last executing test programs: 2.686734131s ago: executing program 3 (id=2226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x1c, 0xf5}, @val, @mpls}, 0xe) 2.439221417s ago: executing program 3 (id=2231): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @remote}, {0x2, 0x4e27, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 2.274628623s ago: executing program 3 (id=2236): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="ab", 0x34000, 0x4004815, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x43, &(0x7f0000001980)={0x2, 0x4e20, @loopback}, 0x10) 1.248430218s ago: executing program 3 (id=2261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 1.059145896s ago: executing program 0 (id=2267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x1}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) 960.161382ms ago: executing program 4 (id=2268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 922.117717ms ago: executing program 0 (id=2269): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x40, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 823.806136ms ago: executing program 4 (id=2270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20040401, &(0x7f0000000340)={0xa, 0x2, 0x3000, @empty}, 0x1c) 790.822317ms ago: executing program 2 (id=2271): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 756.732202ms ago: executing program 0 (id=2273): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x1d, r2, 0x2, {0x1, 0xf0, 0x2}, 0x2}, 0x18, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24040014) 649.369045ms ago: executing program 0 (id=2274): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xcb5) accept4$unix(r0, 0x0, 0x0, 0x0) 646.278629ms ago: executing program 4 (id=2275): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) recvmmsg(r2, &(0x7f000000c0c0)=[{{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1}, 0x9}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x100, 0x0) 631.702612ms ago: executing program 2 (id=2276): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) read(r2, 0x0, 0x0) read(r2, 0x0, 0x0) 575.298401ms ago: executing program 1 (id=2277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 516.419151ms ago: executing program 0 (id=2278): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) 500.870552ms ago: executing program 2 (id=2279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) 439.833378ms ago: executing program 4 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffaabd}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004080) 439.610689ms ago: executing program 1 (id=2281): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r2}, &(0x7f0000000340)=0x8) 398.750101ms ago: executing program 1 (id=2282): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x7, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20008810) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r1, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) 348.581516ms ago: executing program 2 (id=2283): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, r1, 0x852dd6c070cd7e4d, 0xfffffffc, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 316.833677ms ago: executing program 1 (id=2284): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 260.758934ms ago: executing program 3 (id=2285): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) 240.673022ms ago: executing program 0 (id=2286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001040)={0xcc, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4d, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0xc9e, 0x1, @void, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7, 0x48}}, @val={0x76, 0x6, {0x0, 0x6, 0x41, 0x101}}}}, @NL80211_ATTR_FTM_RESPONDER={0x48, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x3e, 0x3, "9bbcdeb62c40c43d6bd83623f275205d26729c8816590d5eda335739273e6a413a6ebef35df5b6e74d3a199969e63161a1a762dfe9163c8e2b3d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1000}]}, 0xcc}}, 0x39db77225c63fa4c) 239.8128ms ago: executing program 4 (id=2287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 206.976795ms ago: executing program 1 (id=2288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008040) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x20000000) close(r0) 131.260172ms ago: executing program 2 (id=2289): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff01, 0x0) 56.743306ms ago: executing program 2 (id=2290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f0000000640)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) sendto$inet6(r0, &(0x7f00000006c0), 0xffffffffffffff64, 0x4015, 0x0, 0x0) 51.563805ms ago: executing program 1 (id=2291): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 17.991567ms ago: executing program 3 (id=2292): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) 0s ago: executing program 4 (id=2293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe00000600"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 80.873834][ T5605] cgroup: Unknown subsys name 'net' [ 80.994377][ T5605] cgroup: Unknown subsys name 'cpuset' [ 80.998214][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.629286][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.945578][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.963303][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.965233][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.965960][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.966893][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.978878][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.979073][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.979516][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.981326][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.982462][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.990633][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.991202][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.991751][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.008744][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.008940][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.016365][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.039011][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.048599][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.048921][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.064386][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.076262][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.077528][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.083878][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.084997][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.093127][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.117611][ T5624] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.125069][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.128591][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.141192][ T5616] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.149210][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.154877][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.206970][ T5615] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.621271][ T5617] infiniband rxe0: set active [ 86.624319][ T5617] infiniband rxe0: added rxe_eth0 [ 86.670012][ T1219] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.683922][ T5617] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 86.683967][ T5617] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 86.684009][ T5617] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 86.815374][ T5617] RDS/IB: rxe0: added [ 86.822651][ T5617] smc: adding ib device rxe0 with port count 1 [ 86.822954][ T5617] smc: ib device rxe0 port 1 has no pnetid [ 86.909560][ T1219] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.944748][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.112361][ T52] Bluetooth: hci2: command tx timeout [ 87.190696][ T52] Bluetooth: hci3: command tx timeout [ 87.200975][ T52] Bluetooth: hci1: command tx timeout [ 87.201322][ T52] Bluetooth: hci0: command tx timeout [ 87.201582][ T52] Bluetooth: hci4: command tx timeout [ 87.287203][ T1219] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.364181][ T1219] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.477281][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.937319][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.954086][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.954886][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.955079][ T5616] bridge_slave_0: entered allmulticast mode [ 87.957665][ T5616] bridge_slave_0: entered promiscuous mode [ 88.036415][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.036584][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.036730][ T5616] bridge_slave_1: entered allmulticast mode [ 88.057213][ T5616] bridge_slave_1: entered promiscuous mode [ 88.077087][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.077181][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.077530][ T5615] bridge_slave_0: entered allmulticast mode [ 88.079581][ T5615] bridge_slave_0: entered promiscuous mode [ 88.181619][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.181854][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.182009][ T5615] bridge_slave_1: entered allmulticast mode [ 88.183965][ T5615] bridge_slave_1: entered promiscuous mode [ 88.230913][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.269664][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.269808][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.269937][ T5624] bridge_slave_0: entered allmulticast mode [ 88.279259][ T5624] bridge_slave_0: entered promiscuous mode [ 88.297425][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.334588][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.334761][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.334895][ T5624] bridge_slave_1: entered allmulticast mode [ 88.337156][ T5624] bridge_slave_1: entered promiscuous mode [ 88.379685][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.379785][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.379897][ T5618] bridge_slave_0: entered allmulticast mode [ 88.392153][ T5618] bridge_slave_0: entered promiscuous mode [ 88.409058][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.421981][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.483870][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.483981][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.484423][ T5618] bridge_slave_1: entered allmulticast mode [ 88.486786][ T5618] bridge_slave_1: entered promiscuous mode [ 88.542150][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.545875][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.549380][ T5616] team0: Port device team_slave_0 added [ 88.623188][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.625544][ T5616] team0: Port device team_slave_1 added [ 88.629806][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.639744][ T5615] team0: Port device team_slave_0 added [ 88.735247][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.737190][ T5615] team0: Port device team_slave_1 added [ 88.740090][ T5624] team0: Port device team_slave_0 added [ 88.759823][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.759873][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.759963][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.826610][ T5624] team0: Port device team_slave_1 added [ 88.827282][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.827301][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.827322][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.891341][ T5618] team0: Port device team_slave_0 added [ 88.931658][ T5618] team0: Port device team_slave_1 added [ 88.932564][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.932585][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.932604][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.987063][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.987113][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.987181][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.053622][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.053643][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.053670][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.055001][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.055016][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.055041][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.093837][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.093886][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.093950][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.096722][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.191107][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.191160][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.191232][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.201186][ T5628] Bluetooth: hci2: command tx timeout [ 89.280306][ T52] Bluetooth: hci0: command tx timeout [ 89.280342][ T52] Bluetooth: hci1: command tx timeout [ 89.280366][ T52] Bluetooth: hci3: command tx timeout [ 89.280577][ T5628] Bluetooth: hci4: command tx timeout [ 89.351993][ T5616] hsr_slave_0: entered promiscuous mode [ 89.353324][ T5616] hsr_slave_1: entered promiscuous mode [ 89.460941][ T5615] hsr_slave_0: entered promiscuous mode [ 89.462112][ T5615] hsr_slave_1: entered promiscuous mode [ 89.462911][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 89.463003][ T5615] Cannot create hsr debugfs directory [ 89.500887][ T5624] hsr_slave_0: entered promiscuous mode [ 89.501788][ T5624] hsr_slave_1: entered promiscuous mode [ 89.502337][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 89.502358][ T5624] Cannot create hsr debugfs directory [ 89.508384][ T5618] hsr_slave_0: entered promiscuous mode [ 89.509160][ T5618] hsr_slave_1: entered promiscuous mode [ 89.510095][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 89.510116][ T5618] Cannot create hsr debugfs directory [ 90.148217][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.176561][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.177451][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.190466][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.207455][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.223223][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.224456][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.228919][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.384719][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.388687][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.417517][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.428542][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.429395][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.445284][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.475353][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.478751][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.479881][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.480022][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.480116][ T5617] bridge_slave_0: entered allmulticast mode [ 90.499362][ T5617] bridge_slave_0: entered promiscuous mode [ 90.529434][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.529520][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.530116][ T5617] bridge_slave_1: entered allmulticast mode [ 90.537167][ T5617] bridge_slave_1: entered promiscuous mode [ 90.600261][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.604175][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.671240][ T5617] team0: Port device team_slave_0 added [ 90.695344][ T5617] team0: Port device team_slave_1 added [ 90.707407][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.719643][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.727893][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.739650][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.764311][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.769466][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.794859][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.794875][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.794896][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.846779][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.857955][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.860017][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.860031][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.860054][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.968137][ T5617] hsr_slave_0: entered promiscuous mode [ 90.968959][ T5617] hsr_slave_1: entered promiscuous mode [ 90.969525][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 90.969545][ T5617] Cannot create hsr debugfs directory [ 91.099008][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.107897][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.144193][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.147730][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.179691][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.192006][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.216434][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.219407][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.257382][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.281336][ T5628] Bluetooth: hci2: command tx timeout [ 91.350917][ T5630] Bluetooth: hci3: command tx timeout [ 91.350952][ T5630] Bluetooth: hci1: command tx timeout [ 91.350975][ T5630] Bluetooth: hci0: command tx timeout [ 91.351389][ T5628] Bluetooth: hci4: command tx timeout [ 91.440075][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.452564][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.455296][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.457066][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.482856][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.494623][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.495596][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.498335][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.524461][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.527623][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.546162][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.579603][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.579736][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.627637][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.627754][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.647551][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.666502][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.695761][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.695837][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.733444][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.733530][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.769819][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.770471][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.787296][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.787597][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.925719][ T30] cfg80211: failed to load regulatory.db [ 91.946935][ T5624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.979585][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.103685][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.172488][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.195268][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.195378][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.263814][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.263926][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.315531][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.373643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.373754][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.427528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.427641][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.125402][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.238987][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.344219][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.357242][ T5628] Bluetooth: hci2: command tx timeout [ 93.435306][ T52] Bluetooth: hci0: command tx timeout [ 93.435342][ T52] Bluetooth: hci1: command tx timeout [ 93.435363][ T52] Bluetooth: hci3: command tx timeout [ 93.435416][ T5628] Bluetooth: hci4: command tx timeout [ 93.517957][ T5615] veth0_vlan: entered promiscuous mode [ 93.574249][ T5624] veth0_vlan: entered promiscuous mode [ 93.609309][ T5615] veth1_vlan: entered promiscuous mode [ 93.645936][ T5624] veth1_vlan: entered promiscuous mode [ 93.797119][ T5615] veth0_macvtap: entered promiscuous mode [ 93.819403][ T5624] veth0_macvtap: entered promiscuous mode [ 93.838147][ T5615] veth1_macvtap: entered promiscuous mode [ 93.859851][ T5624] veth1_macvtap: entered promiscuous mode [ 93.947594][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.964745][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.972911][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.997523][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.025515][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.026958][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.082633][ T5616] veth0_vlan: entered promiscuous mode [ 94.130911][ T5616] veth1_vlan: entered promiscuous mode [ 94.153202][ T1012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.154205][ T1012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.221342][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.224845][ T1012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.224895][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.224933][ T1012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.224971][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.225009][ T1012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.297471][ T5617] veth0_vlan: entered promiscuous mode [ 94.342336][ T5618] veth0_vlan: entered promiscuous mode [ 94.378244][ T5617] veth1_vlan: entered promiscuous mode [ 94.387899][ T5618] veth1_vlan: entered promiscuous mode [ 94.420430][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.420459][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.463023][ T5616] veth0_macvtap: entered promiscuous mode [ 94.484942][ T1369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.484966][ T1369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.521667][ T5616] veth1_macvtap: entered promiscuous mode [ 94.538733][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.538753][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.595358][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.595381][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.639074][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.695619][ T5617] veth0_macvtap: entered promiscuous mode [ 94.698964][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.726858][ T5618] veth0_macvtap: entered promiscuous mode [ 94.729259][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.758252][ T5617] veth1_macvtap: entered promiscuous mode [ 94.778109][ T5618] veth1_macvtap: entered promiscuous mode [ 94.883919][ T1390] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.884590][ T1390] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.884739][ T1390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.884828][ T1390] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.907798][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.940596][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.985596][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.008881][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.076263][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 95.092918][ T1012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.092970][ T1012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.093009][ T1012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.093046][ T1012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.093084][ T1012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.093475][ T1012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.093515][ T1012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.093553][ T1012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.323110][ T1369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.323133][ T1369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.529802][ T1369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.529824][ T1369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.604365][ T5846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11'. [ 95.623196][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.664797][ T1369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.664818][ T1369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.803154][ T1390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.803184][ T1390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.917584][ T5861] warning: `syz.3.