last executing test programs: 6.028041255s ago: executing program 0 (id=1177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) 5.785257661s ago: executing program 0 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.391879879s ago: executing program 0 (id=1187): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea8, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.087201032s ago: executing program 0 (id=1191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) unshare(0x20400) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(0x3) 3.839940017s ago: executing program 2 (id=1206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24880}, 0x800) 3.6924211s ago: executing program 1 (id=1207): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000380)="50fbdf12a30d7a48b2c51cb3bf52a6b2cdb77ef9af01603a3e68adff5949f1a05ad2fbb22bae1b24430193d8533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1ebeeafb3b9c984e706165f40ce18688", 0x5f, 0x4008044, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000280)=0x200, 0x4) 3.465820783s ago: executing program 1 (id=1208): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 3.363984941s ago: executing program 2 (id=1209): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r0, 0x1, 0x70bd27, 0x0, {0x54}}, 0x14}}, 0xc084) 3.143026957s ago: executing program 2 (id=1210): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280"], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.601904988s ago: executing program 2 (id=1214): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x324, 0x0, 0x8, 0x0, 0x0, @local}, 0xc) 2.273559394s ago: executing program 2 (id=1217): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) unshare(0x8000400) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[], 0x87) 2.0874554s ago: executing program 3 (id=1218): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 1.896868596s ago: executing program 1 (id=1220): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x1e, 0x21, 0x70bd2b, 0x0, {0xb}, [@typed={0x5, 0x109, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) 1.84001776s ago: executing program 3 (id=1221): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x0, 0x8, 0x4, 0x2df, 0x3, 0x2, 0x5, r1}, &(0x7f0000000180)=0x20) 1.839826933s ago: executing program 4 (id=1222): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc3d) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.731192077s ago: executing program 3 (id=1223): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001980)=""/4130, 0x1022}, {&(0x7f0000002b80)=""/4094, 0xffe}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000040)=""/104, 0x68}, {&(0x7f00000006c0)=""/94, 0x5e}], 0x6}, 0x22) 1.710280412s ago: executing program 1 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newtaction={0x10c, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{0xf8, 0x1, [@m_skbedit={0x5c, 0x1, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0xfffffe00, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0xfffffd32, 0x2, {0x28000, 0x0, 0x0, 0x401, 0xffffffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xd}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}]}, {0x35, 0x6, "a2d33bd4606873a15272f89e9058fb4fec8790e24f4313c509179a37e4fa060b823dc29900"/49}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 1.623919401s ago: executing program 4 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50) 1.434239714s ago: executing program 0 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x20040841}, 0x4800) 1.434113431s ago: executing program 3 (id=1227): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 1.405012282s ago: executing program 1 (id=1228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 1.306846828s ago: executing program 4 (id=1229): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581", 0x74}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fd", 0x2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001080)="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", 0x2000, 0x0, 0x0, 0x0) 1.063577176s ago: executing program 1 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x309, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20010000}, 0x4084) 1.063398736s ago: executing program 2 (id=1231): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r2, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffef}, 0x0) 983.263749ms ago: executing program 0 (id=1232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x88f5}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x3a) 910.939126ms ago: executing program 3 (id=1233): bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 755.097121ms ago: executing program 4 (id=1234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 693.215521ms ago: executing program 3 (id=1235): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000440)={0xfff4, 0x833, 0x4, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4000004}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0xfffffff7, 0x4) 138.740665ms ago: executing program 4 (id=1236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617", 0x13, 0x12, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 0s ago: executing program 4 (id=1237): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 76.047284][ T5603] cgroup: Unknown subsys name 'net' [ 76.147050][ T5603] cgroup: Unknown subsys name 'cpuset' [ 76.156009][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.620378][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.872566][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.876987][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.881101][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.885508][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.885969][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.888082][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.889089][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.889872][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.890465][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.891440][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.896689][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.898213][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.903322][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.905551][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.912260][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.912356][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.916902][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.917654][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.918791][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.921843][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.927078][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.927597][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.928440][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.930101][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.931317][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.641724][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.641934][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.642883][ T5618] bridge_slave_0: entered allmulticast mode [ 81.647910][ T5618] bridge_slave_0: entered promiscuous mode [ 81.709735][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.709857][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.726045][ T5618] bridge_slave_1: entered allmulticast mode [ 81.730603][ T5618] bridge_slave_1: entered promiscuous mode [ 81.790706][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.798290][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.798689][ T5617] bridge_slave_0: entered allmulticast mode [ 81.814657][ T5617] bridge_slave_0: entered promiscuous mode [ 81.859984][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.860242][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.860575][ T5617] bridge_slave_1: entered allmulticast mode [ 81.867550][ T5617] bridge_slave_1: entered promiscuous mode [ 81.901640][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.910911][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.954880][ T4932] Bluetooth: hci2: command tx timeout [ 81.977679][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.978010][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.978291][ T5620] bridge_slave_0: entered allmulticast mode [ 81.982453][ T5620] bridge_slave_0: entered promiscuous mode [ 82.031746][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.031926][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.032373][ T5620] bridge_slave_1: entered allmulticast mode [ 82.039025][ T4932] Bluetooth: hci4: command tx timeout [ 82.039177][ T4932] Bluetooth: hci3: command tx timeout [ 82.039253][ T4932] Bluetooth: hci0: command tx timeout [ 82.039323][ T4932] Bluetooth: hci1: command tx timeout [ 82.040018][ T5620] bridge_slave_1: entered promiscuous mode [ 82.084011][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.108241][ T5618] team0: Port device team_slave_0 added [ 82.125955][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.158521][ T5618] team0: Port device team_slave_1 added [ 82.176682][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.223861][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.231916][ T5617] team0: Port device team_slave_0 added [ 82.256127][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.256272][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.256354][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.311022][ T5617] team0: Port device team_slave_1 added [ 82.329675][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.329996][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.331035][ T5619] bridge_slave_0: entered allmulticast mode [ 82.336567][ T5619] bridge_slave_0: entered promiscuous mode [ 82.346764][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.346801][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.346866][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.408320][ T5620] team0: Port device team_slave_0 added [ 82.433191][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.433342][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.434292][ T5619] bridge_slave_1: entered allmulticast mode [ 82.439284][ T5619] bridge_slave_1: entered promiscuous mode [ 82.479397][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.488029][ T5620] team0: Port device team_slave_1 added [ 82.489456][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.489493][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.489551][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.530028][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.530399][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.530731][ T5622] bridge_slave_0: entered allmulticast mode [ 82.539132][ T5622] bridge_slave_0: entered promiscuous mode [ 