last executing test programs: 1m29.0295716s ago: executing program 0 (id=4548): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 1m28.971813424s ago: executing program 0 (id=4551): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x54}, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000137c0)="84c17ab1025ce32b1301ff8ba83303e82c29", 0x12}], 0x1}}], 0x1, 0x4000840) setsockopt(r0, 0x84, 0xaef, 0x0, 0x0) 1m28.901082746s ago: executing program 0 (id=4554): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @random="af23eb8c44a1", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x1, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m28.900808676s ago: executing program 0 (id=4555): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000b00)={0x1, 0xffffffffffffffff, 0x800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e0000000000000005000000ef00e7ff04"], 0x50) 1m27.850365414s ago: executing program 0 (id=4577): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000740)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000780)="190004000800aaaaaa0103000000", 0xe) 1m26.930419664s ago: executing program 0 (id=4586): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000440)="63f805d76494962b729598", 0xb}], 0x2}, 0x20004000) 1m26.866119894s ago: executing program 32 (id=4586): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000440)="63f805d76494962b729598", 0xb}], 0x2}, 0x20004000) 3.420373095s ago: executing program 1 (id=6229): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)='z', 0x14}], 0x1}, 0x4011) 3.32214471s ago: executing program 1 (id=6230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000340)=""/38, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x678eba39, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r13) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r14, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) 1.375631706s ago: executing program 1 (id=6233): syz_emit_ethernet(0x82, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a004c3c0020010000000000000000000000000001ff0200000000000000000000000000017300000000001600"], 0x0) 1.256287884s ago: executing program 1 (id=6234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x18, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008014}, 0x14810) 1.169000995s ago: executing program 1 (id=6237): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000feffffff7e0000000000000037000000fcffffff95"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7893, 0x3, 0xb8, 0x81, 0x1fd, 0x1, 0x6}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@initr0]}, &(0x7f0000000380)='GPL\x00'}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x50, r6, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2410000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1ac, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) close(0x4) 769.921905ms ago: executing program 3 (id=6243): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000002c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2}}}], 0x20}}], 0x1, 0x0) 699.33896ms ago: executing program 3 (id=6245): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 492.819274ms ago: executing program 2 (id=6251): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07daf57ebcfa3fd03477"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) recvmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x180, 0x0) 492.131993ms ago: executing program 3 (id=6252): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) accept4(r0, &(0x7f0000000300)=@xdp, &(0x7f0000000280)=0x80, 0x800) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) 440.222755ms ago: executing program 2 (id=6253): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 378.93117ms ago: executing program 2 (id=6254): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e911"], 0x65) 378.82294ms ago: executing program 3 (id=6255): unshare(0x22020600) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x600, 0x1, 0x0, 0x0) 324.812526ms ago: executing program 3 (id=6256): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x5, 0x4, 0x418, 0x220, 0x0, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x4, 0x1}}}, {{@arp={@local, @rand_addr=0x64010102, 0x0, 0x0, 0x10, 0x1, {@mac=@random="e89ad7fd56d1", {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4, 0x5, 0x4f, 0x9, 0x8001, 0x5, 'veth0_to_batadv\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x204}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@loopback, @private=0xa010100, 0xffffff00, 0x0, 0x7, 0x5, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x7f, 0x0, 0xff]}}, 0x8, 0x2, 0x4, 0x4, 0xa705, 0xe, 'virt_wifi0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0x21b}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 323.004192ms ago: executing program 1 (id=6257): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000003f0007012bbd700000000000027c00000400330c32a9fc800c00", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={0x0, 0x0, 0x45, 0x0, 0x1, 0x5}, 0x28) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$tipc(r3, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {0x0}, {&(0x7f0000002dc0)="3336f70cd0e0e42718329330f8b1453fa54879ffb9a0e2383e3b54cdcabe57e9253ff776cab55ce561139eba62ea", 0x2e}], 0x3, 0x0, 0x0, 0x4000}, 0x8000) close(0x3) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x8776, 0x401, 0x0, 0x21e000, 0x80080000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0x20000000002) close(0x3) 209.837966ms ago: executing program 3 (id=6258): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000306010200000060000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 