4597'. [ 286.954522][T15557] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.4613'. [ 287.421462][T15576] veth0: entered promiscuous mode [ 287.441552][T15576] veth0: left promiscuous mode [ 287.570064][T15584] netlink: 'syz.4.4624': attribute type 10 has an invalid length. [ 287.635719][T15584] team0: Port device dummy0 added [ 288.499739][T15633] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4649'. [ 289.260235][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4665'. [ 289.304505][T15673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4665'. [ 289.561667][T15687] netlink: 'syz.0.4672': attribute type 2 has an invalid length. [ 289.993185][T15665] infiniband syz1: set down [ 290.037210][T15665] infiniband syz1: added syz_tun [ 290.121786][T15665] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 290.137995][T15665] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 290.144405][T15706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4681'. [ 290.155964][T15665] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 290.212327][T15706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4681'. [ 290.273468][T15665] RDS/IB: syz1: added [ 290.286102][T15665] smc: adding ib device syz1 with port count 1 [ 290.312191][T15665] smc: ib device syz1 port 1 has no pnetid [ 290.425764][T15715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4686'. [ 290.451002][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4686'. [ 290.473117][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4686'. [ 291.754951][T15774] __nla_validate_parse: 2 callbacks suppressed [ 291.754972][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4712'. [ 292.213372][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4721'. [ 292.551231][T15807] gtp0: entered promiscuous mode [ 292.571048][T15807] gtp0: entered allmulticast mode [ 293.310089][T15833] IPVS: persistence engine module ip_vs_pe_À not found [ 294.440849][T15893] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4770'. [ 294.462946][T15894] netlink: 'syz.4.4771': attribute type 4 has an invalid length. [ 294.471548][T15894] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4771'. [ 294.497038][T15894] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.4771'. [ 294.703823][T15907] erspan0: entered promiscuous mode [ 294.982499][T15924] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4785'. [ 295.354816][ T5634] block nbd1: Receive control failed (result -32) [ 295.620625][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4799'. [ 295.651929][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4799'. [ 295.747011][T15957] tun0: tun_chr_ioctl cmd 1074025675 [ 295.767118][T15957] tun0: persist disabled [ 296.000088][T15974] bond0: option miimon: invalid value (18446744071829782528) [ 296.010859][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4809'. [ 296.020919][T15974] bond0: option miimon: allowed values 0 - 2147483647 [ 296.195076][T15985] netlink: 'syz.1.4814': attribute type 9 has an invalid length. [ 296.364781][T15995] netlink: 'syz.3.4819': attribute type 9 has an invalid length. [ 297.408787][T16049] openvswitch: netlink: Missing key (keys=40, expected=100) [ 298.025191][T16080] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4861'. [ 298.185127][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4866'. [ 299.466230][T16161] openvswitch: netlink: IP tunnel TTL not specified. [ 299.488106][T16161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.142815][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4918'. [ 300.474363][T16212] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4923'. [ 300.590922][T16225] veth0_to_bridge: entered promiscuous mode [ 300.598008][T16224] veth0_to_bridge: left promiscuous