last executing test programs: 2m44.912642886s ago: executing program 4 (id=1728): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 2m44.802648085s ago: executing program 4 (id=1733): r0 = socket$isdn_base(0x22, 0x3, 0x0) accept(r0, 0x0, 0x0) 2m44.628835439s ago: executing program 4 (id=1738): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x8917, 0x0) 2m44.457680678s ago: executing program 4 (id=1744): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xe, 0xffffffff}}) 2m44.273674641s ago: executing program 4 (id=1750): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000006c0)) 2m44.073207516s ago: executing program 4 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000) 2m38.028280627s ago: executing program 1 (id=1938): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0) 2m37.806146434s ago: executing program 1 (id=1945): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r0, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) 2m37.639959724s ago: executing program 1 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m37.590331796s ago: executing program 1 (id=1950): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) 2m37.486492233s ago: executing program 1 (id=1953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x93a0}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) 2m37.346127056s ago: executing program 1 (id=1958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000026000100fdff07000010e7ff030000"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m28.979631012s ago: executing program 32 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000) 2m22.298223519s ago: executing program 33 (id=1958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000026000100fdff07000010e7ff030000"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2.683643706s ago: executing program 2 (id=6098): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) unshare(0x22020600) poll(&(0x7f0000000080)=[{r0, 0x4000}], 0x1, 0xff) 1.705576169s ago: executing program 2 (id=6117): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 1.077416165s ago: executing program 6 (id=6131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10) 998.426681ms ago: executing program 0 (id=6132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r0) 998.078082ms ago: executing program 5 (id=6133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}]]}, 0x30}}, 0x0) 900.348262ms ago: executing program 6 (id=6134): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x10, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private0, 0x8}, 0x1c) 866.684877ms ago: executing program 2 (id=6135): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 865.951977ms ago: executing program 3 (id=6136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2], 0x38}}, 0x0) 796.951337ms ago: executing program 5 (id=6137): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 773.821143ms ago: executing program 0 (id=6138): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000000c0)="de", 0x1, 0x8000, &(0x7f0000000140)={0xa, 0xfffe, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000380)=0xb0) 704.567919ms ago: executing program 5 (id=6139): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 687.02287ms ago: executing program 6 (id=6140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 686.173447ms ago: executing program 3 (id=6141): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) 535.967662ms ago: executing program 0 (id=6142): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) 507.068557ms ago: executing program 6 (id=6143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140003000600bebe"], 0x38}}, 0x0) 477.874024ms ago: executing program 3 (id=6144): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) 407.805578ms ago: executing program 5 (id=6145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) 395.148794ms ago: executing program 2 (id=6146): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=ANY=[], 0x10}}], 0x1, 0x20000000) 394.457802ms ago: executing program 0 (id=6147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x215}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x2c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) 316.83795ms ago: executing program 3 (id=6148): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) 292.797682ms ago: executing program 6 (id=6149): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9, 0x2, 0x1fc, 0x1, 0x9, 0x1}, 0xffffff9a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 230.369913ms ago: executing program 0 (id=6150): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 228.692ms ago: executing program 2 (id=6151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 222.102152ms ago: executing program 5 (id=6152): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 153.693204ms ago: executing program 3 (id=6153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x7, 0x100, 0x9b, 0xfffa, 0xe, 0x401]}}]}]}]}, 0x38}}, 0x2400c090) 117.014184ms ago: executing program 6 (id=6154): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r1, 0x5}, 0x8) 71.699314ms ago: executing program 2 (id=6155): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 69.59849ms ago: executing program 0 (id=6156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000077400060800020000000000080003"], 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x4000001}, 0x0) 58.267697ms ago: executing program 5 (id=6157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abddc0b7fdddf251300000008000300", @ANYRES32=r2, @ANYBLOB="040013000600b500670600000a000600080211000001000006001200830000000400ac000500c200170000000600120101"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 0s ago: executing program 3 (id=6158): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x2, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): d cc 0x0c03 length: 249 > 1 [ 88.312302][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.327917][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.335835][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.341846][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.351280][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.359678][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.367715][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.376020][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.384537][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.392565][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.405052][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.412209][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.420636][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.421523][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.431569][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.435345][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.444241][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.451587][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.462821][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.470125][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.473248][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.501053][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.513294][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.521330][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.053288][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.343586][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.374724][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 89.456955][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.515840][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.523459][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.531144][ T5836] bridge_slave_0: entered allmulticast mode [ 89.539256][ T5836] bridge_slave_0: entered promiscuous mode [ 89.553499][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.613454][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.620787][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.631558][ T5836] bridge_slave_1: entered allmulticast mode [ 89.640233][ T5836] bridge_slave_1: entered promiscuous mode [ 89.782578][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.831585][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.841545][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.849241][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.856591][ T5833] bridge_slave_0: entered allmulticast mode [ 89.864398][ T5833] bridge_slave_0: entered promiscuous mode [ 89.872489][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.880223][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.887420][ T5829] bridge_slave_0: entered allmulticast mode [ 89.894963][ T5829] bridge_slave_0: entered promiscuous mode [ 89.948294][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.955501][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.963528][ T5833] bridge_slave_1: entered allmulticast mode [ 89.970910][ T5833] bridge_slave_1: entered promiscuous mode [ 89.977831][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.985384][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.992680][ T5829] bridge_slave_1: entered allmulticast mode [ 90.000087][ T5829] bridge_slave_1: entered promiscuous mode [ 90.070428][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.077613][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.085521][ T5830] bridge_slave_0: entered allmulticast mode [ 90.092904][ T5830] bridge_slave_0: entered promiscuous mode [ 90.114589][ T5836] team0: Port device team_slave_0 added [ 90.145679][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.152999][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.160986][ T5830] bridge_slave_1: entered allmulticast mode [ 90.169937][ T5830] bridge_slave_1: entered promiscuous mode [ 90.177199][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.185021][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.192400][ T5832] bridge_slave_0: entered allmulticast mode [ 90.199791][ T5832] bridge_slave_0: entered promiscuous mode [ 90.209297][ T5836] team0: Port device team_slave_1 added [ 90.217431][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.229630][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.251879][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.259273][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.266440][ T5832] bridge_slave_1: entered allmulticast mode [ 90.274488][ T5832] bridge_slave_1: entered promiscuous mode [ 90.296830][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.309068][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.387445][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.411718][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.418852][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.445188][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.483705][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.493369][ T5837] Bluetooth: hci3: command tx timeout [ 90.500631][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.511472][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.518700][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.544719][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.557494][ T5833] team0: Port device team_slave_0 added [ 90.565451][ T5829] team0: Port device team_slave_0 added [ 90.570802][ T5849] Bluetooth: hci2: command tx timeout [ 90.571770][ T5842] Bluetooth: hci0: command tx timeout [ 90.577448][ T5837] Bluetooth: hci1: command tx timeout [ 90.583537][ T5840] Bluetooth: hci4: command tx timeout [ 90.608066][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.626434][ T5833] team0: Port device team_slave_1 added [ 90.634113][ T5829] team0: Port device team_slave_1 added [ 90.699987][ T5830] team0: Port device team_slave_0 added [ 90.722435][ T5832] team0: Port device team_slave_0 added [ 90.755453][ T5830] team0: Port device team_slave_1 added [ 90.763609][ T5832] team0: Port device team_slave_1 added [ 90.784030][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.791092][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.817758][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.830164][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.837154][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.863195][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.909676][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.916938][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.943363][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.955436][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.962554][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.988652][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.029716][ T5836] hsr_slave_0: entered promiscuous mode [ 91.036496][ T5836] hsr_slave_1: entered promiscuous mode [ 91.056639][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.063756][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.090429][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.102400][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.110438][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.136616][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.179975][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.186954][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.214544][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.238128][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.245193][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.271544][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.423754][ T5833] hsr_slave_0: entered promiscuous mode [ 91.430444][ T5833] hsr_slave_1: entered promiscuous mode [ 91.436651][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 91.442821][ T5833] Cannot create hsr debugfs directory [ 91.455390][ T5829] hsr_slave_0: entered promiscuous mode [ 91.463128][ T5829] hsr_slave_1: entered promiscuous mode [ 91.469494][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 91.475271][ T5829] Cannot create hsr debugfs directory [ 91.486036][ T5832] hsr_slave_0: entered promiscuous mode [ 91.492622][ T5832] hsr_slave_1: entered promiscuous mode [ 91.499297][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 91.505050][ T5832] Cannot create hsr debugfs directory [ 91.572445][ T5830] hsr_slave_0: entered promiscuous mode [ 91.579508][ T5830] hsr_slave_1: entered promiscuous mode [ 91.585662][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 91.591743][ T5830] Cannot create hsr debugfs directory [ 92.128076][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.152050][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.189189][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.201890][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.261537][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.277394][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.297843][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.320446][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.401981][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.415942][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.439919][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.469585][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.563834][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.570690][ T5840] Bluetooth: hci3: command tx timeout [ 92.584937][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.596575][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.610514][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.648452][ T5842] Bluetooth: hci2: command tx timeout [ 92.648477][ T5849] Bluetooth: hci0: command tx timeout [ 92.654139][ T5840] Bluetooth: hci1: command tx timeout [ 92.659977][ T5837] Bluetooth: hci4: command tx timeout [ 92.749747][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.757128][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.769783][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.792319][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.803307][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.882150][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.910537][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.934378][ T3918] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.941701][ T3918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.974654][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.981891][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.015182][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.033871][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.057052][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.064266][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.097799][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.104965][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.137201][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.167685][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.174875][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.202268][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.209479][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.227308][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.317967][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.333509][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.372672][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.379902][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.434255][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.441514][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.550645][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.622759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.630002][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.663977][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.671225][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.731580][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.946073][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.150619][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.161255][ T5829] veth0_vlan: entered promiscuous mode [ 94.194807][ T5829] veth1_vlan: entered promiscuous mode [ 94.320030][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.362283][ T5832] veth0_vlan: entered promiscuous mode [ 94.371319][ T5829] veth0_macvtap: entered promiscuous mode [ 94.386878][ T5829] veth1_macvtap: entered promiscuous mode [ 94.417467][ T5832] veth1_vlan: entered promiscuous mode [ 94.445941][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.455950][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.480468][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.532482][ T5832] veth0_macvtap: entered promiscuous mode [ 94.540462][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.550865][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.574971][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.584736][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.601647][ T5832] veth1_macvtap: entered promiscuous mode [ 94.623972][ T5836] veth0_vlan: entered promiscuous mode [ 94.648545][ T5837] Bluetooth: hci3: command tx timeout [ 94.667093][ T5836] veth1_vlan: entered promiscuous mode [ 94.674231][ T5833] veth0_vlan: entered promiscuous mode [ 94.729319][ T5849] Bluetooth: hci0: command tx timeout [ 94.729348][ T5842] Bluetooth: hci2: command tx timeout [ 94.735103][ T5837] Bluetooth: hci4: command tx timeout [ 94.740276][ T5840] Bluetooth: hci1: command tx timeout [ 94.753587][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.772031][ T5833] veth1_vlan: entered promiscuous mode [ 94.814730][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.822325][ T5830] veth0_vlan: entered promiscuous mode [ 94.847825][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.862132][ T1136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.877804][ T1136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.887877][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.891691][ T1136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.915366][ T5830] veth1_vlan: entered promiscuous mode [ 94.925858][ T1136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.937847][ T5836] veth0_macvtap: entered promiscuous mode [ 94.975808][ T5836] veth1_macvtap: entered promiscuous mode [ 94.989028][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.000309][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.026571][ T5833] veth0_macvtap: entered promiscuous mode [ 95.063501][ T5833] veth1_macvtap: entered promiscuous mode [ 95.102015][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.114216][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.138013][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.195751][ T3485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.219560][ T3485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.246435][ T3485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.266597][ T3485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.282217][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.305056][ T5830] veth0_macvtap: entered promiscuous mode [ 95.333363][ T5830] veth1_macvtap: entered promiscuous mode [ 95.391733][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.433577][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.455022][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.501199][ T1136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.535787][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.562348][ T1136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.601339][ T1136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.647243][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.656867][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.664787][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.680226][ T1136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.751448][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.762830][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.801519][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.823348][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.862929][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.890674][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.992807][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.026747][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.142015][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.208374][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.268410][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.276706][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.429991][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.437959][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.601532][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.635133][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.729095][ T5842] Bluetooth: hci3: command tx timeout [ 96.808640][ T5840] Bluetooth: hci0: command tx timeout [ 96.820563][ T5849] Bluetooth: hci1: command tx timeout [ 96.831212][ T5842] Bluetooth: hci4: command tx timeout [ 96.831424][ T5837] Bluetooth: hci2: command tx timeout [ 97.141615][ T9] cfg80211: failed to load regulatory.db [ 99.738851][ T6112] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 100.602011][ T6144] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 103.915508][ T6270] delete_channel: no stack [ 115.915384][ T6830] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 116.166701][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 116.507296][ T6857] openvswitch: netlink: Missing key (keys=40, expected=80) [ 117.319211][ T6895] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.488861][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 118.253577][ T6943] bridge_slave_0: left allmulticast mode [ 118.272327][ T6943] bridge_slave_0: left promiscuous mode [ 118.303194][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.382296][ T6943] bridge_slave_1: left allmulticast mode [ 118.402090][ T6943] bridge_slave_1: left promiscuous mode [ 118.432937][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.526261][ T6943] bond0: (slave bond_slave_0): Releasing backup interface [ 118.594537][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 118.607947][ T6943] bond0: (slave bond_slave_1): Releasing backup interface [ 118.693783][ T6943] team0: Port device team_slave_0 removed [ 118.718801][ T6943] team0: Port device team_slave_1 removed [ 118.725836][ T6943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.742009][ T6943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.752447][ T6943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.768854][ T6943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.796791][ T6943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.824868][ T6964] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 119.313969][ T6983] lo speed is unknown, defaulting to 1000 [ 119.339210][ T6988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.342952][ T6983] lo speed is unknown, defaulting to 1000 [ 119.397679][ T6988] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 119.421674][ T6983] lo speed is unknown, defaulting to 1000 [ 119.482921][ T6983] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.587818][ T6983] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.782590][ T6983] lo speed is unknown, defaulting to 1000 [ 119.824515][ T6983] lo speed is unknown, defaulting to 1000 [ 119.856611][ T6983] lo speed is unknown, defaulting to 1000 [ 119.874959][ T7008] warning: `syz.3.524' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.910762][ T6983] lo speed is unknown, defaulting to 1000 [ 119.939958][ T6983] lo speed is unknown, defaulting to 1000 [ 119.968654][ T7004] rdma_rxe: rxe_newlink: failed to add lo [ 120.255460][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 120.364045][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 120.799723][ T7048] openvswitch: netlink: IP tunnel dst address not specified [ 120.829093][ T7052] netlink: 'syz.2.546': attribute type 4 has an invalid length. [ 121.064044][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 121.153186][ T7069] xt_l2tp: invalid flags combination: 8 [ 121.163269][ T7070] netlink: 'syz.2.554': attribute type 3 has an invalid length. [ 121.178647][ T7070] netlink: 224 bytes leftover after parsing attributes in process `syz.2.554'. [ 121.461566][ T7083] openvswitch: netlink: Multiple metadata blocks provided [ 121.773651][ T7094] IPv6: sit2: Disabled Multicast RS [ 121.789507][ T7094] sit2: entered allmulticast mode [ 122.220643][ T7120] netlink: 60 bytes leftover after parsing attributes in process `syz.2.579'. [ 122.259209][ T7120] unsupported nlmsg_type 40 [ 123.160755][ T7161] bond1: Unable to set down delay as MII monitoring is disabled [ 123.203049][ T7161] bond1 (unregistering): Released all slaves [ 123.260710][ T7173] netlink: 'syz.1.605': attribute type 10 has an invalid length. [ 123.360286][ T7173] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 123.605013][ T7189] netlink: 'syz.3.612': attribute type 21 has an invalid length. [ 123.613126][ T7189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.612'. [ 124.340039][ T7226] netlink: 48 bytes leftover after parsing attributes in process `syz.0.630'. [ 124.697584][ T7242] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 124.792081][ T7248] netlink: 'syz.2.640': attribute type 2 has an invalid length. [ 124.810714][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 125.279438][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'. [ 125.592744][ T7288] netlink: 'syz.2.657': attribute type 3 has an invalid length. [ 125.602687][ T7288] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 125.644488][ T7290] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.090495][ T7322] netlink: 128 bytes leftover after parsing attributes in process `syz.0.662'. [ 126.589664][ T7347] syz.4.675 uses obsolete (PF_INET,SOCK_PACKET) [ 126.800855][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.676'. [ 127.040459][ T5942] lo speed is unknown, defaulting to 1000 [ 127.357669][ T7384] erspan0: entered promiscuous mode [ 127.371441][ T7385] ip6t_srh: unknown srh match flags 5F28 [ 127.394748][ T7384] erspan0: entered allmulticast mode [ 127.752255][ T7405] ipt_rpfilter: unknown options [ 128.331358][ T7444] Cannot find del_set index 0 as target [ 128.830465][ T7473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.734'. [ 128.939393][ T7479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.426443][ T7499] bond1 (unregistering): Released all slaves [ 129.620811][ T7517] 8021q: VLANs not supported on ipvlan1 [ 130.220533][ T7554] netlink: 'syz.2.774': attribute type 11 has an invalid length. [ 130.228585][ T7554] netlink: 228 bytes leftover after parsing attributes in process `syz.2.774'. [ 130.472641][ T7568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.653808][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 130.681353][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 131.411285][ T7619] bond1: entered allmulticast mode [ 131.422154][ T7619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.294991][ T7681] netlink: 68 bytes leftover after parsing attributes in process `syz.2.836'. [ 132.433472][ T7689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.840'. [ 132.617959][ T7698] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 132.973782][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 133.344648][ T7741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.868'. [ 133.540408][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 133.573448][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'. [ 133.625788][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'. [ 133.913679][ T7771] bond1: Unable to set up delay as MII monitoring is disabled [ 133.940423][ T7771] bond1 (unregistering): Released all slaves [ 133.996321][ T7778] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 134.040024][ T7778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.884'. [ 134.222722][ T7791] netlink: 116 bytes leftover after parsing attributes in process `syz.2.890'. [ 134.491856][ T7805] netlink: 'syz.1.897': attribute type 1 has an invalid length. [ 134.628743][ T7813] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.941355][ T7834] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 135.117994][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 135.259647][ T7853] netlink: 'syz.4.921': attribute type 13 has an invalid length. [ 135.968394][ T7902] netlink: 'syz.3.943': attribute type 12 has an invalid length. [ 136.428090][ T7933] netlink: 'syz.4.961': attribute type 21 has an invalid length. [ 136.471608][ T7934] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 136.494295][ T7936] tunl0: entered promiscuous mode [ 136.496355][ T7934] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 136.513663][ T7936] netlink: 'syz.3.962': attribute type 3 has an invalid length. [ 136.528254][ T7934] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 137.369459][ T7984] netlink: zone id is out of range [ 137.387287][ T7984] netlink: zone id is out of range [ 137.393153][ T7984] netlink: zone id is out of range [ 137.398684][ T7984] netlink: get zone limit has 4 unknown bytes [ 138.020377][ T8022] __nla_validate_parse: 3 callbacks suppressed [ 138.020398][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 138.068254][ T8022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.092794][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.109991][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.431508][ T8102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.453692][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 139.487965][ T8115] openvswitch: netlink: IP tunnel dst address not specified [ 140.173744][ T8159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1066'. [ 140.183658][ T8159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1066'. [ 140.724731][ T8191] netlink: 'syz.3.1082': attribute type 1 has an invalid length. [ 140.832444][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 140.955793][ T8201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.837481][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 141.879720][ T8267] netlink: 'syz.1.1120': attribute type 10 has an invalid length. [ 141.964608][ T8267] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.030999][ T8272] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 142.059339][ T8272] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 142.373152][ T8295] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 142.382132][ T8295] bond2: option packets_per_slave: allowed values 0 - 65535 [ 142.395880][ T8298] netlink: 'syz.0.1134': attribute type 1 has an invalid length. [ 142.409515][ T8295] bond2 (unregistering): Released all slaves [ 142.804698][ T8323] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 142.815702][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 142.850653][ T8323] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1144'. [ 143.015721][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1152'. [ 143.064008][ T8336] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 143.090956][ T8336] xt_SECMARK: invalid mode: 9 [ 143.207288][ T8338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.474146][ T8364] netlink: 'syz.1.1164': attribute type 21 has an invalid length. [ 143.789535][ T8382] Cannot find set identified by id 3 to match [ 143.943252][ T8395] netlink: 'syz.1.1180': attribute type 1 has an invalid length. [ 143.984835][ T8395] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1180'. [ 144.653272][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1196'. [ 145.084280][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1211'. [ 145.507218][ T8491] pim6reg: entered allmulticast mode [ 145.826050][ T8513] netlink: 'syz.1.1235': attribute type 2 has an invalid length. [ 146.218401][ T8541] netlink: zone id is out of range [ 146.223705][ T8541] netlink: zone id is out of range [ 146.230433][ T8540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1246'. [ 146.234025][ T8541] netlink: zone id is out of range [ 146.258422][ T8541] netlink: zone id is out of range [ 146.267833][ T8541] netlink: zone id is out of range [ 146.268371][ T8540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1246'. [ 146.284320][ T8541] netlink: zone id is out of range [ 146.309570][ T8541] netlink: zone id is out of range [ 146.319698][ T8541] netlink: zone id is out of range [ 146.324877][ T8541] netlink: zone id is out of range [ 146.343933][ T8541] netlink: zone id is out of range [ 146.740232][ T8562] bond1 (unregistering): Released all slaves [ 147.302294][ T8604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.721529][ T8631] netlink: 'syz.1.1288': attribute type 23 has an invalid length. [ 147.938037][ T8647] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 148.221208][ T8663] xt_ecn: cannot match TCP bits for non-tcp packets [ 148.621076][ T8685] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 148.794496][ T8695] gtp0: entered promiscuous mode [ 148.828705][ T8695] gtp0: entered allmulticast mode [ 149.033094][ T8706] xt_CONNSECMARK: invalid mode: 0 [ 149.051403][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 149.285563][ T8719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.221142][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 150.583761][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 150.699886][ T8812] netlink: 'syz.2.1379': attribute type 1 has an invalid length. [ 150.774172][ T8818] pimreg: entered allmulticast mode [ 150.804502][ T8819] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 150.834417][ T8819] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1382'. [ 150.910609][ T8826] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1385'. [ 151.746782][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 151.817437][ T8883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.146720][ T8875] infiniband : set down [ 152.152894][ T8875] infiniband : added ipvlan0 [ 152.154271][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'. [ 152.217257][ T8875] RDS/IB: : added [ 152.226279][ T8875] smc: adding ib device  with port count 1 [ 152.232764][ T8875] smc: ib device  port 1 has no pnetid [ 152.533259][ T8912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1428'. [ 152.542553][ T8912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1428'. [ 153.451714][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 154.004903][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1461'. [ 154.489646][ T8998] delete_channel: no stack [ 154.774158][ T9014] __nla_validate_parse: 1 callbacks suppressed [ 154.774181][ T9014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1477'. [ 154.804554][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 154.851688][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 154.939256][ T9016] veth3: entered allmulticast mode [ 154.987874][ T9024] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 155.529001][ T9061] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 155.536970][ T9061] netlink: 'syz.4.1498': attribute type 2 has an invalid length. [ 155.639979][ T9067] netlink: 'syz.1.1501': attribute type 13 has an invalid length. [ 155.680510][ T9067] gretap0: refused to change device tx_queue_len [ 155.687368][ T9067] net_ratelimit: 54 callbacks suppressed [ 155.687388][ T9067] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.463656][ T9119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.471223][ T9119] IPv6: NLM_F_CREATE should be set when creating new route [ 156.478684][ T9119] IPv6: NLM_F_CREATE should be set when creating new route [ 156.669406][ T9131] netlink: 'syz.0.1531': attribute type 16 has an invalid length. [ 156.775056][ T9136] vlan1: entered allmulticast mode [ 156.780499][ T9136] veth0_vlan: entered allmulticast mode [ 156.909133][ T9143] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 157.061829][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 157.074253][ T9155] netlink: 'syz.4.1545': attribute type 12 has an invalid length. [ 157.470991][ T9179] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 157.544198][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 157.900532][ T9208] netlink: 'syz.3.1572': attribute type 1 has an invalid length. [ 157.908638][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 157.957123][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 157.980135][ T9212] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 158.303360][ T9234] netlink: 'syz.2.1583': attribute type 13 has an invalid length. [ 158.353833][ T9234] erspan0: left promiscuous mode [ 158.359168][ T9234] erspan0: left allmulticast mode [ 158.506049][ T9245] xt_l2tp: v2 doesn't support IP mode [ 158.751369][ T9234] gtp0: left promiscuous mode [ 158.756165][ T9234] gtp0: left allmulticast mode [ 159.109342][ T9272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1602'. [ 159.138472][ T9276] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1603'. [ 159.470924][ T9295] netlink: 'syz.2.1611': attribute type 1 has an invalid length. [ 159.518196][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'. [ 159.951349][ T9324] x_tables: duplicate entry at hook 1 [ 160.035328][ T9329] __nla_validate_parse: 1 callbacks suppressed [ 160.035347][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1629'. [ 160.053422][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1630'. [ 160.542323][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 160.725784][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.741682][ T9364] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.749055][ T9364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.807694][ T9373] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 160.848945][ T9373] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 160.860581][ T9376] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.260609][ T9403] netlink: 'syz.0.1665': attribute type 2 has an invalid length. [ 161.279277][ T9403] netlink: 'syz.0.1665': attribute type 1 has an invalid length. [ 161.794515][ T9429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.946728][ T9441] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1684'. [ 161.977153][ T9441] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1684'. [ 162.212240][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1693'. [ 162.638376][ T9482] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1705'. [ 163.110964][ T9510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.648985][ T9547] netlink: 'syz.2.1737': attribute type 2 has an invalid length. [ 163.853344][ T9563] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 164.507445][ T9606] raw_sendmsg: syz.0.1766 forgot to set AF_INET. Fix it! [ 165.271948][ T9654] netlink: 'syz.1.1790': attribute type 8 has an invalid length. [ 165.348586][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'. [ 165.470179][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 165.617440][ T9673] xt_socket: unknown flags 0x50 [ 165.766956][ T9687] netlink: 'syz.1.1805': attribute type 1 has an invalid length. [ 165.957392][ T9699] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1812'. [ 166.422339][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1825'. [ 166.432713][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1825'. [ 166.619201][ T9737] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1831'. [ 166.628902][ T9737] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1831'. [ 166.841646][ T9749] netlink: 'syz.3.1835': attribute type 30 has an invalid length. [ 167.008880][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'. [ 167.017880][ T9758] bridge_slave_1: left allmulticast mode [ 167.025357][ T9756] netlink: 'syz.2.1839': attribute type 11 has an invalid length. [ 167.037618][ T9756] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1839'. [ 167.054983][ T9758] bridge_slave_1: left promiscuous mode [ 167.065428][ T9758] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.094444][ T9758] bridge_slave_0: left allmulticast mode [ 167.108464][ T9758] bridge_slave_0: left promiscuous mode [ 167.117364][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.407237][ T9778] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 167.420829][ T9780] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 167.440335][ T9778] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1850'. [ 168.622499][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.644039][ T5917] IPVS: starting estimator thread 0... [ 168.748364][ T9862] IPVS: using max 28 ests per chain, 67200 per kthread [ 169.023696][ T9883] netlink: 'syz.2.1902': attribute type 24 has an invalid length. [ 169.642295][ T9924] netlink: 'syz.2.1919': attribute type 1 has an invalid length. [ 169.841358][ T9938] netlink: 'syz.1.1926': attribute type 1 has an invalid length. [ 169.914126][ T9942] netlink: 'syz.0.1927': attribute type 11 has an invalid length. [ 170.455873][ T9974] __nla_validate_parse: 8 callbacks suppressed [ 170.455894][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 170.498386][ T9974] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1944'. [ 170.593984][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 170.628654][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 170.643038][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 170.816070][ T9996] Cannot find del_set index 49151 as target [ 171.268851][T10026] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.452617][T10037] netlink: 'syz.2.1977': attribute type 1 has an invalid length. [ 171.463330][T10038] netlink: 'syz.0.1976': attribute type 11 has an invalid length. [ 172.125343][T10080] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 172.151979][T10082] xt_hashlimit: invalid interval [ 172.629425][T10114] syz.0.2013 uses old SIOCAX25GETINFO [ 172.695651][T10119] netlink: 'syz.0.2015': attribute type 10 has an invalid length. [ 173.246293][T10153] IPv6: NLM_F_REPLACE set, but no existing node found! [ 173.396976][T10109] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 173.545518][T10171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2041'. [ 173.609214][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2043'. [ 173.633084][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2043'. [ 173.914843][T10197] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2052'. [ 174.015928][T10201] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2055'. [ 174.401593][T10227] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.443491][T10297] xt_hashlimit: overflow, rate too high: 0 [ 175.513659][T10303] netlink: 'syz.3.2107': attribute type 1 has an invalid length. [ 175.582569][T10307] Cannot find del_set index 4 as target [ 176.512425][T10358] __nla_validate_parse: 3 callbacks suppressed [ 176.512445][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 176.558249][T10361] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2136'. [ 176.588386][T10361] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2136'. [ 176.877259][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2144'. [ 177.251384][T10406] SET target dimension over the limit! [ 177.782694][T10442] netlink: 'syz.3.2175': attribute type 1 has an invalid length. [ 177.808420][T10442] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2175'. [ 177.941643][T10452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.105930][T10462] netlink: 