209.635724ms ago: executing program 2 (id=6259): syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff02000000000000000000000000000100000800fcff"], 0x0) 127.183054ms ago: executing program 2 (id=6260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 0s ago: executing program 2 (id=6261): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="4c00040000000400280012800b0001006272696467650000180002800a0014000180c200000e0000080015"], 0x48}}, 0x4000) kernel console output (not intermixed with test programs): cate VQ 0x0 after dequeue, screwing up backlog [ 142.417516][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.417674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.417792][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.418290][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.473031][T10536] __nla_validate_parse: 5 callbacks suppressed [ 142.473043][T10536] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2109'. [ 142.651522][ T35] audit: type=1804 audit(1792157194.580:2): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2118" name="/newroot/775/memory.events" dev="tmpfs" ino=3920 res=1 errno=0 [ 142.803705][T10573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2127'. [ 143.153409][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 143.271140][T10629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.271833][T10629] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.287036][T10629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.338910][T10629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.342503][T10629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.354972][T10629] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.354992][T10629] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.374177][T10629] veth0_vlan: left promiscuous mode [ 143.375482][T10629] veth0_vlan: entered promiscuous mode [ 143.388780][T10629] veth1_macvtap: left promiscuous mode [ 143.390053][T10629] veth0_macvtap: left promiscuous mode [ 143.391080][T10629] veth0_macvtap: entered promiscuous mode [ 143.392155][T10629] veth1_macvtap: entered promiscuous mode [ 143.413178][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.418170][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.419152][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.425457][T10629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.428296][T10629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.430071][T10629] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.438044][T10629] batman_adv: batadv0: Interface activated: macvtap1 [ 143.543909][T10344] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.543935][T10344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.546728][T10344] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 143.546998][T10344] bond5: (slave veth3): making interface the new active one [ 143.580714][T10344] bond5: active interface up! [ 143.603898][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.603924][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.603946][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.603961][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.804861][T10344] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.805180][T10344] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.805211][T10344] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.805233][T10344] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.249321][T10715] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 144.552878][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'. [ 144.599671][T10741] syzkaller1: entered promiscuous mode [ 144.599683][T10741] syzkaller1: entered allmulticast mode [ 144.600643][T10741] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 145.371720][T10757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2212'. [ 145.909087][T10808] netlink: 'syz.2.2236': attribute type 3 has an invalid length. [ 145.909178][T10808] netlink: 'syz.2.2236': attribute type 3 has an invalid length. [ 146.096588][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 146.639017][T10850] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.827016][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 146.829580][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 146.900001][T10872] netlink: 'syz.0.2264': attribute type 4 has an invalid length. [ 146.976949][T10880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2268'. [ 146.976976][T10880] netlink: 'syz.0.2268': attribute type 24 has an invalid length. [ 146.977121][T10880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2268'. [ 146.977134][T10880] netlink: 'syz.0.2268': attribute type 24 has an invalid length. [ 147.039033][T10888] netlink: 'syz.2.2273': attribute type 2 has an invalid length. [ 147.039046][T10888] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2273'. [ 147.039053][T10888] netlink: 'syz.2.2273': attribute type 2 has an invalid length. [ 147.157607][T10903] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 147.177634][T10903] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 147.536754][T10949] netlink: 'syz.2.2302': attribute type 58 has an invalid length. [ 147.536767][T10949] __nla_validate_parse: 3 callbacks suppressed [ 147.536772][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2302'. [ 147.667891][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 147.667907][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'. [ 147.667921][T10961] netlink: 'syz.0.2307': attribute