mode [ 301.181990][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4942'. [ 301.229455][T16251] xfrm1: entered promiscuous mode [ 301.235894][T16254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4942'. [ 301.241819][T16251] xfrm1: entered allmulticast mode [ 301.657599][T16276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4949'. [ 301.904583][T16290] netlink: 'syz.0.4958': attribute type 83 has an invalid length. [ 302.006975][T16296] netlink: 'syz.4.4961': attribute type 1 has an invalid length. [ 302.052563][T16296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4961'. [ 302.076451][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4963'. [ 302.230265][T16310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4968'. [ 302.375095][T16316] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 302.576014][T16325] netlink: 'syz.0.4975': attribute type 83 has an invalid length. [ 302.592263][T16326] netlink: 'syz.4.4976': attribute type 2 has an invalid length. [ 302.798880][T16338] nbd0: detected capacity change from 0 to 87 [ 302.854078][ T5623] block nbd0: Wrong magic (0x25609513) [ 302.861566][ T51] block nbd0: Receive control failed (result -32) [ 302.873912][ T1643] block nbd0: Dead connection, failed to find a fallback [ 303.628623][T16384] netlink: 'syz.0.5002': attribute type 1 has an invalid length. [ 303.658760][T16384] netlink: 'syz.0.5002': attribute type 2 has an invalid length. [ 303.688630][T16384] netlink: 'syz.0.5002': attribute type 1 has an invalid length. [ 303.699796][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5004'. [ 303.718532][T16384] netlink: 'syz.0.5002': attribute type 2 has an invalid length. [ 303.891046][ T1643] block nbd0: shutting down sockets [ 303.899137][ T1643] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.910766][ T1643] Buffer I/O error on dev nbd0, logical block 1, async page read [ 303.920871][ T1643] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 303.931320][ T1643] Buffer I/O error on dev nbd0, logical block 2, async page read [ 303.939293][ T1643] Buffer I/O error on dev nbd0, logical block 3, async page read [ 305.080261][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5023'. [ 305.196801][T16431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5024'. [ 305.557458][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5030'. [ 306.858234][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'. [ 306.887287][T16517] netlink: 'syz.1.5066': attribute type 1 has an invalid length. [ 306.896574][T16517] netlink: 'syz.1.5066': attribute type 2 has an invalid length. [ 307.172716][ T1643] block nbd0: Connection timed out, retrying (0/2 alive) [ 307.183663][ T1643] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.195467][ T1643] Buffer I/O error on dev nbd0, logical block 0, async page read [ 307.205027][ T1643] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 307.214621][ T1643] Buffer I/O error on dev nbd0, logical block 0, async page read [ 307.222702][ T1643] Buffer I/O error on dev nbd0, logical block 1, async page read [ 307.230699][ T1643] Buffer I/O error on dev nbd0, logical block 2, async page read [ 307.238687][ T1643] Buffer I/O error on dev nbd0, logical block 3, async page read [ 307.252242][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 307.267648][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 307.276183][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 307.285402][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 307.295116][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 307.307953][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 307.322462][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 307.334974][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 