last executing test programs: 2m28.351044051s ago: executing program 32 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) 2m18.935042035s ago: executing program 33 (id=3132): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) 2m15.074109107s ago: executing program 34 (id=3270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m4.663739159s ago: executing program 35 (id=3579): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x4000080) 1m36.462817569s ago: executing program 7 (id=4833): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x16, 0x0, 0x0) 1m36.421611292s ago: executing program 7 (id=4837): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x44, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1m36.36103909s ago: executing program 7 (id=4840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x0) 1m36.301360238s ago: executing program 7 (id=4842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa4}}, 0x0) 1m36.20333572s ago: executing program 7 (id=4846): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}}) 1m36.134544016s ago: executing program 7 (id=4849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m33.258039856s ago: executing program 36 (id=4421): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0xc000) 1m30.466692822s ago: executing program 37 (id=4524): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m21.087097114s ago: executing program 38 (id=4849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m10.306592543s ago: executing program 4 (id=5520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x48) 1m10.129988742s ago: executing program 4 (id=5527): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2, 0x4e21, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) 1m9.923296252s ago: executing program 4 (id=5534): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000180)) 1m9.750761069s ago: executing program 4 (id=5541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) 1m9.5671395s ago: executing program 4 (id=5547): r0 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r0, 0x0, 0x0) 1m9.377085004s ago: executing program 4 (id=5555): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd27, 0x4000, {0xe}}, 0x14}}, 0x0) 54.33711599s ago: executing program 39 (id=5555): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd27, 0x4000, {0xe}}, 0x14}}, 0x0) 45.954338751s ago: executing program 0 (id=6239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) 45.814179693s ago: executing program 0 (id=6245): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 45.705102893s ago: executing program 0 (id=6246): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) 45.65084153s ago: executing program 0 (id=6248): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 45.549102114s ago: executing program 0 (id=6252): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) 45.454662294s ago: executing program 0 (id=6253): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) 39.719994363s ago: executing program 8 (id=6396): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) 39.548442037s ago: executing program 8 (id=6399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) 39.34614119s ago: executing program 8 (id=6402): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x58, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 39.213573043s ago: executing program 8 (id=6405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000300)=""/157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.03795395s ago: executing program 8 (id=6408): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) 38.934310371s ago: executing program 8 (id=6409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) 31.803678184s ago: executing program 2 (id=6653): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 31.721013407s ago: executing program 2 (id=6655): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@mcast1}, 0x14) 31.60161291s ago: executing program 2 (id=6659): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f00000010c0)) 31.486102622s ago: executing program 2 (id=6663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0000000290001000000000004000000fc000000000000000000000000000001fc0200000000000000000000000000ff00000005000000020a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100ee8000000200000000000000000000aaac1e0001000000000000000000000000200100000000000000000000000000008b1414040000000435"], 0xa0}}, 0x0) 31.358449225s ago: executing program 2 (id=6667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.283909147s ago: executing program 2 (id=6671): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000000080002000200000004000300", 0x2c) 30.457346058s ago: executing program 40 (id=6253): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) 23.9458583s ago: executing program 41 (id=6409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) 21.126972275s ago: executing program 5 (id=6911): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 21.021746024s ago: executing program 5 (id=6914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 20.823091704s ago: executing program 5 (id=6918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) 20.733166479s ago: executing program 5 (id=6919): r0 = socket$inet6(0xa, 0x3, 0x80) getsockopt$sock_buf(r0, 0x1, 0x2b, 0x0, &(0x7f0000000100)) 20.689602989s ago: executing program 5 (id=6921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 20.640544321s ago: executing program 5 (id=6923): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x27, 0x301, 0x70bd25, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) 16.240457362s ago: executing program 42 (id=6671): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000000080002000200000004000300", 0x2c) 5.613122391s ago: executing program 43 (id=6923): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x27, 0x301, 0x70bd25, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) 1.156667522s ago: executing program 6 (id=7435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000690003050000000000000000000000d2"], 0x18}}, 0x0) 938.945085ms ago: executing program 6 (id=7440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 938.434221ms ago: executing program 3 (id=7441): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r0) 827.711352ms ago: executing program 1 (id=7442): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) 821.866695ms ago: executing program 9 (id=7443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000100001000000000c000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010069703665727370616e30000000000000080002400000000648000000180a0101000b000000000000010000000900010073797a30000000001c000380180003801400020000003665727370616e300000000000000900020073797a30"], 0xe8}}, 0x0) 763.950361ms ago: executing program 1 (id=7444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x2, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 734.700369ms ago: executing program 3 (id=7445): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 718.165134ms ago: executing program 6 (id=7446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 642.225987ms ago: executing program 1 (id=7447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 589.104855ms ago: executing program 9 (id=7448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r0, &(0x7f0000001700), &(0x7f0000001780), 0x3}, 0x20) 572.653273ms ago: executing program 6 (id=7449): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xfffc, @any, 0x4, 0x1}, 0xe) 568.084251ms ago: executing program 3 (id=7450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) 467.365645ms ago: executing program 9 (id=7451): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000300), 0x4) 409.809689ms ago: executing program 1 (id=7452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) 380.712219ms ago: executing program 3 (id=7453): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xd, &(0x7f0000000240)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd1f0}}], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 363.93224ms ago: executing program 6 (id=7454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x0) 252.229631ms ago: executing program 9 (id=7455): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 215.915352ms ago: executing program 3 (id=7456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 215.159424ms ago: executing program 1 (id=7465): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) 200.279308ms ago: executing program 6 (id=7457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="40020000100001002dbd700000000000fe880000000000000000000000000101fe88000000000000000000000000000100000049460000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000002c00000000000000006f00000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000100cd00000000000000e2001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0040000600000003fd0b9c87e961bbef256ffd5561721c8e98b4be40315c4378a8e8e58b7c4421b6232d1732b178a881adf7f5680cb05050e8b58f6b19110d5b71a7eeb8dfc7c21989b8c07120a4fa8b7c43df7cba5128f703f21b45ca187f7b0a53cff0cf67fff094f1e957abe6afa02209e51bb266a63e27e66bab2194a828ef6f44cf835b98407be18c4fef10cbf1069a4c4b6f3159e6f193433c25c00004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700"], 0x240}}, 0x0) 123.941417ms ago: executing program 9 (id=7458): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 79.083456ms ago: executing program 9 (id=7459): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007007f0000017f00000184"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 14.069997ms ago: executing program 1 (id=7460): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r0], 0x50}}, 0x0) 0s ago: executing program 3 (id=7461): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x70}, 0x1, 0x7}, 0x44000) kernel console output (not intermixed with test programs): vsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.370708][ T64] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.370744][ T64] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.516432][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.516454][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.601608][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.601629][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.625983][T12933] openvswitch: netlink: ct_state flags ffffffff unsupported [ 189.736807][T12939] netlink: 'syz.3.3414': attribute type 13 has an invalid length. [ 189.844035][T12945] netlink: 'syz.1.3416': attribute type 61 has an invalid length. [ 189.851044][T12947] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 189.869599][ T5924] Bluetooth: hci5: command tx timeout [ 190.041116][T12961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3424'. [ 190.110447][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3428'. [ 190.110470][T12965] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3428'. [ 190.246779][T12975] netlink: 'syz.1.3431': attribute type 21 has an invalid length. [ 190.246891][T12975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3431'. [ 190.426549][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3439'. [ 190.761786][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3450'. [ 190.865162][T13020] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3454'. [ 191.496638][T13069] nft_compat: unsupported protocol 0 [ 191.729530][T13086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3487'. [ 191.945343][ T5924] Bluetooth: hci5: command tx timeout [ 192.058591][ T13] IPVS: starting estimator thread 0... [ 192.099412][T13113] pim6reg: entered allmulticast mode [ 192.140372][T13112] IPVS: using max 39 ests per chain, 93600 per kthread [ 192.198565][T13123] veth0_to_bond: default FDB implementation only supports local addresses [ 192.395207][T13138] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.602851][T13153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.653012][T13156] netlink: 'syz.5.3521': attribute type 1 has an invalid length. [ 194.022111][ T5924] Bluetooth: hci5: command tx timeout [ 194.341109][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341164][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.129596][ T5816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.133463][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.135388][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.137922][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.138537][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.144808][T13333] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 195.478644][T13348] unsupported nlmsg_type 40 [ 196.027480][T13369] syz.5.3620: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 196.027622][T13369] CPU: 0 UID: 0 PID: 13369 Comm: syz.5.3620 Not tainted syzkaller #0 PREEMPT(full) [ 196.027645][T13369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 196.027667][T13369] Call Trace: [ 196.027677][T13369] [ 196.027686][T13369] dump_stack_lvl+0xe8/0x150 [ 196.027729][T13369] warn_alloc+0x24d/0x270 [ 196.027751][T13369] ? kasan_save_track+0x4f/0x80 [ 196.027771][T13369] ? kasan_save_track+0x3e/0x80 [ 196.027794][T13369] ? __pfx_warn_alloc+0x10/0x10 [ 196.027810][T13369] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 196.027836][T13369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.027874][T13369] __vmalloc_node_range_noprof+0x127/0x1540 [ 196.027922][T13369] ? rcu_is_watching+0x16/0xb0 [ 196.027952][T13369] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.027979][T13369] ? __kmalloc_cache_noprof+0x321/0x600 [ 196.028000][T13369] ? __kmalloc_cache_noprof+0x14d/0x600 [ 196.028020][T13369] ? xskq_create+0x56/0x220 [ 196.028058][T13369] xskq_create+0x148/0x220 [ 196.028082][T13369] ? xsk_init_queue+0x8a/0xe0 [ 196.028104][T13369] xsk_init_queue+0x8a/0xe0 [ 196.028127][T13369] xsk_setsockopt+0x52a/0x960 [ 196.028155][T13369] ? __pfx_xsk_setsockopt+0x10/0x10 [ 196.028176][T13369] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.028210][T13369] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 196.028235][T13369] ? __pfx_xsk_setsockopt+0x10/0x10 [ 196.028258][T13369] do_sock_setsockopt+0x17c/0x1b0 [ 196.028290][T13369] __x64_sys_setsockopt+0x13d/0x1b0 [ 196.028320][T13369] do_syscall_64+0x166/0x520 [ 196.028344][T13369] ? trace_irq_disable+0x3b/0x140 [ 196.028363][T13369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.028382][T13369] ? clear_bhb_loop+0x70/0xc0 [ 196.028406][T13369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.028423][T13369] RIP: 0033:0x7f720fd9e199 [ 196.028450][T13369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.028466][T13369] RSP: 002b:00007f7210bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 196.028486][T13369] RAX: ffffffffffffffda RBX: 00007f7210025fa0 RCX: 00007f720fd9e199 [ 196.028500][T13369] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 196.028512][T13369] RBP: 00007f720fe358e0 R08: 0000000000000004 R09: 0000000000000000 [ 196.028524][T13369] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.028537][T13369] R13: 00007f7210026038 R14: 00007f7210025fa0 R15: 00007ffe846099e8 [ 196.028567][T13369] [ 196.078285][T13369] Mem-Info: [ 196.078302][T13369] active_anon:6218 inactive_anon:0 isolated_anon:0 [ 196.078302][T13369] active_file:2 inactive_file:43429 isolated_file:0 [ 196.078302][T13369] unevictable:0 dirty:174 writeback:0 [ 196.078302][T13369] slab_reclaimable:11425 slab_unreclaimable:103028 [ 196.078302][T13369] mapped:39456 shmem:522 pagetables:3512 [ 196.078302][T13369] sec_pagetables:0 bounce:0 [ 196.078302][T13369] kernel_misc_reclaimable:0 [ 196.078302][T13369] free:1302413 free_pcp:7423 free_cma:0 [ 196.078356][T13369] Node 0 active_anon:24872kB inactive_anon:0kB active_file:8kB inactive_file:173504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157824kB dirty:696kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12316kB pagetables:13896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.078410][T13369] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.078466][T13369] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.078523][T13369] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 196.078565][T13369] Node 0 DMA32 free:1250372kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24872kB inactive_anon:0kB active_file:8kB inactive_file:173504kB unevictable:0kB writepending:696kB zspages:0kB present:3129332kB managed:2546864kB mlocked:0kB bounce:0kB free_pcp:29692kB local_pcp:16424kB free_cma:0kB [ 196.078623][T13369] lowmem_reserve[]: 0 0 0 0 0 [ 196.078656][T13369] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.078711][T13369] lowmem_reserve[]: 0 0 0 0 0 [ 196.079065][T13369] Node 1 Normal free:3943920kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.079122][T13369] lowmem_reserve[]: 