'syz.3.2185': attribute type 64 has an invalid length. [ 178.114164][T10462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2185'. [ 178.431345][T10482] tc_dump_action: action bad kind [ 178.567352][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 178.583286][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 178.593625][T10490] netlink: 'syz.0.2199': attribute type 3 has an invalid length. [ 178.711925][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 178.792505][T10501] bond1: Removing last arp target with arp_interval on [ 178.847660][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 179.147822][T10528] bond0: entered allmulticast mode [ 179.156089][T10528] bond_slave_0: entered allmulticast mode [ 179.162549][T10528] bond_slave_1: entered allmulticast mode [ 179.361680][T10539] delete_channel: no stack [ 179.491659][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.503315][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.513343][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.521629][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.538437][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.596002][T10544] lo speed is unknown, defaulting to 1000 [ 180.341861][T10544] chnl_net:caif_netlink_parms(): no params data found [ 180.587631][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.605633][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.618528][T10544] bridge_slave_0: entered allmulticast mode [ 180.630748][T10544] bridge_slave_0: entered promiscuous mode [ 180.646461][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.655031][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.678479][T10544] bridge_slave_1: entered allmulticast mode [ 180.686381][T10544] bridge_slave_1: entered promiscuous mode [ 180.740012][T10607] netlink: 'syz.2.2251': attribute type 3 has an invalid length. [ 180.747897][T10607] netlink: 'syz.2.2251': attribute type 3 has an invalid length. [ 180.792220][T10607] netlink: 'syz.2.2251': attribute type 3 has an invalid length. [ 180.811715][T10607] netlink: 'syz.2.2251': attribute type 3 has an invalid length. [ 180.820195][T10607] netlink: 'syz.2.2251': attribute type 3 has an invalid length. [ 180.828077][T10607] netlink: 'syz.2.2251': attribute type 3 has an invalid length. [ 180.837702][T10607] netlink: 'syz.2.2251': attribute type 3 has an invalid length. [ 180.885562][T10544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.919779][T10544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.061869][T10544] team0: Port device team_slave_0 added [ 181.075394][T10544] team0: Port device team_slave_1 added [ 181.188438][T10544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.195450][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.234891][T10544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.256050][T10544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.264381][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.313528][T10544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.335284][T10631] ip6gre1: entered allmulticast mode [ 181.406821][T10635] ip6t_rpfilter: unknown options [ 181.482378][T10544] hsr_slave_0: entered promiscuous mode [ 181.499976][T10544] hsr_slave_1: entered promiscuous mode [ 181.518868][T10544] debugfs: 'hsr0' already exists in 'hsr' [ 181.558247][T10544] Cannot create hsr debugfs directory [ 181.621300][ T5837] Bluetooth: hci5: command tx timeout [ 181.992286][T10667] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 182.064093][T10669] x_tables: unsorted underflow at hook 4 [ 182.118948][T10544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.146587][T10544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.172276][T10544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.203108][T10544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.409348][T10544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.461626][T10544] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.476359][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.483675][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.511501][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.518749][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.939160][T10716] set match dimension is over the limit! [ 182.958068][T10544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.202591][T10731] validate_nla: 46 callbacks suppressed [ 183.202612][T10731] netlink: 'syz.2.2308': attribute type 7 has an invalid length. [ 183.346890][T10738] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 183.645864][T10544] veth0_vlan: entered promiscuous mode [ 183.676737][T10544] veth1_vlan: entered promiscuous mode [ 183.689538][ T5837] Bluetooth: hci5: command tx timeout [ 183.777165][T10759] syz.3.2322: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.793992][T10759] CPU: 1 UID: 0 PID: 10759 Comm: syz.3.2322 Not tainted syzkaller #0 PREEMPT(full) [ 183.794042][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.794073][T10759] Call Trace: [ 183.794083][T10759] [ 183.794092][T10759] dump_stack_lvl+0xe8/0x150 [ 183.794127][T10759] warn_alloc+0x214/0x310 [ 183.794152][T10759] ? stack_trace_save+0x9c/0xe0 [ 183.794188][T10759] ? __pfx_warn_alloc+0x10/0x10 [ 183.794219][T10759] ? kasan_save_track+0x4f/0x80 [ 183.794238][T10759] ? kasan_save_track+0x3e/0x80 [ 183.794257][T10759] ? __kasan_kmalloc+0x93/0xb0 [ 183.794278][T10759] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 183.794297][T10759] ? xskq_create+0x56/0x170 [ 183.794317][T10759] ? xsk_setsockopt+0x4dc/0x8d0 [ 183.794345][T10759] ? do_sock_setsockopt+0x17c/0x1b0 [ 183.794368][T10759] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 183.794393][T10759] ? do_syscall_64+0xec/0xf80 [ 183.794420][T10759] __vmalloc_node_range_noprof+0x134/0x16a0 [ 183.794477][T10759] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.794506][T10759] ? __kasan_kmalloc+0x93/0xb0 [ 183.794536][T10759] vmalloc_user_noprof+0xad/0xf0 [ 183.794558][T10759] ? xskq_create+0xbf/0x170 [ 183.794577][T10759] xskq_create+0xbf/0x170 [ 183.794600][T10759] xsk_init_queue+0xb0/0x110 [ 183.794635][T10759] xsk_setsockopt+0x4dc/0x8d0 [ 183.794669][T10759] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.794700][T10759] ? __pfx_aa_sk_perm+0x10/0x10 [ 183.794731][T10759] ? aa_sock_opt_perm+0xff/0x1a0 [ 183.794761][T10759] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 183.794780][T10759] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.794811][T10759] do_sock_setsockopt+0x17c/0x1b0 [ 183.794841][T10759] __x64_sys_setsockopt+0x13f/0x1b0 [ 183.794880][T10759] do_syscall_64+0xec/0xf80 [ 183.794903][T10759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.794924][T10759] ? trace_irq_disable+0x37/0x100 [ 183.794951][T10759] ? clear_bhb_loop+0x60/0xb0 [ 183.794977][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.794998][T10759] RIP: 0033:0x7fe925f8f749 [ 183.795024][T10759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.795042][T10759] RSP: 002b:00007fe926de4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.795065][T10759] RAX: ffffffffffffffda RBX: 00007fe9261e5fa0 RCX: 00007fe925f8f749 [ 183.795081][T10759] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 183.795094][T10759] RBP: 00007fe926013f91 R08: 0000000000000004 R09: 0000000000000000 [ 183.795107][T10759] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.795120][T10759] R13: 00007fe9261e6038 R14: 00007fe9261e5fa0 R15: 00007ffc9f479eb8 [ 183.795155][T10759] [ 183.795168][T10759] Mem-Info: [ 183.917615][T10544] veth0_macvtap: entered promiscuous mode [ 183.927575][T10759] active_anon:5550 inactive_anon:6 isolated_anon:0 [ 183.927575][T10759] active_file:2824 inactive_file:40221 isolated_file:0 [ 183.927575][T10759] unevictable:768 dirty:243 writeback:0 [ 183.927575][T10759] slab_reclaimable:11320 slab_unreclaimable:128898 [ 183.927575][T10759] mapped:34151 shmem:1358 pagetables:1152 [ 183.927575][T10759] sec_pagetables:0 bounce:0 [ 183.927575][T10759] kernel_misc_reclaimable:0 [ 183.927575][T10759] free:1285353 free_pcp:12564 free_cma:0 [ 183.986065][T10544] veth1_macvtap: entered promiscuous mode [ 184.001410][T10759] Node 0 active_anon:22200kB inactive_anon:24kB active_file:11296kB inactive_file:160684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136604kB dirty:968kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12912kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.173844][T10759] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.204044][T10759] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.234328][T10759] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 184.240232][T10759] Node 0 DMA32 free:1238932kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22288kB inactive_anon:24kB active_file:11296kB inactive_file:160684kB unevictable:1536kB writepending:980kB zspages:0kB present:3129332kB managed:2559484kB mlocked:0kB bounce:0kB free_pcp:29368kB local_pcp:13668kB free_cma:0kB [ 184.276238][T10759] lowmem_reserve[]: 0 0 1 1 1 [ 184.281676][T10759] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.311564][T10759] lowmem_reserve[]: 0 0 0 0 0 [ 184.316350][T10759] Node 1 Normal free:3886428kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20416kB local_pcp:7520kB free_cma:0kB [ 184.348862][T10759] lowmem_reserve[]: 0 0 0 0 0 [ 184.353670][T10759] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.366558][T10759] Node 0 DMA32: 363*4kB (UME) 1227*8kB (UM) 387*16kB (UME) 15*32kB (M) 86*64kB (UM) 176*128kB (UME) 140*256kB (UM) 105*512kB (UM) 71*1024kB (UME) 33*2048kB (UME) 235*4096kB (M) = 1238420kB [ 184.394424][T10762] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 184.403568][T10759] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 184.428461][T10759] Node 1 Normal: 203*4kB (UME) 60*8kB (UME) 45*16kB (UME) 88*32kB (UME) 22*64kB (UME) 4*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3886428kB [ 184.455438][T10759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.465587][T10759] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.475290][T10759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.490851][T10759] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.501136][T10759] 44399 total pagecache pages [ 184.511526][T10759] 0 pages in swap cache [ 184.515817][T10759] Free swap = 124996kB [ 184.522312][T10759] Total swap = 124996kB [ 184.537480][T10759] 2097051 pages RAM [ 184.541883][T10759] 0 pages HighMem/MovableOnly [ 184.546607][T10759] 425090 pages reserved [ 184.550971][T10759] 0 pages cma reserved [ 184.566238][T10544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.625179][T10544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.657629][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.688300][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.706216][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.740397][ T7323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.841326][T10773] bond5: option resend_igmp: invalid value (32767) [ 184.848015][T10773] bond5: option resend_igmp: allowed values 0 - 255 [ 184.861536][T10773] bond5 (unregistering): Released all slaves [ 184.960215][ T7312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.968874][ T7312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.057698][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.066477][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.279754][T10793] __nla_validate_parse: 7 callbacks suppressed [ 185.279775][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2220'. [ 185.583555][T10812] netlink: 'syz.5.2343': attribute type 10 has an invalid length. [ 185.620264][T10812] team0: Device veth1_macvtap failed to register rx_handler [ 185.769251][ T5837] Bluetooth: hci5: command tx timeout [ 186.260354][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.270256][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.278938][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.289896][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.297504][T10840] ip6t_srh: unknown srh match flags 4000 [ 186.304118][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.450847][T10838] lo speed is unknown, defaulting to 1000 [ 186.477322][T10849] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 186.633883][T10855] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 187.356307][T10891] netlink: 'syz.5.2375': attribute type 8 has an invalid length. [ 187.494341][T10838] chnl_net:caif_netlink_parms(): no params data found [ 187.729612][T10909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2382'. [ 187.816264][T10838] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.838714][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.846039][T10838] bridge_slave_0: entered allmulticast mode [ 187.863186][ T5837] Bluetooth: hci5: command tx timeout [ 187.882023][T10838] bridge_slave_0: entered promiscuous mode [ 187.891765][T10838] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.899368][T10838] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.906747][T10838] bridge_slave_1: entered allmulticast mode [ 187.915307][T10838] bridge_slave_1: entered promiscuous mode [ 187.973181][T10838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.987034][T10838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.165116][T10922] sctp: [Deprecated]: syz.2.2389 (pid 10922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.165116][T10922] Use struct sctp_sack_info instead [ 188.200262][T10838] team0: Port device team_slave_0 added [ 188.221773][T10838] team0: Port device team_slave_1 added [ 188.285716][T10924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.409142][ T5837] Bluetooth: hci6: command tx timeout [ 188.464301][T10838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.485752][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.597957][T10838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.617234][T10838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.625103][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.706930][T10838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.722045][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2400'. [ 188.760405][T10948] netlink: 'syz.3.2401': attribute type 21 has an invalid length. [ 188.846030][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 188.875130][T10838] hsr_slave_0: entered promiscuous mode [ 188.922272][T10838] hsr_slave_1: entered promiscuous mode [ 188.949438][T10838] debugfs: 'hsr0' already exists in 'hsr' [ 188.955246][T10838] Cannot create hsr debugfs directory [ 189.461345][T10980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.734146][T10838] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.780526][T10838] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.818479][T10838] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.856248][T10838] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.157584][T10838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.188975][T10838] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.226591][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.233900][ T7310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.277919][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.285219][ T7310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.358413][T11026] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2437'. [ 190.378239][T11026] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 190.491107][ T5837] Bluetooth: hci6: command tx timeout [ 190.898649][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'. [ 190.907664][T11052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2447'. [ 190.963902][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'. [ 190.991427][T11054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2450'. [ 191.010837][T11052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2447'. [ 191.040817][T11052] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2447'. [ 191.106508][T10838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.819423][T11095] Driver unsupported XDP return value 0 on prog (id 154) dev N/A, expect packet loss! [ 191.934195][T10838] veth0_vlan: entered promiscuous mode [ 191.993339][T10838] veth1_vlan: entered promiscuous mode [ 192.112371][T10838] veth0_macvtap: entered promiscuous mode [ 192.143602][T10838] veth1_macvtap: entered promiscuous mode [ 192.227641][T10838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.261600][T10838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.351812][ T3731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.399385][ T3731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.438273][ T3731] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.491833][ T3731] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.570266][ T5849] Bluetooth: hci6: command tx timeout [ 192.660653][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.689376][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.765231][ T3918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.789093][ T3918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.128756][T11149] netlink: 'syz.5.2492': attribute type 1 has an invalid length. [ 193.136645][T11149] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2492'. [ 193.410956][T11165] openvswitch: netlink: Missing key (keys=40, expected=100) [ 193.839259][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2509'. [ 194.129066][T11201] netlink: 'syz.3.2516': attribute type 21 has an invalid length. [ 194.428863][T11213] netlink: 'syz.5.2522': attribute type 1 has an invalid length. [ 194.455291][T11213] netlink: 'syz.5.2522': attribute type 1 has an invalid length. [ 194.648313][ T5849] Bluetooth: hci6: command tx timeout [ 194.757656][T11229] netlink: 'syz.2.2529': attribute type 3 has an invalid length. [ 194.915354][T11238] netlink: 'syz.0.2534': attribute type 10 has an invalid length. [ 194.985178][T11238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2534'. [ 195.047016][T11238] team0: Port device geneve0 added [ 195.262162][T11260] netlink: 'syz.6.2544': attribute type 7 has an invalid length. [ 195.276750][T11260] netlink: 'syz.6.2544': attribute type 8 has an invalid length. [ 195.371304][T11262] netlink: 'syz.2.2547': attribute type 12 has an invalid length. [ 195.403576][T11262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2547'. [ 195.615606][T11279] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 196.520002][T11332] netlink: 'syz.2.2579': attribute type 1 has an invalid length. [ 196.621226][T11336] netlink: 'syz.3.2582': attribute type 15 has an invalid length. [ 196.910452][T11316] infiniband sy: set active [ 196.915263][T11316] infiniband sy: added bond_slave_0 [ 197.004325][T11316] RDS/IB: sy: added [ 197.053722][T11316] smc: adding ib device sy with port count 1 [ 197.100369][T11316] smc: ib device sy port 1 has no pnetid [ 197.235479][T11368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2597'. [ 197.392741][T11375] netlink: 'syz.3.2601': attribute type 11 has an invalid length. [ 197.413320][T11375] netlink: 'syz.3.2601': attribute type 11 has an invalid length. [ 197.438238][T11375] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2601'. [ 197.573245][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2604'. [ 198.304229][T11418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.362319][T11420] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2619'. [ 198.944031][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2629'. [ 199.548768][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.555152][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.961110][T11494] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.318452][T11511] validate_nla: 1 callbacks suppressed [ 200.318471][T11511] netlink: 'syz.6.2653': attribute type 2 has an invalid length. [ 200.381944][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2653'. [ 201.538231][T11571] x_tables: duplicate underflow at hook 1 [ 201.656658][T11574] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2684'. [ 202.066165][T11589] SET target dimension over the limit! [ 202.378260][T11604] netlink: 'syz.0.2696': attribute type 10 has an invalid length. [ 202.438777][T11604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2696'. [ 202.462723][T11604] dummy0: entered promiscuous mode [ 202.491696][T11604] bridge0: port 3(dummy0) entered blocking state [ 202.517538][T11604] bridge0: port 3(dummy0) entered disabled state [ 202.527050][T11604] dummy0: entered allmulticast mode [ 202.552640][T11604] bridge0: port 3(dummy0) entered blocking state [ 202.559225][T11604] bridge0: port 3(dummy0) entered forwarding state [ 202.580721][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2701'. [ 204.256388][T11711] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 204.578350][T11729] netlink: 'syz.2.2760': attribute type 1 has an invalid length. [ 204.586220][T11729] netlink: 'syz.2.2760': attribute type 3 has an invalid length. [ 204.599441][T11729] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2760'. [ 204.748653][T11743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2766'. [ 205.116596][T11765] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 205.345044][T11779] ip6gre1: entered allmulticast mode [ 205.638339][T11799] netlink: 'syz.0.2795': attribute type 11 has an invalid length. [ 205.642170][T11798] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.649035][T11799] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2795'. [ 206.237060][T11837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.610044][T11858] x_tables: unsorted underflow at hook 3 [ 207.466593][T11914] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 207.501773][T11914] bond2 (unregistering): Released all slaves [ 207.685690][T11931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2859'. [ 207.794571][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 207.848500][T11935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2860'. [ 209.028596][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2900'. [ 209.058439][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2900'. [ 209.731741][T12058] siw: device registration error -23 [ 210.097090][T12078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2931'. [ 210.903496][T12125] netlink: 'syz.2.2954': attribute type 39 has an invalid length. [ 211.348317][T12149] netlink: 'syz.3.2967': attribute type 32 has an invalid length. [ 211.749049][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2974'. [ 211.778376][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 211.851010][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.851053][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 211.863689][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 211.883113][T12182] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 212.312102][T12207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2985'. [ 212.418524][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2988'. [ 212.550908][T12222] IPVS: Error connecting to the multicast addr [ 212.702696][T12228] __nla_validate_parse: 2 callbacks suppressed [ 212.702720][T12228] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2995'. [ 212.753431][T12233] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2997'. [ 213.055246][T12251] netlink: 'syz.0.3006': attribute type 12 has an invalid length. [ 213.672792][T12290] netlink: 'syz.0.3025': attribute type 64 has an invalid length. [ 213.701184][T12290] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3025'. [ 213.862061][T12301] set match dimension is over the limit! [ 214.065151][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3037'. [ 214.193826][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3042'. [ 214.386068][T12333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.651061][T12350] netlink: 'syz.2.3053': attribute type 4 has an invalid length. [ 214.941872][T12370] ksmbd: Unknown IPC event: 3, ignore. [ 215.097491][T12379] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 215.314702][T12397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.438296][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3079'. [ 215.482608][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3079'. [ 215.526584][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3079'. [ 215.701779][T12417] SET target dimension over the limit! [ 215.971089][T12435] netlink: 'syz.0.3097': attribute type 3 has an invalid length. [ 216.047447][T12437] Cannot find add_set index 0 as target [ 216.098796][T12443] xt_TCPMSS: Only works on TCP SYN packets [ 216.737979][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3121'. [ 216.885398][T12492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.284972][T12519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.564035][T12537] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 217.638281][T12539] ip6gre2: entered allmulticast mode [ 217.794327][T12551] xt_recent: Unsupported userspace flags (000000b1) [ 217.921043][T12557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3158'. [ 217.973325][T12561] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 218.546073][T12597] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3178'. [ 218.561076][T12599] netlink: 'syz.0.3181': attribute type 32 has an invalid length. [ 218.717799][T12609] netlink: 'syz.3.3183': attribute type 1 has an invalid length. [ 218.736215][T12609] netlink: 'syz.3.3183': attribute type 1 has an invalid length. [ 218.752187][T12609] netlink: 'syz.3.3183': attribute type 1 has an invalid length. [ 218.765728][T12609] netlink: 'syz.3.3183': attribute type 2 has an invalid length. [ 218.790412][T12609] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3183'. [ 219.345742][T12644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.569958][T12659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3205'. [ 219.816010][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3213'. [ 220.287501][T12705] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 220.294329][T12705] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 220.683353][T12729] ipt_REJECT: TCP_RESET invalid for non-tcp [ 220.693306][T12728] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3239'. [ 220.708340][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3242'. [ 220.737807][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3242'. [ 221.014211][T12747] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 221.038928][T12747] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 221.060202][T12747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.480670][T12778] xt_hashlimit: size too large, truncated to 1048576 [ 221.491957][T12775] Unsupported ieee802154 address type: 0 [ 221.628916][T12789] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3268'. [ 221.641384][T12788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3269'. [ 221.739339][T12791] vxcan2: entered allmulticast mode [ 221.936622][T12802] xt_socket: unknown flags 0x50 [ 221.945944][T12804] C: renamed from team_slave_0 (while UP) [ 221.995749][T12804] netlink: 'syz.0.3276': attribute type 1 has an invalid length. [ 222.009081][T12804] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 222.071712][T12810] netlink: 'syz.6.3280': attribute type 12 has an invalid length. [ 222.384691][T12824] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 222.395707][T12829] netlink: 'syz.0.3288': attribute type 10 has an invalid length. [ 222.420908][T12824] bond5 (unregistering): Released all slaves [ 222.498931][T12829] veth0_vlan: left promiscuous mode [ 222.566667][T12829] veth0_vlan: entered promiscuous mode [ 222.639697][T12829] team0: Device veth0_vlan failed to register rx_handler [ 222.884998][T12860] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 222.920777][T12857] bond2: invalid ARP target 0.0.0.0 specified for addition [ 222.928449][T12857] bond2: option arp_ip_target: invalid value (0) [ 222.949100][T12857] bond2 (unregistering): Released all slaves [ 223.125104][T12870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.557450][T12895] bond3: entered promiscuous mode [ 223.562790][T12895] bond3: entered allmulticast mode [ 223.569211][T12895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.576839][T12899] __nla_validate_parse: 3 callbacks suppressed [ 223.576857][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'. [ 223.635931][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'. [ 223.688572][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3324'. [ 223.997652][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 224.034021][T11281] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.081953][T12928] netlink: 'syz.5.3337': attribute type 10 has an invalid length. [ 224.095336][T11281] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.111276][T12928] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3337'. [ 224.132674][T11281] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.148570][T11281] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.198701][T12930] xt_l2tp: v2 doesn't support IP mode [ 224.448524][T12948] netlink: 'syz.6.3347': attribute type 3 has an invalid length. [ 224.502330][T12951] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.988267][T12980] netlink: 'syz.6.3361': attribute type 9 has an invalid length. [ 224.996084][T12980] netlink: 'syz.6.3361': attribute type 6 has an invalid length. [ 225.191453][T12991] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3368'. [ 225.221534][T12992] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3369'. [ 225.289754][T12997] netlink: 'syz.0.3372': attribute type 1 has an invalid length. [ 225.606480][T13018] netlink: 'syz.3.3382': attribute type 28 has an invalid length. [ 225.619402][T13018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3382'. [ 226.137743][T13047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.508323][T13065] validate_nla: 1 callbacks suppressed [ 226.508345][T13065] netlink: 'syz.2.3404': attribute type 5 has an invalid length. [ 226.604409][T13070] xt_TCPMSS: Only works on TCP SYN packets [ 226.858267][T13084] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 227.220336][T13105] ip6t_srh: unknown srh invflags 4000 [ 227.254056][T13109] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.419076][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3430'. [ 