type 12 has an invalid length. [ 147.667928][T10961] netlink: 'syz.0.2307': attribute type 14 has an invalid length. [ 147.670078][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 147.670088][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'. [ 147.780218][T10975] ip6t_hbh: too many supported opts specified [ 147.895451][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2317'. [ 148.000318][T10991] net_ratelimit: 33 callbacks suppressed [ 148.000330][T10991] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.024056][T10993] openvswitch: netlink: Message has -2 unknown bytes. [ 148.024073][T10993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.273758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.283006][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.673757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.692741][T11049] xt_socket: unknown flags 0x4c [ 148.747585][T11056] bridge0: port 2(bridge_slave_0) entered blocking state [ 148.747672][T11056] bridge0: port 2(bridge_slave_0) entered disabled state [ 148.747788][T11056] bridge_slave_0: entered allmulticast mode [ 148.748592][T11056] bridge_slave_0: entered promiscuous mode [ 148.749023][T11056] bridge0: port 2(bridge_slave_0) entered blocking state [ 148.749069][T11056] bridge0: port 2(bridge_slave_0) entered forwarding state [ 148.750932][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2351'. [ 148.750959][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2351'. [ 148.755205][T11056] bridge_slave_0: left allmulticast mode [ 148.755271][T11056] bridge_slave_0: left promiscuous mode [ 148.755415][T11056] bridge0: port 2(bridge_slave_0) entered disabled state [ 149.041162][T11075] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.067142][T11075] tipc: Cannot configure node identity twice [ 149.244957][T11089] xt_ecn: cannot match TCP bits for non-tcp packets [ 149.251436][T11092] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2367'. [ 149.251457][T11092] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2367'. [ 149.563480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.863677][T11140] infiniband syz1: set active [ 149.863761][T11140] infiniband syz1: added ipvlan1 [ 149.872097][T11140] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 149.872114][T11140] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 149.872127][T11140] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 149.887615][T11140] RDS/IB: syz1: added [ 149.887643][T11140] smc: adding ib device syz1 with port count 1 [ 149.887654][T11140] smc: ib device syz1 port 1 has no pnetid [ 150.513460][ T4993] Bluetooth: hci2: command 0x0405 tx timeout [ 150.593651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.593927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.633600][T11167] Bluetooth: ISO socket layer initialized [ 151.349240][T11199] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 151.413095][T11208] 8021q: adding VLAN 0 to HW filter on device bond7 [ 151.793558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.853018][T11231] validate_nla: 8 callbacks suppressed [ 151.853035][T11231] netlink: 'syz.2.2424': attribute type 1 has an invalid length. [ 152.414254][T11264] netlink: 'syz.2.2434': attribute type 12 has an invalid length. [ 152.634363][ T55] Bluetooth: hci2: link tx timeout [ 152.634380][ T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 152.634723][ T55] Bluetooth: hci2: link tx timeout [ 152.634734][ T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.670217][T11281] __nla_validate_parse: 3 callbacks suppressed [ 152.670234][T11281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2441'. [ 152.671895][T11274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2439'. [ 152.801889][T11291] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.814265][T11291] syzkaller1: entered promiscuous mode [ 152.814284][T11291] syzkaller1: entered allmulticast mode [ 152.872546][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'. [ 152.872687][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'. [ 152.873063][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'. [ 152.886769][T11291] netlink: 'syz.2.2446': attribute type 5 has an invalid length. [ 152.886784][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2446'. [ 153.421597][T11319] netlink: 'syz.2.2459': attribute type 11 has an invalid length. [ 153.421618][T11319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2459'. [ 153.638944][T11335] xfrm1: entered allmulticast mode [ 153.749131][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.749167][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.749182][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.749196][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.749211][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.749225][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.749239][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.749254][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.749268][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.749282][ T688] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 153.776906][ T688] hid-generic 0005:10CF:0005.