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.917782][ T1390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.917798][ T1390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.045342][ T5863] Zero length message leads to an empty skb [ 96.046843][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.046862][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.612976][ T5888] ip_tables: iptables: counters copy to user failed while replacing table [ 96.698518][ T5894] ip_tables: iptables: counters copy to user failed while replacing table [ 96.829851][ T5900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 97.603292][ T5936] Bluetooth: MGMT ver 1.23 [ 97.722162][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 97.821037][ T5944] macvtap1: entered promiscuous mode [ 97.821066][ T5944] vlan0: entered promiscuous mode [ 97.821637][ T5944] macvtap1: entered allmulticast mode [ 97.821653][ T5944] vlan0: entered allmulticast mode [ 97.821686][ T5944] veth0_vlan: entered allmulticast mode [ 97.882645][ T5948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.58'. [ 98.484108][ T1219] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.262728][ T6029] netlink: 'syz.0.92': attribute type 14 has an invalid length. [ 99.268193][ T6026] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.738019][ T6054] netlink: 68 bytes leftover after parsing attributes in process `syz.3.103'. [ 101.309412][ T6124] netlink: 'syz.2.137': attribute type 83 has an invalid length. [ 101.354881][ T6130] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 101.859538][ T6143] sctp: [Deprecated]: syz.4.150 (pid 6143) Use of int in max_burst socket option deprecated. [ 101.859538][ T6143] Use struct sctp_assoc_value instead [ 101.947293][ T6150] netlink: 'syz.1.149': attribute type 4 has an invalid length. [ 102.234673][ T6170] netlink: 108 bytes leftover after parsing attributes in process `syz.3.159'. [ 102.234726][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 102.449878][ T6179] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.003081][ T13] IPVS: starting estimator thread 0... [ 103.090336][ T6213] IPVS: using max 25 ests per chain, 60000 per kthread [ 103.235541][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'. [ 103.261768][ T6225] openvswitch: netlink: IP tunnel dst address not specified [ 103.261815][ T6225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.301839][ T6227] veth1_to_bond: entered allmulticast mode [ 103.306626][ T6227] veth1_to_bond: left allmulticast mode [ 103.772583][ T6251] netlink: 'syz.3.197': attribute type 8 has an invalid length. [ 103.772760][ T6251] sch_fq: defrate 0 ignored. [ 103.924218][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 104.090448][ T6268] netlink: 104 bytes leftover after parsing attributes in process `syz.2.204'. [ 104.114080][ T6270] netlink: 27 bytes leftover after parsing attributes in process `syz.0.206'. [ 104.291637][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 104.292605][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 104.705939][ T6303] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 104.762234][ T6307] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.762309][ T6307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.302072][ T6339] Bluetooth: hci0: Invalid link key type 76 for 00:00:4c:00:00:00 [ 105.604465][ T6354] netlink: 'syz.1.248': attribute type 3 has an invalid length. [ 105.689283][ T6364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 106.095310][ T6388] netlink: 224 bytes leftover after parsing attributes in process `syz.2.265'. [ 106.581981][ T6418] Bluetooth: MGMT ver 1.23 [ 106.954617][ T6441] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 107.051422][ T5628] block nbd296: Receive control failed (result -32) [ 107.317027][ T6461] netlink: 'syz.2.300': attribute type 5 has an invalid length. [ 108.168132][ T6512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.392737][ T6513] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.724616][ T6530] __nla_validate_parse: 3 callbacks suppressed [ 108.724648][ T6530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.334'. [ 109.280580][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 109.981869][ T6605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.362'. [ 110.065978][ T6608] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 110.066005][ T6608] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.364'. [ 110.172767][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.911168][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 110.940949][ T6656] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 110.940972][ T6656] netlink: 'syz.0.386': attribute type 2 has an invalid length. [ 111.087537][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 111.087566][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 111.106559][ T6666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.390'. [ 111.106630][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 111.135487][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 111.665342][ T6699] openvswitch: netlink: IP tunnel dst address not specified [ 111.665376][ T6699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.774679][ T6701] team0 (unregistering): Port device team_slave_0 removed [ 111.804153][ T6701] team0 (unregistering): Port device team_slave_1 removed [ 112.157398][ T6731] Cannot find set identified by id 4 to match [ 112.216936][ T6733] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 114.122126][ T6847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.127931][ T1012] IPVS: starting estimator thread 0... [ 114.214036][ T6849] IPVS: using max 29 ests per chain, 69600 per kthread [ 114.539136][ T6873] __nla_validate_parse: 6 callbacks suppressed [ 114.539155][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.488'. [ 115.099337][ T6898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.498'. [ 115.269143][ T6905] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.329518][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 115.329554][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.503'. [ 115.584696][ T6926] openvswitch: netlink: IPv4 tunnel dst address is zero [ 115.584730][ T6926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.616533][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 115.727238][ T6931] sctp: [Deprecated]: syz.1.517 (pid 6931) Use of int in maxseg socket option. [ 115.727238][ T6931] Use struct sctp_assoc_value instead [ 115.829729][ T6938] netlink: 232 bytes leftover after parsing attributes in process `syz.4.518'. [ 116.187135][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 116.192595][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 116.356704][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'. [ 116.394806][ T6972] netlink: 64 bytes leftover after parsing attributes in process `syz.3.535'. [ 116.800249][ T6996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.292934][ T7027] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 117.624468][ T59] IPVS: starting estimator thread 0... [ 117.646591][ T7047] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 117.725850][ T7050] IPVS: using max 29 ests per chain, 69600 per kthread [ 117.769405][ T7058] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 117.769451][ T7058] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 117.800057][ T7056] netlink: 'syz.1.578': attribute type 30 has an invalid length. [ 118.687537][ T7112] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 118.992255][ T7130] tipc: Invalid UDP bearer configuration [ 118.992304][ T7130] tipc: Enabling of bearer rejected, failed to enable media [ 119.374467][ T7150] ip_tables: iptables: counters copy to user failed while replacing table [ 119.567824][ T7158] __nla_validate_parse: 7 callbacks suppressed [ 119.567861][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 119.567889][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 119.619779][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 119.720770][ T1012] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.721656][ T1012] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.721698][ T1012] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.103450][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.640'. [ 120.381064][ T7199] netlink: 'syz.2.647': attribute type 83 has an invalid length. [ 120.907733][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 121.357095][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.669'. [ 121.416084][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.669'. [ 121.924868][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.685'. [ 121.924898][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.685'. [ 122.351829][ T7304] sctp: [Deprecated]: syz.3.694 (pid 7304) Use of int in max_burst socket option. [ 122.351829][ T7304] Use struct sctp_assoc_value instead [ 122.425299][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 122.739046][ T7324] nbd0: detected capacity change from 0 to 274877906944 [ 122.741842][ T5628] block nbd0: Receive control failed (result -32) [ 122.757009][ T1698] block nbd0: Dead connection, failed to find a fallback [ 122.757057][ T1698] block nbd0: shutting down sockets [ 122.757122][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.757198][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.758481][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.758511][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.758759][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.759222][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.759352][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.759378][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.759485][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.759510][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.759637][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.759662][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.759783][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.759807][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.759912][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.759938][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.759983][ T7228] ldm_validate_partition_table(): Disk read failed. [ 122.760077][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.760102][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.763963][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 122.764036][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 122.768579][ T7228] Dev nbd0: unable to read RDB block 0 [ 122.781806][ T7228] nbd0: unable to read partition table [ 122.819164][ T7326] netlink: 'syz.4.706': attribute type 1 has an invalid length. [ 122.819226][ T7326] netlink: 'syz.4.706': attribute type 2 has an invalid length. [ 122.832328][ T7326] netlink: 'syz.4.706': attribute type 1 has an invalid length. [ 122.832350][ T7326] netlink: 'syz.4.706': attribute type 2 has an invalid length. [ 122.898254][ T7228] ldm_validate_partition_table(): Disk read failed. [ 122.937787][ T7228] Dev nbd0: unable to read RDB block 0 [ 122.984018][ T7228] nbd0: unable to read partition table [ 123.573182][ T7359] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 124.239178][ T7398] syz.4.742 uses obsolete (PF_INET,SOCK_PACKET) [ 124.449347][ T7409] : renamed from bond0 (while UP) [ 124.474950][ T7413] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.568722][ T7417] nbd: couldn't find a device at index 65553 [ 124.888692][ T7436] __nla_validate_parse: 6 callbacks suppressed [ 124.888713][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.758'. [ 125.152179][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.766'. [ 125.158261][ T7453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.363361][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 125.523037][ T7471] netlink: 'syz.2.774': attribute type 2 has an invalid length. [ 126.137513][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 126.599696][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 126.599734][ T7538] netlink: 'syz.3.807': attribute type 30 has an invalid length. [ 126.656424][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 126.656462][ T7538] netlink: 'syz.3.807': attribute type 30 has an invalid length. [ 126.660485][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.660618][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.660729][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.660763][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.888575][ T7554] netlink: 64 bytes leftover after parsing attributes in process `syz.1.815'. [ 127.504690][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.505064][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.505177][ T7587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.568764][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 127.582005][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.752624][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.869'. [ 128.752662][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.869'. [ 128.924558][ T7679] netlink: 'syz.3.873': attribute type 4 has an invalid length. [ 129.305581][ T7704] Cannot find add_set index 0 as target [ 129.630225][ T7723] macvtap0: entered allmulticast mode [ 129.630251][ T7723] veth0_macvtap: entered allmulticast mode [ 129.939881][ T7739] __nla_validate_parse: 1 callbacks suppressed [ 129.939905][ T7739] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.903'. [ 130.147637][ T7751] gretap0: entered promiscuous mode [ 130.148306][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 130.148331][ T7751] gretap0: left promiscuous mode [ 130.256372][ T7757] netlink: 204 bytes leftover after parsing attributes in process `syz.1.909'. [ 130.319190][ T7759] erspan0: entered promiscuous mode [ 130.855700][ T5628] block nbd1: Receive control failed (result -32) [ 131.037875][ T7795] erspan0: entered promiscuous mode [ 131.108895][ T5628] Bluetooth: hci4: link tx timeout [ 131.108914][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.113072][ T5628] Bluetooth: hci4: link tx timeout [ 131.113102][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.143189][ T5628] Bluetooth: hci4: link tx timeout [ 131.143208][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.143236][ T5628] Bluetooth: hci4: link tx timeout [ 131.143247][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.143343][ T5628] Bluetooth: hci4: link tx timeout [ 131.143355][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.143397][ T5628] Bluetooth: hci4: link tx timeout [ 131.143407][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.143430][ T5628] Bluetooth: hci4: link tx timeout [ 131.143440][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.143535][ T5628] Bluetooth: hci4: link tx timeout [ 131.143547][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.143571][ T5628] Bluetooth: hci4: link tx timeout [ 131.143581][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145225][ T5628] Bluetooth: hci4: link tx timeout [ 131.145241][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145268][ T5628] Bluetooth: hci4: link tx timeout [ 131.145279][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145303][ T5628] Bluetooth: hci4: link tx timeout [ 131.145313][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145337][ T5628] Bluetooth: hci4: link tx timeout [ 131.145347][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145371][ T5628] Bluetooth: hci4: link tx timeout [ 131.145381][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145457][ T5628] Bluetooth: hci4: link tx timeout [ 131.145468][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145493][ T5628] Bluetooth: hci4: link tx timeout [ 131.145503][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145526][ T5628] Bluetooth: hci4: link tx timeout [ 131.145536][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145562][ T5628] Bluetooth: hci4: link tx timeout [ 131.145572][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145638][ T5628] Bluetooth: hci4: link tx timeout [ 131.145650][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145726][ T5628] Bluetooth: hci4: link tx timeout [ 131.145737][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145776][ T5628] Bluetooth: hci4: link tx timeout [ 131.145787][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145811][ T5628] Bluetooth: hci4: link tx timeout [ 131.145821][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.145879][ T5628] Bluetooth: hci4: link tx timeout [ 131.146683][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.146715][ T5628] Bluetooth: hci4: link tx timeout [ 131.146725][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.146747][ T5628] Bluetooth: hci4: link tx timeout [ 131.146757][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.146778][ T5628] Bluetooth: hci4: link tx timeout [ 131.146786][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.146863][ T5628] Bluetooth: hci4: link tx timeout [ 131.146873][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.148552][ T5628] Bluetooth: hci4: link tx timeout [ 131.148566][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.148592][ T5628] Bluetooth: hci4: link tx timeout [ 131.148603][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.150518][ T5628] Bluetooth: hci4: link tx timeout [ 131.150558][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.166819][ T5628] Bluetooth: hci4: link tx timeout [ 131.166869][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.250540][ T5628] Bluetooth: hci4: link tx timeout [ 131.254264][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.277490][ T5628] Bluetooth: hci4: link tx timeout [ 131.277542][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.225227][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 132.225289][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 132.229388][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 132.264753][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 132.664208][ T7851] veth0: entered promiscuous mode [ 132.664401][ T7851] veth0: left promiscuous mode [ 132.755272][ T7858] netlink: 232 bytes leftover after parsing attributes in process `syz.1.957'. [ 132.872095][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872173][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.144173][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.965'. [ 133.144203][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.965'. [ 133.190319][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 133.536692][ T7899] netlink: 'syz.1.977': attribute type 4 has an invalid length. [ 134.212133][ T7939] block nbd2: server does not support multiple connections per