227.506276][T13120] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3432'. [ 227.548903][T13120] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 227.810828][T13142] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.877398][T13145] netlink: 'syz.2.3445': attribute type 6 has an invalid length. [ 227.955674][T13148] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 227.991125][T13148] bond1 (unregistering): Released all slaves [ 228.080320][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.238598][T13161] delete_channel: no stack [ 228.560544][T13178] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 228.594808][T13178] bond3 (unregistering): Released all slaves [ 228.825256][T13201] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3470'. [ 229.000908][T13210] Cannot find set identified by id 65534 to match [ 229.333531][T13234] xt_cgroup: path and classid specified [ 229.630134][T13253] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 229.786775][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3498'. [ 230.133319][T13280] xt_CT: No such helper "syz1" [ 230.143886][T13284] netlink: 'syz.5.3511': attribute type 2 has an invalid length. [ 230.178197][T13284] netlink: 119 bytes leftover after parsing attributes in process `syz.5.3511'. [ 230.370491][T13296] netlink: 'syz.2.3516': attribute type 1 has an invalid length. [ 230.663886][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 230.696449][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3523'. [ 230.705540][T13319] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3527'. [ 230.723766][T13319] openvswitch: netlink: Missing key (keys=40, expected=100) [ 230.837671][T13325] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3529'. [ 230.857465][T13325] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3529'. [ 231.127998][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3538'. [ 231.145809][T13344] netlink: 'syz.3.3539': attribute type 21 has an invalid length. [ 231.153979][T13344] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3539'. [ 231.575659][T13366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.629912][T13371] openvswitch: netlink: Key type 31 is not supported [ 231.901545][T13385] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 232.273687][T13406] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 232.515109][T13424] netlink: 'syz.6.3576': attribute type 10 has an invalid length. [ 232.560979][T13424] team0: Device veth0_macvtap failed to register rx_handler [ 233.203671][T13464] netlink: 'syz.0.3596': attribute type 10 has an invalid length. [ 233.377160][T13474] netlink: 'syz.0.3602': attribute type 1 has an invalid length. [ 233.409596][T13474] netlink: 'syz.0.3602': attribute type 2 has an invalid length. [ 233.524450][T13484] ipt_ECN: cannot use operation on non-tcp rule [ 233.820633][T13503] IPVS: length: 239 != 24 [ 234.323562][T13534] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 234.431539][T13543] gre0: entered promiscuous mode [ 234.525172][T13544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.738741][T13561] __nla_validate_parse: 9 callbacks suppressed [ 234.738764][T13561] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3645'. [ 234.794933][T13561] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3645'. [ 235.044941][T13578] netlink: 'syz.5.3655': attribute type 1 has an invalid length. [ 235.078545][T13578] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3655'. [ 235.098434][T13578] netlink: 658 bytes leftover after parsing attributes in process `syz.5.3655'. [ 235.107567][T13578] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3655'. [ 235.239316][T13586] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 235.385192][T13597] netlink: 'syz.2.3662': attribute type 16 has an invalid length. [ 235.432700][T13597] netlink: 'syz.2.3662': attribute type 3 has an invalid length. [ 235.446423][T13597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3662'. [ 235.633091][T13612] netlink: 'syz.3.3671': attribute type 8 has an invalid length. [ 235.735493][T13617] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 235.751833][T13618] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 236.157310][T13644] netlink: 'syz.0.3687': attribute type 5 has an invalid length. [ 236.183591][T13644] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3687'. [ 236.682343][T13676] tipc: Can't bind to reserved service type 0 [ 236.844954][T13685] bond0: entered promiscuous mode [ 236.853477][T13685] bond_slave_0: entered promiscuous mode [ 236.863210][T13685] bond_slave_1: entered promiscuous mode [ 237.420678][T13724] tipc: MTU too low for tipc bearer [ 237.594017][T13734] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3734'. [ 237.738212][T13741] xt_connbytes: Forcing CT accounting to be enabled [ 238.014229][T13761] validate_nla: 1 callbacks suppressed [ 238.014251][T13761] netlink: 'syz.3.3745': attribute type 29 has an invalid length. [ 238.029557][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'. [ 238.250530][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3749'. [ 238.478404][T13786] tipc: Started in network mode [ 238.483355][T13786] tipc: Node identity , cluster identity 4711 [ 238.509169][T13786] tipc: Failed to set node id, please configure manually [ 238.528371][T13786] tipc: Enabling of bearer rejected, failed to enable media [ 238.615852][T13790] Bluetooth: MGMT ver 1.23 [ 238.973281][T13818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.513050][T13849] sctp: [Deprecated]: syz.0.3788 (pid 13849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.513050][T13849] Use struct sctp_sack_info instead [ 239.559014][T13849] sctp: [Deprecated]: syz.0.3788 (pid 13849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.559014][T13849] Use struct sctp_sack_info instead [ 239.732057][T13860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.739439][T13860] IPv6: NLM_F_CREATE should be set when creating new route [ 239.746749][T13860] IPv6: NLM_F_CREATE should be set when creating new route [ 239.754087][T13860] IPv6: NLM_F_CREATE should be set when creating new route [ 239.775776][T13860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.797925][T13860] Zero length message leads to an empty skb [ 239.996300][T13875] netlink: 'syz.6.3799': attribute type 1 has an invalid length. [ 240.134379][T13881] __nla_validate_parse: 3 callbacks suppressed [ 240.134398][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'. [ 240.323196][T13895] netlink: 'syz.0.3809': attribute type 1 has an invalid length. [ 240.440497][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3812'. [ 240.463002][T13898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3811'. [ 240.728655][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3820'. [ 241.200930][T13946] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3835'. [ 241.814471][T13986] tipc: Started in network mode [ 241.834533][T13986] tipc: Node identity e0000002, cluster identity 4711 [ 241.851150][T13986] tipc: Enabling of bearer rejected, failed to enable media [ 242.491549][T14021] sock: sock_set_timeout: `syz.2.3871' (pid 14021) tries to set negative timeout [ 242.540774][T14024] Bluetooth: MGMT ver 1.23 [ 242.642560][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3874'. [ 242.995510][T14047] netlink: 'syz.3.3884': attribute type 29 has an invalid length. [ 243.016962][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 243.045985][T14047] netlink: 'syz.3.3884': attribute type 29 has an invalid length. [ 243.083941][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 243.287529][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3892'. [ 243.349661][T14067] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 243.359963][ T10] IPVS: starting estimator thread 0... [ 243.463540][T14070] IPVS: using max 27 ests per chain, 64800 per kthread [ 243.566393][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3899'. [ 243.599749][T14083] xt_l2tp: unknown flags: 10 [ 244.568423][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 245.294403][T14191] __nla_validate_parse: 3 callbacks suppressed [ 245.294425][T14191] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3955'. [ 245.465673][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3958'. [ 245.944116][T14225] pimreg3: entered allmulticast mode [ 246.047200][T14233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.377692][T14255] atomic_op ffff888034b20998 conn xmit_atomic 0000000000000000 [ 246.775111][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3996'. [ 246.818940][T14284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.112024][T14300] netlink: 'syz.0.4006': attribute type 11 has an invalid length. [ 247.132165][T14300] netlink: 'syz.0.4006': attribute type 11 has an invalid length. [ 247.159452][T14300] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4006'. [ 247.345315][T14312] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4013'. [ 248.035392][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'. [ 248.055041][T14358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4035'. [ 248.485070][T14380] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4045'. [ 248.708890][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4051'. [ 249.287928][T14426] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 250.543452][T14506] nbd: must specify an index to disconnect [ 250.707125][T14517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.940518][T14530] : entered promiscuous mode [ 250.953466][T14528] tipc: Started in network mode [ 250.983248][T14528] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 251.002516][T14528] tipc: Enabled bearer , priority 2 [ 251.145426][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4124'. [ 251.871877][T14587] netlink: 'syz.6.4146': attribute type 4 has an invalid length. [ 251.900819][T14587] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4146'. [ 252.132628][ T5942] tipc: Node number set to 10136234 [ 252.147460][T14601] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 252.324143][T14611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4157'. [ 253.092556][T14661] netlink: 'syz.0.4182': attribute type 1 has an invalid length. [ 253.114726][T14660] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 253.678420][T14697] netlink: 'syz.0.4200': attribute type 1 has an invalid length. [ 253.686219][T14697] netlink: 'syz.0.4200': attribute type 3 has an invalid length. [ 253.719247][T14697] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4200'. [ 253.738247][T14697] NCSI netlink: No device for ifindex 813332851 [ 254.121033][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4211'. [ 254.175168][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4211'. [ 254.780676][T14763] netlink: 'syz.5.4230': attribute type 1 has an invalid length. [ 254.816636][T14765] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4232'. [ 256.076782][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 256.692582][T14859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 256.788335][T14867] netlink: 'syz.3.4280': attribute type 10 has an invalid length. [ 256.818416][T14867] bridge0: port 3(team0) entered blocking state [ 256.825002][T14867] bridge0: port 3(team0) entered disabled state [ 256.834989][T14867] team0: entered allmulticast mode [ 256.840656][T14867] team_slave_0: entered allmulticast mode [ 256.846552][T14867] team_slave_1: entered allmulticast mode [ 256.861029][T14867] team0: entered promiscuous mode [ 256.878970][T14867] team_slave_0: entered promiscuous mode [ 256.897113][T14867] team_slave_1: entered promiscuous mode [ 256.917318][T14867] bridge0: port 3(team0) entered blocking state [ 256.923875][T14867] bridge0: port 3(team0) entered forwarding state [ 256.993614][T14874] netlink: 165 bytes leftover after parsing attributes in process `syz.5.4283'. [ 257.034033][T14876] tipc: Enabled bearer , priority 11 [ 257.327148][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4292'. [ 257.507326][T14904] netlink: 'syz.6.4298': attribute type 1 has an invalid length. [ 257.515445][T14904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.198289][ T10] tipc: Node number set to 3758096386 [ 258.415264][ T5952] IPVS: starting estimator thread 0... [ 258.528242][T14952] IPVS: using max 31 ests per chain, 74400 per kthread [ 258.593268][T14960] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4324'. [ 258.970071][T14976] veth1_macvtap: left promiscuous mode [ 258.978276][T14976] macsec0: entered promiscuous mode [ 258.983684][T14976] macsec0: entered allmulticast mode [ 259.007290][T14976] veth1_macvtap: entered promiscuous mode [ 259.018203][T14976] veth1_macvtap: entered allmulticast mode [ 259.036309][T14976] macsec0: left promiscuous mode [ 259.046384][T14976] macsec0: left allmulticast mode [ 259.056343][T14976] veth1_macvtap: left allmulticast mode [ 259.248299][T14988] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4337'. [ 259.268417][T14988] netlink: 35 bytes leftover after parsing attributes in process `syz.6.4337'. [ 259.308906][T14988] netlink: 'syz.6.4337': attribute type 5 has an invalid length. [ 259.327045][T14988] netlink: 'syz.6.4337': attribute type 6 has an invalid length. [ 259.347370][T14988] netlink: 35 bytes leftover after parsing attributes in process `syz.6.4337'. [ 259.403612][T14992] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4340'. [ 259.960879][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4354'. [ 260.531677][T15056] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4372'. [ 260.975185][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.421095][T15108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4395'. [ 261.628627][T15121] vcan0: entered allmulticast mode [ 261.898753][T15136] netlink: 'syz.5.4405': attribute type 11 has an invalid length. [ 262.056922][T15147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4410'. [ 262.211560][T15152] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 262.329464][ T5840] Bluetooth: hci6: command 0x0405 tx timeout [ 262.385367][T15162] sctp: [Deprecated]: syz.6.4417 (pid 15162) Use of int in max_burst socket option deprecated. [ 262.385367][T15162] Use struct sctp_assoc_value instead [ 263.059006][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 263.483509][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4440'. [ 263.548684][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4443'. [ 263.567988][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4443'. [ 264.018438][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'. [ 264.268375][T15264] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4465'. [ 264.411691][ T5837] Bluetooth: hci6: command 0x0405 tx timeout [ 264.872501][T15300] netlink: 'syz.6.4485': attribute type 1 has an invalid length. [ 264.893848][T15300] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4485'. [ 265.146529][T15320] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4494'. [ 265.286291][T15327] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4498'. [ 266.119100][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4521'. [ 266.138450][T15381] openvswitch: netlink: Unknown nsh