307.344511][ T5718] ldm_validate_partition_table(): Disk read failed. [ 307.365574][ T5718] Dev nbd0: unable to read RDB block 0 [ 307.386079][ T5718] nbd0: unable to read partition table [ 307.403556][ T5718] ldm_validate_partition_table(): Disk read failed. [ 307.418238][ T5718] Dev nbd0: unable to read RDB block 0 [ 307.429284][ T5718] nbd0: unable to read partition table [ 307.780892][T16557] netlink: 'syz.0.5083': attribute type 33 has an invalid length. [ 307.847260][T16561] xt_hashlimit: size too large, truncated to 1048576 [ 307.890998][T16557] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 307.902103][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5087'. [ 307.906624][T16557] bond2 (unregistering): Released all slaves [ 307.981992][T16564] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 307.999140][T16564] syzkaller1: group set to 0 [ 308.290990][T16576] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.5092'. [ 308.657217][T16593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5100'. [ 308.685538][T16593] block nbd2: Unsupported socket: should be TCP or UNIX. [ 308.874136][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5104'. [ 310.427895][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5143'. [ 310.472500][T16684] block nbd0: reconnected socket [ 310.487629][ T51] block nbd0: Receive control failed (result -32) [ 311.293124][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5163'. [ 311.314692][T16726] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5163'. [ 311.968712][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 312.355288][T16773] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5183'. [ 312.395779][T16770] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5183'. [ 312.736862][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5196'. [ 313.002753][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5202'. [ 313.248937][T16829] gretap1: entered promiscuous mode [ 313.255160][T16829] batman_adv: batadv0: Adding interface: gretap1 [ 313.262122][T16829] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.313459][T16829] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 313.776164][T16856] veth1_macvtap: left promiscuous mode [ 314.019978][T16865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5227'. [ 314.948252][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5247'. [ 315.325559][T16917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.338656][T16917] [ 315.341041][T16917] ====================================================== [ 315.348065][T16917] WARNING: possible circular locking dependency detected [ 315.355119][T16917] syzkaller #0 Not tainted [ 315.359581][T16917] ------------------------------------------------------ [ 315.366600][T16917] syz.0.5250/16917 is trying to acquire lock: [ 315.372711][T16917] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 315.383191][T16917] [ 315.383191][T16917] but task is already holding lock: [ 315.390583][T16917] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 315.401503][T16917] [ 315.401503][T16917] which lock already depends on the new lock. [ 315.401503][T16917] [ 315.411953][T16917] [ 315.411953][T16917] the existing dependency chain (in reverse order) is: [ 315.420983][T16917] [ 315.420983][T16917] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 315.429709][T16917] down_read+0x4a/0x330 [ 315.434410][T16917] kernfs_remove_by_name_ns+0x3f/0x140 [ 315.440439][T16917] internal_create_group+0x58e/0x1180 [ 315.446380][T16917] sysfs_update_groups+0x60/0x130 [ 315.451959][T16917] pmu_dev_alloc+0x29b/0x300 [ 315.457083][T16917] perf_event_sysfs_init+0x76/0x100 [ 315.462845][T16917] do_one_initcall+0x250/0x870 [ 315.468164][T16917] do_initcall_level+0x10a/0x1a0 [ 315.473661][T16917] do_initcalls+0x59/0xa0 [ 315.478549][T16917] kernel_init_freeable+0x29d/0x3e0 [ 315.484298][T16917] kernel_init+0x1d/0x1d0 [ 315.489164][T16917] ret_from_fork+0x514/0xb70 [ 315.494311][T16917] ret_from_fork_asm+0x1a/0x30 [ 315.499693][T16917] [ 315.499693][T16917] -> #9 (pmus_lock){+.