device. [ 134.212802][ T7939] block nbd2: shutting down sockets [ 134.625751][ T7965] netlink: 'syz.3.1009': attribute type 3 has an invalid length. [ 134.625775][ T7965] netlink: 'syz.3.1009': attribute type 2 has an invalid length. [ 134.693049][ T7969] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 135.808104][ T8026] netlink: 'syz.1.1036': attribute type 9 has an invalid length. [ 136.040048][ T8035] __nla_validate_parse: 3 callbacks suppressed [ 136.040075][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 136.608174][ T8072] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 136.608212][ T8072] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1058'. [ 136.760040][ T8077] netlink: 'syz.1.1059': attribute type 83 has an invalid length. [ 137.879086][ T32] IPVS: starting estimator thread 0... [ 137.922074][ T8155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.960258][ T8151] IPVS: using max 25 ests per chain, 60000 per kthread [ 138.116013][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 138.261906][ T8169] tap0: tun_chr_ioctl cmd 1074025672 [ 138.261931][ T8169] tap0: ignored: set checksum disabled [ 138.750547][ T8200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1118'. [ 138.879451][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1119'. [ 138.985426][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 139.052299][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1125'. [ 139.052946][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 139.052978][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 139.182031][ T8221] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.607538][ T8249] tipc: Started in network mode [ 139.607577][ T8249] tipc: Node identity ac14140f, cluster identity 4711 [ 139.615534][ T8249] tipc: New replicast peer: 255.255.255.255 [ 139.619860][ T8249] tipc: Enabled bearer , priority 10 [ 139.822355][ T8260] sch_fq: defrate 0 ignored. [ 139.942045][ T8268] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.074364][ T8274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1155'. [ 140.542962][ T8303] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.731894][ T9] tipc: Node number set to 2886997007 [ 140.984587][ T8327] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 141.515484][ T8360] veth1_to_hsr: entered allmulticast mode [ 141.622674][ T8364] netlink: Only one type of NAT may be specified [ 141.622707][ T8364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.760768][ T8369] batman_adv: batadv0: Adding interface: gretap1 [ 141.760790][ T8369] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.760824][ T8369] batman_adv: batadv0: Interface activated: gretap1 [ 141.999592][ T8382] TCP: TCP_TX_DELAY enabled [ 142.500483][ T8415] __nla_validate_parse: 2 callbacks suppressed [ 142.500507][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1221'. [ 142.596799][ T8422] netlink: 'syz.4.1224': attribute type 2 has an invalid length. [ 142.968267][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1235'. [ 143.269160][ T8459] netlink: 'syz.1.1242': attribute type 3 has an invalid length. [ 143.406604][ T8470] netlink: 'syz.1.1247': attribute type 2 has an invalid length. [ 143.425437][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 143.425466][ T8469] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1248'. [ 143.425514][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1248'. [ 143.794258][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 143.859292][ T8496] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1261'. [ 144.253673][ T8521] openvswitch: netlink: Unknown key attributes 1 [ 144.575987][ T8540] netlink: 'syz.3.1281': attribute type 83 has an invalid length. [ 144.817169][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 144.984966][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 144.986683][ T8562] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 144.986708][ T8562] syzkaller1: group set to 0 [ 145.286670][ T8581] tun0: tun_chr_ioctl cmd 1074025675 [ 145.286696][ T8581] tun0: persist enabled [ 145.340737][ T8585] Illegal XDP return value 4294967274 on prog (id 103) dev N/A, expect packet loss! [ 145.554531][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'. [ 146.606960][ T8661] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 146.625868][ T5751] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 146.916569][ T8682] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.276394][ T8700] sctp: [Deprecated]: syz.0.1357 (pid 8700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.276394][ T8700] Use struct sctp_sack_info instead [ 148.239079][ T8750] erspan0: entered promiscuous mode [ 148.561086][ T8766] gtp0: entered promiscuous mode [ 148.561112][ T8766] gtp0: entered allmulticast mode [ 149.069329][ T8791] netlink: 'syz.4.1403': attribute type 33 has an invalid length. [ 149.141141][ T8791] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 149.147942][ T8791] bond1 (unregistering): Released all slaves [ 149.419892][ T8808] __nla_validate_parse: 6 callbacks suppressed [ 149.419915][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 149.906126][ T8838] netlink: 'syz.1.1425': attribute type 83 has an invalid length. [ 149.936444][ T8833] bond1 (unregistering): Released all slaves [ 150.879832][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 151.164433][ T8901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1454'. [ 151.164463][ T8901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1454'. [ 151.369954][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'. [ 151.546712][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 152.249131][ T8954] netlink: 'syz.0.1480': attribute type 8 has an invalid length. [ 152.536200][ T32] tipc: Subscription rejected, illegal request [ 152.679203][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1491'. [ 152.713953][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1493'. [ 152.922588][ T8988] netlink: 'syz.3.1497': attribute type 2 has an invalid length. [ 153.016808][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 153.346118][ T9015] sctp: [Deprecated]: syz.4.1509 (pid 9015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.346118][ T9015] Use struct sctp_sack_info instead [ 154.538448][ T9075] vxcan0: tx address claim with dest, not broadcast [ 154.692710][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 154.935254][ T9093] netlink: 'syz.0.1548': attribute type 11 has an invalid length. [ 155.080732][ T5630] block nbd2: Receive control failed (result -32) [ 156.264441][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 156.519114][ T31] audit: type=1804 audit(1792569213.086:2): pid=9189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1592" name="/newroot/324/cgroup.controllers" dev="tmpfs" ino=1653 res=1 errno=0 [ 156.549452][ T31] audit: type=1800 audit(1792569213.126:3): pid=9189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1592" name="cgroup.controllers" dev="tmpfs" ino=1653 res=0 errno=0 [ 156.752119][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 157.040777][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 157.505139][ T9224] bond0: entered promiscuous mode [ 157.505166][ T9224] bond_slave_0: entered promiscuous mode [ 157.505396][ T9224] bond_slave_1: entered promiscuous mode [ 157.538034][ T9224] batadv0: entered promiscuous mode [ 157.549688][ T9224] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 157.563200][ T9224] bond0: left promiscuous mode [ 157.563226][ T9224] bond_slave_0: left promiscuous mode [ 157.564042][ T9224] bond_slave_1: left promiscuous mode [ 157.568503][ T9224] batadv0: left promiscuous mode [ 158.127935][ T9261] ip_tables: iptables: counters copy to user failed while replacing table [ 158.290787][ T9267] netlink: 'syz.4.1630': attribute type 10 has an invalid length. [ 158.337911][ T9267] team0: Port device dummy0 added [ 158.669910][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 159.145183][ T9316] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 159.145652][ T9316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.341474][ T9328] openvswitch: netlink: Unknown key attributes 1 [ 159.487280][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 159.487894][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 159.488152][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 159.587168][ T9340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1663'. [ 159.613677][ T9341] netlink: 'syz.3.1664': attribute type 83 has an invalid length. [ 159.765545][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1668'. [ 160.232497][ T9378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'. [ 160.967829][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.967960][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.633865][ T9436] openvswitch: netlink: IP tunnel dst address not specified [ 161.633900][ T9436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.731964][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 161.771744][ T9443] netlink: 'syz.1.1714': attribute type 11 has an invalid length. [ 162.378294][ T9474] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 162.378322][ T9474] netlink: 'syz.3.1730': attribute type 7 has an invalid length. [ 162.378336][ T9474] netlink: 'syz.3.1730': attribute type 8 has an invalid length. [ 162.378350][ T9474] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1730'. [ 162.378395][ T9474] NCSI netlink: No device for ifindex 65584 [ 162.513008][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1732'. [ 163.766179][ T9558] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1769'. [ 164.126110][ T9580] netlink: 'syz.1.1779': attribute type 1 has an invalid length. [ 164.126137][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1779'. [ 164.291187][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 164.617701][ T9588] syz.1.1782 (9588) used greatest stack depth: 18248 bytes left [ 164.658399][ T9590] syz.1.1782 (9590) used greatest stack depth: 18024 bytes left [ 165.486357][ T9652] netlink: 'syz.3.1811': attribute type 11 has an invalid length. [ 165.486386][ T9652] netlink: 3800 bytes leftover after parsing attributes in process `syz.3.1811'. [ 165.719872][ T9661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1814'. [ 166.759583][ T9714] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1834'. [ 166.917975][ T9720] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 166.979736][ T9724] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1838'. [ 167.534597][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 168.298432][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 168.338194][ T9792] netlink: 'syz.0.1867': attribute type 2 has an invalid length. [ 168.338218][ T9792] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1867'. [ 168.749559][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 168.749582][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1874'. [ 169.127550][ T9835] ip_tables: iptables: counters copy to user failed while replacing table [ 169.309866][ T9848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1888'. [ 169.894801][ T9886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.977584][ T9889] netlink: 'syz.3.1908': attribute type 21 has an invalid length. [ 171.158587][ T9962] __nla_validate_parse: 2 callbacks suppressed [ 171.158613][ T9962] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1943'. [ 171.259583][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1946'. [ 171.334671][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'. [ 171.662358][ T9988] ip_tables: iptables: counters copy to user failed while replacing table [ 171.921366][T10005] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1964'. [ 172.411889][ T5630] block nbd3: Receive control failed (result -32) [ 172.415119][ T5628] block nbd3: Receive control failed (result -32) [ 172.688404][T10046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1986'. [ 173.511310][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'. [ 173.511355][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2003'. [ 173.511370][T10089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2003'. [ 173.575324][T10094] netlink: 'syz.3.2006': attribute type 3 has an invalid length. [ 173.703876][T10102] netlink: 'syz.0.2008': attribute type 4 has an invalid length. [ 173.778078][T10108] ieee802154 phy0 wpan0: encryption failed: -126 [ 174.469671][T10142] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2025'. [ 174.573701][T10150] tipc: Started in network mode [ 174.573735][T10150] tipc: Node identity ac14140f, cluster identity 4711 [ 174.574016][T10150] tipc: New replicast peer: 255.255.255.255 [ 174.574653][T10150] tipc: Enabled bearer , priority 10 [ 174.692340][T10154] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2031'. [ 175.615091][T10212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.700541][ T5751] tipc: Node number set to 2886997007 [ 176.240868][T10249] __nla_validate_parse: 3 callbacks suppressed [ 176.240891][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 176.266733][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 176.718957][T10278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.807521][T10280] xt_hashlimit: size too large, truncated to 1048576 [ 177.219597][T10305] blkio.reset_stats is deprecated [ 177.289596][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 177.515641][T10320] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 177.536177][T10320] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 177.783078][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'. [ 177.783118][T10332] netlink: 'syz.2.2111': attribute type 7 has an invalid length. [ 177.783133][T10332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2111'. [ 178.024601][T10346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2117'. [ 178.208225][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2122'. [ 178.208255][T10353] block nbd4: Unsupported socket: should be TCP or UNIX. [ 178.477986][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.833809][T10393] netlink: 'syz.3.2141': attribute type 2 has an invalid length. [ 178.833850][T10393] netlink: 'syz.3.2141': attribute type 2 has an invalid length. [ 179.064629][T10404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2144'. [ 179.064698][T10404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2144'. [ 179.276100][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 179.529710][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.562667][T10431] Bluetooth: MGMT ver 1.23 [ 179.562724][T10431] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 179.596070][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.279395][T10464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.279739][T10464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.566139][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.711125][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.602984][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.770325][T10547] __nla_validate_parse: 4 callbacks suppressed [ 181.770347][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2197'. [ 182.269799][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2206'. [ 182.269831][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2206'. [ 182.270046][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2206'. [ 182.270066][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2206'. [ 182.341842][T10580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.343170][T10580] IPv6: NLM_F_CREATE should be set when creating new route [ 182.664331][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.507626][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 183.508677][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 183.687914][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.750497][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.023219][T10671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 184.408969][T10691] netlink: 'syz.4.2250': attribute type 4 has an invalid length. [ 184.733825][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.259761][T10739] erspan0: entered promiscuous mode [ 185.277986][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'. [ 185.350519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.773617][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.985312][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.985571][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.985917][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.001478][ C1] ------------[ cut here ]------------ [ 186.001492][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 186.001528][ C1] WARNING: net/mac80211/rate.c:412 at __rate_control_send_low+0x652/0x900, CPU#1: kworker/u8:9/1369 [ 186.031666][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.032170][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.032777][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.033584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.077793][ C1] Modules linked in: [ 186.083005][ C1] CPU: 1 UID: 0 PID: 1369 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 186.083014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.100849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.111065][ C1] Workqueue: krds_cp_wq#5/0 rds_send_worker [ 186.117126][ C1] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 186.123509][ C1] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 186.143412][ C1] RSP: 0018:ffffc90000a186f8 EFLAGS: 00010246 [ 