attribute 0 [ 266.801584][T15423] bridge0: entered promiscuous mode [ 266.818668][T15423] macsec1: entered promiscuous mode [ 266.826625][T15423] macsec1: entered allmulticast mode [ 266.832583][T15423] bridge0: entered allmulticast mode [ 266.840319][T15423] bridge0: port 4(macsec1) entered blocking state [ 266.857544][T15423] bridge0: port 4(macsec1) entered disabled state [ 266.889681][T15423] bridge0: left allmulticast mode [ 266.896206][T15423] bridge0: left promiscuous mode [ 268.062394][T15490] __nla_validate_parse: 3 callbacks suppressed [ 268.062416][T15490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4577'. [ 268.275878][T15500] tipc: Enabling of bearer rejected, media not registered [ 268.435381][T15507] sctp: [Deprecated]: syz.6.4585 (pid 15507) Use of int in maxseg socket option. [ 268.435381][T15507] Use struct sctp_assoc_value instead [ 269.056367][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4598'. [ 269.111706][T15538] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4599'. [ 269.336659][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'. [ 269.357639][T15550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4607'. [ 269.372627][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'. [ 269.481017][T15558] tipc: Started in network mode [ 269.512769][T15558] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 269.533751][T15558] tipc: Enabled bearer , priority 2 [ 270.652969][ T5917] tipc: Node number set to 10463914 [ 270.852903][T15639] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4648'. [ 271.539204][T15678] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4666'. [ 271.941564][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4674'. [ 272.097108][T15700] xt_policy: too many policy elements [ 272.261598][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4681'. [ 272.796869][T15732] xt_limit: Overflow, try lower: 604147548/4200216962 [ 272.974045][T15741] netlink: 'syz.3.4697': attribute type 4 has an invalid length. [ 273.388985][T15769] xt_HMARK: proto mask must be zero with L3 mode [ 273.660015][T15785] Bluetooth: MGMT ver 1.23 [ 274.196492][ T5942] IPVS: starting estimator thread 0... [ 274.307218][T15819] IPVS: using max 25 ests per chain, 60000 per kthread [ 274.786734][T15854] netlink: 'syz.2.4751': attribute type 62 has an invalid length. [ 275.115290][T15869] __nla_validate_parse: 1 callbacks suppressed [ 275.115313][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4759'. [ 275.253604][ T5837] Bluetooth: hci6: link tx timeout [ 275.259921][ T5837] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.613719][T15901] netlink: 'syz.0.4775': attribute type 1 has an invalid length. [ 276.072256][T15931] delete_channel: no stack [ 276.272092][T15939] pim6reg: entered allmulticast mode [ 276.279474][T15944] pim6reg: left allmulticast mode [ 276.360760][T15943] tipc: Enabling of bearer rejected, failed to enable media [ 276.560712][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4802'. [ 276.777660][T15971] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4808'. [ 276.807624][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4808'. [ 277.290161][ T5837] Bluetooth: hci6: command 0x0405 tx timeout [ 277.474541][T16014] netlink: 'syz.3.4828': attribute type 142 has an invalid length. [ 278.025380][T16039] netlink: 'syz.5.4840': attribute type 18 has an invalid length. [ 278.113387][T16043] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4842'. [ 278.126761][ T3485] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.147239][ T3485] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.186193][ T3485] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.203164][ T3485] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.424763][T16057] tipc: Enabled bearer , priority 10 [ 278.424966][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 278.559816][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 278.599210][T16067] netlink: 'syz.0.4854': attribute type 10 has an invalid length. [ 278.646745][T16071] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4856'. [ 278.800563][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4861'. [ 278.828933][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 279.358392][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 280.410018][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 280.538823][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4907'. [ 280.559022][T16177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4906'. [ 280.877187][T16194] netlink: 'syz.6.4916': attribute type 3 has an invalid length. [ 280.899398][T16197] netlink: zone id is out of range [ 280.904693][T16197] netlink: zone id is out of range [ 280.912061][T16197] netlink: zone id is out of range [ 280.917435][T16197] netlink: zone id is out of range [ 280.923247][T16197] netlink: zone id is out of range [ 280.930529][T16197] netlink: zone id is out of range [ 280.946173][T16197] netlink: zone id is out of range [ 280.954796][T16197] netlink: zone id is out of range [ 280.962097][T16197] netlink: zone id is out of range [ 280.967502][T16197] netlink: zone id is out of range [ 281.083448][T16202] netlink: 59 bytes leftover after parsing attributes in process `syz.6.4919'. [ 281.358880][T16218] xt_l2tp: invalid flags combination: 0 [ 281.454796][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 282.498857][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 282.521630][T16289] tipc: Failed to obtain node identity [ 282.527214][T16289] tipc: Enabling of bearer rejected, failed to enable media [ 282.698584][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4966'. [ 282.707538][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4966'. [ 282.879952][T16309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4971'. [ 283.118823][T16326] netlink: 'syz.0.4980': attribute type 178 has an invalid length. [ 283.160249][T16328] netlink: 'syz.5.4979': attribute type 2 has an invalid length. [ 283.223775][T16332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4982'. [ 283.239437][T16332] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4982'. [ 283.262678][T16336] xt_limit: Overflow, try lower: 271964/0 [ 283.270410][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4982'. [ 283.528538][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 283.874079][ T30] audit: type=1107 audit(1768697920.764:2): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 284.201497][T16388] netlink: 'syz.3.5008': attribute type 8 has an invalid length. [ 284.513627][T16408] xt_l2tp: v2 sid > 0xffff: 1114112 [ 284.568396][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 284.678511][T16415] netlink: 'syz.5.5022': attribute type 1 has an invalid length. [ 284.904626][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5027'. [ 284.919610][T16429] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 284.958492][T16429] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 285.127900][T16439] netlink: 'syz.3.5033': attribute type 3 has an invalid length. [ 285.154447][T16439] netlink: 'syz.3.5033': attribute type 1 has an invalid length. [ 285.174706][T16442] netlink: 'syz.6.5035': attribute type 3 has an invalid length. [ 285.262624][T16446] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 285.609398][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 286.170936][T16499] tipc: Enabling of bearer rejected, failed to enable media [ 286.426071][T16515] __nla_validate_parse: 1 callbacks suppressed [ 286.426091][T16515] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5072'. [ 286.648337][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 286.951289][T16547] net_ratelimit: 45 callbacks suppressed [ 286.951310][T16547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.082706][T16553] xt_l2tp: v2 tid > 0xffff: 1114244 [ 287.366177][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5099'. [ 287.469573][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5102'. [ 287.688815][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 288.033452][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5120'. [ 288.559986][T16647] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5136'. [ 288.730224][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 289.769045][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 289.942255][T16723] netlink: 'syz.3.5173': attribute type 29 has an invalid length. [ 289.970066][T16723] netlink: 'syz.3.5173': attribute type 29 has an invalid length. [ 290.247833][T16732] "syz.3.5177" (16732) uses obsolete ecb(arc4) skcipher [ 290.687742][T16756] netlink: 'syz.6.5188': attribute type 2 has an invalid length. [ 290.711547][T16758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.809130][T16762] netlink: 'syz.2.5189': attribute type 2 has an invalid length. [ 290.825348][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 291.084882][T16772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.642293][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5211'. [ 291.743702][T16809] netlink: 'syz.0.5212': attribute type 1 has an invalid length. [ 291.752296][T16809] netlink: 'syz.0.5212': attribute type 2 has an invalid length. [ 291.787568][T16809] netlink: 'syz.0.5212': attribute type 1 has an invalid length. [ 291.814341][T16809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5212'. [ 291.848664][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 291.958457][T16821] netlink: 11 bytes leftover after parsing attributes in process `syz.5.5219'. [ 292.804833][T16871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5237'. [ 292.894380][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 293.342629][T16893] pim6reg527: entered allmulticast mode [ 293.669376][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5255'. [ 293.851514][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5260'. [ 293.928705][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 294.104087][T16938] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5270'. [ 294.114430][T16938] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5270'. [ 294.292299][T16949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5274'. [ 294.968921][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 294.990155][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'. [ 296.020445][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 296.643163][T17071] netlink: 'syz.6.5332': attribute type 3 has an invalid length. [ 296.883876][T17085] team_slave_0: entered promiscuous mode [ 296.889943][T17085] team_slave_1: entered promiscuous mode [ 296.977463][T17085] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 296.993109][T17085] team0: Device macvtap1 is already an upper device of the team interface [ 297.048888][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 297.064453][T17085] team_slave_0: left promiscuous mode [ 297.070061][T17085] team_slave_1: left promiscuous mode [ 298.088690][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 298.595235][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5389'. [ 298.625594][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5390'. [ 298.770736][T17199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5396'. [ 298.890448][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5399'. [ 298.906758][T17205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5398'. [ 298.977915][T17205] tipc: Invalid UDP bearer configuration [ 298.977979][T17205] tipc: Enabling of bearer rejected, failed to enable media [ 299.128406][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 299.365520][T17231] openvswitch: netlink: Missing valid actions attribute. [ 299.410469][T17231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.785682][T17252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.191707][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 300.732969][T17310] netlink: 'syz.6.5450': attribute type 3 has an invalid length. [ 301.219886][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 302.222505][T17401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5490'. [ 302.249794][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 302.566284][T17424] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5501'. [ 303.296288][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 303.845605][T17504] netlink: 'syz.6.5543': attribute type 11 has an invalid length. [ 303.859303][T17504] netlink: 'syz.6.5543': attribute type 4 has an invalid length. [ 303.874008][T17504] netlink: 199768 bytes leftover after parsing attributes in process `syz.6.5543'. [ 304.006000][T17511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5546'. [ 304.017461][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 304.217419][T17523] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5551'. [ 304.274699][T17529] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5555'. [ 304.329253][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 304.465782][T17541] tipc: Enabling of bearer rejected, failed to enable media [ 304.722654][T17553] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5567'. [ 305.080456][T17573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5577'. [ 305.347092][T17587] netlink: 'syz.5.5582': attribute type 1 has an invalid length. [ 305.369817][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 305.382867][T17587] netlink: 'syz.5.5582': attribute type 3 has an invalid length. [ 305.392109][T17587] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5582'. [ 305.403369][T17587] NCSI netlink: No device for ifindex 813332851 [ 305.584049][T17593] gretap0: entered promiscuous mode [ 305.598575][T17593] vlan2: entered promiscuous mode [ 306.086036][T17622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5601'. [ 306.422678][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 306.949253][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5624'. [ 307.153605][T17678] siw: device registration error -23 [ 307.366676][T17689] tipc: Enabling of bearer rejected, media not registered [ 307.448966][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 307.531092][T17701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5639'. [ 307.666649][T17709] xt_hashlimit: size too large, truncated to 1048576 [ 308.016138][T17727] netlink: 'syz.3.5651': attribute type 3 has an invalid length. [ 308.755851][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 309.262892][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5679'. [ 309.283383][T17785] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5679'. [ 309.318351][T17785] netlink: 'syz.5.5679': attribute type 5 has an invalid length. [ 309.362002][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5681'. [ 309.379142][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5682'. [ 309.529075][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 309.655410][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5691'. [ 310.181703][T17840] team0: Device gtp0 is up. Set it down before adding it as a team port [ 310.570002][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 311.615456][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 312.128578][T17952] macvtap0: Device is already in use. [ 