82.557211][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.583053][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.583098][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.583122][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.635718][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.637893][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.638217][ T5622] bridge_slave_1: entered allmulticast mode [ 82.642600][ T5622] bridge_slave_1: entered promiscuous mode [ 82.690941][ T5618] hsr_slave_0: entered promiscuous mode [ 82.696363][ T5618] hsr_slave_1: entered promiscuous mode [ 82.720686][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.720728][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.720755][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.788857][ T5619] team0: Port device team_slave_0 added [ 82.794521][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.794535][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.794559][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.846754][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.854754][ T5619] team0: Port device team_slave_1 added [ 82.871605][ T5617] hsr_slave_0: entered promiscuous mode [ 82.874268][ T5617] hsr_slave_1: entered promiscuous mode [ 82.876822][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 82.877009][ T5617] Cannot create hsr debugfs directory [ 82.901703][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.929518][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.929565][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.929589][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.989273][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.989312][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.989336][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.038403][ T5622] team0: Port device team_slave_0 added [ 83.076528][ T5622] team0: Port device team_slave_1 added [ 83.116769][ T5620] hsr_slave_0: entered promiscuous mode [ 83.119431][ T5620] hsr_slave_1: entered promiscuous mode [ 83.121318][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 83.121381][ T5620] Cannot create hsr debugfs directory [ 83.145825][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.145950][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.146022][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.210936][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.210973][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.211010][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.282347][ T5619] hsr_slave_0: entered promiscuous mode [ 83.285461][ T5619] hsr_slave_1: entered promiscuous mode [ 83.287474][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 83.287513][ T5619] Cannot create hsr debugfs directory [ 83.445586][ T5622] hsr_slave_0: entered promiscuous mode [ 83.448066][ T5622] hsr_slave_1: entered promiscuous mode [ 83.449615][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 83.449661][ T5622] Cannot create hsr debugfs directory [ 83.700133][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.711783][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.737559][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.748437][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.751393][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.764129][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.789522][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.801315][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.904657][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.915262][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.918777][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.931377][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.935713][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.948398][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.959513][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.969141][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.033386][ T5631] Bluetooth: hci2: command tx timeout [ 84.047638][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.061341][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.068891][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.076417][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.087363][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.097784][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.107026][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.114170][ T5631] Bluetooth: hci1: command tx timeout [ 84.114203][ T5631] Bluetooth: hci0: command tx timeout [ 84.114223][ T5631] Bluetooth: hci3: command tx timeout [ 84.114242][ T5631] Bluetooth: hci4: command tx timeout [ 84.136053][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.228749][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.240640][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.267291][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.277180][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.280923][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.293946][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.297581][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.308478][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.418375][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.428388][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.438818][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.447425][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.457294][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.466992][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.478705][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.488573][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.505263][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.515257][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.545187][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.569066][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.581468][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.581778][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.600053][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.600162][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.638688][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.638899][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.661863][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.671457][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.671561][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.736923][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.760941][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.786878][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.788192][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.818247][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.819317][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.879076][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.927374][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.927491][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.966742][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.966887][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.112241][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.209974][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.248224][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.248336][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.312500][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.312644][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.819999][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.029655][ T5617] veth0_vlan: entered promiscuous mode [ 86.067686][ T5617] veth1_vlan: entered promiscuous mode [ 86.113977][ T4932] Bluetooth: hci2: command tx timeout [ 86.132665][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.185287][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.193873][ T4932] Bluetooth: hci4: command tx timeout [ 86.193909][ T4932] Bluetooth: hci3: command tx timeout [ 86.193932][ T4932] Bluetooth: hci0: command tx timeout [ 86.193955][ T4932] Bluetooth: hci1: command tx timeout [ 86.251727][ T5617] veth0_macvtap: entered promiscuous mode [ 86.277427][ T5617] veth1_macvtap: entered promiscuous mode [ 86.368791][ T5620] veth0_vlan: entered promiscuous mode [ 86.390270][ T5620] veth1_vlan: entered promiscuous mode [ 86.411409][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.443768][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.495689][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.566627][ T1122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.577782][ T5620] veth0_macvtap: entered promiscuous mode [ 86.608879][ T10] cfg80211: failed to load regulatory.db [ 86.631326][ T5620] veth1_macvtap: entered promiscuous mode [ 86.645049][ T1122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.645121][ T1122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.645257][ T1122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.777921][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.848093][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.899359][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.939086][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.939147][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.977207][ T5619] veth0_vlan: entered promiscuous mode [ 87.032741][ T5619] veth1_vlan: entered promiscuous mode [ 87.055073][ T1513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.065032][ T1513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.074922][ T27] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.094239][ T27] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.094303][ T27] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.094369][ T27] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.167194][ T5622] veth0_vlan: entered promiscuous mode [ 87.188713][ T5617] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.226586][ T5618] veth0_vlan: entered promiscuous mode [ 87.228998][ T5622] veth1_vlan: entered promiscuous mode [ 87.256278][ T5619] veth0_macvtap: entered promiscuous mode [ 87.272416][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.272578][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.305567][ T5618] veth1_vlan: entered promiscuous mode [ 87.322429][ T5619] veth1_macvtap: entered promiscuous mode [ 87.397746][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.397795][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.459426][ T5622] veth0_macvtap: entered promiscuous mode [ 87.491623][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.504227][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.519748][ T5622] veth1_macvtap: entered promiscuous mode [ 87.563626][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.575781][ T5618] veth0_macvtap: entered promiscuous mode [ 87.590761][ T5618] veth1_macvtap: entered promiscuous mode [ 87.613082][ T1513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.616187][ T1513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.632920][ T1513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.698499][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.708351][ T5819] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3'. [ 87.742490][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.756145][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.811893][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.855743][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.855815][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.855901][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.855993][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.930808][ T5827] netlink: 'syz.2.8': attribute type 21 has an invalid length. [ 87.940882][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.980109][ T5827] netlink: 'syz.2.8': attribute type 21 has an invalid length. [ 87.980152][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 88.017738][ T5827] Zero length message leads to an empty skb [ 88.026567][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.026600][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.045177][ T1122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.151451][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.151503][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.183210][ T27] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.193041][ T5631] Bluetooth: hci2: command tx timeout [ 88.204700][ T27] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.272297][ T1513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.272341][ T1513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.281995][ T5631] Bluetooth: hci1: command tx timeout [ 88.282072][ T5631] Bluetooth: hci0: command tx timeout [ 88.282126][ T5631] Bluetooth: hci3: command tx timeout [ 88.282185][ T5631] Bluetooth: hci4: command tx timeout [ 88.362335][ T5831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.411699][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 88.411749][ T5835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 88.422458][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.449004][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.449032][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.495498][ T80] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.520232][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.520268][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.529879][ T1122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.530331][ T1122] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.548281][ T1122] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.671788][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.671836][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.493774][ T5873] x_tables: duplicate underflow at hook 3 [ 89.616797][ T5881] xt_nat: multiple ranges no longer supported [ 89.737271][ T5890] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 89.756326][ T5890] batman_adv: batadv0: Adding interface: ip6gretap1 [ 89.765502][ T5890] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.791377][ T5890] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 90.217076][ T5902] netlink: 64 bytes leftover after parsing attributes in process `syz.3.26'. [ 90.384326][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 90.630806][ T5929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.805434][ T5932] pim6reg527: entered allmulticast mode [ 90.827836][ T5939] Bluetooth: MGMT ver 1.23 [ 90.860111][ T5939] netlink: 31 bytes leftover after parsing attributes in process `syz.4.34'. [ 90.860188][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 90.860244][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 90.999108][ T5946] bond0: entered promiscuous mode [ 90.999151][ T5946] bond_slave_0: entered promiscuous mode [ 91.005134][ T5946] bond_slave_1: entered promiscuous mode [ 91.021958][ T5946] batadv0: entered promiscuous mode [ 91.051235][ T5946] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 91.090201][ T5946] bond0: left promiscuous mode [ 91.090241][ T5946] bond_slave_0: left promiscuous mode [ 91.090485][ T5946] bond_slave_1: left promiscuous mode [ 91.113779][ T5946] batadv0: left promiscuous mode [ 91.122593][ T5949] x_tables: duplicate underflow at hook 2 [ 91.147376][ T5949] x_tables: duplicate underflow at hook 3 [ 91.389030][ T5962] openvswitch: netlink: Key type 518 is out of range max 32 [ 91.510035][ T5967] ip_tables: iptables: counters copy to user failed while replacing table [ 91.710397][ T5977] xt_hashlimit: size too large, truncated to 1048576 [ 91.712692][ T5978] –: renamed from vxcan1 (while UP) [ 92.254144][ T5997] hsr_slave_0: left promiscuous mode [ 92.313001][ T5997] hsr_slave_1: left promiscuous mode [ 92.378255][ T6003] Bluetooth: ISO socket layer initialized [ 92.717810][ T6014] __nla_validate_parse: 6 callbacks suppressed [ 92.717828][ T6017] openvswitch: netlink: Multiple metadata blocks provided [ 92.731504][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 92.874048][ T6023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.909218][ T6023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.310539][ T6032] blkio.reset_stats is deprecated [ 93.311419][ T6032] x_tables: duplicate underflow at hook 1 [ 93.358369][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 93.372487][ T6014] syz.2.58 (6014) used greatest stack depth: 18088 bytes left [ 93.527796][ T6043] sit0: entered promiscuous mode [ 93.555671][ T6043] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 93.555710][ T6043] netlink: 1 bytes leftover after parsing attributes in process `syz.0.64'. [ 93.589136][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 93.996459][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 94.377651][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 94.399164][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 94.842508][ T6115] syz.3.87 uses obsolete (PF_INET,SOCK_PACKET) [ 94.867751][ T6119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.137862][ T6140] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 95.137911][ T6140] netlink: 'syz.2.93': attribute type 3 has an invalid length. [ 95.137939][ T6140] netlink: 172 bytes leftover after parsing attributes in process `syz.2.93'. [ 95.137968][ T6140] NCSI netlink: No device for ifindex 813332851 [ 95.199389][ T6144] warning: `syz.3.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.448321][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 95.448362][ T6155] netlink: 2 bytes leftover after parsing attributes in process `syz.2.98'. [ 95.514782][ T6155] bond0: (slave bond_slave_0): Releasing backup interface [ 95.570500][ T6155] bond_slave_0: entered promiscuous mode [ 95.577028][ T6155] bond_slave_0: entered allmulticast mode [ 95.894806][ T6173] batman_adv: batadv0: Adding interface: gretap1 [ 95.894841][ T6173] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.894887][ T6173] batman_adv: batadv0: Interface activated: gretap1 [ 96.296441][ T6198] netlink: 'syz.1.106': attribute type 3 has an invalid length. [ 96.420967][ T6200] syzkaller0: entered promiscuous mode [ 96.421006][ T6200] syzkaller0: entered allmulticast mode [ 96.631237][ T6217] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 96.832568][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.834321][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.007014][ T6235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.332885][ T6254] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 97.374723][ T6252] x_tables: duplicate underflow at hook 2 [ 97.654783][ T6276] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 97.727071][ T6279] __nla_validate_parse: 12 callbacks suppressed [ 97.727118][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 97.727142][ T6279] block nbd0: Unsupported socket: should be TCP or UNIX. [ 98.092140][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'. [ 98.364027][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 98.364063][ T6314] openvswitch: netlink: Flow actions attr not present in new flow. [ 98.659437][ T6326] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 98.659835][ T6326] gretap1: entered promiscuous mode [ 98.659879][ T6326] gretap1: entered allmulticast mode [ 98.738337][ T6339] x_tables: duplicate underflow at hook 1 [ 98.770356][ T6347] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 98.946658][ T6357] Bluetooth: MGMT ver 1.23 [ 99.172080][ T6371] netlink: 96 bytes leftover after parsing attributes in process `syz.4.153'. [ 99.389891][ T6388] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.156'. [ 99.601737][ T6394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.160'. [ 99.674384][ T6399] sctp: [Deprecated]: syz.0.161 (pid 6399) Use of int in maxseg socket option. [ 99.674384][ T6399] Use struct sctp_assoc_value instead [ 99.729820][ T6401] bond1: option all_slaves_active: invalid value (222) [ 99.742662][ T6401] bond1 (unregistering): Released all slaves [ 99.978769][ T6420] netlink: 'syz.2.169': attribute type 2 has an invalid length. [ 100.177971][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'. [ 100.312059][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 101.039191][ T6453] netlink: 72 bytes leftover after parsing attributes in process `syz.1.181'. [ 101.453829][ T6477] netlink: 'syz.4.187': attribute type 4 has an invalid length. [ 101.567479][ T6477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.187'. [ 102.103707][ T6492] netlink: 'syz.0.191': attribute type 8 has an invalid length. [ 102.531665][ T6503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.873762][ T6513] __nla_validate_parse: 7 callbacks suppressed [ 102.874209][ T6513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.197'. [ 102.887432][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 103.026489][ T6520] netlink: 'syz.0.198': attribute type 3 has an invalid length. [ 103.026524][ T6520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.198'. [ 103.274512][ T6530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 103.488072][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 103.917521][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 103.928888][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 103.948990][ T6539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.476332][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 104.744134][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.216'. [ 105.058737][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.216'. [ 105.058784][ T6590] nbd: nbd64 already in use [ 105.185918][ T6602] bridge0: port 3(vlan2) entered blocking state [ 105.199512][ T6602] bridge0: port 3(vlan2) entered disabled state [ 105.200446][ T6602] vlan2: entered allmulticast mode [ 105.200494][ T6602] geneve0: entered allmulticast mode [ 105.268946][ T6602] vlan2: entered promiscuous mode [ 105.269379][ T6602] geneve0: entered promiscuous mode [ 105.359171][ T6610] netlink: 'syz.1.221': attribute type 33 has an invalid length. [ 