186.149656][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 186.157765][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918c7aa0 [ 186.165882][ C1] RBP: ffff8880559a32c0 R08: 0000000000000000 R09: 0000000000000000 [ 186.174013][ C1] R10: 0000000000000004 R11: 8000000000000100 R12: ffff8880559a0fa0 [ 186.182128][ C1] R13: ffff8880585ee668 R14: ffffffff918c7aa0 R15: dffffc0000000000 [ 186.190257][ C1] FS: 0000000000000000(0000) GS:ffff888123bbd000(0000) knlGS:0000000000000000 [ 186.199307][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.206005][ C1] CR2: 00007f07745556c8 CR3: 000000007c3f6000 CR4: 00000000003526f0 [ 186.214124][ C1] Call Trace: [ 186.217502][ C1] [ 186.220457][ C1] rate_control_send_low+0x1a7/0x7b0 [ 186.225875][ C1] rate_control_get_rate+0x20b/0x5d0 [ 186.231313][ C1] ieee80211_beacon_get_finish+0x385/0x6c0 [ 186.237248][ C1] ? __ieee80211_beacon_add_tim+0xa4/0x1620 [ 186.243290][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 186.249752][ C1] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 186.255626][ C1] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 186.261420][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 186.267542][ C1] ? kasan_save_free_info+0x40/0x50 [ 186.272885][ C1] ? lock_acquire+0x115/0x350 [ 186.277683][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 186.283365][ C1] __ieee80211_beacon_get+0x1250/0x1920 [ 186.289029][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 186.294734][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 186.300328][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 186.304210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.314670][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.319851][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 186.325546][ C1] __iterate_interfaces+0x2af/0x5a0 [ 186.330885][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 186.337082][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 186.344453][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 186.350680][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 186.357842][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 186.363810][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 186.369135][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 186.375082][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 186.380435][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 186.385656][ C1] handle_softirqs+0x226/0x860 [ 186.390552][ C1] ? do_softirq+0x77/0xd0 [ 186.394991][ C1] ? tcp_sock_set_cork+0x2c/0x2d0 [ 186.400138][ C1] do_softirq+0x77/0xd0 [ 186.404399][ C1] [ 186.407434][ C1] [ 186.410482][ C1] __local_bh_enable_ip+0x100/0x140 [ 186.415792][ C1] tcp_sock_set_cork+0x2c/0x2d0 [ 186.420811][ C1] ? __pfx_rds_tcp_xmit_path_prepare+0x10/0x10 [ 186.427096][ C1] rds_send_xmit+0x4dc/0x2930 [ 186.431942][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.437102][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 186.442382][ C1] ? process_scheduled_works+0x97a/0x1630 [ 186.448243][ C1] rds_send_worker+0x7d/0x2e0 [ 186.453073][ C1] process_scheduled_works+0xc3d/0x1630 [ 186.458792][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.464938][ C1] ? assign_work+0x3cf/0x5d0 [ 186.469661][ C1] worker_thread+0xa47/0xfb0 [ 186.474433][ C1] kthread+0x38b/0x480 [ 186.478621][ C1] ? __pfx_worker_thread+0x10/0x10 [ 186.483885][ C1] ? __pfx_kthread+0x10/0x10 [ 186.488580][ C1] ret_from_fork+0x514/0xb70 [ 186.493292][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 186.498539][ C1] ? __switch_to+0xc89/0x1420 [ 186.503709][ C1] ? __pfx_kthread+0x10/0x10 [ 186.508424][ C1] ret_from_fork_asm+0x1a/0x30 [ 186.513335][ C1] [ 186.516434][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.523778][ C1] CPU: 1 UID: 0 PID: 1369 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 186.533273][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.543420][ C1] Workqueue: krds_cp_wq#5/0 rds_send_worker [ 186.549378][ C1] Call Trace: [ 186.552711][ C1] [ 186.555588][ C1] vpanic+0x56d/0xa60 [ 186.559632][ C1] ? __pfx__printk+0x10/0x10 [ 186.564270][ C1] ? __pfx_vpanic+0x10/0x10 [ 186.568832][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 186.574167][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 186.579455][ C1] panic+0xc5/0xd0 [ 186.583233][ C1] ? __pfx_panic+0x10/0x10 [ 186.587747][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 186.592738][ C1] __warn+0x315/0x4c0 [ 186.596775][ C1] ? __rate_control_send_low+0x652/0x900 [ 186.602472][ C1] ? __rate_control_send_low+0x652/0x900 [ 186.608177][ C1] __report_bug+0x276/0x570 [ 186.612714][ C1] ? __rate_control_send_low+0x652/0x900 [ 186.618388][ C1] ? __pfx___report_bug+0x10/0x10 [ 186.623469][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 186.629355][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 186.635224][ C1] report_bug_entry+0x19b/0x290 [ 186.640114][ C1] ? __rate_control_send_low+0x67c/0x900 [ 186.645816][ C1] ? __rate_control_send_low+0x681/0x900 [ 186.651519][ C1] handle_bug+0xce/0x200 [ 186.655844][ C1] exc_invalid_op+0x1a/0x50 [ 186.660384][ C1] asm_exc_invalid_op+0x1a/0x20 [ 186.665267][ C1] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 186.671575][ C1] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 186.691215][ C1] RSP: 0018:ffffc90000a186f8 EFLAGS: 00010246 [ 186.697316][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 186.705312][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918c7aa0 [ 186.713319][ C1] RBP: ffff8880559a32c0 R08: 0000000000000000 R09: 0000000000000000 [ 186.721323][ C1] R10: 0000000000000004 R11: 8000000000000100 R12: ffff8880559a0fa0 [ 186.729369][ C1] R13: ffff8880585ee668 R14: ffffffff918c7aa0 R15: dffffc0000000000 [ 186.737437][ C1] ? __rate_control_send_low+0x646/0x900 [ 186.743152][ C1] rate_control_send_low+0x1a7/0x7b0 [ 186.748500][ C1] rate_control_get_rate+0x20b/0x5d0 [ 186.753843][ C1] ieee80211_beacon_get_finish+0x385/0x6c0 [ 186.759690][ C1] ? __ieee80211_beacon_add_tim+0xa4/0x1620 [ 186.765628][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 186.772060][ C1] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 186.777831][ C1] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 186.783567][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 186.789577][ C1] ? kasan_save_free_info+0x40/0x50 [ 186.794827][ C1] ? lock_acquire+0x115/0x350 [ 186.799563][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 186.805155][ C1] __ieee80211_beacon_get+0x1250/0x1920 [ 186.810752][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 186.816345][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 186.821867][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 186.828050][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.833146][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 186.838743][ C1] __iterate_interfaces+0x2af/0x5a0 [ 186.844013][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 186.850112][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 186.857361][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 186.863493][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 186.870585][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 186.876444][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 186.881708][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 186.887586][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 186.892861][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 186.898022][ C1] handle_softirqs+0x226/0x860 [ 186.902846][ C1] ? do_softirq+0x77/0xd0 [ 186.907232][ C1] ? tcp_sock_set_cork+0x2c/0x2d0 [ 186.912299][ C1] do_softirq+0x77/0xd0 [ 186.916514][ C1] [ 186.919483][ C1] [ 186.922444][ C1] __local_bh_enable_ip+0x100/0x140 [ 186.927674][ C1] tcp_sock_set_cork+0x2c/0x2d0 [ 186.932549][ C1] ? __pfx_rds_tcp_xmit_path_prepare+0x10/0x10 [ 186.938754][ C1] rds_send_xmit+0x4dc/0x2930 [ 186.943515][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.948606][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 186.953827][ C1] ? process_scheduled_works+0x97a/0x1630 [ 186.959625][ C1] rds_send_worker+0x7d/0x2e0 [ 186.964344][ C1] process_scheduled_works+0xc3d/0x1630 [ 186.969975][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.976046][ C1] ? assign_work+0x3cf/0x5d0 [ 186.980729][ C1] worker_thread+0xa47/0xfb0 [ 186.985416][ C1] kthread+0x38b/0x480 [ 186.989526][ C1] ? __pfx_worker_thread+0x10/0x10 [ 186.994700][ C1] ? __pfx_kthread+0x10/0x10 [ 186.999348][ C1] ret_from_fork+0x514/0xb70 [ 187.003997][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 187.009187][ C1] ? __switch_to+0xc89/0x1420 [ 187.013923][ C1] ? __pfx_kthread+0x10/0x10 [ 187.018558][ C1] ret_from_fork_asm+0x1a/0x30 [ 187.023394][ C1] [ 187.027043][ C1] Kernel Offset: disabled [ 187.031412][ C1] Rebooting in 86400 seconds..