312.320079][T17965] netlink: 'syz.0.5766': attribute type 4 has an invalid length. [ 312.339574][T17966] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5767'. [ 312.388946][T17968] netlink: 'syz.2.5768': attribute type 6 has an invalid length. [ 312.651361][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 312.996469][T18007] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5786'. [ 313.692233][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 313.767351][T18034] bond3 (unregistering): Released all slaves [ 314.021048][T18050] hsr0: default FDB implementation only supports local addresses [ 314.732087][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 314.835199][T18103] veth0_to_team: entered promiscuous mode [ 315.333732][T18131] tipc: Started in network mode [ 315.360309][T18131] tipc: Node identity ac14140f, cluster identity 4711 [ 315.381153][T18131] tipc: New replicast peer: 255.255.255.255 [ 315.401225][T18131] tipc: Enabled bearer , priority 10 [ 315.574776][T18141] tap0: tun_chr_ioctl cmd 2148553947 [ 315.770425][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 316.198538][T18173] bridge_slave_0: invalid flags given to default FDB implementation [ 316.498468][ T6042] tipc: Node number set to 2886997007 [ 316.813244][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 316.835290][T18208] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5880'. [ 317.110173][T18227] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5888'. [ 317.462529][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5898'. [ 317.664092][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5904'. [ 317.676473][T18260] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5904'. [ 317.848480][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 318.057448][T18282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5913'. [ 318.121843][T18282] bridge_slave_0 (unregistering): left allmulticast mode [ 318.129558][T18282] bridge_slave_0 (unregistering): left promiscuous mode [ 318.136719][T18282] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.450959][T18301] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5922'. [ 318.540379][T18307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5925'. [ 318.684872][T18315] netlink: 71 bytes leftover after parsing attributes in process `syz.3.5929'. [ 318.899112][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 319.232365][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5945'. [ 319.928338][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 320.968645][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 321.741997][T18478] sctp: Trying to GSO but underlying device doesn't support it. [ 322.012725][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 322.128911][T18503] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 322.316055][T18518] __nla_validate_parse: 8 callbacks suppressed [ 322.316077][T18518] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6019'. [ 322.565258][T18530] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6027'. [ 322.575278][T18530] netlink: 'syz.0.6027': attribute type 1 has an invalid length. [ 322.681786][T18534] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6029'. [ 322.993333][T18553] netlink: 'syz.6.6039': attribute type 9 has an invalid length. [ 323.014061][T18553] netlink: 'syz.6.6039': attribute type 7 has an invalid length. [ 323.045792][T18553] netlink: 'syz.6.6039': attribute type 8 has an invalid length. [ 323.055028][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 324.089771][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 324.543528][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6071'. [ 325.095482][T18661] block nbd0: Unsupported socket: should be TCP or UNIX. [ 325.130841][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 325.140056][T18659] macvtap1: entered allmulticast mode [ 325.158802][T18659] veth0_macvtap: entered allmulticast mode [ 325.963924][T18701] netlink: 'syz.5.6103': attribute type 33 has an invalid length. [ 326.012866][T18701] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 326.030347][T18701] bond2 (unregistering): Released all slaves [ 326.168443][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 326.259029][T18718] netlink: 'syz.0.6111': attribute type 3 has an invalid length. [ 326.271065][T18717] netlink: 'syz.5.6110': attribute type 5 has an invalid length. [ 326.771653][T18740] netlink: 'syz.0.6121': attribute type 1 has an invalid length. [ 326.786811][T18740] nbd: error processing sock list [ 326.801939][T18740] block nbd0: shutting down sockets [ 327.219674][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 327.652998][T18782] netlink: 'syz.2.6135': attribute type 1 has an invalid length. [ 327.666826][T18782] netlink: 'syz.2.6135': attribute type 2 has an invalid length. [ 327.680755][T18782] netlink: 'syz.2.6135': attribute type 1 has an invalid length. [ 327.693050][T18782] netlink: 'syz.2.6135': attribute type 3 has an invalid length. [ 327.704111][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6135'. [ 327.858308][T18792] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.885374][T18792] bridge0: entered allmulticast mode [ 328.168952][ T31] INFO: task syz.1.1958:10002 blocked for more than 143 seconds. [ 328.181867][ T31] Not tainted syzkaller #0 [ 328.186871][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.231265][ T31] task:syz.1.1958 state:D stack:27320 pid:10002 tgid:10001 ppid:5830 task_flags:0x400040 flags:0x00080002 [ 328.250290][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 328.266856][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6156'. [ 328.292475][ T31] Call Trace: [ 328.297036][ T31] [ 328.300966][ T31] __schedule+0x149b/0x4fd0 [ 328.305729][ T31] ? __pfx___schedule+0x10/0x10 [ 328.312282][ T31] ? schedule+0x91/0x360 [ 328.316747][ T31] schedule+0x165/0x360 [ 328.332159][ T31] schedule_preempt_disabled+0x13/0x30 [ 328.352052][ T31] __mutex_lock+0x7e6/0x1350 [ 328.356837][ T31] ? __mutex_lock+0x5bb/0x1350 [ 328.364332][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 328.376001][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 328.386634][ T31] ? __nlmsg_put+0xef/0x1b0 [ 328.402572][ T31] ? genlmsg_put+0x137/0x2e0 [ 328.414861][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 328.423934][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 328.430582][ T31] ? dev_hard_start_xmit+0x793/0x800 [ 328.436019][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 328.442281][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.449192][ T31] ? __dev_queue_xmit+0x280/0x3100 [ 328.457155][ T31] genl_rcv_msg+0x60e/0x790 [ 328.461985][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.467106][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 328.473832][ T31] ? __asan_memcpy+0x40/0x70 [ 328.478711][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 328.484329][ T31] ? __skb_clone+0x63/0x7a0 [ 328.489390][ T31] netlink_rcv_skb+0x208/0x470 [ 328.494216][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.499476][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.504942][ T31] ? genl_rcv+0x19/0x40 [ 328.510311][ T31] ? down_read+0x274/0x2e0 [ 328.514840][ T31] ? genl_rcv+0xd/0x40 [ 328.519157][ T31] genl_rcv+0x28/0x40 [ 328.523193][ T31] netlink_unicast+0x82f/0x9e0 [ 328.528005][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 328.534089][ T31] ? __alloc_skb+0x198/0x3a0 [ 328.538791][ T31] ? netlink_sendmsg+0x642/0xb30 [ 328.543865][ T31] ? skb_put+0x11b/0x210 [ 328.548266][ T31] netlink_sendmsg+0x805/0xb30 [ 328.555349][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.561511][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 328.566487][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.571898][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.577238][ T31] __sock_sendmsg+0x21c/0x270 [ 328.582026][ T31] ____sys_sendmsg+0x505/0x820 [ 328.586849][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.592947][ T31] ? import_iovec+0x74/0xa0 [ 328.597508][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 328.602307][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.607557][ T31] ? futex_wait+0x285/0x360 [ 328.612264][ T31] ? __fget_files+0x2a/0x420 [ 328.616924][ T31] ? __fget_files+0x3a0/0x420 [ 328.623103][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 328.628289][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.633934][ T31] ? rcu_is_watching+0x15/0xb0 [ 328.638899][ T31] do_syscall_64+0xec/0xf80 [ 328.643585][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.650696][ T31] ? trace_irq_disable+0x37/0x100 [ 328.657693][ T31] ? clear_bhb_loop+0x60/0xb0 [ 328.662504][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.668608][ T31] RIP: 0033:0x7ffa30b8f749 [ 328.673082][ T31] RSP: 002b:00007ffa2edf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.682141][ T31] RAX: ffffffffffffffda RBX: 00007ffa30de5fa0 RCX: 00007ffa30b8f749 [ 328.690324][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 328.698367][ T31] RBP: 00007ffa30c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 328.706379][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.715066][ T31] R13: 00007ffa30de6038 R14: 00007ffa30de5fa0 R15: 00007ffce68025a8 [ 328.723194][ T31] [ 328.726305][ T31] [ 328.726305][ T31] Showing all locks held in the system: [ 328.735273][ T31] 5 locks held by kworker/0:1/10: [ 328.741157][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 328.765144][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 328.774857][ T31] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23d0 [ 328.784752][ T31] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 328.793769][ T31] #4: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_receive+0x11e3/0x25b0 [ 328.804448][ T31] 1 lock held by khungtaskd/31: [ 328.809524][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 328.819479][ T31] 4 locks held by kworker/u8:3/43: [ 328.824639][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 328.835316][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 328.844312][ T31] #2: ffff8880b86260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 328.853415][ T31] #3: ffffffff99b2abd8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 328.866384][ T31] 3 locks held by kworker/u8:7/1145: [ 328.871770][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 328.881788][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 328.893421][ T31] #2: ffff888057830788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x450 [ 328.903599][ T31] 2 locks held by getty/5591: [ 328.908340][ T31] #0: ffff88814d18d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 328.919017][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 328.929239][ T31] 2 locks held by syz.4.1756/9589: [ 328.934399][ T31] #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 328.942726][ T31] #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 328.953564][ T31] 2 locks held by syz.1.1958/10002: [ 328.958825][ T31] #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 328.968954][ T31] #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 328.980755][ T31] [ 328.983120][ T31] ============================================= [ 328.983120][ T31] [ 328.991717][ T31] NMI backtrace for cpu 1 [ 328.991734][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 328.991756][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.991769][ T31] Call Trace: [ 328.991777][ T31] [ 328.991785][ T31] dump_stack_lvl+0xe8/0x150 [ 328.991817][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 328.991847][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.991883][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 328.991918][ T31] sys_info+0x135/0x170 [ 328.991943][ T31] watchdog+0xf95/0xfe0 [ 328.991978][ T31] ? watchdog+0x20a/0xfe0 [ 328.992015][ T31] kthread+0x711/0x8a0 [ 328.992046][ T31] ? __pfx_watchdog+0x10/0x10 [ 328.992074][ T31] ? __pfx_kthread+0x10/0x10 [ 328.992115][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.992135][ T31] ? __pfx_kthread+0x10/0x10 [ 328.992163][ T31] ret_from_fork+0x510/0xa50 [ 328.992187][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 328.992207][ T31] ? __switch_to+0xc9e/0x1480 [ 328.992241][ T31] ? __pfx_kthread+0x10/0x10 [ 328.992270][ T31] ret_from_fork_asm+0x1a/0x30 [ 328.992317][ T31] [ 328.992326][ T31] Sending NMI from CPU 1 to CPUs 0: [ 329.117436][ C0] NMI backtrace for cpu 0 [ 329.117455][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 329.117475][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.117486][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 329.117512][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 61 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 329.117528][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6 [ 329.117544][ C0] RAX: 00000000000c8649 RBX: ffffffff8197149e RCX: 0000000080000001 [ 329.117557][ C0] RDX: 0000000000000001 RSI: ffffffff8d793695 RDI: ffffffff8bc086e0 [ 329.117569][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 329.117582][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822e70 [ 329.117595][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 329.117607][ C0] FS: 0000000000000000(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 329.117621][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.117633][ C0] CR2: 00007f03699b6ad8 CR3: 0000000077d52000 CR4: 00000000003526f0 [ 329.117649][ C0] Call Trace: [ 329.117658][ C0] [ 329.117665][ C0] default_idle+0x13/0x20 [ 329.117686][ C0] default_idle_call+0x73/0xb0 [ 329.117711][ C0] do_idle+0x1be/0x4d0 [ 329.117732][ C0] ? lock_acquire+0x107/0x340 [ 329.117750][ C0] ? __pfx_do_idle+0x10/0x10 [ 329.117775][ C0] cpu_startup_entry+0x44/0x60 [ 329.117794][ C0] rest_init+0x2de/0x300 [ 329.117819][ C0] start_kernel+0x381/0x3d0 [ 329.117842][ C0] x86_64_start_reservations+0x24/0x30 [ 329.117869][ C0] x86_64_start_kernel+0x143/0x1c0 [ 329.117895][ C0] common_startup_64+0x13e/0x147 [ 329.117934][ C0] [ 329.129022][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 329.129070][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 329.129129][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.129170][ T31] Call Trace: [ 329.129192][ T31] [ 329.129224][ T31] vpanic+0x1e0/0x670 [ 329.129313][ T31] panic+0xb9/0xc0 [ 329.129395][ T31] ? __pfx_panic+0x10/0x10 [ 329.129469][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 329.129564][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 329.129673][ T31] watchdog+0xfdf/0xfe0 [ 329.129759][ T31] ? watchdog+0x20a/0xfe0 [ 329.129862][ T31] kthread+0x711/0x8a0 [ 329.129941][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.130023][ T31] ? __pfx_kthread+0x10/0x10 [ 329.130100][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.130154][ T31] ? __pfx_kthread+0x10/0x10 [ 329.130229][ T31] ret_from_fork+0x510/0xa50 [ 329.130287][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.130339][ T31] ? __switch_to+0xc9e/0x1480 [ 329.130435][ T31] ? __pfx_kthread+0x10/0x10 [ 329.130510][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.130638][ T31] [ 329.413655][ T31] Kernel Offset: disabled [ 329.418097][ T31] Rebooting in 86400 seconds..