0 0 0 0 0 [ 196.079155][T13369] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 196.079298][T13369] Node 0 DMA32: 7*4kB (ME) 71*8kB (UME) 779*16kB (UM) 436*32kB (UME) 577*64kB (UM) 515*128kB (UME) 359*256kB (UM) 237*512kB (UM) 140*1024kB (UM) 7*2048kB (UME) 183*4096kB (M) = 1250372kB [ 196.079451][T13369] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 196.079553][T13369] Node 1 Normal: 4*4kB (UM) 8*8kB (UM) 8*16kB (UM) 7*32kB (UM) 9*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943920kB [ 196.079703][T13369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.079719][T13369] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.080388][T13369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.080406][T13369] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.080421][T13369] 43949 total pagecache pages [ 196.080432][T13369] 0 pages in swap cache [ 196.080439][T13369] Free swap = 124996kB [ 196.080446][T13369] Total swap = 124996kB [ 196.080454][T13369] 2097051 pages RAM [ 196.080461][T13369] 0 pages HighMem/MovableOnly [ 196.080467][T13369] 428719 pages reserved [ 196.080473][T13369] 0 pages cma reserved [ 196.129083][T13334] virt_wifi0 speed is unknown, defaulting to 1000 [ 196.867234][T13399] __nla_validate_parse: 6 callbacks suppressed [ 196.867254][T13399] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3632'. [ 196.933487][T13334] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.933592][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.933738][T13334] bridge_slave_0: entered allmulticast mode [ 196.935854][T13334] bridge_slave_0: entered promiscuous mode [ 196.966710][T13403] tunl0: entered promiscuous mode [ 196.975107][T13403] netlink: 'syz.5.3633': attribute type 3 has an invalid length. [ 196.975128][T13403] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3633'. [ 196.975463][T13334] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.975614][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.975753][T13334] bridge_slave_1: entered allmulticast mode [ 196.977427][T13334] bridge_slave_1: entered promiscuous mode [ 197.049604][T13334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.054207][T13334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.104933][T13334] team0: Port device team_slave_0 added [ 197.114800][T13334] team0: Port device team_slave_1 added [ 197.154042][T13334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.154060][T13334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.154081][T13334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.157835][T13334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.157852][T13334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.157876][T13334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.241450][ T5924] Bluetooth: hci6: command tx timeout [ 197.312374][T13334] hsr_slave_0: entered promiscuous mode [ 197.314321][T13334] hsr_slave_1: entered promiscuous mode [ 197.315124][T13334] debugfs: 'hsr0' already exists in 'hsr' [ 197.315157][T13334] Cannot create hsr debugfs directory [ 197.417567][T13419] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 197.585503][T13334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.600755][T13334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.602355][T13334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.607561][T13334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.608232][T13334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.640401][T13334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.642090][T13334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 197.645739][T13334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.786869][T13334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.817643][T13334] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.840537][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.840685][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.847208][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.847310][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.876970][T13442] xt_l2tp: missing protocol rule (udp|l2tpip) [ 198.444398][T13478] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 198.691971][T13334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.692441][T13493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3671'. [ 198.711541][T13496] netlink: 'syz.5.3672': attribute type 1 has an invalid length. [ 198.711563][T13496] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3672'. [ 199.026048][ T5816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 199.029149][ T5816] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 199.044854][ T5816] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 199.047069][ T5816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 199.064078][ T5816] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.177480][T13515] netlink: 'syz.5.3678': attribute type 21 has an invalid length. [ 199.177547][T13515] netlink: 'syz.5.3678': attribute type 6 has an invalid length. [ 199.177561][T13515] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3678'. [ 199.303408][ T5816] Bluetooth: hci6: command tx timeout [ 199.377504][T13334] veth0_vlan: entered promiscuous mode [ 199.408256][T13334] veth1_vlan: entered promiscuous mode [ 199.495280][T13334] veth0_macvtap: entered promiscuous mode [ 199.505979][T13334] veth1_macvtap: entered promiscuous mode [ 199.561906][T13334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.591052][T13334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.629695][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.651631][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.669261][ T989] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.669314][ T989] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.757169][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.757189][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.827881][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.827903][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.044666][T13548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3686'. [ 200.220833][T13556] x_tables: unsorted entry at hook 2 [ 200.496216][T13572] ip6t_frag: unknown flags 6 [ 200.545963][T13574] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 200.600249][T13505] virt_wifi0 speed is unknown, defaulting to 1000 [ 200.873648][T13593] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.876965][T13593] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.139826][ T5816] Bluetooth: hci7: command tx timeout [ 201.186318][T13614] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3709'. [ 201.214916][T13616] bridge_slave_0: left allmulticast mode [ 201.214942][T13616] bridge_slave_0: left promiscuous mode [ 201.215148][T13616] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.224410][T13616] bridge_slave_1: left allmulticast mode [ 201.224435][T13616] bridge_slave_1: left promiscuous mode [ 201.224637][T13616] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.271645][T13616] bond0: (slave bond_slave_0): Releasing backup interface [ 201.293582][T13616] bond0: (slave bond_slave_1): Releasing backup interface [ 201.326399][T13616] team0: Port device team_slave_0 removed [ 201.343090][T13616] team0: Port device team_slave_1 removed [ 201.345228][T13616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.345252][T13616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.352674][T13616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.352696][T13616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.361361][T13616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.401518][ T5816] Bluetooth: hci6: command tx timeout [ 201.542283][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3715'. [ 201.546549][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3712'. [ 201.546575][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3712'. [ 201.629450][T13505] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.629585][T13505] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.630148][T13505] bridge_slave_0: entered allmulticast mode [ 201.632832][T13505] bridge_slave_0: entered promiscuous mode [ 201.636871][T13505] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.637028][T13505] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.637150][T13505] bridge_slave_1: entered allmulticast mode [ 201.642534][T13505] bridge_slave_1: entered promiscuous mode [ 201.680088][T13505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.684367][T13505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.725904][T13635] netlink: 'syz.3.3717': attribute type 5 has an invalid length. [ 201.761767][T13505] team0: Port device team_slave_0 added [ 201.776855][T13505] team0: Port device team_slave_1 added [ 201.915955][T13505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.915971][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.916011][T13505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.966981][T13505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.966999][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.967023][T13505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.057874][T13505] hsr_slave_0: entered promiscuous mode [ 202.065130][T13505] hsr_slave_1: entered promiscuous mode [ 202.065839][T13505] debugfs: 'hsr0' already exists in 'hsr' [ 202.065857][T13505] Cannot create hsr debugfs directory [ 202.164243][T13652] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 202.205572][T13656] __nla_validate_parse: 1 callbacks suppressed [ 202.205591][T13656] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3727'. [ 202.497081][T13674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.527503][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3736'. [ 202.560866][T13505] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.582298][T13505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.591043][T13505] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.618975][T13505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.621073][T13505] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.635955][T13505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.637492][T13505] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.671666][T13505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.705496][T13681] bond1: option fail_over_mac: invalid value (16) [ 202.707661][T13681] bond1 (unregistering): Released all slaves [ 202.915023][T13505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.959769][T13505] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.974837][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.974933][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.993921][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.994014][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.034187][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3747'. [ 203.219879][ T5816] Bluetooth: hci7: command tx timeout [ 203.409099][T13726] netlink: 'syz.3.3756': attribute type 9 has an invalid length. [ 203.409118][T13726] netlink: 'syz.3.3756': attribute type 4 has an invalid length. [ 203.473039][ T5816] Bluetooth: hci6: command tx timeout [ 203.551484][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3759'. [ 203.551511][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3759'. [ 203.551574][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3759'. [ 203.743627][T13745] netlink: 'syz.5.3763': attribute type 11 has an invalid length. [ 203.832236][T13505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.870002][T13753] openvswitch: netlink: IP tunnel dst address not specified [ 204.018581][T13763] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3769'. [ 204.263218][T13505] veth0_vlan: entered promiscuous mode [ 204.287447][T13505] veth1_vlan: entered promiscuous mode [ 204.309894][T13778] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 204.374592][T13505] veth0_macvtap: entered promiscuous mode [ 204.392418][T13505] veth1_macvtap: entered promiscuous mode [ 204.454341][T13505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.471954][T13505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.508969][ T42] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.509114][ T42] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.509178][ T42] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.509212][ T42] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.739603][T13796] netlink: 'syz.5.3785': attribute type 1 has an invalid length. [ 204.855394][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.855415][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.898075][T13798] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 205.020772][ T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.020793][ T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.237440][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3793'. [ 205.299326][ T5816] Bluetooth: hci7: command tx timeout [ 205.318280][T13821] IPVS: Unknown mcast interface: caif0 [ 205.847171][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 205.875168][T13861] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3813'. [ 205.875203][T13861] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 206.007633][T13870] netlink: 'syz.3.3817': attribute type 8 has an invalid length. [ 206.296867][T13891] netlink: 'syz.6.3826': attribute type 1 has an invalid length. [ 206.495728][T13904] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 206.537772][T13910] ip_tables: iptables: counters copy to user failed while replacing table [ 207.073724][T13950] x_tables: unsorted underflow at hook 1 [ 207.391904][ T5816] Bluetooth: hci7: command tx timeout [ 207.631546][T13990] __nla_validate_parse: 1 callbacks suppressed [ 207.631568][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'. [ 207.676242][T13996] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3879'. [ 207.761890][T14000] netlink: 'syz.3.3883': attribute type 1 has an invalid length. [ 207.965959][T14014] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 208.907655][T14082] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 208.971413][T14085] bridge1: entered allmulticast mode [ 209.137847][T14098] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3930'. [ 209.418543][ T5924] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 209.421045][ T5924] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 209.422166][ T5924] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 209.423018][ T5924] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 209.423549][ T5924] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 209.476164][T14115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.122428][T14160] lo: entered allmulticast mode [ 210.459034][T14170] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 210.804789][T14110] virt_wifi0 speed is unknown, defaulting to 1000 [ 211.083461][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3972'. [ 211.281514][T14205] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3976'. [ 211.281541][T14205] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3976'. [ 211.461570][ T5924] Bluetooth: hci8: command tx timeout [ 211.604690][T14231] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3989'. [ 211.696900][T14110] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.700407][T14110] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.700582][T14110] bridge_slave_0: entered allmulticast mode [ 211.703206][T14110] bridge_slave_0: entered promiscuous mode [ 211.711777][T14110] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.711944][T14110] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.712371][T14110] bridge_slave_1: entered allmulticast mode [ 211.713977][T14110] bridge_slave_1: entered promiscuous mode [ 211.836192][T14110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.849512][T14110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.885909][T14245] netlink: 'syz.3.3996': attribute type 1 has an invalid length. [ 211.885932][T14245] netlink: 'syz.3.3996': attribute type 1 has an invalid length. [ 211.908291][T14110] team0: Port device team_slave_0 added [ 211.943027][T14110] team0: Port device team_slave_1 added [ 212.027845][T14110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.027861][T14110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.027886][T14110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.076795][T14110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.076813][T14110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.076835][T14110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.175895][T14110] hsr_slave_0: entered promiscuous mode [ 