105.481102][ T6610] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 105.750309][ T6625] netlink: 'syz.1.225': attribute type 3 has an invalid length. [ 106.103487][ T6640] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 106.281044][ T6642] syzkaller0: entered promiscuous mode [ 106.281081][ T6642] syzkaller0: entered allmulticast mode [ 106.426101][ T6620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.122630][ T6663] bond3: entered promiscuous mode [ 107.128691][ T6663] bond3: entered allmulticast mode [ 107.143080][ T6663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.851828][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.899692][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.303785][ T6717] __nla_validate_parse: 97 callbacks suppressed [ 108.310363][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 108.336758][ T6715] veth1_to_bond: entered allmulticast mode [ 108.379071][ T1513] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.389871][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.399039][ T44] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.399087][ T44] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.564451][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 108.978279][ T6703] veth1_to_bond: left allmulticast mode [ 109.054283][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 109.230952][ T6746] xt_TCPMSS: Only works on TCP SYN packets [ 109.507092][ T80] IPVS: starting estimator thread 0... [ 109.615148][ T6763] IPVS: using max 30 ests per chain, 72000 per kthread [ 109.800571][ T6765] netlink: 'syz.4.260': attribute type 12 has an invalid length. [ 109.801023][ T6765] netlink: 'syz.4.260': attribute type 29 has an invalid length. [ 109.801058][ T6765] netlink: 148 bytes leftover after parsing attributes in process `syz.4.260'. [ 109.801117][ T6765] netlink: 59 bytes leftover after parsing attributes in process `syz.4.260'. [ 109.914377][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 109.998302][ T6781] openvswitch: netlink: IP tunnel dst address not specified [ 110.007396][ T6781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.842377][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 111.019236][ T6805] netlink: 72 bytes leftover after parsing attributes in process `syz.3.271'. [ 111.590360][ T6845] netlink: 'syz.0.278': attribute type 5 has an invalid length. [ 111.722714][ T6851] netlink: 'syz.0.278': attribute type 5 has an invalid length. [ 111.803219][ T6806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.167631][ T6867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.282'. [ 112.296294][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 112.870531][ T6883] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 112.871017][ T6883] netlink: 'syz.2.286': attribute type 4 has an invalid length. [ 113.103275][ T6902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.577485][ T6933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.596158][ T6933] __nla_validate_parse: 2 callbacks suppressed [ 113.596336][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 113.643102][ T80] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.649112][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 113.649284][ T80] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.652038][ T80] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.652077][ T80] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.045801][ T6911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.087053][ T6991] team0 (unregistering): Port device team_slave_0 removed [ 115.101588][ T6991] team0 (unregistering): Port device team_slave_1 removed [ 115.202264][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 115.202676][ T6997] block nbd0: Unsupported socket: should be TCP or UNIX. [ 115.375731][ T7004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.402663][ T6997] xt_CT: No such helper "pptp" [ 115.714262][ T7015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 115.799397][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 116.385542][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 116.749956][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 116.750472][ T7048] block nbd0: Unsupported socket: should be TCP or UNIX. [ 116.948959][ T7054] netlink: 'syz.4.327': attribute type 1 has an invalid length. [ 117.035481][ T7060] ip_tables: iptables: counters copy to user failed while replacing table [ 117.158963][ T44] IPVS: starting estimator thread 0... [ 117.256727][ T7066] IPVS: using max 29 ests per chain, 69600 per kthread [ 117.397020][ T7054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.499969][ T7063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'. [ 117.500015][ T7063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'. [ 117.582171][ T7068] bond4: (slave geneve3): making interface the new active one [ 117.592560][ T7068] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 118.068676][ T7097] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 118.069082][ T7097] netlink: 224 bytes leftover after parsing attributes in process `syz.3.337'. [ 118.148590][ T7106] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 118.665822][ T7120] xt_hashlimit: size too large, truncated to 1048576 [ 118.722170][ T7121] –: renamed from vxcan1 (while UP) [ 118.954930][ T7128] __nla_validate_parse: 1 callbacks suppressed [ 118.954994][ T7128] netlink: 52 bytes leftover after parsing attributes in process `syz.0.347'. [ 119.390703][ T7152] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 120.316019][ T7194] ipvlan2: entered allmulticast mode [ 120.316058][ T7194] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 120.388213][ T7194] batman_adv: batadv0: Adding interface: ipvlan2 [ 120.388620][ T7194] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.388721][ T7194] batman_adv: batadv0: Interface activated: ipvlan2 [ 120.508130][ T7194] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.538829][ T7202] netlink: 'syz.3.357': attribute type 4 has an invalid length. [ 120.546642][ T7202] netlink: 17 bytes leftover after parsing attributes in process `syz.3.357'. [ 120.570579][ T7193] ipvlan3: entered allmulticast mode [ 120.582967][ T7193] batman_adv: batadv0: Adding interface: ipvlan3 [ 120.589384][ T7193] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.619633][ T7193] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 120.630396][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.632029][ T7193] batman_adv: batadv0: Interface activated: ipvlan3 [ 120.737964][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.848792][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 120.903080][ T7199] tipc: Enabling of bearer rejected, failed to enable media [ 121.314571][ T7227] syzkaller0: entered promiscuous mode [ 121.314610][ T7227] syzkaller0: entered allmulticast mode [ 121.386207][ T7232] netlink: 'syz.3.362': attribute type 8 has an invalid length. [ 121.394812][ T7232] sch_fq: defrate 0 ignored. [ 121.476375][ T7236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.364'. [ 121.626868][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.366'. [ 122.232432][ T7265] netlink: 'syz.0.372': attribute type 14 has an invalid length. [ 122.699363][ T7290] openvswitch: netlink: IPv4 tunnel dst address is zero [ 122.699409][ T7290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.139314][ T7301] netlink: 100 bytes leftover after parsing attributes in process `syz.2.380'. [ 123.168986][ T7302] netlink: 240 bytes leftover after parsing attributes in process `syz.0.381'. [ 123.252602][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.383'. [ 123.346107][ T7309] netlink: 240 bytes leftover after parsing attributes in process `syz.0.381'. [ 124.140967][ T7331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.389'. [ 124.802474][ T7344] netlink: 256 bytes leftover after parsing attributes in process `syz.1.392'. [ 124.829210][ T7344] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 124.875331][ T7344] sctp: [Deprecated]: syz.1.392 (pid 7344) Use of int in max_burst socket option. [ 124.875331][ T7344] Use struct sctp_assoc_value instead [ 125.044128][ T7349] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 125.044494][ T7349] netlink: 224 bytes leftover after parsing attributes in process `syz.3.394'. [ 125.307956][ T7354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.399'. [ 125.444235][ T7367] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 125.738976][ T7376] bond1: option mode: invalid value (10) [ 125.809636][ T7376] bond1 (unregistering): Released all slaves [ 126.072531][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 126.787916][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 126.950339][ T7423] netlink: 'syz.0.414': attribute type 7 has an invalid length. [ 126.958345][ T7423] netlink: 'syz.0.414': attribute type 7 has an invalid length. [ 128.603547][ T7429] xt_MASQUERADE: bad rangesize 2147483646 [ 128.610919][ T7429] netlink: 'syz.4.416': attribute type 4 has an invalid length. [ 128.629668][ T7429] netlink: 'syz.4.416': attribute type 4 has an invalid length. [ 128.725082][ T7431] netlink: 232 bytes leftover after parsing attributes in process `syz.4.417'. [ 128.952095][ T7438] ip_tables: iptables: counters copy to user failed while replacing table [ 128.966511][ T7438] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x1 [ 129.128424][ T7410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.560204][ T7448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.608874][ T7451] ip6t_rpfilter: unknown options [ 129.686801][ T7458] netlink: 'syz.4.426': attribute type 2 has an invalid length. [ 129.711592][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 129.744634][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 129.930492][ T7464] syzkaller0: entered promiscuous mode [ 129.930534][ T7464] syzkaller0: entered allmulticast mode [ 130.097968][ T7462] bond1: entered promiscuous mode [ 130.105578][ T7462] bond1: entered allmulticast mode [ 130.112059][ T7462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.128511][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.428'. [ 130.202817][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 130.314715][ T7491] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 130.318309][ T7468] syz.1.428: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.318977][ T7468] CPU: 0 UID: 0 PID: 7468 Comm: syz.1.428 Not tainted syzkaller #0 PREEMPT(full) [ 130.319046][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.319095][ T7468] Call Trace: [ 130.319128][ T7468] [ 130.319157][ T7468] dump_stack_lvl+0xe8/0x150 [ 130.319272][ T7468] warn_alloc+0x24d/0x270 [ 130.319365][ T7468] ? kasan_save_track+0x4f/0x80 [ 130.319418][ T7468] ? kasan_save_track+0x3e/0x80 [ 130.319481][ T7468] ? __pfx_warn_alloc+0x10/0x10 [ 130.319563][ T7468] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 130.319657][ T7468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.319760][ T7468] __vmalloc_node_range_noprof+0x127/0x1540 [ 130.319889][ T7468] ? rcu_is_watching+0x16/0xb0 [ 130.319978][ T7468] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.320053][ T7468] ? __kmalloc_cache_noprof+0x321/0x600 [ 130.320134][ T7468] ? __kmalloc_cache_noprof+0x14d/0x600 [ 130.320224][ T7468] ? xskq_create+0x56/0x220 [ 130.320306][ T7468] xskq_create+0x148/0x220 [ 130.320379][ T7468] ? xsk_init_queue+0x8a/0xe0 [ 130.320452][ T7468] xsk_init_queue+0x8a/0xe0 [ 130.320555][ T7468] xsk_setsockopt+0x52a/0x960 [ 130.320634][ T7468] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.320704][ T7468] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.320817][ T7468] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 130.320883][ T7468] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.320975][ T7468] do_sock_setsockopt+0x17c/0x1b0 [ 130.321068][ T7468] __x64_sys_setsockopt+0x13d/0x1b0 [ 130.321145][ T7468] do_syscall_64+0x166/0x520 [ 130.321218][ T7468] ? trace_irq_disable+0x3b/0x140 [ 130.321265][ T7468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.321340][ T7468] ? clear_bhb_loop+0x70/0xc0 [ 130.321396][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.321455][ T7468] RIP: 0033:0x7f401eb9e159 [ 130.321510][ T7468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.321551][ T7468] RSP: 002b:00007f401f97f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.321605][ T7468] RAX: ffffffffffffffda RBX: 00007f401ee25fa0 RCX: 00007f401eb9e159 [ 130.321652][ T7468] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 130.321681][ T7468] RBP: 00007f401ec35024 R08: 0000000000000004 R09: 0000000000000000 [ 130.321710][ T7468] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.321746][ T7468] R13: 00007f401ee26038 R14: 00007f401ee25fa0 R15: 00007ffd2725b2f8 [ 130.321810][ T7468] [ 130.335168][ T7468] Mem-Info: [ 130.335202][ T7468] active_anon:5933 inactive_anon:0 isolated_anon:0 [ 130.335202][ T7468] active_file:0 inactive_file:42864 isolated_file:0 [ 130.335202][ T7468] unevictable:0 dirty:46 writeback:0 [ 130.335202][ T7468] slab_reclaimable:10281 slab_unreclaimable:95610 [ 130.335202][ T7468] mapped:30281 shmem:522 pagetables:1197 [ 130.335202][ T7468] sec_pagetables:0 bounce:0 [ 130.335202][ T7468] kernel_misc_reclaimable:0 [ 130.335202][ T7468] free:1333417 free_pcp:9133 free_cma:0 [ 130.335356][ T7468] Node 0 active_anon:23732kB inactive_anon:0kB active_file:0kB inactive_file:171256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121124kB dirty:180kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13188kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 130.335506][ T7468] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 130.335655][ T7468] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.335792][ T7468] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 130.335876][ T7468] Node 0 DMA32 free:1368516kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23732kB inactive_anon:0kB active_file:0kB inactive_file:171256kB unevictable:0kB writepending:180kB zspages:0kB present:3129332kB managed:2546800kB mlocked:0kB bounce:0kB free_pcp:36532kB local_pcp:18844kB free_cma:0kB [ 130.336009][ T7468] lowmem_reserve[]: 0 0 0 0 0 [ 130.336091][ T7468] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.336218][ T7468] lowmem_reserve[]: 0 0 0 0 0 [ 130.336291][ T7468] Node 1 Normal free:3949792kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.336422][ T7468] lowmem_reserve[]: 0 0 0 0 0 [ 130.336502][ T7468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 130.336796][ T7468] Node 0 DMA32: 436*4kB (UM) 660*8kB (UM) 110*16kB (UME) 24*32kB (ME) 13*64kB (UM) 10*128kB (ME) 6*256kB (ME) 3*512kB (ME) 2*1024kB [ 130.362434][ T7495] netlink: 44 bytes leftover after parsing attributes in process `syz.0.432'. [ 130.374250][ T7468] (ME) 4*2048kB (UM) 328*4096kB (UM) = 1368464kB [ 130.374344][ T7468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 130.374623][ T7468] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 5*16kB (UM) 5*32kB (UM) 7*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3949792kB [ 130.374997][ T7468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.375039][ T7468] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.375086][ T7468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.375134][ T7468] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.375191][ T7468] 43382 total pagecache pages [ 130.375213][ T7468] 0 pages in swap cache [ 130.375234][ T7468] Free swap = 124996kB [ 130.375258][ T7468] Total swap = 124996kB [ 130.375276][ T7468] 2097051 pages RAM [ 130.375288][ T7468] 0 pages HighMem/MovableOnly [ 130.375305][ T7468] 428735 pages reserved [ 130.375323][ T7468] 0 pages cma reserved [ 131.022655][ T7468] bond0: entered allmulticast mode [ 131.033413][ T7468] bond_slave_0: entered allmulticast mode [ 131.035844][ T7468] bond_slave_1: entered allmulticast mode [ 131.120297][ T7500] netlink: 104 bytes leftover after parsing attributes in process `syz.2.436'. [ 131.296647][ T7504] xt_hl: Unknown TTL match mode: 255 [ 131.573181][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 131.696155][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 131.839627][ T7521] bond2: entered promiscuous mode [ 131.854997][ T7521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.922709][ T7531] netlink: 'syz.4.443': attribute type 75 has an invalid length. [ 132.050802][ T7529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.053813][ T7529] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 132.058183][ T7529] bond2: (slave sit1): Error -95 calling set_mac_address [ 132.178881][ T7540] netlink: 'syz.2.445': attribute type 49 has an invalid length. [ 132.249285][ T7539] netlink: 'syz.3.442': attribute type 11 has an invalid length. [ 132.573981][ T7540] ip6gretap0: entered promiscuous mode [ 132.574021][ T7540] ip6gretap0: entered allmulticast mode [ 132.677973][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.678699][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.053821][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 133.285151][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 133.420291][ T7580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.974716][ T7597] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 134.912007][ T7635] __nla_validate_parse: 6 callbacks suppressed [ 134.912449][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 134.962079][ T7635] veth0_macvtap: left promiscuous mode [ 135.142865][ T7641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.160481][ T7641] sctp: [Deprecated]: syz.1.469 (pid 7641) Use of int in maxseg socket option. [ 135.160481][ T7641] Use struct sctp_assoc_value instead [ 135.346015][ T7657] tipc: Started in network mode [ 135.360942][ T7657] tipc: Node identity 4a517b91fa71, cluster identity 4711 [ 135.361220][ T7657] tipc: Enabled bearer , priority 0 [ 135.398921][ T7657] syzkaller0: entered promiscuous mode [ 135.406458][ T7657] syzkaller0: entered allmulticast mode [ 135.463043][ T1122] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.478006][ T7182] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.493646][ T7182] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.502623][ T7182] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.702409][ T7662] netlink: 'syz.0.472': attribute type 7 has an invalid length. [ 135.757353][ T7665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.767473][ T7665] netlink: 44 bytes leftover after parsing attributes in process `syz.1.476'. [ 136.242372][ T7689] xt_hashlimit: size too large, truncated to 1048576 [ 136.256508][ T7688] netlink: 76 bytes leftover after parsing attributes in process `syz.1.484'. [ 136.256545][ T7688] netlink: 76 bytes leftover after parsing attributes in process `syz.1.484'. [ 136.359621][ T7687] x_tables: duplicate underflow at hook 1 [ 136.359717][ T7687] x_tables: duplicate underflow at hook 1 [ 136.359835][ T7687] x_tables: duplicate underflow at hook 1 [ 136.359923][ T7687] x_tables: duplicate underflow at hook 1 [ 136.359998][ T7687] x_tables: duplicate underflow at hook 1 [ 136.360076][ T7687] x_tables: duplicate underflow at hook 1 [ 136.360154][ T7687] x_tables: duplicate underflow at hook 1 [ 136.360232][ T7687] x_tables: duplicate underflow at hook 1 [ 136.360311][ T7687] x_tables: duplicate underflow at hook 1 [ 136.360388][ T7687] x_tables: duplicate underflow at hook 1 [ 136.436698][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.483'. [ 136.503247][ T7700] netlink: 'syz.0.486': attribute type 1 has an invalid length. [ 136.552339][ T7706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.485'. [ 136.610915][ T7697] bond2: entered promiscuous mode [ 136.613455][ T7697] bond2: entered allmulticast mode [ 136.624534][ T7697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.639467][ T989] tipc: Node number set to 2954918801 [ 136.721299][ T7702] bond3: (slave gretap2): making interface the new active one [ 136.744597][ T7702] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 137.307008][ T7730] syzkaller1: entered promiscuous mode [ 137.315552][ T7730] syzkaller1: entered allmulticast mode [ 137.491962][ T7738] openvswitch: netlink: Message has 8 unknown bytes. [ 137.500964][ T7738] xt_HMARK: spi-set and port-set can't be combined [ 137.826540][ T7718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.897586][ T7760] tipc: Enabling of bearer rejected, failed to enable media [ 138.430143][ T4932] block nbd0: Receive control failed (result -32) [ 139.465889][ T7802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.513'. [ 140.210974][ T7843] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 140.358074][ T7843] netlink: 'syz.0.521': attribute type 11 has an invalid length. [ 140.723190][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 140.806274][ T7873] netlink: 168 bytes leftover after parsing attributes in process `syz.4.529'. [ 140.815962][ T7873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.529'. [ 141.276856][ T7883] netlink: 'syz.4.531': attribute type 12 has an invalid length. [ 141.583720][ T7906] netlink: 'syz.2.536': attribute type 2 has an invalid length. [ 141.583768][ T7906] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 141.749552][ T7927] netlink: 'syz.4.538': attribute type 10 has an invalid length. [ 141.750571][ T7927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.538'. [ 141.801702][ T7927] dummy0: entered promiscuous mode [ 141.802521][ T7927] dummy0: entered allmulticast mode [ 141.876960][ T7927] bridge0: port 3(dummy0) entered blocking state [ 141.877603][ T7927] bridge0: port 3(dummy0) entered disabled state [ 141.978110][ T7927] bridge0: port 3(dummy0) entered blocking state [ 141.978276][ T7927] bridge0: port 3(dummy0) entered forwarding state [ 142.098453][ T7932] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 142.188625][ T7934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.540'. [ 142.215494][ T7934] netlink: 332 bytes leftover after parsing attributes in process `syz.1.540'. [ 