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 154.034522][ T1010] net_ratelimit: 2 callbacks suppressed [ 154.034535][ T1010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.274344][T11393] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 154.295116][T11393] block nbd0: not configured, cannot reconfigure [ 154.306407][T11399] tipc: Started in network mode [ 154.306430][T11399] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 154.306583][T11399] tipc: Enabled bearer , priority 0 [ 154.344484][T11402] tipc: Enabling of bearer rejected, failed to enable media [ 154.429198][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.429358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.432113][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.471382][T11411] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.476497][ T13] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 154.482737][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.495029][ T5659] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.499791][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.503005][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.503158][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.578451][T11422] syzkaller0: entered promiscuous mode [ 154.578470][T11422] syzkaller0: entered allmulticast mode [ 154.676955][ T55] Bluetooth: hci2: command 0x0405 tx timeout [ 154.702515][T11427] syzkaller0: entered promiscuous mode [ 154.702527][T11427] syzkaller0: entered allmulticast mode [ 154.719412][T11427] simple: /dev/video#_3 [ 154.719422][T11427] simple: /dev/video#_6 [ 154.719426][T11427] simple: /dev/video#_9 [ 154.719429][T11427] simple: /dev/video#_12 [ 154.719432][T11427] simple: /dev/video#_15 [ 154.719435][T11427] simple: /dev/video#_18 [ 154.719439][T11427] simple: /dev/video#_21 [ 154.719442][T11427] simple: /dev/video#_24 [ 154.719445][T11427] simple: /dev/video#_27 [ 154.719449][T11427] simple: /dev/video#_30 [ 154.719452][T11427] simple: /dev/video#_33 [ 154.719455][T11427] simple: /dev/video#_36 [ 154.719459][T11427] simple: /dev/video#_39 [ 154.719462][T11427] simple: /dev/video#_42 [ 154.719465][T11427] simple: /dev/video#_45 [ 154.719468][T11427] simple: /dev/video#_48 [ 154.719472][T11427] simple: /dev/video#_51 [ 154.719475][T11427] simple: /dev/video#_54 [ 154.719478][T11427] simple: /dev/video#_57 [ 154.719481][T11427] simple: /dev/video#_60 [ 154.719485][T11427] simple: /dev/video#_63 [ 154.719488][T11427] simple: /dev/video#_66 [ 154.719491][T11427] simple: /dev/video#_69 [ 154.719494][T11427] simple: /dev/video#_72 [ 154.719498][T11427] simple: /dev/video#_75 [ 154.719501][T11427] simple: /dev/video#_78 [ 154.719504][T11427] simple: /dev/video#_81 [ 154.719508][T11427] simple: /dev/video#_84 [ 154.719511][T11427] simple: /dev/video#_87 [ 154.719514][T11427] simple: /dev/video#_90 [ 154.719518][T11427] simple: /dev/video#_93 [ 154.719522][T11427] simple: /dev/video#_96 [ 154.719526][T11427] TC_ACT_REPEAT abuse ? [ 154.784590][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.866208][T11433] netlink: 'syz.0.2510': attribute type 3 has an invalid length. [ 154.890474][T11435] netlink: 'syz.0.2512': attribute type 1 has an invalid length. [ 154.942805][T11439] xt_hashlimit: size too large, truncated to 1048576 [ 155.088653][T11445] syzkaller1: entered promiscuous mode [ 155.088671][T11445] syzkaller1: entered allmulticast mode [ 155.318111][ T5658] tipc: Node number set to 43690 [ 155.554267][ T5658] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.738512][T11475] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2526'. [ 156.163778][T11508] veth0_vlan: entered allmulticast mode [ 156.486511][T11528] netlink: 'syz.1.2552': attribute type 10 has an invalid length. [ 156.489933][T11528] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2552'. [ 156.743135][T11548] IPVS: ip_vs_edit_dest(): server weight less than zero [ 156.834114][ T55] Bluetooth: hci2: command 0x0405 tx timeout [ 157.011352][T11569] netlink: 'syz.0.2572': attribute type 5 has an invalid length. [ 157.092710][T11578] netlink: 'syz.2.2575': attribute type 1 has an invalid length. [ 157.161488][T11578] bond6: entered promiscuous mode [ 157.168605][T11578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.179455][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2575'. [ 157.225619][T11578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.228955][T11578] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 157.228973][T11578] bond6: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 157.314606][T11578] bond6: (slave wireguard1): making interface the new active one [ 157.314626][T11578] wireguard1: entered promiscuous mode [ 157.331715][T11578] bond6: (slave wireguard1): Enslaving as an active interface with an up link [ 158.147393][T11659] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.147480][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 158.167078][T11660] syzkaller1: entered promiscuous mode [ 158.167095][T11660] syzkaller1: entered allmulticast mode [ 158.353483][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 158.632204][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'. [ 158.711151][T11705] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2634'. [ 158.792467][T11710] Bluetooth: MGMT ver 1.23 [ 158.894622][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2639'. [ 158.914437][ T55] Bluetooth: hci2: command 0x0405 tx timeout [ 158.990136][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2643'. [ 158.990157][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2643'. [ 159.153528][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 159.290896][T11752] netlink: 'syz.0.2656': attribute type 2 has an invalid length. [ 159.346622][T11758] netlink: 'syz.2.2659': attribute type 11 has an invalid length. [ 159.382977][T11763] net_ratelimit: 18 callbacks suppressed [ 159.382995][T11763] ip_tables: iptables: counters copy