212.176769][T14110] hsr_slave_1: entered promiscuous mode [ 212.177512][T14110] debugfs: 'hsr0' already exists in 'hsr' [ 212.177530][T14110] Cannot create hsr debugfs directory [ 212.820796][T14294] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 213.114487][T14110] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 213.132362][T14110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.135152][T14110] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 213.156460][T14110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.158064][T14110] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 213.179336][T14110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.182041][T14110] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 213.215150][T14110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.435955][T14110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.466680][T14110] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.502210][ T201] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.502315][ T201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.534725][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.534827][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.552058][ T5924] Bluetooth: hci8: command tx timeout [ 213.644096][T14344] netlink: 'syz.7.4039': attribute type 2 has an invalid length. [ 213.814210][T14354] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4048'. [ 213.814245][T14354] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 214.577623][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4067'. [ 214.577649][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4067'. [ 214.698181][T14414] x_tables: duplicate entry at hook 1 [ 214.716114][T14110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.133832][T14443] netlink: 'syz.3.4083': attribute type 23 has an invalid length. [ 215.376085][T14110] veth0_vlan: entered promiscuous mode [ 215.414018][T14110] veth1_vlan: entered promiscuous mode [ 215.537238][T14110] veth0_macvtap: entered promiscuous mode [ 215.557582][T14110] veth1_macvtap: entered promiscuous mode [ 215.631092][ T5924] Bluetooth: hci8: command tx timeout [ 215.643351][T14110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.669907][T14110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.700112][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.700385][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.700660][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.700726][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.704093][T14477] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4096'. [ 215.904713][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.904733][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.012957][ T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.012977][ T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.190840][T14499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.416054][T14516] gre1: entered promiscuous mode [ 216.416079][T14516] gre1: entered allmulticast mode [ 216.966102][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4138'. [ 217.106367][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4140'. [ 217.264424][T14576] netlink: 'syz.8.4149': attribute type 21 has an invalid length. [ 217.594926][T14593] bond1: Removing last ns target with arp_interval on [ 217.632560][T14602] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 217.699098][ T5924] Bluetooth: hci8: command tx timeout [ 217.830013][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4167'. [ 217.838014][T14617] netlink: 'syz.3.4168': attribute type 3 has an invalid length. [ 217.869887][T14619] x_tables: unsorted underflow at hook 3 [ 217.958307][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4171'. [ 218.555083][T14634] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 218.563965][T14634] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 218.641543][T14666] netlink: 'syz.8.4193': attribute type 64 has an invalid length. [ 218.641566][T14666] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4193'. [ 218.786264][T14674] netlink: 'syz.3.4198': attribute type 1 has an invalid length. [ 219.063458][T14683] bond1: option min_links: invalid value (18446744073709551614) [ 219.063487][T14683] bond1: option min_links: allowed values 0 - 2147483647 [ 219.097757][T14683] bond1 (unregistering): Released all slaves [ 219.682602][T14725] bond2: entered allmulticast mode [ 219.683266][T14725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.907837][T14743] bond0: entered allmulticast mode [ 219.907861][T14743] bond_slave_0: entered allmulticast mode [ 219.907879][T14743] bond_slave_1: entered allmulticast mode [ 219.975973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.001247][T14746] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 220.006465][T14746] bond1 (unregistering): Released all slaves [ 220.065721][T14750] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4228'. [ 220.201257][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4231'. [ 220.216423][T14756] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4233'. [ 220.216449][T14756] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4233'. [ 220.216463][T14756] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4233'. [ 220.293413][T14761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4235'. [ 220.293436][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4235'. [ 220.367107][T14763] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4239'. [ 220.367132][T14763] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4239'. [ 220.809909][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4250'. [ 220.902466][T14801] xt_REDIRECT: bad rangesize 26624. [ 221.271877][T14824] nftables ruleset with unbound chain [ 221.274242][T14826] netlink: 'syz.6.4267': attribute type 11 has an invalid length. [ 221.616917][T14852] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 221.675024][T14858] siw: device registration error -23 [ 222.026908][T14880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.094955][T14886] netlink: 'syz.7.4296': attribute type 1 has an invalid length. [ 222.370826][T14896] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 222.399987][T14908] netlink: 'syz.6.4307': attribute type 1 has an invalid length. [ 223.246532][T14967] vlan0: entered promiscuous mode [ 223.246722][T14967] vlan0: entered allmulticast mode [ 223.246736][T14967] veth0_vlan: entered allmulticast mode [ 223.358087][T14975] netlink: 'syz.7.4341': attribute type 11 has an invalid length. [ 223.476511][T14981] openvswitch: netlink: Message has 8 unknown bytes. [ 223.594806][T14993] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 224.201239][T15039] netlink: 'syz.3.4375': attribute type 1 has an invalid length. [ 224.542719][T15061] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 224.576124][T15066] netlink: 'syz.3.4386': attribute type 3 has an invalid length. [ 224.615420][T15069] netlink: 'syz.7.4388': attribute type 2 has an invalid length. [ 224.866063][T15085] netlink: 'syz.5.4396': attribute type 1 has an invalid length. [ 225.387325][T15123] __nla_validate_parse: 12 callbacks suppressed [ 225.387345][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4415'. [ 225.636289][T15142] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4422'. [ 225.664545][T15146] xt_hashlimit: size too large, truncated to 1048576 [ 225.991517][T15166] netlink: 'syz.7.4435': attribute type 1 has an invalid length. [ 225.991540][T15166] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4435'. [ 226.118475][T15176] C: renamed from lo (while UP) [ 226.127462][T15176] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 226.251136][T15183] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 226.532015][T15206] mac80211_hwsim hwsim23 ÿ: renamed from wlan1 (while UP) [ 226.636022][T15212] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 226.948557][T15236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4469'. [ 226.964954][T15238] netlink: 'syz.7.4471': attribute type 8 has an invalid length. [ 227.120948][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4475'. [ 227.684152][T15292] netlink: 'syz.8.4497': attribute type 7 has an invalid length. [ 227.684175][T15292] netlink: 'syz.8.4497': attribute type 8 has an invalid length. [ 228.204210][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4518'. [ 228.344416][T15340] netlink: 'syz.8.4520': attribute type 10 has an invalid length. [ 228.375621][T15340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 228.377822][T15340] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 228.471248][T15346] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 228.476270][T15346] bond2 (unregistering): Released all slaves [ 228.532578][T15353] x_tables: duplicate underflow at hook 2 [ 229.149872][T15397] openvswitch: netlink: IP tunnel TTL not specified. [ 229.277111][T15407] netlink: 'syz.5.4555': attribute type 2 has an invalid length. [ 229.440720][T15420] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4560'. [ 229.847597][T15445] bond2: option min_links: invalid value (18446744073709551614) [ 229.847623][T15445] bond2: option min_links: allowed values 0 - 2147483647 [ 229.869027][T15445] bond2 (unregistering): Released all slaves [ 230.078468][T15466] xt_TCPMSS: Only works on TCP SYN packets [ 230.380609][T15488] netlink: 'syz.5.4594': attribute type 12 has an invalid length. [ 230.388133][T15490] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4595'. [ 230.388158][T15490] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4595'. [ 230.525745][T15496] netlink: 'syz.5.4597': attribute type 2 has an invalid length. [ 230.681702][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4605'. [ 230.833007][T15518] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4608'. [ 230.833033][T15518] netlink: 43 bytes leftover after parsing attributes in process `syz.7.4608'. [ 230.833047][T15518] netlink: 'syz.7.4608': attribute type 6 has an invalid length. [ 230.833060][T15518] netlink: 'syz.7.4608': attribute type 5 has an invalid length. [ 230.833071][T15518] netlink: 43 bytes leftover after parsing attributes in process `syz.7.4608'. [ 231.792952][T15588] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4647'. [ 231.957080][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4651'. [ 232.512543][T15640] bond2: Unable to set up delay as MII monitoring is disabled [ 232.515381][T15640] bond2 (unregistering): Released all slaves [ 232.855126][T15667] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4683'. [ 233.442283][T15696] openvswitch: netlink: Invalid VLAN frame [ 233.896573][T15713] netlink: 'syz.7.4714': attribute type 1 has an invalid length. [ 233.896597][T15713] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4714'. [ 234.447780][T15757] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 234.447916][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4727'. [ 234.824866][T15786] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.873357][T15789] netlink: 'syz.8.4743': attribute type 27 has an invalid length. [ 235.509238][T15837] netlink: 'syz.7.4766': attribute type 1 has an invalid length. [ 235.861445][T15864] xt_hashlimit: size too large, truncated to 1048576 [ 236.389769][T15901] C: renamed from lo (while UP) [ 236.394131][T15901] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 236.705914][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4810'. [ 236.805102][T15933] netlink: 'syz.5.4813': attribute type 12 has an invalid length. [ 236.989808][T15946] netlink: 'syz.5.4819': attribute type 10 has an invalid length. [ 237.016276][T15946] team0: Device wg2 is of different type [ 237.885989][T16018] netlink: 260 bytes leftover after parsing attributes in process `syz.8.4854'. [ 238.148004][T16036] netlink: 'syz.8.4863': attribute type 1 has an invalid length. [ 238.342953][T16048] xt_l2tp: wrong L2TP version: 255 [ 238.456455][T16058] xt_socket: unknown flags 0xc [ 238.562167][T16064] Cannot find add_set index 65532 as target [ 238.884372][T16091] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4890'. [ 239.173518][T16109] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 239.175484][T16109] bond4 (unregistering): Released all slaves [ 239.361896][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4906'. [ 239.361942][T16124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.430737][T16128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.497609][T16132] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 239.641284][T16144] netlink: 'syz.5.4916': attribute type 10 has an invalid length. [ 240.115486][T16177] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4932'. [ 240.322073][T16194] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 240.416546][T16201] tc_dump_action: action bad kind [ 240.529488][T16210] netlink: 'syz.5.4947': attribute type 4 has an invalid length. [ 240.742515][ T5816] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 240.747210][ T5816] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 240.748319][ T5816] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 240.764567][ T5816] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 240.765150][ T5816] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 240.914969][T16233] ipt_REJECT: TCP_RESET invalid for non-tcp [ 241.091122][T16246] netlink: 'syz.5.4962': attribute type 20 has an invalid length. [ 241.091146][T16246] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.296431][T16259] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4967'. [ 241.296832][T16259] 8021q: VLANs not supported on gre0 [ 241.712049][T16220] virt_wifi0 speed is unknown, defaulting to 1000 [ 241.741996][T16272] netlink: 'syz.8.4973': attribute type 1 has an invalid length. [ 242.136865][T16299] netlink: 'syz.8.4982': attribute type 3 has an invalid length. [ 242.186841][T16220] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.188537][T16220] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.208461][T16220] bridge_slave_0: entered allmulticast mode [ 242.222049][T16220] bridge_slave_0: entered promiscuous mode [ 242.233822][T16220] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.233982][T16220] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.234135][T16220] bridge_slave_1: entered allmulticast mode [ 242.236711][T16220] bridge_slave_1: entered promiscuous mode [ 242.298801][T16220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.301732][T16220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.361881][T16220] team0: Port device team_slave_0 added [ 242.364656][T16220] team0: Port device team_slave_1 added [ 242.405372][T16220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.405389][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.405413][T16220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.416644][T16220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.416660][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.416682][T16220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.594579][T16220] hsr_slave_0: entered promiscuous mode [ 242.595749][T16220] hsr_slave_1: entered promiscuous mode [ 242.596561][T16220] debugfs: 'hsr0' already exists in 'hsr' [ 242.596579][T16220] Cannot create hsr debugfs directory [ 242.695768][T16317] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 242.794139][T16321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.819219][ T5924] Bluetooth: hci9: command tx timeout [ 242.946296][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4998'. [ 242.946327][T16329] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 243.055582][T16220] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 243.072029][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.073533][T16220] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 243.094670][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.096542][T16220] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 243.116044][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.116970][T16220] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 243.146572][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.262116][T16220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.291622][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5004'. [ 243.292622][T16220] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.298569][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.298670][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.337079][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.337180][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.631261][ T5816] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 243.636376][ T5816] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 243.637535][ T5816] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 243.665730][ T5816] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 243.673461][ T5816] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 244.235205][T16396] netlink: 'syz.8.5019': attribute type 1 has an invalid length. [ 244.235229][T16396] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5019'. [ 244.235243][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5019'. [ 244.306457][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5020'. [ 244.317208][T16400] veth2: entered promiscuous mode [ 244.317230][T16400] veth2: entered allmulticast mode [ 244.393214][T16220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.624031][T16413] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5024'. [ 244.624063][T16413] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 244.783081][T16361] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.900414][ T5924] Bluetooth: hci9: command tx timeout [ 245.092929][T16220] veth0_vlan: entered promiscuous mode [ 245.123069][T16220] veth1_vlan: entered promiscuous mode [ 245.302548][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.303672][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.303831][T16361] bridge_slave_0: entered allmulticast mode [ 245.308128][T16361] bridge_slave_0: entered promiscuous mode [ 245.313487][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.313612][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.313747][T16361] bridge_slave_1: entered allmulticast mode [ 245.317229][T16361] bridge_slave_1: entered promiscuous mode [ 245.402003][T16361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.404930][T16361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.407722][T16220] veth0_macvtap: entered promiscuous mode [ 245.420048][T16220] veth1_macvtap: entered promiscuous mode [ 245.524588][T16361] team0: Port device team_slave_0 added [ 245.532918][T16220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.537796][T16361] team0: Port device team_slave_1 added [ 245.557992][T16456] xt_bpf: check failed: parse error [ 245.610447][T16460] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 245.645791][T16220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.653024][T16361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.653041][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.653066][T16361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.667005][T16361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.667021][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.667045][T16361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.706192][ T5924] Bluetooth: hci10: command tx timeout [ 245.855744][T16361] hsr_slave_0: entered promiscuous mode [ 245.856787][T16361] hsr_slave_1: entered promiscuous mode [ 245.857606][T16361] debugfs: 'hsr0' already exists in 'hsr' [ 245.857624][T16361] Cannot create hsr debugfs directory [ 245.980041][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.980086][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.980120][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.068532][T16474] netlink: 'syz.8.5049': attribute type 2 has an invalid length. [ 246.108352][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.108373][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.191898][T16477] netlink: 'syz.5.5051': attribute type 1 has an invalid length. [ 246.191921][T16477] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5051'. [ 246.292987][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.293009][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.380451][ T989] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.383589][T16485] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5054'. [ 246.513028][T16361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.674493][T16500] xt_time: unknown flags 0x68 [ 246.775883][T16361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.856116][T16512] No such timeout policy "syz0" [ 246.962799][T16361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.980259][ T5924] Bluetooth: hci9: command tx timeout [ 247.137133][T16361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.152274][T16530] netlink: 'syz.5.5076': attribute type 1 has an invalid length. [ 247.488328][T16550] netlink: 'syz.5.5086': attribute type 11 has an invalid length. [ 247.488352][T16550] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5086'. [ 247.571006][T16361] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.587066][T16361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.591880][T16361] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.606832][T16361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.615431][T16361] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.640436][T16361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.646374][T16361] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.659496][T16361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.779266][ T5924] Bluetooth: hci10: command tx timeout [ 247.865160][T16361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.902687][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.917411][ T201] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.917512][ T201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.944683][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.944772][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.059790][T16361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.118570][T16586] netlink: 'syz.8.5099': attribute type 1 has an invalid length. [ 248.148906][T16589] netlink: 'syz.9.5102': attribute type 1 has an invalid length. [ 248.663489][T16622] netlink: 3604 bytes leftover after parsing attributes in process `syz.5.5115'. [ 248.823520][T16361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.946701][T16361] veth0_vlan: entered promiscuous mode [ 248.967532][T16361] veth1_vlan: entered promiscuous mode [ 249.023501][T16361] veth0_macvtap: entered promiscuous mode [ 249.048950][T16361] veth1_macvtap: entered promiscuous mode [ 249.060174][ T5924] Bluetooth: hci9: command tx timeout [ 249.092543][T16361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.112568][T16361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.337261][T16644] SET target dimension over the limit! [ 249.381288][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.382052][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.382295][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.425961][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.534127][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.534150][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.683865][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.683886][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.860949][ T5924] Bluetooth: hci10: command tx timeout [ 250.037821][ T50] IPVS: starting estimator thread 0... [ 250.118887][T16677] IPVS: using max 34 ests per chain, 81600 per kthread [ 250.128093][T16680] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5141'. [ 250.560055][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5156'. [ 250.687368][T16720] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5162'. [ 250.825275][T16729] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5165'. [ 251.215549][T16755] IPVS: length: 239 != 24 [ 251.708443][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5196'. [ 251.792671][T16795] netlink: 'syz.5.5198': attribute type 2 has an invalid length. [ 251.939660][ T5924] Bluetooth: hci10: command tx timeout [ 251.993087][T16810] dvmrp1: entered allmulticast mode [ 252.139671][T16819] netlink: 'syz.2.5209': attribute type 7 has an invalid length. [ 252.139695][T16819] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5209'. [ 252.227505][T16826] IPv6: Can't replace route, no match found [ 252.318413][T16832] tunl0: entered promiscuous mode [ 252.324120][T16832] netlink: 'syz.9.5216': attribute type 4 has an invalid length. [ 252.324142][T16832] netlink: 9 bytes leftover after parsing attributes in process `syz.9.5216'. [ 252.484632][T16841] netlink: 'syz.2.5220': attribute type 11 has an invalid length. [ 252.484656][T16841] netlink: 'syz.2.5220': attribute type 4 has an invalid length. [ 252.484669][T16841] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5220'. [ 253.087896][ T5816] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 253.101165][ T5816] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 253.103412][ T5816] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 253.107419][ T5816] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 253.108186][ T5816] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 253.565911][T16912] Cannot find set identified by id 0 to match [ 253.770537][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5255'. [ 253.988034][T16879] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.172418][T16946] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5274'. [ 254.172442][T16946] netlink: 11 bytes leftover after parsing attributes in process `syz.8.5274'. [ 254.473491][T16961] netlink: 'syz.8.5271': attribute type 11 has an invalid length. [ 254.632070][T16879] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.632223][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.632376][T16879] bridge_slave_0: entered allmulticast mode [ 254.634142][T16879] bridge_slave_0: entered promiscuous mode [ 254.667328][T16879] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.667475][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.667927][T16879] bridge_slave_1: entered allmulticast mode [ 254.693451][T16879] bridge_slave_1: entered promiscuous mode [ 254.698976][T16974] netlink: 'syz.2.5277': attribute type 21 has an invalid length. [ 254.754012][T16974] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 254.771136][T16974] bond1 (unregistering): Released all slaves [ 254.851712][T16879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.891115][T16879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.001430][T16879] team0: Port device team_slave_0 added [ 255.009607][T16879] team0: Port device team_slave_1 added [ 255.122343][T16879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.122361][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.122386][T16879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.123647][T16993] geneve0: entered allmulticast mode [ 255.144705][T16879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.144722][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.144747][T16879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.219154][ T5924] Bluetooth: hci11: command tx timeout [ 255.264593][T16879] hsr_slave_0: entered promiscuous mode [ 255.265557][T16879] hsr_slave_1: entered promiscuous mode [ 255.266286][T16879] debugfs: 'hsr0' already exists in 'hsr' [ 255.266304][T16879] Cannot create hsr debugfs directory [ 255.437469][T17007] netlink: Invalid conntrack timeout [ 255.437500][T17007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.741428][T17027] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 255.783799][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.845575][T17029] netlink: 'syz.2.5304': attribute type 7 has an invalid length. [ 255.899522][T17031] netlink: 'syz.2.5307': attribute type 21 has an invalid length. [ 255.899545][T17031] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5307'. [ 255.927325][T17031] netlink: 'syz.2.5307': attribute type 5 has an invalid length. [ 255.927348][T17031] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5307'. [ 255.962576][T17033] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5306'. [ 256.072043][T16879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.269929][T16879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.302492][T17049] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 256.403954][T16879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.431991][T17055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.565669][T17065] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 256.605500][T16879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.011990][T16879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.033158][T16879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.034096][T16879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.053503][T16879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.054378][T16879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.078592][T16879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.081461][T16879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.103887][T16879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.215955][T17106] netlink: 'syz.2.5339': attribute type 2 has an invalid length. [ 257.215998][T17106] netlink: 'syz.2.5339': attribute type 2 has an invalid length. [ 257.299236][ T5924] Bluetooth: hci11: command tx timeout [ 257.487727][T16879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.554885][T16879] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.568511][T17126] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5350'. [ 257.591294][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.591398][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.633992][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.634152][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.778281][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5353'. [ 257.778310][T17136] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5353'. [ 257.866484][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5356'. [ 258.533677][T17185] netlink: 'syz.8.5376': attribute type 4 has an invalid length. [ 258.584879][T17185] .`: renamed from bond0 (while UP) [ 258.840231][T17204] openvswitch: netlink: nsh attr 350 is out of range max 3 [ 259.064063][T16879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.379041][ T5924] Bluetooth: hci11: command tx timeout [ 259.597491][T16879] veth0_vlan: entered promiscuous mode [ 259.627442][T16879] veth1_vlan: entered promiscuous mode [ 259.665424][T16879] veth0_macvtap: entered promiscuous mode [ 259.673158][T17205] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 259.687534][T16879] veth1_macvtap: entered promiscuous mode [ 259.783937][T16879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.805060][T16879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.841158][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.872178][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.872500][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.872535][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.112290][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.112311][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.204482][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.204543][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.341739][T17288] __nla_validate_parse: 1 callbacks suppressed [ 260.341760][T17288] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5420'. [ 260.563498][T17298] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 260.570934][T17298] bond2 (unregistering): Released all slaves [ 260.881577][T17319] netlink: 'syz.9.5434': attribute type 11 has an invalid length. [ 260.881603][T17319] netlink: 'syz.9.5434': attribute type 4 has an invalid length. [ 260.881616][T17319] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5434'. [ 261.294303][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5441'. [ 261.459372][ T5924] Bluetooth: hci11: command tx timeout [ 261.496673][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5447'. [ 261.496707][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5447'. [ 261.496740][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5447'. [ 261.592311][T17357] 8021q: VLANs not supported on lo [ 261.851133][T17369] netlink: 'syz.2.5459': attribute type 11 has an invalid length. [ 261.851157][T17369] netlink: 'syz.2.5459': attribute type 11 has an invalid length. [ 261.851169][T17369] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5459'. [ 262.067524][T17380] SET target dimension over the limit! [ 262.524277][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5484'. [ 262.524304][T17419] netlink: 'syz.4.5484': attribute type 1 has an invalid length. [ 263.505987][T17485] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5516'. [ 263.698414][T17500] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5522'. [ 263.768558][T17505] netlink: 'syz.5.5525': attribute type 1 has an invalid length. [ 263.979969][T17520] xt_connbytes: Forcing CT accounting to be enabled [ 263.979993][T17520] Cannot