+.}-{4:4}: [ 315.506826][T16917] __mutex_lock+0x19d/0x1550 [ 315.511958][T16917] perf_event_init_cpu+0x1d1/0x7a0 [ 315.517624][T16917] cpuhp_invoke_callback+0x434/0x810 [ 315.523476][T16917] cpuhp_thread_fun+0x362/0x780 [ 315.528882][T16917] smpboot_thread_fn+0x57c/0xa80 [ 315.534374][T16917] kthread+0x388/0x470 [ 315.538984][T16917] ret_from_fork+0x514/0xb70 [ 315.544142][T16917] ret_from_fork_asm+0x1a/0x30 [ 315.549439][T16917] [ 315.549439][T16917] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 315.557114][T16917] cpuhp_thread_fun+0x127/0x780 [ 315.562530][T16917] smpboot_thread_fn+0x57c/0xa80 [ 315.568041][T16917] kthread+0x388/0x470 [ 315.572683][T16917] ret_from_fork+0x514/0xb70 [ 315.577837][T16917] ret_from_fork_asm+0x1a/0x30 [ 315.583151][T16917] [ 315.583151][T16917] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 315.590893][T16917] cpus_read_lock+0x42/0x160 [ 315.596043][T16917] static_key_slow_inc+0x12/0x30 [ 315.601522][T16917] nbd_genl_reconfigure+0x1301/0x1e80 [ 315.607484][T16917] genl_family_rcv_msg_doit+0x233/0x340 [ 315.613592][T16917] genl_rcv_msg+0x614/0x7a0 [ 315.618665][T16917] netlink_rcv_skb+0x226/0x4a0 [ 315.623990][T16917] genl_rcv+0x28/0x40 [ 315.628530][T16917] netlink_unicast+0x7bb/0x940 [ 315.633858][T16917] netlink_sendmsg+0x813/0xb40 [ 315.639186][T16917] sock_sendmsg_nosec+0x13a/0x180 [ 315.644771][T16917] ____sys_sendmsg+0x54e/0x850 [ 315.650060][T16917] ___sys_sendmsg+0x2a5/0x360 [ 315.655274][T16917] __x64_sys_sendmsg+0x1b1/0x290 [ 315.660850][T16917] do_syscall_64+0x174/0x580 [ 315.665972][T16917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.672420][T16917] [ 315.672420][T16917] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 315.680106][T16917] __mutex_lock+0x19d/0x1550 [ 315.685257][T16917] nbd_queue_rq+0x373/0x1150 [ 315.690415][T16917] blk_mq_dispatch_rq_list+0x499/0x1990 [ 315.696542][T16917] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 315.703443][T16917] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 315.709968][T16917] blk_mq_run_work_fn+0x16c/0x300 [ 315.715558][T16917] process_scheduled_works+0xa8e/0x14e0 [ 315.721641][T16917] worker_thread+0xa47/0xfb0 [ 315.726793][T16917] kthread+0x388/0x470 [ 315.731420][T16917] ret_from_fork+0x514/0xb70 [ 315.736581][T16917] ret_from_fork_asm+0x1a/0x30 [ 315.741905][T16917] [ 315.741905][T16917] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 315.749186][T16917] __mutex_lock+0x19d/0x1550 [ 315.754325][T16917] nbd_queue_rq+0xc1/0x1150 [ 315.759376][T16917] blk_mq_dispatch_rq_list+0x499/0x1990 [ 315.765482][T16917] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 315.772348][T16917] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 315.778886][T16917] blk_mq_run_work_fn+0x16c/0x300 [ 315.784474][T16917] process_scheduled_works+0xa8e/0x14e0 [ 315.790577][T16917] worker_thread+0xa47/0xfb0 [ 315.795722][T16917] kthread+0x388/0x470 [ 315.800356][T16917] ret_from_fork+0x514/0xb70 [ 315.805515][T16917] ret_from_fork_asm+0x1a/0x30 [ 315.810832][T16917] [ 315.810832][T16917] -> #4 (set->srcu){.+.