142.757006][ T7950] syzkaller0: left promiscuous mode [ 142.757040][ T7950] syzkaller0: left allmulticast mode [ 143.091422][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 143.449280][ T7981] netlink: 'syz.4.557': attribute type 4 has an invalid length. [ 143.449313][ T7981] netlink: 17 bytes leftover after parsing attributes in process `syz.4.557'. [ 143.474687][ T7984] netlink: 'syz.4.557': attribute type 4 has an invalid length. [ 143.474985][ T7984] netlink: 17 bytes leftover after parsing attributes in process `syz.4.557'. [ 146.282616][ T7975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.663155][ T8024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.702810][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 146.714171][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 146.744837][ T8025] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 146.961274][ T8039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.849021][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 150.550006][ T8132] netlink: ct family unspecified [ 150.881582][ T8073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.188254][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 151.251222][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 151.258938][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 151.261204][ T8152] netlink: zone id is out of range [ 151.261219][ T8152] netlink: zone id is out of range [ 151.261228][ T8152] netlink: zone id is out of range [ 151.261237][ T8152] netlink: zone id is out of range [ 151.261245][ T8152] netlink: zone id is out of range [ 151.261253][ T8152] netlink: del zone limit has 4 unknown bytes [ 151.919527][ T8169] sctp: [Deprecated]: syz.1.593 (pid 8169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.919527][ T8169] Use struct sctp_sack_info instead [ 152.074234][ T8183] Cannot find add_set index 3 as target [ 152.184990][ T8191] netlink: 5716 bytes leftover after parsing attributes in process `syz.4.596'. [ 152.185067][ T8191] netlink: 9008 bytes leftover after parsing attributes in process `syz.4.596'. [ 152.771235][ T8215] netlink: NAT attribute has 8 unknown bytes [ 152.771455][ T8215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.803746][ T8219] syzkaller0: entered promiscuous mode [ 152.804097][ T8219] syzkaller0: entered allmulticast mode [ 154.865102][ T8173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.155822][ T8243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.605'. [ 155.169542][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.609'. [ 155.943948][ T8285] batadv_slave_0: entered promiscuous mode [ 155.950714][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 155.961173][ T8285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.979727][ T8285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.209702][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 156.281370][ T8298] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 156.329573][ T8298] bond2 (unregistering): Released all slaves [ 156.571185][ T8307] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.623'. [ 156.571637][ T8307] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.623'. [ 158.857951][ T8280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.207048][ T8318] xt_check_table_hooks: 23 callbacks suppressed [ 159.214304][ T8318] x_tables: duplicate underflow at hook 1 [ 159.225286][ T8318] netlink: 'syz.0.628': attribute type 23 has an invalid length. [ 159.620942][ T8330] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 159.620990][ T8330] netlink: 'syz.1.629': attribute type 3 has an invalid length. [ 159.621025][ T8330] netlink: 224 bytes leftover after parsing attributes in process `syz.1.629'. [ 159.843626][ T8335] IPVS: length: 4096 != 8 [ 159.948835][ T8340] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.634'. [ 159.979149][ T8340] syzkaller0: entered promiscuous mode [ 159.984883][ T8340] syzkaller0: entered allmulticast mode [ 160.109073][ T8350] Bluetooth: hci0: unsupported parameter 5135 [ 160.115709][ T8350] Bluetooth: hci0: unsupported parameter 8192 [ 160.123359][ T8350] Bluetooth: hci0: unsupported parameter 5135 [ 160.129762][ T8350] Bluetooth: hci0: unsupported parameter 8192 [ 160.165337][ T8348] Cannot find set identified by id 0 to match [ 160.173205][ T8345] tipc: Enabling of bearer rejected, failed to enable media [ 160.449574][ T8361] netlink: 'syz.0.640': attribute type 19 has an invalid length. [ 160.462445][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 160.508065][ T8361] netlink: 'syz.0.640': attribute type 19 has an invalid length. [ 160.509160][ T80] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.511401][ T80] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.511579][ T80] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.543897][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 160.563645][ T80] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.684377][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 160.685302][ T8370] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 160.718310][ T8370] netlink: 152 bytes leftover after parsing attributes in process `syz.2.642'. [ 160.945726][ T8379] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 160.962236][ T8379] bond3 (unregistering): Released all slaves [ 161.033137][ T8385] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 161.135364][ T8385] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.210300][ T8385] syzkaller1: entered promiscuous mode [ 161.221392][ T8385] syzkaller1: entered allmulticast mode [ 161.272616][ T8385] bond4: (slave geneve3): making interface the new active one [ 161.285309][ T8385] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 163.065606][ T8349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.298533][ T8407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.650'. [ 163.460099][ T8410] netlink: 104 bytes leftover after parsing attributes in process `syz.1.654'. [ 163.465978][ T8415] netlink: 'syz.0.651': attribute type 24 has an invalid length. [ 163.539918][ T8425] netlink: 104 bytes leftover after parsing attributes in process `syz.1.654'. [ 163.551333][ T8410] netlink: 104 bytes leftover after parsing attributes in process `syz.1.654'. [ 163.903316][ T8439] netlink: 'syz.1.661': attribute type 21 has an invalid length. [ 164.133826][ T8439] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 164.230665][ T8439] bond3 (unregistering): Released all slaves [ 164.984135][ T8490] __nla_validate_parse: 3 callbacks suppressed [ 164.990619][ T8490] netlink: 36 bytes leftover after parsing attributes in process `syz.3.677'. [ 165.392532][ T8507] vlan2: entered promiscuous mode [ 165.400071][ T8507] geneve1: entered promiscuous mode [ 165.400317][ T8507] vlan2: entered allmulticast mode [ 165.400339][ T8507] geneve1: entered allmulticast mode [ 166.925019][ T8444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.045355][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 167.353706][ T8520] bridge2: entered promiscuous mode [ 167.354045][ T8520] bridge2: entered allmulticast mode [ 167.397819][ T8523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.461556][ T8529] xt_hashlimit: size too large, truncated to 1048576 [ 167.585386][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.746050][ T8531] bridge_slave_0 (unregistering): left allmulticast mode [ 167.747158][ T8531] bridge_slave_0 (unregistering): left promiscuous mode [ 167.748028][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.080665][ T8552] gretap0: entered promiscuous mode [ 168.090770][ T8552] vlan3: entered promiscuous mode [ 168.460136][ T8565] xt_nat: multiple ranges no longer supported [ 168.600456][ T8574] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.618212][ T8574] xt_nat: multiple ranges no longer supported [ 168.635094][ T8584] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.655721][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 168.656128][ T8578] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 169.870859][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 170.001078][ T8616] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3952. macoff=96 [ 170.010923][ T8616] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.708'. [ 171.300850][ T8560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.649675][ T8619] syzkaller0: left promiscuous mode [ 171.650475][ T8619] syzkaller0: left allmulticast mode [ 171.711483][ T8626] netlink: 52 bytes leftover after parsing attributes in process `syz.2.711'. [ 171.726700][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 171.748551][ T8630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.713'. [ 172.494167][ T8668] xt_hashlimit: size too large, truncated to 1048576 [ 172.635907][ T8672] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 172.646330][ T8672] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 172.712577][ T8675] SET target dimension over the limit! [ 173.072523][ T8689] bridge_slave_1: left allmulticast mode [ 173.081624][ T8689] bridge_slave_1: left promiscuous mode [ 173.091668][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.177311][ T8689] bond0: (slave bond_slave_0): Releasing backup interface [ 173.216143][ T8689] bond0: (slave bond_slave_1): Releasing backup interface [ 173.268217][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.278246][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.285727][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 173.320785][ T8689] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 173.320829][ T8689] batman_adv: batadv0: Removing interface: ipvlan2 [ 173.351231][ T8689] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 173.359820][ T8689] batman_adv: batadv0: Removing interface: ipvlan3 [ 173.383495][ T8689] bond3: (slave gretap2): Releasing active interface [ 173.517069][ T8689] bond4: (slave geneve3): Releasing active interface [ 173.595033][ T8703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.731'. [ 173.744534][ T8702] netlink: 7 bytes leftover after parsing attributes in process `syz.4.733'. [ 174.812623][ T8735] netlink: 52 bytes leftover after parsing attributes in process `syz.3.743'. [ 174.933481][ T8741] openvswitch: netlink: Message has 8 unknown bytes. [ 174.940745][ T8741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.941022][ T8735] dvmrp0: entered allmulticast mode [ 175.590233][ T8787] syzkaller0: entered promiscuous mode [ 175.597211][ T8787] syzkaller0: entered allmulticast mode [ 176.453960][ T8801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.526160][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 178.260684][ T8770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.585795][ T8822] netlink: 'syz.3.759': attribute type 32 has an invalid length. [ 178.624939][ T8822] netlink: 'syz.3.759': attribute type 32 has an invalid length. [ 178.887309][ T8848] netlink: 220 bytes leftover after parsing attributes in process `syz.2.763'. [ 179.090567][ T8856] syzkaller1: entered promiscuous mode [ 179.091405][ T8856] syzkaller1: entered allmulticast mode [ 179.305257][ T8866] netlink: 72 bytes leftover after parsing attributes in process `syz.3.767'. [ 179.467673][ T8864] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 179.488669][ T8864] bond3 (unregistering): Released all slaves [ 180.064054][ T8898] netlink: 'syz.3.776': attribute type 29 has an invalid length. [ 180.064091][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 180.334088][ T8916] bridge0: port 1(wlan0) entered blocking state [ 180.337311][ T8916] bridge0: port 1(wlan0) entered disabled state [ 180.490350][ T8918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.777'. [ 180.776051][ T8929] netlink: 5384 bytes leftover after parsing attributes in process `syz.4.782'. [ 181.367760][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 181.423913][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 182.764548][ T8883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.062518][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 183.062556][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 183.615855][ T8986] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 183.616240][ T8986] netlink: 'syz.0.798': attribute type 2 has an invalid length. [ 183.616275][ T8986] netlink: 'syz.0.798': attribute type 3 has an invalid length. [ 183.616310][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 183.678410][ T8986] openvswitch: netlink: IP tunnel dst address not specified [ 184.322465][ T9004] netlink: NAT attribute has 4 unknown bytes [ 184.324896][ T9004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.360201][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 184.806778][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 184.884819][ T9026] openvswitch: netlink: IP tunnel dst address not specified [ 185.146749][ T9035] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 185.146797][ T9035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.167708][ T9036] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 185.167740][ T9036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.206875][ T9035] x_tables: duplicate underflow at hook 2 [ 185.293351][ T9040] netlink: 108 bytes leftover after parsing attributes in process `syz.2.808'. [ 185.360423][ T9040] netlink: 'syz.2.808': attribute type 2 has an invalid length. [ 185.442253][ T9024] bond5 (unregistering): Released all slaves [ 186.154930][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 186.204921][ T8749] IPVS: starting estimator thread 0... [ 186.282517][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 186.282565][ T9057] netlink: 'syz.1.815': attribute type 8 has an invalid length. [ 186.318894][ T9059] IPVS: using max 29 ests per chain, 69600 per kthread [ 186.388118][ T9060] tipc: Enabling of bearer rejected, failed to enable media [ 186.414694][ T9070] tipc: Enabling of bearer rejected, failed to enable media [ 186.571749][ T9076] syzkaller1: entered promiscuous mode [ 186.571790][ T9076] syzkaller1: entered allmulticast mode [ 186.682991][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 186.692349][ T9078] netlink: 'syz.2.822': attribute type 7 has an invalid length. [ 186.700308][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 187.539877][ T9120] netlink: 'syz.4.832': attribute type 5 has an invalid length. [ 187.736943][ T9121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.314448][ T9147] geneve2: entered promiscuous mode [ 188.335017][ T9151] __nla_validate_parse: 7 callbacks suppressed [ 188.335231][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.841'. [ 189.044919][ T9182] netlink: 'syz.2.848': attribute type 21 has an invalid length. [ 189.045386][ T9182] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.049960][ T9182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.049993][ T9182] IPv6: NLM_F_CREATE should be set when creating new route [ 189.050116][ T9182] IPv6: NLM_F_CREATE should be set when creating new route [ 189.050185][ T9182] IPv6: NLM_F_CREATE should be set when creating new route [ 190.390289][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 190.764398][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 190.883271][ T9263] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 191.157249][ T9270] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 191.178202][ T9276] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 191.204757][ T9285] macvlan3: entered promiscuous mode [ 191.210403][ T9285] macvlan3: entered allmulticast mode [ 191.216942][ T9285] bond5: entered promiscuous mode [ 191.225999][ T9285] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 191.233947][ T9285] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 191.251282][ T9285] bond5: left promiscuous mode [ 191.354231][ T9299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.877'. [ 191.666444][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 191.799351][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 191.809128][ T9314] netlink: 'syz.4.881': attribute type 10 has an invalid length. [ 191.817914][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.881'. [ 191.850609][ T9314] geneve5: entered promiscuous mode [ 191.856056][ T9314] geneve5: entered allmulticast mode [ 193.930870][ T9278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.041080][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 194.119345][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.119511][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.138311][ T9321] netlink: 92 bytes leftover after parsing attributes in process `syz.1.885'. [ 194.451918][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 194.615458][ T9339] netlink: 'syz.1.890': attribute type 10 has an invalid length. [ 194.617436][ T9339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.890'. [ 195.293541][ T9373] syz_tun: entered allmulticast mode [ 195.309756][ T9372] syzkaller1: entered allmulticast mode [ 195.345957][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.899'. [ 195.410132][ T9380] netlink: 96 bytes leftover after parsing attributes in process `syz.0.901'. [ 195.678585][ T9347] syz_tun: left allmulticast mode [ 195.965649][ T9388] openvswitch: netlink: Invalid VLAN frame [ 196.010540][ T9402] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 196.052297][ T9390] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 196.052331][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 196.088473][ T9402] bond3: entered promiscuous mode [ 196.098281][ T9402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.195931][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 196.679001][ T9402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.681884][ T9402] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 196.681936][ T9402] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 196.709553][ T9402] bond3: (slave xfrm1): making interface the new active one [ 196.709572][ T9402] xfrm1: entered promiscuous mode [ 196.749337][ T9413] netlink: NAT attribute has 5 unknown bytes [ 196.756297][ T9413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.775712][ T9402] xfrm1: left promiscuous mode [ 197.197600][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 197.197636][ T9426] netlink: 176 bytes leftover after parsing attributes in process `syz.1.913'. [ 197.197692][ T9426] netlink: 'syz.1.913': attribute type 5 has an invalid length. [ 197.240433][ T9435] syz_tun: entered allmulticast mode [ 197.725676][ T9451] netlink: 'syz.3.918': attribute type 7 has an invalid length. [ 197.783704][ T9454] netlink: 'syz.3.918': attribute type 7 has an invalid length. [ 198.018085][ T9429] syz_tun: left allmulticast mode [ 198.241440][ T9466] wg0 speed is unknown, defaulting to 1000 [ 198.288893][ T9466] wg0 speed is unknown, defaulting to 1000 [ 198.329141][ T9466] wg0 speed is unknown, defaulting to 1000 [ 198.695740][ T9480] netlink: 'syz.2.929': attribute type 4 has an invalid length. [ 199.119151][ T9495] __nla_validate_parse: 6 callbacks suppressed [ 199.119205][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 199.220657][ T32] audit: type=1107 audit(1788464945.485:2): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='RìNlf2G' [ 199.350038][ T9466] infiniband syz0: set active [ 199.350278][ T9466] infiniband syz0: added wg0 [ 199.556595][ T9500] syzkaller0: entered promiscuous mode [ 199.562210][ T9500] syzkaller0: entered allmulticast mode [ 199.570063][ T9466] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 199.587001][ T9466] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 199.747614][ T9466] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 199.749374][ T10] wg0 speed is unknown, defaulting to 1000 [ 199.817730][ T9517] Unsupported ieee802154 address type: 0 [ 199.824905][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.940'. [ 200.049610][ T9522] netlink: 27 bytes leftover after parsing attributes in process `syz.1.943'. [ 200.148514][ T9466] RDS/IB: syz0: added [ 200.161549][ T9466] smc: adding ib device syz0 with port count 1 [ 200.174523][ T9466] smc: ib device syz0 port 1 has no pnetid [ 200.247879][ T5627] wg0 speed is unknown, defaulting to 1000 [ 200.336600][ T9466] wg0 speed is unknown, defaulting to 1000 [ 200.468942][ T9532] ip6t_srh: unknown srh match flags 5F28 [ 200.594715][ T9536] openvswitch: netlink: Multiple metadata blocks provided [ 200.653409][ T9537] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.946'. [ 200.695200][ T9536] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.749458][ T9544] netlink: 36 bytes leftover after parsing attributes in process `syz.2.948'. [ 200.806902][ T9466] wg0 speed is unknown, defaulting to 1000 [ 200.871181][ T9543] x_tables: duplicate entry at hook 2 [ 201.343976][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.953'. [ 201.525362][ T9565] netlink: 44 bytes leftover after parsing attributes in process `syz.1.954'. [ 201.525553][ T9565] netlink: 43 bytes leftover after parsing attributes in process `syz.1.954'. [ 201.525730][ T9565] netlink: 'syz.1.954': attribute type 6 has an invalid length. [ 201.525891][ T9565] netlink: 'syz.1.954': attribute type 5 has an invalid length. [ 201.526059][ T9565] netlink: 43 bytes leftover after parsing attributes in process `syz.1.954'. [ 201.603352][ T9466] wg0 speed is unknown, defaulting to 1000 [ 202.071890][ T9568] syzkaller1: entered promiscuous mode [ 202.071932][ T9568] syzkaller1: entered allmulticast mode [ 202.904996][ T9466] wg0 speed is unknown, defaulting to 1000 [ 203.258126][ T9612] netlink: 128 bytes leftover after parsing attributes in process `syz.2.967'. [ 203.636917][ T9466] wg0 speed is unknown, defaulting to 1000 [ 203.732677][ T9630] lo: entered promiscuous mode [ 203.753365][ T9630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.059077][ T9636] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 204.608442][ T9660] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 204.649118][ T9666] __nla_validate_parse: 2 