find set identified by id 0 to match [ 264.237485][T17537] xfrm1: entered allmulticast mode [ 264.836484][T17586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.836504][T17586] IPv6: NLM_F_CREATE should be set when creating new route [ 264.836534][T17586] IPv6: NLM_F_CREATE should be set when creating new route [ 264.960399][T17592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.135242][T17606] xt_CONNSECMARK: invalid mode: 0 [ 265.226955][T17610] openvswitch: netlink: IPv4 tunnel dst address is zero [ 265.341666][T17620] lo: entered promiscuous mode [ 265.345986][T17620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.605026][T17632] netlink: 'syz.2.5588': attribute type 9 has an invalid length. [ 265.632442][T17637] netlink: ct_mark mask cannot be 0 [ 265.632472][T17637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.127434][T17670] netlink: 'syz.2.5604': attribute type 1 has an invalid length. [ 266.127457][T17670] __nla_validate_parse: 4 callbacks suppressed [ 266.127470][T17670] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5604'. [ 266.272055][T17675] openvswitch: netlink: Actions may not be safe on all matching packets [ 266.603478][T17697] netlink: 'syz.2.5620': attribute type 2 has an invalid length. [ 266.897683][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5628'. [ 267.122752][T17729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.287159][T17734] bond3: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 267.294590][T17734] bond3 (unregistering): Released all slaves [ 267.346933][T17742] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5641'. [ 267.358555][T17742] gretap0: entered promiscuous mode [ 267.400333][T17744] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5642'. [ 267.754427][T17766] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 267.754452][T17766] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 268.023999][T17787] Cannot find add_set index 0 as target [ 268.102081][T17791] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 268.287979][T17806] netlink: 'syz.2.5673': attribute type 2 has an invalid length. [ 268.672227][T17834] netlink: 'syz.2.5685': attribute type 2 has an invalid length. [ 269.107318][T17865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5710'. [ 269.229099][T17873] bond0: option ad_select: unable to set because the bond device is up [ 269.375899][T17884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.378672][T17885] ip6t_hbh: too many supported opts specified [ 269.443065][T17888] openvswitch: netlink: Message has 1 unknown bytes. [ 269.521125][T17895] xt_TCPMSS: Only works on TCP SYN packets [ 269.701518][T17908] netlink: 'syz.8.5723': attribute type 1 has an invalid length. [ 269.701542][T17908] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5723'. [ 269.701557][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5723'. [ 269.829029][T17917] netlink: 'syz.8.5726': attribute type 1 has an invalid length. [ 269.871320][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5728'. [ 269.871351][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5728'. [ 270.024096][T17931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5734'. [ 270.024128][T17931] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 271.071984][T18005] netlink: 'syz.9.5770': attribute type 11 has an invalid length. [ 271.072008][T18005] netlink: 'syz.9.5770': attribute type 11 has an invalid length. [ 271.253075][T18019] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 271.353127][T18028] netlink: 'syz.2.5778': attribute type 1 has an invalid length. [ 271.353148][T18028] __nla_validate_parse: 2 callbacks suppressed [ 271.353158][T18028] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5778'. [ 271.384764][T18025] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 271.406891][T18025] bond3 (unregistering): Released all slaves [ 271.467727][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5779'. [ 271.467758][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5779'. [ 271.467791][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5779'. [ 271.969463][T18058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.147051][T18077] openvswitch: netlink: Duplicate or invalid key (type 0). [ 272.383048][T18082] netdevsim netdevsim9: Direct firmware load for ÿ failed with error -2 [ 272.383076][T18082] netdevsim netdevsim9: Falling back to sysfs fallback for: ÿ [ 272.950747][T18124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.271235][T18142] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5823'. [ 273.293491][T18144] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5824'. [ 273.686896][T18176] netlink: 524 bytes leftover after parsing attributes in process `syz.9.5840'. [ 273.775897][T18180] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 273.922206][T18191] netlink: 'syz.5.5849': attribute type 6 has an invalid length. [ 274.218619][T18212] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 274.635586][T18242] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 275.327503][T18298] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5898'. [ 275.842987][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5918'. [ 275.843012][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5918'. [ 275.845661][T18334] vlan0: entered promiscuous mode [ 276.297257][T18363] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 276.297904][T18358] xt_CT: No such helper "pptp" [ 276.655076][T18386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5942'. [ 276.873869][T18403] netlink: 'syz.8.5949': attribute type 2 has an invalid length. [ 276.951383][T18408] netlink: NAT attribute has 1 unknown bytes [ 276.951418][T18408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.015965][T18411] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5954'. [ 277.135087][T18420] netlink: 'syz.5.5959': attribute type 9 has an invalid length. [ 277.815882][T18468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.955643][T18482] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 278.126654][T18493] netlink: 'syz.2.5993': attribute type 15 has an invalid length. [ 278.346377][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6002'. [ 278.346411][T18508] netlink: 'syz.2.6002': attribute type 8 has an invalid length. [ 278.621731][T18530] Cannot find del_set index 3 as target [ 278.685246][T18532] netlink: 'syz.5.6016': attribute type 10 has an invalid length. [ 278.685270][T18532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6016'. [ 278.733966][T18536] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6015'. [ 278.764958][T18539] xt_esp: unknown flags DD [ 278.965218][T18553] netlink: 'syz.2.6024': attribute type 5 has an invalid length. [ 279.074292][T18560] netlink: 'syz.8.6028': attribute type 2 has an invalid length. [ 279.147671][T18565] openvswitch: netlink: Message has 1 unknown bytes. [ 279.151815][T18563] ip6gre1: entered allmulticast mode [ 279.754593][ T5816] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 279.757190][ T5816] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 279.773436][ T5816] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 279.786755][ T5816] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 279.794822][ T5816] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 280.192214][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6056'. [ 280.580581][T18650] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6067'. [ 280.580616][T18650] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 280.586717][T18649] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 280.754593][T18597] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.865156][T18661] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 281.083137][T18675] netlink: 13 bytes leftover after parsing attributes in process `syz.9.6077'. [ 281.289764][T18597] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.289955][T18597] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.290133][T18597] bridge_slave_0: entered allmulticast mode [ 281.292174][T18597] bridge_slave_0: entered promiscuous mode [ 281.297547][T18597] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.298614][T18597] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.299054][T18597] bridge_slave_1: entered allmulticast mode [ 281.303137][T18597] bridge_slave_1: entered promiscuous mode [ 281.342988][T18597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.346419][T18597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.435631][T18597] team0: Port device team_slave_0 added [ 281.438387][T18597] team0: Port device team_slave_1 added [ 281.481336][T18597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.481354][T18597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.481380][T18597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.483201][T18597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.483215][T18597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.483240][T18597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.612526][T18696] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 281.631468][T18597] hsr_slave_0: entered promiscuous mode [ 281.632799][T18597] hsr_slave_1: entered promiscuous mode [ 281.633481][T18597] debugfs: 'hsr0' already exists in 'hsr' [ 281.633499][T18597] Cannot create hsr debugfs directory [ 281.837696][T18705] netlink: 'syz.5.6092': attribute type 1 has an invalid length. [ 281.860178][ T5924] Bluetooth: hci12: command tx timeout [ 282.053593][T18597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.083894][T18714] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6094'. [ 282.083924][T18714] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6094'. [ 282.213132][T18597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.381856][T18597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.554798][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6111'. [ 282.573702][T18597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.844715][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6118'. [ 282.844765][T18762] openvswitch: netlink: Missing key (keys=40, expected=100) [ 283.024009][T18597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.043556][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.044537][T18597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.068959][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.069735][T18597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.096014][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.096889][T18597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.105487][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.195636][T18788] netlink: 'syz.8.6129': attribute type 1 has an invalid length. [ 283.195658][T18788] netlink: 220 bytes leftover after parsing attributes in process `syz.8.6129'. [ 283.388110][T18795] bond1: entered promiscuous mode [ 283.388171][T18795] bond1: entered allmulticast mode [ 283.388562][T18795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.425475][T18597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.451249][T18597] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.471551][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.471649][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.498398][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.498500][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.848436][T18774] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 283.940471][ T5924] Bluetooth: hci12: command tx timeout [ 284.040443][T18816] openvswitch: netlink: Multiple metadata blocks provided [ 284.601275][T18841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.783414][T18850] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6148'. [ 284.783439][T18850] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6148'. [ 284.795702][T18851] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.795802][T18851] netlink: 'syz.2.6149': attribute type 1 has an invalid length. [ 285.003383][T18597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.149410][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6157'. [ 285.205983][T18597] veth0_vlan: entered promiscuous mode [ 285.234463][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6154'. [ 285.245927][T18597] veth1_vlan: entered promiscuous mode [ 285.374336][T18597] veth0_macvtap: entered promiscuous mode [ 285.396387][T18597] veth1_macvtap: entered promiscuous mode [ 285.456784][T18597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.490029][T18597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.532431][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.535462][ T195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.535502][ T195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.535533][ T195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.903802][T18908] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 286.019357][ T5924] Bluetooth: hci12: command tx timeout [ 286.098984][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.099007][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.159284][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.159305][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.471321][T18931] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 286.494441][T18931] bond1 (unregistering): Released all slaves [ 286.501321][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6191'. [ 286.827729][T18963] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 286.886941][T18966] xt_HMARK: spi-set and port-set can't be combined [ 287.100513][T18980] __nla_validate_parse: 2 callbacks suppressed [ 287.100535][T18980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6208'. [ 287.438014][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6220'. [ 287.438054][T19002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6220'. [ 287.438069][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6220'. [ 288.060472][T19044] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 288.062702][T19044] bond0 (unregistering): Released all slaves [ 288.099370][ T5924] Bluetooth: hci12: command tx timeout [ 288.256654][T19058] dvmrp0: entered allmulticast mode [ 288.855573][T19094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.942091][T19106] netlink: 'syz.2.6268': attribute type 1 has an invalid length. [ 288.942116][T19106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6268'. [ 288.942131][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6268'. [ 289.060652][T19114] netlink: 'syz.8.6273': attribute type 2 has an invalid length. [ 289.143269][T19120] netlink: 'syz.8.6275': attribute type 2 has an invalid length. [ 289.252113][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6278'. [ 289.252144][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6278'. [ 289.313938][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6280'. [ 289.723256][T19161] netlink: 'syz.8.6293': attribute type 21 has an invalid length. [ 289.723352][T19161] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6293'. [ 290.002242][T19179] xt_addrtype: ipv6 does not support BROADCAST matching [ 290.146964][T19187] smc: removing ib device syz0 [ 290.245919][T19195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.405754][T19187] smbdirect: ib_dev[syz0] removed [ 291.024102][T19230] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 291.189695][T19236] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 292.678886][T19302] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 292.835228][T19306] netlink: 'syz.2.6363': attribute type 8 has an invalid length. [ 293.458270][T19333] __nla_validate_parse: 2 callbacks suppressed [ 293.458293][T19333] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6377'. [ 293.604928][T19341] x_tables: unsorted underflow at hook 4 [ 294.242720][T19372] netlink: 13 bytes leftover after parsing attributes in process `syz.8.6396'. [ 294.318327][T19375] sctp: [Deprecated]: syz.9.6398 (pid 19375) Use of int in maxseg socket option. [ 294.318327][T19375] Use struct sctp_assoc_value instead [ 294.465710][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6400'. [ 294.574236][T19383] netlink: 'syz.8.6402': attribute type 1 has an invalid length. [ 294.574258][T19383] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6402'. [ 295.030658][T19403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.267360][T19422] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6420'. [ 295.267389][T19422] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6420'. [ 295.421880][T19433] IPv6: NLM_F_REPLACE set, but no existing node found! [ 295.527932][T19437] netlink: 'syz.9.6428': attribute type 16 has an invalid length. [ 