+}-{0:0}: [ 315.818008][T16917] __synchronize_srcu+0xc9/0x2f0 [ 315.823503][T16917] elevator_switch+0x1e8/0x7b0 [ 315.828808][T16917] elevator_change+0x2fa/0x480 [ 315.834130][T16917] elevator_set_default+0x375/0x440 [ 315.839860][T16917] blk_register_queue+0x3f3/0x4e0 [ 315.845429][T16917] __add_disk+0x6cb/0xe30 [ 315.850314][T16917] add_disk_fwnode+0x100/0x3a0 [ 315.855630][T16917] nbd_dev_add+0x733/0xb60 [ 315.860609][T16917] nbd_init+0x15f/0x1e0 [ 315.865325][T16917] do_one_initcall+0x250/0x870 [ 315.870654][T16917] do_initcall_level+0x10a/0x1a0 [ 315.876135][T16917] do_initcalls+0x59/0xa0 [ 315.880997][T16917] kernel_init_freeable+0x29d/0x3e0 [ 315.886748][T16917] kernel_init+0x1d/0x1d0 [ 315.891613][T16917] ret_from_fork+0x514/0xb70 [ 315.896760][T16917] ret_from_fork_asm+0x1a/0x30 [ 315.902054][T16917] [ 315.902054][T16917] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 315.909910][T16917] __mutex_lock+0x19d/0x1550 [ 315.915065][T16917] elevator_change+0x1af/0x480 [ 315.920402][T16917] elevator_set_none+0xb5/0x140 [ 315.925804][T16917] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 315.932181][T16917] nbd_start_device+0x189/0xb30 [ 315.937591][T16917] nbd_genl_connect+0x1597/0x1c10 [ 315.943179][T16917] genl_family_rcv_msg_doit+0x233/0x340 [ 315.949297][T16917] genl_rcv_msg+0x614/0x7a0 [ 315.954364][T16917] netlink_rcv_skb+0x226/0x4a0 [ 315.959688][T16917] genl_rcv+0x28/0x40 [ 315.964235][T16917] netlink_unicast+0x7bb/0x940 [ 315.969571][T16917] netlink_sendmsg+0x813/0xb40 [ 315.974902][T16917] sock_sendmsg_nosec+0x13a/0x180 [ 315.980487][T16917] ____sys_sendmsg+0x54e/0x850 [ 315.985818][T16917] ___sys_sendmsg+0x2a5/0x360 [ 315.991073][T16917] __x64_sys_sendmsg+0x1b1/0x290 [ 315.996567][T16917] do_syscall_64+0x174/0x580 [ 316.001707][T16917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.008172][T16917] [ 316.008172][T16917] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 316.016825][T16917] blk_alloc_queue+0x544/0x690 [ 316.022145][T16917] __blk_mq_alloc_disk+0x194/0x390 [ 316.027836][T16917] nbd_dev_add+0x494/0xb60 [ 316.032819][T16917] nbd_init+0x15f/0x1e0 [ 316.037537][T16917] do_one_initcall+0x250/0x870 [ 316.042869][T16917] do_initcall_level+0x10a/0x1a0 [ 316.048359][T16917] do_initcalls+0x59/0xa0 [ 316.053246][T16917] kernel_init_freeable+0x29d/0x3e0 [ 316.059003][T16917] kernel_init+0x1d/0x1d0 [ 316.063902][T16917] ret_from_fork+0x514/0xb70 [ 316.069049][T16917] ret_from_fork_asm+0x1a/0x30 [ 316.074349][T16917] [ 316.074349][T16917] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 316.081600][T16917] fs_reclaim_acquire+0x71/0x100 [ 316.087096][T16917] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 316.093355][T16917] alloc_inode+0xb8/0x1b0 [ 316.098221][T16917] iget_locked+0x131/0x6a0 [ 316.103204][T16917] kernfs_get_inode+0x4f/0x770 [ 316.108516][T16917] kernfs_get_tree+0x5cd/0x980 [ 316.113826][T16917] vfs_get_tree+0x92/0x2a0 [ 316.118777][T16917] do_new_mount+0x319/0xdc0 [ 316.123833][T16917] __se_sys_mount+0x31d/0x420 [ 316.129052][T16917] do_syscall_64+0x174/0x580 [ 316.134181][T16917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.140612][T16917] [ 316.140612][T16917] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 316.148628][T16917] __lock_acquire+0x1520/0x2cf0 [ 316.154030][T16917] lock_acquire+0x106/0x350 [ 316.159080][T16917] down_write+0x96/0x200 [ 316.163864][T16917] kernfs_remove_by_name_ns+0x4e/0x140 [ 316.169872][T16917] sysfs_remove_group+0x101/0x2e0 [ 316.175438][T16917] sysfs_remove_groups+0x54/0xb0 [ 316.180917][T16917] net_rx_queue_update_kobjects+0x6b7/0x780 [ 316.187350][T16917] netdev_unregister_kobject+0xff/0x450 [ 316.193433][T16917] unregister_netdevice_many_notify+0x1be4/0x2150 [ 316.200388][T16917] unregister_netdevice_queue+0x2f5/0x340 [ 316.206639][T16917] nsim_destroy+0x275/0x800 [ 316.211687][T16917] __nsim_dev_port_del+0x14e/0x200 [ 316.217346][T16917] nsim_dev_reload_destroy+0x288/0x490 [ 316.223349][T16917] nsim_dev_reload_down+0x8a/0xc0 [ 316.228920][T16917] devlink_reload+0x1c5/0x890 [ 316.234145][T16917] devlink_nl_reload_doit+0xa9c/0xc80 [ 316.240058][T16917] genl_family_rcv_msg_doit+0x233/0x340 [ 316.246150][T16917] genl_rcv_msg+0x614/0x7a0 [ 316.251192][T16917] netlink_rcv_skb+0x226/0x4a0 [ 316.256496][T16917] genl_rcv+0x28/0x40 [ 316.261016][T16917] netlink_unicast+0x7bb/0x940 [ 316.266329][T16917] netlink_sendmsg+0x813/0xb40 [ 316.271630][T16917] sock_sendmsg_nosec+0x13a/0x180 [ 316.277192][T16917] ____sys_sendmsg+0x54e/0x850 [ 316.282489][T16917] ___sys_sendmsg+0x2a5/0x360 [ 316.287698][T16917] __x64_sys_sendmsg+0x1b1/0x290 [ 316.293171][T16917] do_syscall_64+0x174/0x580 [ 316.298295][T16917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.304729][T16917] [ 316.304729][T16917] other info that might help us debug this: [ 316.304729][T16917] [ 316.314968][T16917] Chain exists of: [ 316.314968][T16917] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 316.314968][T16917] [ 316.328820][T16917] Possible unsafe locking scenario: [ 316.328820][T16917] [ 316.336287][T16917] CPU0 CPU1 [ 316.341665][T16917] ---- ---- [ 316.347038][T16917] rlock(&root->kernfs_supers_rwsem); [ 316.352519][T16917] lock(pmus_lock); [ 316.358966][T16917] lock(&root->kernfs_supers_rwsem); [ 316.366873][T16917] lock(&root->kernfs_rwsem); [ 316.371652][T16917] [ 316.371652][T16917] *** DEADLOCK *** [ 316.371652][T16917] [ 316.379811][T16917] 5 locks held by syz.0.5250/16917: [ 316.385015][T16917] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 316.393227][T16917] #1: ffff88802d591128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 316.403616][T16917] #2: ffff88802d590258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 316.414784][T16917] #3: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 316.423785][T16917] #4: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 316.435135][T16917] [ 316.435135][T16917] stack backtrace: [ 316.441055][T16917] CPU: 1 UID: 0 PID: 16917 Comm: syz.0.5250 Not tainted syzkaller #0 PREEMPT(full) [ 316.441076][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.441094][T16917] Call Trace: [ 316.441103][T16917] [ 316.441111][T16917] dump_stack_lvl+0xe8/0x150 [ 316.441139][T16917] print_circular_bug+0x2e1/0x300 [ 316.441158][T16917] check_noncircular+0x12e/0x150 [ 316.441189][T16917] __lock_acquire+0x1520/0x2cf0 [ 316.441215][T16917] ? lockdep_unlock+0x5d/0xd0 [ 316.441243][T16917] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 316.441270][T16917] lock_acquire+0x106/0x350 [ 316.441293][T16917] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 316.441327][T16917] down_write+0x96/0x200 [ 316.441347][T16917] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 316.441374][T16917] ? __pfx_down_write+0x10/0x10 [ 316.441393][T16917] ? down_read+0x2be/0x330 [ 316.441412][T16917] kernfs_remove_by_name_ns+0x4e/0x140 [ 316.441441][T16917] sysfs_remove_group+0x101/0x2e0 [ 316.441466][T16917] sysfs_remove_groups+0x54/0xb0 [ 316.441495][T16917] net_rx_queue_update_kobjects+0x6b7/0x780 [ 316.441523][T16917] netdev_unregister_kobject+0xff/0x450 [ 316.441547][T16917] unregister_netdevice_many_notify+0x1be4/0x2150 [ 316.441575][T16917] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 316.441595][T16917] ? __mutex_lock+0x30d/0x1550 [ 316.441611][T16917] ? __kfree_rcu_sheaf+0x1f/0x5e0 [ 316.441632][T16917] ? lock_acquire+0x106/0x350 [ 316.441655][T16917] ? __kfree_rcu_sheaf+0x1f/0x5e0 [ 316.441682][T16917] unregister_netdevice_queue+0x2f5/0x340 [ 316.441702][T16917] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 316.441726][T16917] nsim_destroy+0x275/0x800 [ 316.441751][T16917] __nsim_dev_port_del+0x14e/0x200 [ 316.441778][T16917] nsim_dev_reload_destroy+0x288/0x490 [ 316.441813][T16917] nsim_dev_reload_down+0x8a/0xc0 [ 316.441840][T16917] devlink_reload+0x1c5/0x890 [ 316.441866][T16917] ? __pfx_devlink_reload+0x10/0x10 [ 