callbacks suppressed [ 204.655761][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 204.675095][ T9666] ipvlan2: entered allmulticast mode [ 204.680551][ T9666] syz_tun: entered allmulticast mode [ 204.753459][ T9671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.948269][ T9685] sctp: [Deprecated]: syz.3.985 (pid 9685) Use of int in max_burst socket option. [ 204.948269][ T9685] Use struct sctp_assoc_value instead [ 205.498399][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.992'. [ 205.590886][ T9726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.992'. [ 205.930335][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 206.085475][ T9737] syzkaller0: entered promiscuous mode [ 206.085512][ T9737] syzkaller0: entered allmulticast mode [ 206.432822][ T4932] Bluetooth: hci3: command 0x0406 tx timeout [ 206.440847][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 206.447626][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 206.670363][ T9746] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 206.695443][ T9749] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 206.702935][ T9746] netlink: 'syz.1.1001': attribute type 32 has an invalid length. [ 206.702980][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 206.706276][ T9749] netlink: 'syz.1.1001': attribute type 32 has an invalid length. [ 206.706314][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 206.870155][ T9746] bond3: Setting coupled_control to off (0) [ 207.101343][ T9749] bond4: Setting coupled_control to off (0) [ 207.518029][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'. [ 207.648163][ T9786] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1012'. [ 208.129338][ T9803] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1021'. [ 208.359306][ T9811] netlink: 'syz.3.1025': attribute type 10 has an invalid length. [ 208.394112][ T9811] team0: Device wg2 is of different type [ 208.684938][ T9823] bridge_slave_0: invalid flags given to default FDB implementation [ 209.120547][ T9837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1036'. [ 209.675001][ T9855] netlink: 'syz.3.1045': attribute type 5 has an invalid length. [ 209.971912][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'. [ 210.521423][ T9883] bridge0: port 4(syz_tun) entered blocking state [ 210.533878][ T9883] bridge0: port 4(syz_tun) entered disabled state [ 210.534069][ T9883] syz_tun: entered allmulticast mode [ 210.548522][ T9883] syz_tun: entered promiscuous mode [ 210.561854][ T9883] netlink: 'syz.2.1058': attribute type 49 has an invalid length. [ 211.831656][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 212.246126][ T9922] ip_tables: iptables: counters copy to user failed while replacing table [ 212.352661][ T9927] netlink: 'syz.4.1074': attribute type 16 has an invalid length. [ 212.352841][ T9927] netlink: 'syz.4.1074': attribute type 17 has an invalid length. [ 212.672541][ T9925] bridge0: port 3(dummy0) entered disabled state [ 212.702677][ T9925] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.715654][ T9925] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.972615][ T9927] bridge0: port 3(dummy0) entered blocking state [ 212.973808][ T9927] bridge0: port 3(dummy0) entered forwarding state [ 213.112190][ T9927] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.115539][ T9927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.157640][ T9927] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.157774][ T9927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.234011][ T9927] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 213.241910][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.269664][ T9927] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 213.709856][ T9962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.966366][ T9966] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1091'. [ 215.798320][T10010] syzkaller0: entered promiscuous mode [ 215.799170][T10010] syzkaller0: entered allmulticast mode [ 215.858473][T10013] netlink: 'syz.2.1112': attribute type 12 has an invalid length. [ 215.858884][T10013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1112'. [ 216.051352][T10022] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1117'. [ 216.179182][T10010] tipc: Started in network mode [ 216.179672][T10010] tipc: Node identity 9253eead1cb8, cluster identity 4711 [ 216.196234][T10028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1118'. [ 216.240113][T10010] tipc: Enabled bearer , priority 0 [ 216.588106][T10007] tipc: Resetting bearer [ 216.650373][T10007] tipc: Disabling bearer [ 219.737438][T10080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1137'. [ 220.467354][T10101] vxcan0: tx address claim with dest, not broadcast [ 221.182573][T10124] ip_tables: iptables: counters copy to user failed while replacing table [ 221.735301][T10141] netlink: 'syz.1.1166': attribute type 4 has an invalid length. [ 224.650118][ T7178] IPVS: starting estimator thread 0... [ 224.744665][T10229] IPVS: using max 30 ests per chain, 72000 per kthread [ 225.487315][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'. [ 225.940442][T10252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1213'. [ 226.791023][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1223'. [ 226.804142][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1223'. [ 226.860519][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 226.873934][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 226.877148][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 226.883264][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 226.884335][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 226.885809][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 227.106983][T10260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.453808][T10308] [ 228.456306][T10308] ============================= [ 228.461229][T10308] WARNING: suspicious RCU usage [ 228.466280][T10308] syzkaller #0 Not tainted [ 228.470734][T10308] ----------------------------- [ 228.475674][T10308] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 228.484496][T10308] [ 228.484496][T10308] other info that might help us debug this: [ 228.484496][T10308] [ 228.495731][T10308] [ 228.495731][T10308] rcu_scheduler_active = 2, debug_locks = 1 [ 228.504731][T10308] locks held by syz.4.1237/10308: 1, last CPU#1: [ 228.511236][T10308] #0: ffff88807e309c90 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 228.523371][T10308] [ 228.523371][T10308] stack backtrace: [ 228.529286][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.4.1237 Not tainted syzkaller #0 PREEMPT(full) [ 228.538670][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.548736][T10308] Call Trace: [ 228.552049][T10308] [ 228.554991][T10308] dump_stack_lvl+0xe8/0x150 [ 228.559622][T10308] lockdep_rcu_suspicious+0x140/0x1d0 [ 228.565040][T10308] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 228.570276][T10308] xfrm_send_migrate_state+0x870/0xae0 [ 228.575802][T10308] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 228.581818][T10308] ? xfrm_state_migrate_install+0x192/0x630 [ 228.587740][T10308] xfrm_do_migrate_state+0x1703/0x1e50 [ 228.593268][T10308] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 228.599109][T10308] ? apparmor_capable+0x126/0x170 [ 228.604163][T10308] ? __nla_parse+0x40/0x60 [ 228.608609][T10308] xfrm_user_rcv_msg+0x7a8/0xf30 [ 228.613582][T10308] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 228.619090][T10308] ? __mutex_trylock_common+0x15f/0x270 [ 228.624666][T10308] ? __pfx___mutex_trylock_common+0x10/0x10 [ 228.630599][T10308] ? rcu_is_watching+0x16/0xb0 [ 228.635395][T10308] ? trace_contention_end+0x3d/0x140 [ 228.640721][T10308] netlink_rcv_skb+0x226/0x4a0 [ 228.645526][T10308] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 228.651063][T10308] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.656407][T10308] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.661642][T10308] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.666879][T10308] xfrm_netlink_rcv+0x79/0x90 [ 228.671587][T10308] netlink_unicast+0x7bd/0x940 [ 228.676380][T10308] netlink_sendmsg+0x813/0xb40 [ 228.681185][T10308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.686498][T10308] ? apparmor_socket_sendmsg+0x98/0x360 [ 228.692070][T10308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.697365][T10308] sock_sendmsg_nosec+0x13a/0x180 [ 228.702418][T10308] ____sys_sendmsg+0x54e/0x850 [ 228.707220][T10308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.712556][T10308] ? import_iovec+0x73/0xa0 [ 228.717097][T10308] ___sys_sendmsg+0x2a5/0x360 [ 228.721793][T10308] ? __lock_acquire+0x6df/0x2e50 [ 228.726765][T10308] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.731988][T10308] ? futex_wait+0x2a2/0x390 [ 228.736553][T10308] ? __fget_files+0x2a/0x420 [ 228.741152][T10308] ? __fget_files+0x3a2/0x420 [ 228.745865][T10308] __x64_sys_sendmsg+0x1b1/0x290 [ 228.750826][T10308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.756319][T10308] do_syscall_64+0x166/0x520 [ 228.760943][T10308] ? trace_irq_disable+0x3b/0x140 [ 228.766008][T10308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.772091][T10308] ? clear_bhb_loop+0x70/0xc0 [ 228.776787][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.782692][T10308] RIP: 0033:0x7f1828b9e159 [ 228.787126][T10308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.806765][T10308] RSP: 002b:00007f1826df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.815225][T10308] RAX: ffffffffffffffda RBX: 00007f1828e25fa0 RCX: 00007f1828b9e159 [ 228.823215][T10308] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 228.831203][T10308] RBP: 00007f1828c35024 R08: 0000000000000000 R09: 0000000000000000 [ 228.839189][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.847183][T10308] R13: 00007f1828e26038 R14: 00007f1828e25fa0 R15: 00007ffea66e3128 [ 228.855213][T10308] [ 230.790691][T10297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.790780][T10297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.895074][T10297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.895138][T10297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.004456][T10297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.006322][T10297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.101747][T10297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.101822][T10297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.263488][ T7182] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.263552][ T7182] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.304061][ T7182] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.304118][ T7182] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.305716][ T7178] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.305790][ T7178] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.305884][ T7178] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.305938][ T7178] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0