295.527957][T19437] netlink: 'syz.9.6428': attribute type 17 has an invalid length. [ 295.528098][T19437] lo: left promiscuous mode [ 295.533386][T19437] tunl0: left promiscuous mode [ 295.672928][T19437] vlan0: left promiscuous mode [ 295.698635][T19437] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 295.699740][T19437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.726507][T19437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.878435][T19454] netlink: 'syz.5.6435': attribute type 1 has an invalid length. [ 296.338439][T19487] xt_TCPMSS: Only works on TCP SYN packets [ 296.724758][T19513] netlink: 'syz.5.6464': attribute type 21 has an invalid length. [ 296.724840][T19513] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6464'. [ 296.764804][T19514] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6463'. [ 296.823630][T19514] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6463'. [ 297.129179][T19541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6477'. [ 297.239358][T19549] netlink: 'syz.2.6480': attribute type 1 has an invalid length. [ 297.599597][T19576] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.381914][T19634] openvswitch: netlink: Invalid VLAN frame [ 298.447570][T19637] Cannot find del_set index 3 as target [ 299.174982][T19692] __nla_validate_parse: 1 callbacks suppressed [ 299.175002][T19692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6552'. [ 299.454439][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6560'. [ 299.640074][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6567'. [ 300.539088][T19786] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 301.480407][T19857] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6632'. [ 301.599407][T19867] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6637'. [ 301.731299][T19873] veth3: entered promiscuous mode [ 301.731326][T19873] veth3: entered allmulticast mode [ 301.850955][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6643'. [ 302.177199][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6657'. [ 302.177223][T19905] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6657'. [ 302.177256][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6657'. [ 302.401924][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6663'. [ 302.589645][T19934] TCP: TCP_TX_DELAY enabled [ 302.688215][T19943] netlink: 'syz.9.6673': attribute type 21 has an invalid length. [ 303.572814][ T5816] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 303.577484][ T5816] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 303.580421][ T5816] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 303.602234][ T5816] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 303.617341][ T5816] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 304.043584][T20024] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 304.082972][T20027] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.152608][T19998] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.623679][T20060] __nla_validate_parse: 1 callbacks suppressed [ 304.623699][T20060] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6720'. [ 304.623714][T20060] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6720'. [ 304.624558][T19998] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.624722][T19998] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.624857][T19998] bridge_slave_0: entered allmulticast mode [ 304.626569][T19998] bridge_slave_0: entered promiscuous mode [ 304.629653][T19998] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.629812][T19998] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.629936][T19998] bridge_slave_1: entered allmulticast mode [ 304.631540][T19998] bridge_slave_1: entered promiscuous mode [ 304.662138][T19998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.665188][T19998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.710084][T19998] team0: Port device team_slave_0 added [ 304.712991][T19998] team0: Port device team_slave_1 added [ 304.753513][T19998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.753530][T19998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.753554][T19998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.755611][T19998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.755624][T19998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.755648][T19998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.847870][T19998] hsr_slave_0: entered promiscuous mode [ 304.850177][T19998] hsr_slave_1: entered promiscuous mode [ 304.850903][T19998] debugfs: 'hsr0' already exists in 'hsr' [ 304.850922][T19998] Cannot create hsr debugfs directory [ 305.225910][T20081] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6729'. [ 305.365376][T19998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.365410][T19998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 305.527912][T19998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.527949][T19998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 305.689313][T19998] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.689347][T19998] netdevsim netdevsim1  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 305.699844][ T5924] Bluetooth: hci13: command tx timeout [ 305.910371][T19998] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.915716][T19998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.918221][T19998] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.961900][T19998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.966652][T19998] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.995811][T19998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.997480][T19998] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.012570][T19998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.026270][T20118] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6741'. [ 306.076084][T20124] netlink: 'syz.9.6742': attribute type 5 has an invalid length. [ 306.076107][T20124] netlink: 140 bytes leftover after parsing attributes in process `syz.9.6742'. [ 306.144951][T20128] netlink: 'syz.9.6744': attribute type 10 has an invalid length. [ 306.169200][T20128] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 306.169367][T20128] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 306.241561][T19998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.284735][T20132] netlink: 'syz.5.6747': attribute type 30 has an invalid length. [ 306.313627][T20132] bond4: option arp_missed_max: invalid value (0) [ 306.313651][T20132] bond4: option arp_missed_max: allowed values 1 - 255 [ 306.315246][T20132] bond4 (unregistering): Released all slaves [ 306.347920][T19998] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.357982][ T201] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.358083][ T201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.368603][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.368748][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.707375][T20154] bridge2: entered promiscuous mode [ 306.707437][T20154] bridge2: entered allmulticast mode [ 306.847812][T20162] xt_cgroup: path and classid specified [ 307.217082][T19998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.311364][T19998] veth0_vlan: entered promiscuous mode [ 307.327265][T19998] veth1_vlan: entered promiscuous mode [ 307.381855][T19998] veth0_macvtap: entered promiscuous mode [ 307.386010][T19998] veth1_macvtap: entered promiscuous mode [ 307.426180][T19998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.443134][T19998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.511484][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.511525][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.524779][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.524836][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.634724][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.634745][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.673569][T20199] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6775'. [ 307.714042][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.714062][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.779540][ T5816] Bluetooth: hci13: command tx timeout [ 308.111453][T20226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.218410][T20235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.218436][T20235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.236296][T20235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.236321][T20235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.357097][T20242] hsr0: entered allmulticast mode [ 308.357119][T20242] hsr_slave_0: entered allmulticast mode [ 308.357134][T20242] hsr_slave_1: entered allmulticast mode [ 308.612603][T20258] netlink: zone id is out of range [ 308.612620][T20258] netlink: zone id is out of range [ 308.612628][T20258] netlink: zone id is out of range [ 308.612636][T20258] netlink: zone id is out of range [ 308.612644][T20258] netlink: zone id is out of range [ 308.612652][T20258] netlink: zone id is out of range [ 308.612914][T20258] netlink: zone id is out of range [ 309.059115][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 309.206033][T20299] net_ratelimit: 3 callbacks suppressed [ 309.206053][T20299] openvswitch: netlink: Invalid VLAN frame [ 309.346200][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6828'. [ 309.441054][T20314] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6830'. [ 309.563678][T20322] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 309.598141][T20325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6834'. [ 309.840633][T20342] netlink: 'syz.9.6844': attribute type 24 has an invalid length. [ 309.849468][T20344] netlink: 'syz.5.6845': attribute type 3 has an invalid length. [ 309.849489][T20344] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6845'. [ 309.859008][ T5924] Bluetooth: hci13: command tx timeout [ 309.941081][T20347] netlink: 'syz.5.6847': attribute type 3 has an invalid length. [ 309.941104][T20347] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6847'. [ 310.099719][ T5816] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 310.120659][ T5816] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 310.124023][ T5816] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 310.125511][ T5816] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 310.128480][ T5816] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 310.769132][T20397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.869171][T20354] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.016606][T20411] tipc: Can't bind to reserved service type 2 [ 311.351401][T20432] openvswitch: netlink: IP tunnel dst address not specified [ 311.443333][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6884'. [ 311.457639][T20354] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.457803][T20354] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.457940][T20354] bridge_slave_0: entered allmulticast mode [ 311.461578][T20354] bridge_slave_0: entered promiscuous mode [ 311.466446][T20354] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.466607][T20354] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.466746][T20354] bridge_slave_1: entered allmulticast mode [ 311.468436][T20354] bridge_slave_1: entered promiscuous mode [ 311.503207][T20354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.507117][T20354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.583269][T20354] team0: Port device team_slave_0 added [ 311.588230][T20354] team0: Port device team_slave_1 added [ 311.636959][T20354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.636977][T20354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.637002][T20354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.673904][T20354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.673921][T20354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.673948][T20354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.783751][T20354] hsr_slave_0: entered promiscuous mode [ 311.784717][T20354] hsr_slave_1: entered promiscuous mode [ 311.785451][T20354] debugfs: 'hsr0' already exists in 'hsr' [ 311.785469][T20354] Cannot create hsr debugfs directory [ 311.815540][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6889'. [ 311.926832][T20457] xt_cgroup: no path or classid specified [ 311.939627][ T5816] Bluetooth: hci13: command tx timeout [ 311.944418][T20455] netlink: 'syz.1.6892': attribute type 4 has an invalid length. [ 312.200049][T20354] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.260081][ T5816] Bluetooth: hci14: command tx timeout [ 312.309213][T20470] geneve2: entered allmulticast mode [ 312.469210][T20354] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.547037][T20354] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.702440][T20354] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.955585][T20354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 312.976796][T20354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.987832][T20354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.003149][T20354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.005273][T20354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.028818][T20354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.030067][T20354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.053506][T20354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.090579][T20506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.339343][T20354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.366316][T20354] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.391836][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.391925][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.417558][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.417671][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.426776][T20530] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 313.935243][T20554] netlink: del zone limit has 4 unknown bytes [ 314.155278][T20567] netlink: 'syz.1.6940': attribute type 1 has an invalid length. [ 314.282391][T20354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.339334][ T5816] Bluetooth: hci14: command tx timeout [ 314.695606][T20598] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6952'. [ 314.734420][T20354] veth0_vlan: entered promiscuous mode [ 314.752764][T20354] veth1_vlan: entered promiscuous mode [ 314.795964][T20354] veth0_macvtap: entered promiscuous mode [ 314.811630][T20354] veth1_macvtap: entered promiscuous mode [ 314.837821][T20354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.838228][T20602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.870476][T20354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.884515][T20604] xt_ecn: cannot match TCP bits for non-tcp packets [ 314.949142][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.949207][ T64] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.949238][ T64] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.949266][ T64] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.155130][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.155150][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.207296][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.207324][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.081223][T20677] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6990'. [ 316.281964][T20691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 316.323966][T20693] netlink: 260 bytes leftover after parsing attributes in process `syz.9.6998'. [ 316.419257][ T5816] Bluetooth: hci14: command tx timeout [ 316.835232][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7015'. [ 317.057336][T20745] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 317.179878][T20754] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.243443][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.781757][ T5923] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 317.796455][ T5923] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 317.799433][ T5923] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 317.814590][ T5923] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 317.816427][ T5923] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 317.984677][T20801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7048'. [ 318.086717][T20806] netlink: 'syz.6.7051': attribute type 5 has an invalid length. [ 318.086742][T20806] netlink: 140 bytes leftover after parsing attributes in process `syz.6.7051'. [ 318.118180][T20808] netlink: 'syz.9.7052': attribute type 1 has an invalid length. [ 318.118203][T20808] netlink: 'syz.9.7052': attribute type 2 has an invalid length. [ 