316.441889][T16917] ? devlink_resources_validate+0xa7/0xd0 [ 316.441915][T16917] ? devlink_resources_validate+0xa7/0xd0 [ 316.441939][T16917] devlink_nl_reload_doit+0xa9c/0xc80 [ 316.441966][T16917] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 316.441991][T16917] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 316.442015][T16917] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 316.442042][T16917] genl_family_rcv_msg_doit+0x233/0x340 [ 316.442068][T16917] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 316.442096][T16917] ? bpf_lsm_capable+0x9/0x20 [ 316.442118][T16917] ? security_capable+0x7e/0x2c0 [ 316.442148][T16917] genl_rcv_msg+0x614/0x7a0 [ 316.442172][T16917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.442193][T16917] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 316.442214][T16917] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 316.442237][T16917] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 316.442259][T16917] ? __pfx_ref_tracker_free+0x10/0x10 [ 316.442286][T16917] netlink_rcv_skb+0x226/0x4a0 [ 316.442305][T16917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.442327][T16917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.442350][T16917] ? down_read+0x2be/0x330 [ 316.442368][T16917] genl_rcv+0x28/0x40 [ 316.442388][T16917] netlink_unicast+0x7bb/0x940 [ 316.442418][T16917] netlink_sendmsg+0x813/0xb40 [ 316.442440][T16917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.442459][T16917] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.442478][T16917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.442494][T16917] sock_sendmsg_nosec+0x13a/0x180 [ 316.442517][T16917] ____sys_sendmsg+0x54e/0x850 [ 316.442535][T16917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.442554][T16917] ? import_iovec+0x73/0xa0 [ 316.442581][T16917] ___sys_sendmsg+0x2a5/0x360 [ 316.442596][T16917] ? __lock_acquire+0x683/0x2cf0 [ 316.442621][T16917] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.442638][T16917] ? futex_wait+0x2a2/0x390 [ 316.442670][T16917] ? __fget_files+0x2a/0x420 [ 316.442692][T16917] ? __fget_files+0x3a2/0x420 [ 316.442718][T16917] __x64_sys_sendmsg+0x1b1/0x290 [ 316.442735][T16917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.442759][T16917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.442778][T16917] do_syscall_64+0x174/0x580 [ 316.442798][T16917] ? trace_irq_disable+0x3b/0x140 [ 316.442820][T16917] ? clear_bhb_loop+0x40/0x90 [ 316.442839][T16917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.442857][T16917] RIP: 0033:0x7fdc7f59de99 [ 316.442880][T16917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.442894][T16917] RSP: 002b:00007fdc8045a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.442912][T16917] RAX: ffffffffffffffda RBX: 00007fdc7f825fa0 RCX: 00007fdc7f59de99 [ 316.442925][T16917] RDX: 0000000024004804 RSI: 0000200000000080 RDI: 0000000000000003 [ 316.442936][T16917] RBP: 00007fdc7f633eaf R08: 0000000000000000 R09: 0000000000000000 [ 316.442947][T16917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.442957][T16917] R13: 00007fdc7f826038 R14: 00007fdc7f825fa0 R15: 00007ffce0b1ba48 [ 316.442977][T16917] [ 316.996783][T16917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.040553][T16917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.089782][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.096122][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.111463][T16917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.177895][ T1105] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.191320][ T1105] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.204881][ T1105] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.218265][ T5774] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0