318.118216][T20808] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7052'. [ 318.198557][T20813] netlink: 'syz.9.7056': attribute type 1 has an invalid length. [ 318.384094][T20825] netlink: 'syz.9.7060': attribute type 10 has an invalid length. [ 318.396184][T20825] team0: Device vxcan1 is of different type [ 318.501255][ T5923] Bluetooth: hci14: command tx timeout [ 318.547520][T20787] virt_wifi0 speed is unknown, defaulting to 1000 [ 318.932323][T20857] netlink: 'syz.6.7072': attribute type 1 has an invalid length. [ 319.300842][ T5923] Bluetooth: hci6: command 0x0406 tx timeout [ 319.351631][T20787] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.351791][T20787] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.351932][T20787] bridge_slave_0: entered allmulticast mode [ 319.353581][T20787] bridge_slave_0: entered promiscuous mode [ 319.385428][T20884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.385464][T20884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.388615][T20884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.388637][T20884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.447370][T20787] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.447547][T20787] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.447714][T20787] bridge_slave_1: entered allmulticast mode [ 319.461664][T20787] bridge_slave_1: entered promiscuous mode [ 319.523498][T20787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.524796][T20890] netlink: zone id is out of range [ 319.524812][T20890] netlink: zone id is out of range [ 319.524820][T20890] netlink: zone id is out of range [ 319.524828][T20890] netlink: zone id is out of range [ 319.524836][T20890] netlink: zone id is out of range [ 319.524842][T20890] netlink: zone id is out of range [ 319.524854][T20890] netlink: zone id is out of range [ 319.587093][T20787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.641321][T20787] team0: Port device team_slave_0 added [ 319.644437][T20787] team0: Port device team_slave_1 added [ 319.688144][T20787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.688162][T20787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.688187][T20787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.744281][T20787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.744298][T20787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.744324][T20787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.859982][ T5816] Bluetooth: hci15: command tx timeout [ 319.893999][T20787] hsr_slave_0: entered promiscuous mode [ 319.895066][T20787] hsr_slave_1: entered promiscuous mode [ 319.896813][T20787] debugfs: 'hsr0' already exists in 'hsr' [ 319.896831][T20787] Cannot create hsr debugfs directory [ 319.922264][T20903] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 320.437316][T20787] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.437351][T20787] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.437373][T20787] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.556606][T20935] net_ratelimit: 2 callbacks suppressed [ 320.556627][T20935] netlink: ct family unspecified [ 320.622078][T20787] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.622113][T20787] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.622139][T20787] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.785550][T20787] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.788617][T20787] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.788649][T20787] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.821943][T20947] netlink: 'syz.6.7113': attribute type 8 has an invalid length. [ 320.954972][T20787] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.955009][T20787] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.955034][T20787] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.973591][T20959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7119'. [ 321.147959][T20965] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7122'. [ 321.304137][T20971] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7127'. [ 321.306163][T20787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.314290][T20975] netlink: 'syz.1.7129': attribute type 24 has an invalid length. [ 321.339611][T20787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.356181][T20787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.374518][T20787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.380957][T20787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 321.398443][T20787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.404433][T20787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.432675][T20979] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7131'. [ 321.432713][T20979] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 321.436273][T20787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.519015][T20988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.694542][T20787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.724514][T20787] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.746041][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.746155][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.774078][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.774165][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.939350][ T5816] Bluetooth: hci15: command tx timeout [ 322.522581][T21043] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 322.861513][T20787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.997781][T20787] veth0_vlan: entered promiscuous mode [ 323.034617][T20787] veth1_vlan: entered promiscuous mode [ 323.128309][T20787] veth0_macvtap: entered promiscuous mode [ 323.144953][T20787] veth1_macvtap: entered promiscuous mode [ 323.186359][T20787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.204824][T20787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.350577][ T195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.353272][ T989] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.385070][ T989] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.386485][ T989] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.468011][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.468033][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.537363][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.537384][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.713546][T21103] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 324.019188][ T5923] Bluetooth: hci15: command tx timeout [ 324.263632][T21143] veth1_macvtap: left promiscuous mode [ 324.263660][T21143] macsec0: entered promiscuous mode [ 324.419608][ T5923] Bluetooth: hci7: command 0x0406 tx timeout [ 324.503140][T21160] netlink: Conntrack attr has 1 unknown bytes [ 324.503174][T21160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.577290][T21164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.577315][T21164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.596161][T21164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.596184][T21164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.936933][T21187] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.987229][ T5816] Bluetooth: hci9: unexpected event 0x04 length: 17 > 10 [ 324.987254][ T5816] Bluetooth: unknown link type 128 [ 325.089096][T21197] SET target dimension over the limit! [ 325.206680][T21202] netlink: Unknown conntrack attr (0) [ 325.282941][T21201] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.284355][T21201] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.284498][T21201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.285098][T21208] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 325.587619][T21229] xt_ecn: cannot match TCP bits for non-tcp packets [ 325.637032][T21233] netlink: 'syz.9.7247': attribute type 24 has an invalid length. [ 325.901154][T21250] ip6t_srh: unknown srh invflags 4000 [ 325.949888][T21255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7257'. [ 325.949915][T21255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7257'. [ 325.949952][T21255] netlink: 'syz.1.7257': attribute type 3 has an invalid length. [ 326.099339][ T5816] Bluetooth: hci15: command tx timeout [ 326.238240][T21275] netlink: 'syz.3.7266': attribute type 32 has an invalid length. [ 326.561655][T21298] netlink: 'syz.1.7278': attribute type 21 has an invalid length. [ 326.561746][T21298] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7278'. [ 326.649578][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7281'. [ 326.821105][T21315] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7289'. [ 326.911299][T21320] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7288'. [ 327.060591][ T5816] Bluetooth: hci9: command tx timeout [ 328.163170][T21389] netlink: 'syz.1.7325': attribute type 11 has an invalid length. [ 328.163196][T21389] netlink: 'syz.1.7325': attribute type 4 has an invalid length. [ 328.163209][T21389] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7325'. [ 328.384096][ T5923] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 328.385398][T21399] xt_TCPMSS: Only works on TCP SYN packets [ 328.386829][ T5923] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 328.387539][ T5923] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 328.388489][ T5923] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 328.427416][T21403] netlink: NAT attribute has 5 unknown bytes [ 328.427451][T21403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.441207][ T5923] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 328.964845][T21427] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.7339'. [ 328.964934][T21427] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.7339'. [ 329.162764][T21437] netlink: 288 bytes leftover after parsing attributes in process `syz.1.7353'. [ 329.334800][T21446] netlink: 'syz.1.7346': attribute type 1 has an invalid length. [ 329.445746][T21398] virt_wifi0 speed is unknown, defaulting to 1000 [ 330.082306][T21496] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 330.082328][T21496] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 330.128262][T21398] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.133235][T21398] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.133407][T21398] bridge_slave_0: entered allmulticast mode [ 330.164386][T21398] bridge_slave_0: entered promiscuous mode [ 330.174738][T21398] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.186743][T21398] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.186918][T21398] bridge_slave_1: entered allmulticast mode [ 330.205719][T21398] bridge_slave_1: entered promiscuous mode [ 330.328087][T21398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.354891][T21398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.443963][T21398] team0: Port device team_slave_0 added [ 330.469423][T21398] team0: Port device team_slave_1 added [ 330.500241][ T5923] Bluetooth: hci16: command tx timeout [ 330.525381][T21398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.525400][T21398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.525425][T21398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.583075][T21398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.583092][T21398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.583120][T21398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.662414][T21521] ksmbd: Unknown IPC event: 1, ignore. [ 330.743625][T21398] hsr_slave_0: entered promiscuous mode [ 330.746516][T21398] hsr_slave_1: entered promiscuous mode [ 330.752274][T21398] debugfs: 'hsr0' already exists in 'hsr' [ 330.752296][T21398] Cannot create hsr debugfs directory [ 330.846914][T21528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7385'. [ 331.079084][T21548] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 331.415673][T21398] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.454344][T21568] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7405'. [ 331.578343][T21398] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.716345][T21398] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.730362][T21580] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 331.840068][T21398] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.976633][T21574] syz.3.7408 (21574) used greatest stack depth: 17824 bytes left [ 332.066839][T21597] netlink: 'syz.9.7420': attribute type 97 has an invalid length. [ 332.066862][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7420'. [ 332.066878][T21597] netlink: 'syz.9.7420': attribute type 97 has an invalid length. [ 332.066891][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7420'. [ 332.247123][T21398] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 332.266395][T21398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.267264][T21398] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 332.288339][T21398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.293416][T21608] netlink: 'syz.9.7425': attribute type 1 has an invalid length. [ 332.293436][T21608] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7425'. [ 332.316132][T21398] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 332.330844][T21398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.331735][T21398] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 332.359877][T21398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.481187][T21398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.495229][T21620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7428'. [ 332.495259][T21620] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 332.545368][T21398] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.564419][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.564514][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.601133][ T5816] Bluetooth: hci16: command tx timeout [ 332.631840][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.631940][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.745638][T21630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.853041][T21639] netlink: 'syz.1.7438': attribute type 1 has an invalid length. [ 332.853062][T21639] netlink: 'syz.1.7438': attribute type 3 has an invalid length. [ 332.853075][T21639] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7438'. [ 332.969811][T21642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.317896][T21664] netlink: 'syz.1.7447': attribute type 58 has an invalid length. [ 333.317922][T21664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7447'. [ 333.392832][T21671] netlink: 'syz.3.7450': attribute type 2 has an invalid length. [ 333.664489][T21398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.771097][T21692] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 333.785811][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7457'. [ 333.862564][ T32] INFO: task syz.4.3132:12306 blocked for more than 143 seconds. [ 333.862590][ T32] Not tainted syzkaller #0 [ 333.862599][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.862608][ T32] task:syz.4.3132 state:D stack:27104 pid:12306 tgid:12305 ppid:5926 task_flags:0x400140 flags:0x00080002 [ 333.862666][ T32] Call Trace: [ 333.864705][ T32] [ 333.864722][ T32] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.864782][ T32] ? __pfx___schedule+0x10/0x10 [ 333.864816][ T32] ? schedule+0x90/0x2b0 [ 333.864843][ T32] schedule+0x164/0x2b0 [ 333.864869][ T32] schedule_preempt_disabled+0x13/0x30 [ 333.864901][ T32] __mutex_lock+0x7c1/0x1550 [ 333.864933][ T32] ? __mutex_lock+0x5d4/0x1550 [ 333.864963][ T32] ? nfsd_n ** replaying previous printk message ** [ 333.864963][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 333.865011][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 333.865046][ T32] ? net_generic+0x1e/0x240 [ 333.865068][ T32] ? net_generic+0x1e/0x240 [ 333.865094][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 333.865119][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 333.865140][ T32] ? __asan_memset+0x22/0x50 [ 333.865159][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 333.865186][ T32] ? do_syscall_64+0x166/0x520 [ 333.865211][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.865233][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 333.865271][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 333.865314][ T32] ? rcu_is_watching+0x16/0xb0 [ 333.865338][ T32] ? trace_kmalloc+0x2a/0xf0 [ 333.865361][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 333.865384][ T32] ? __nla_parse+0x40/0x60 [ 333.865411][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 333.865437][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 333.865471][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 333.865504][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 333.865540][ T32] ? bpf_lsm_capable+0x9/0x20 [ 333.865559][ T32] ? security_capable+0x7e/0x2c0 [ 333.865590][ T32] genl_rcv_msg+0x614/0x7a0 [ 333.865621][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.865645][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 333.865674][ T32] ? __asan_memcpy+0x40/0x70 [ 333.865692][ T32] ? __skb_clone+0x5c/0x6c0 [ 333.865726][ T32] netlink_rcv_skb+0x226/0x4a0 [ 333.865747][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.865773][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.865808][ T32] ? down_read+0x2be/0x330 [ 333.865840][ T32] genl_rcv+0x28/0x40 [ 333.865862][ T32] netlink_unicast+0x7bd/0x940 [ 333.865910][ T32] netlink_sendmsg+0x813/0xb40 [ 333.865939][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.865967][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 333.865993][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.866013][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 333.866038][ T32] ____sys_sendmsg+0x54e/0x850 [ 333.866072][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.866108][ T32] ? import_iovec+0x73/0xa0 [ 333.866137][ T32] ___sys_sendmsg+0x2a5/0x360 [ 333.866164][ T32] ? __lock_acquire+0x747/0x2de0 [ 333.866188][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.866218][ T32] ? futex_wait+0x2a2/0x390 [ 333.866265][ T32] ? __fget_files+0x2a/0x420 [ 333.866292][ T32] ? __fget_files+0x3a2/0x420 [ 333.866329][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 333.866359][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.866406][ T32] do_syscall_64+0x166/0x520 [ 333.866432][ T32] ? trace_irq_disable+0x3b/0x140 [ 333.866452][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.866470][ T32] ? clear_bhb_loop+0x70/0xc0 [ 333.866492][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.866510][ T32] RIP: 0033:0x7f24b4d9e199 [ 333.866526][ T32] RSP: 002b:00007f24b5cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.866544][ T32] RAX: ffffffffffffffda RBX: 00007f24b5025fa0 RCX: 00007f24b4d9e199 [ 333.866557][ T32] RDX: 00000000000484d0 RSI: 0000200000000000 RDI: 0000000000000003 [ 333.866568][ T32] RBP: 00007f24b4e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 333.866580][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.866590][ T32] R13: 00007f24b5026038 R14: 00007f24b5025fa0 R15: 00007ffd2b544858 [ 333.866621][ T32] [ 333.866631][ T32] INFO: task syz.0.3270:12583 blocked for more than 143 seconds. [ 333.866646][ T32] Not tainted syzkaller #0 [ 333.866656][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.866665][ T32] task:syz.0.3270 state:D stack:27224 pid:12583 tgid:12582 ppid:5918 task_flags:0x400140 flags:0x00080002 [ 333.866716][ T32] Call Trace: [ 333.866722][ T32] [ 333.866732][ T32] __schedule+0x17db/0x58f0 [ 333.866783][ T32] ? __pfx___schedule+0x10/0x10 [ 333.866816][ T32] ? schedule+0x90/0x2b0 [ 333.866843][ T32] schedule+0x164/0x2b0 [ 333.866869][ T32] schedule_preempt_disabled+0x13/0x30 [ 333.866899][ T32] __mutex_lock+0x7c1/0x1550 [ 333.866932][ T32] ? __mutex_lock+0x5d4/0x1550 [ 333.866962][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 333.866991][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 333.867015][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 333.867042][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 333.867296][ T32] ? do_syscall_64+0x166/0x520 [ 333.867324][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.867352][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 333.867385][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 333.867426][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 333.867451][ T32] ? trace_kmalloc+0x2a/0xf0 [ 333.867473][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 333.867500][ T32] ? __nla_parse+0x40/0x60 [ 333.867528][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 333.867554][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 333.867587][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 333.867617][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 333.867655][ T32] ? bpf_lsm_capable+0x9/0x20 [ 333.867672][ T32] ? security_capable+0x7e/0x2c0 [ 333.867700][ T32] genl_rcv_msg+0x614/0x7a0 [ 333.867726][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.867747][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 333.867780][ T32] netlink_rcv_skb+0x226/0x4a0 [ 333.867799][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.867820][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.867850][ T32] ? down_read+0x2be/0x330 [ 333.867877][ T32] genl_rcv+0x28/0x40 [ 333.868210][ T32] netlink_unicast+0x7bd/0x940 [ 333.868254][ T32] netlink_sendmsg+0x813/0xb40 [ 333.868282][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.868310][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 333.868336][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.868355][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 333.868380][ T32] ____sys_sendmsg+0x54e/0x850 [ 333.868411][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.868447][ T32] ? import_iovec+0x73/0xa0 [ 333.868476][ T32] ___sys_sendmsg+0x2a5/0x360 [ 333.868502][ T32] ? __lock_acquire+0x747/0x2de0 [ 333.868528][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.868558][ T32] ? futex_wait+0x2a2/0x390 [ 333.868602][ T32] ? __fget_files+0x2a/0x420 [ 333.868625][ T32] ? __fget_files+0x3a2/0x420 [ 333.868657][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 333.907313][T21699] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7459'. [ 333.907345][T21699] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 333.914858][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.914916][ T32] do_syscall_64+0x166/0x520 [ 333.914943][ T32] ? trace_irq_disable+0x3b/0x140 [ 333.914963][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.914983][ T32] ? clear_bhb_loop+0x70/0xc0 [ 333.915006][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.915024][ T32] RIP: 0033:0x7f265d79e199 [ 333.915041][ T32] RSP: 002b:00007f265e61b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.915062][ T32] RAX: ffffffffffffffda RBX: 00007f265da25fa0 RCX: 00007f265d79e199 [ 333.915076][ T32] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000004 [ 333.915088][ T32] RBP: 00007f265d8358e0 R08: 0000000000000000 R09: 0000000000000000 [ 333.915100][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.915112][ T32] R13: 00007f265da26038 R14: 00007f265da25fa0 R15: 00007ffe5b6076c8 [ 333.915142][ T32] [ 333.915278][ T32] [ 333.915278][ T32] Showing all locks held in the system: [ 333.915295][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 333.915309][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 333.915359][ T32] #1: ffffffff9ad442d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 333.915417][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 333.915430][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 333.915481][ T32] locks held by kworker/u8:6/201: 2, on CPU#1: [ 333.915494][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.915571][ T32] #1: ffffc9000317fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.915624][ T32] locks held by kworker/u8:7/989: 2, on CPU#1: [ 333.915637][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.915686][ T32] #1: ffffc90005327c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.915754][ T32] locks held by getty/5373: 2, on CPU#0: [ 333.915766][ T32] #0: ffff888035fa50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.915809][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 333.915859][ T32] locks held by kworker/u9:2/5816: 3, on CPU#1: [ 333.915872][ T32] #0: ffff8880773cf940 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.915921][ T32] #1: ffffc9000396fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.915970][ T32] #2: ffff888067d34ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 333.916020][ T32] locks held by kworker/1:4/6037: 3, on CPU#1: [ 333.916033][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.916082][ T32] #1: ffffc9000373fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.916132][ T32] #2: ffff888051cf6250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 333.916179][ T32] locks held by syz.2.2798/11622: 2, on CPU#0: [ 333.916193][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.916240][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 333.916296][ T32] locks held by syz.4.3132/12306: 2, on CPU#1: [ 333.916309][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.916355][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 333.924924][ T32] locks held by syz.0.3270/12583: 2, on CPU#0: [ 333.924944][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.925018][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 333.925072][ T32] locks held by syz.1.3579/13273: 2, on CPU#0: [ 333.925085][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.925131][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 333.925187][ T32] locks held by syz.6.4421/15141: 2, on CPU#1: [ 333.925200][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.925245][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 333.925301][ T32] locks held by syz.3.4524/15344: 2, on CPU#0: [ 333.925314][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.925359][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 333.925409][ T32] locks held by syz.7.4849/16007: 2, on CPU#1: [ 333.925422][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.925467][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 333.925521][ T32] locks held by syz.4.5555/17565: 2, on CPU#0: [ 333.925533][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.925578][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 333.925629][ T32] locks held by syz.0.6253/19070: 2, on CPU#1: [ 333.925641][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.925686][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 333.925735][ T32] locks held by syz.8.6409/19398: 2, on CPU#0: [ 333.925747][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.925792][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 333.925841][ T32] locks held by syz.2.6671/19938: 2, on CPU#0: [ 333.925854][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.925899][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 333.925978][ T32] locks held by syz-executor/19998: 4, last CPU#1: [ 333.925991][ T32] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 333.926040][ T32] #1: ffff88802c0eb440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 333.926083][ T32] #2: ffff88807f2ef180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 333.926126][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 333.926181][ T32] locks held by syz.5.6923/20524: 3, on CPU#0: [ 333.926194][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.926239][ T32] #1: ffff88802fad56e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 333.926282][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 333.926336][ T32] locks held by syz-executor/20787: 4, last CPU#1: [ 333.926349][ T32] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 333.926397][ T32] #1: ffff88801b095900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 333.926438][ T32] #2: ffff88807f2ea800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 333.940698][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 333.940757][ T32] locks held by syz.6.7457/21693: 1, on CPU#1: [ 333.940771][ T32] #0: ffff88807ec46c50 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 333.940820][ T32] locks held by syz.9.7459/21699: 1, last CPU#1: [ 333.940833][ T32] #0: ffff88802c6ff180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 333.940885][ T32] locks held by modprobe/21698: 1, last CPU#1: [ 333.940898][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x116/0x500 [ 333.940942][ T32] [ 333.940946][ T32] ============================================= [ 333.940946][ T32] [ 333.940972][ T32] NMI backtrace for cpu 1 [ 333.940989][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 333.941009][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 333.941020][ T32] Call Trace: [ 333.941027][ T32] [ 333.941035][ T32] dump_stack_lvl+0xe8/0x150 [ 333.941063][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 333.941086][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.941118][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 333.941143][ T32] sys_info+0x135/0x170 [ 333.941162][ T32] watchdog+0xfd7/0x1030 [ 333.941189][ T32] ? watchdog+0x1c7/0x1030 [ 333.941214][ T32] kthread+0x38b/0x480 [ 333.941234][ T32] ? __pfx_watchdog+0x10/0x10 [ 333.941251][ T32] ? __pfx_kthread+0x10/0x10 [ 333.941270][ T32] ret_from_fork+0x514/0xb70 [ 333.941298][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 333.941316][ T32] ? __switch_to+0xc89/0x1420 [ 333.941344][ T32] ? __pfx_kthread+0x10/0x10 [ 333.941362][ T32] ret_from_fork_asm+0x1a/0x30 [ 333.941404][ T32] [ 333.941446][ T32] Sending NMI from CPU 1 to CPUs 0: [ 333.941479][ C0] NMI backtrace for cpu 0 [ 333.941490][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 333.941510][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 333.941520][ C0] RIP: 0010:delay_tsc+0x5d/0xd0 [ 333.941541][ C0] Code: 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 55 bf 01 00 00 00 e8 b2 65 af f5 65 48 8b 05 fa 08 b0 07 48 85 c0 74 1c f3 90 01 00 00 00 e8 49 64 af f5 e8 b4 7b 01 00 39 c5 75 0e 0f 01 f9 [ 333.941557][ C0] RSP: 0000:ffffc900001578b8 EFLAGS: 00000082 [ 333.941572][ C0] RAX: 8000000000000001 RBX: 0000000000000899 RCX: ffffffff9a9ed501 [ 333.941586][ C0] RDX: 0000000000000001 RSI: ffffffff8c6dad60 RDI: 00000000ffffffff [ 333.941598][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 333.941608][ C0] R10: dffffc0000000000 R11: ffffffff8be586c0 R12: 1ffffffff35a88b5 [ 333.941621][ C0] R13: 00000000ffffffff R14: 000000af22eb3739 R15: 00000000000001e1 [ 333.941633][ C0] FS: 0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 333.941648][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.941660][ C0] CR2: 00007fb77a67acf0 CR3: 0000000074206000 CR4: 00000000003526f0 [ 333.941676][ C0] Call Trace: [ 333.941683][ C0] [ 333.941690][ C0] wait_for_lsr+0x147/0x2f0 [ 333.941715][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 333.941745][ C0] serial8250_console_write+0xaa1/0x1200 [ 333.941764][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 333.941798][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 333.941817][ C0] ? __schedule+0x17f1/0x58f0 [ 333.941846][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 333.941874][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 333.941897][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 333.941923][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 333.941946][ C0] nbcon_kthread_func+0x679/0x880 [ 333.941968][ C0] ? nbcon_kthread_func+0x163/0x880 [ 333.941987][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 333.942009][ C0] ? __kthread_parkme+0x71/0x1f0 [ 333.942034][ C0] ? __kthread_parkme+0x199/0x1f0 [ 333.942060][ C0] kthread+0x38b/0x480 [ 333.942076][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 333.942093][ C0] ? __pfx_kthread+0x10/0x10 [ 333.942111][ C0] ret_from_fork+0x514/0xb70 [ 333.942127][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 333.942144][ C0] ? __switch_to+0xc89/0x1420 [ 333.942167][ C0] ? __pfx_kthread+0x10/0x10 [ 333.942184][ C0] ret_from_fork_asm+0x1a/0x30 [ 333.942217][ C0] [ 333.957748][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 335.706480][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 335.715595][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.725659][ T32] Call Trace: [ 335.728933][ T32] [ 335.731854][ T32] vpanic+0x56d/0xa60 [ 335.735835][ T32] ? __pfx___schedule+0x10/0x10 [ 335.740686][ T32] ? __pfx_vpanic+0x10/0x10 [ 335.745197][ T32] panic+0xc5/0xd0 [ 335.748917][ T32] ? __pfx_panic+0x10/0x10 [ 335.753327][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 335.758784][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 335.764161][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 335.770317][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 335.776558][ T32] watchdog+0x1030/0x1030 [ 335.780889][ T32] ? watchdog+0x1c7/0x1030 [ 335.785311][ T32] kthread+0x38b/0x480 [ 335.789375][ T32] ? __pfx_watchdog+0x10/0x10 [ 335.794053][ T32] ? __pfx_kthread+0x10/0x10 [ 335.798640][ T32] ret_from_fork+0x514/0xb70 [ 335.803227][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 335.808337][ T32] ? __switch_to+0xc89/0x1420 [ 335.813025][ T32] ? __pfx_kthread+0x10/0x10 [ 335.817615][ T32] ret_from_fork_asm+0x1a/0x30 [ 335.822398][ T32] [ 335.825746][ T32] Kernel Offset: disabled [ 335.830096][ T32] Rebooting in 86400 seconds..