to user failed while replacing table [ 159.392698][T11763] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 159.578910][T11785] ipt_rpfilter: unknown options [ 159.795065][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.795839][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.796087][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.820433][T11808] syzkaller0: entered promiscuous mode [ 159.820447][T11808] syzkaller0: entered allmulticast mode [ 159.962300][T11818] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2686'. [ 160.007327][T11824] ebt_limit: overflow, try lower: 4294901760/65535 [ 160.034478][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.034925][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.165046][T11837] netlink: 'syz.0.2694': attribute type 1 has an invalid length. [ 160.322897][T11845] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2699'. [ 160.332696][T11845] syzkaller1: entered promiscuous mode [ 160.332714][T11845] syzkaller1: entered allmulticast mode [ 160.766255][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'. [ 160.766274][T11866] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2709'. [ 160.994089][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.441850][T11876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.441979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.248762][T11940] netlink: 'syz.1.2742': attribute type 3 has an invalid length. [ 162.248780][T11940] netlink: 'syz.1.2742': attribute type 2 has an invalid length. [ 163.530998][T12005] __nla_validate_parse: 2 callbacks suppressed [ 163.531014][T12005] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2764'. [ 163.543883][T12005] bridge0: port 1(syz_tun) entered disabled state [ 163.556645][T12005] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2764'. [ 163.556790][T12005] bridge0: port 1(syz_tun) entered blocking state [ 163.556876][T12005] bridge0: port 1(syz_tun) entered forwarding state [ 163.558912][T12005] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2764'. [ 163.560933][T12005] bridge0: port 1(syz_tun) entered disabled state [ 163.823116][T11964] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.823141][T11964] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 163.914767][T11964] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.914789][T11964] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 164.556597][T12071] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2786'. [ 164.556613][T12071] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2786'. [ 164.653678][T12088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2794'. [ 164.783448][T12104] syzkaller0: entered promiscuous mode [ 164.783486][T12104] syzkaller0: entered allmulticast mode [ 164.833599][ C0] net_ratelimit: 13 callbacks suppressed [ 164.833612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.915744][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.918811][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.918959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.122041][T12142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2822'. [ 165.180128][T12151] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 165.223538][T12155] dummy0: Caught tx_queue_len zero misconfig [ 165.223552][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 165.225105][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 165.554140][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.587930][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 166.023160][T12225] netlink: 'syz.0.2862': attribute type 9 has an invalid length. [ 166.203397][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 166.380908][T12218] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 166.392772][ T5658] s`z1: Port: 1 Link DOWN [ 166.535949][T12247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.536325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.579851][T12250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.583156][T12250] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.610368][T12250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.648115][T12259] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 166.808593][T12250] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 166.811795][ T5659] s`z1: Port: 1 Link ACTIVE [ 166.982142][T12282] batadv_slave_0: Caught tx_queue_len zero misconfig [ 167.086240][T12291] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 167.137495][T12296] netlink: 'syz.0.2892': attribute type 1 has an invalid length. [ 167.600311][T12347] rxe_eth0 speed is unknown, defaulting to 1000 [ 168.479817][T12404] netlink: 'syz.0.2940': attribute type 30 has an invalid length. [ 168.627170][T12418] __nla_validate_parse: 12 callbacks suppressed [ 168.627188][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 168.823042][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 168.830568][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 169.141278][T12474] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 169.154100][T12474] netlink: 'syz.1.2971': attribute type 4 has an invalid length. [ 169.154669][T12476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2970'. [ 169.217174][T12480] netlink: 'syz.1.2973': attribute type 2 has an invalid length. [ 169.244013][ T35] audit: type=1800 audit(1792157221.170:3): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2974" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4625 res=0 errno=0 [ 169.686282][T12510] xt_policy: neither incoming nor outgoing policy selected [ 169.846457][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 170.195515][T12551] xt_hashlimit: size too large, truncated to 1048576 [ 170.195689][T12551] xt_hashlimit: max too large, truncated to 1048576 [ 170.201972][T12552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3005'. [ 170.277031][T12558] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 170.322421][T12562] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 170.358154][T12565] bond6: entered allmulticast mode [ 170.358176][T12565] wireguard1: entered allmulticast mode [ 170.560810][T12584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3020'. [ 170.629730][T12586] bond8 (unregistering): Released all slaves [ 170.678914][ T84] net_ratelimit: 5 callbacks suppressed [ 170.678932][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.679150][ T1010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.679291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.313701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.327640][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.577110][T12607] netlink: zone id is out of range [ 172.577145][T12607] netlink: zone id is out of range [ 172.577225][T12607] netlink: zone id is out of range [ 172.577252][T12607] netlink: zone id is out of range [ 172.577259][T12607] netlink: zone id is out of range [ 172.685162][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 172.743235][T12622] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 173.802845][T12662] netlink: 'syz.1.3054': attribute type 1 has an invalid length. [ 173.802864][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3054'. [ 173.802881][T12662] netlink: 'syz.1.3054': attribute type 1 has an invalid length. [ 173.878805][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.996311][T12676] gretap0: entered promiscuous mode [ 173.996743][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3061'. [ 173.996759][T12676] gretap0: left promiscuous mode [ 174.182681][T12693] Bluetooth: MGMT ver 1.23 [ 174.288434][T12703] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3073'. [ 174.397714][T12711] Bluetooth: hci0: unsupported parameter 5135 [ 174.397733][T12711] Bluetooth: hci0: unsupported parameter 8192 [ 174.397741][T12711] Bluetooth: hci0: unsupported parameter 5135 [ 174.397748][T12711] Bluetooth: hci0: unsupported parameter 8192 [ 174.476075][T12719] netlink: 'syz.1.3082': attribute type 4 has an invalid length. [ 174.732763][T12739] netlink: 'syz.1.3092': attribute type 1 has an invalid length. [ 174.753770][T12739] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.768835][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'. [ 174.791448][T12739] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 174.799012][T12739] netlink: 'syz.1.3092': attribute type 10 has an invalid length. [ 174.799029][T12739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3092'. [ 174.799129][T12739] dummy0: entered promiscuous mode [ 174.803970][T12739] bond5: (slave dummy0): Releasing backup interface [ 175.058273][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3104'. [ 175.067785][T12764] syzkaller1: entered promiscuous mode [ 175.067801][T12764] syzkaller1: entered allmulticast mode [ 175.534291][T12814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3129'. [ 175.557973][T12815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3128'. [ 175.626761][T12823] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3133'. [ 175.627577][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3133'. [ 175.796424][ T1015] net_ratelimit: 68 callbacks suppressed [ 175.796442][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.218154][T12869] syzkaller0: left promiscuous mode [ 176.218167][T12869] syzkaller0: left allmulticast mode [ 176.247215][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.373856][T12816] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 176.434360][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.434481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.443859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.452974][T12887] netlink: 'syz.2.3164': attribute type 1 has an invalid length. [ 176.554194][T12887] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.597819][T12887] bond7: (slave geneve2): making interface the new active one [ 176.599115][T12895] ip_tables: iptables: counters copy to user failed while replacing table [ 176.611025][T12887] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 176.614661][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.818681][T12920] netlink: 'syz.0.3176': attribute type 8 has an invalid length. [ 177.074862][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.084260][T12943] x_tables: ip_tables: osf match: only valid for protocol 6 [ 177.191658][T12952] netlink: Invalid conntrack timeout [ 177.191673][T12952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.831178][T13006] netlink: 'syz.1.3216': attribute type 10 has an invalid length. [ 177.843050][T13006] team0: Device vxcan0 is of different type [ 177.940427][T13010] netlink: 'syz.2.3218': attribute type 3 has an invalid length. [ 178.142422][T13027] syzkaller0: entered promiscuous mode [ 178.142440][T13027] syzkaller0: entered allmulticast mode [ 178.157376][T13027] tipc: Enabled bearer , priority 0 [ 178.158705][T13026] tipc: Resetting bearer [ 178.194829][T13026] tipc: Disabling bearer [ 178.400633][T13041] bond6: (slave ip6tnl4): The slave device specified does not support setting the MAC address [ 178.401518][T13041] bond6: (slave ip6tnl4): Error -95 calling set_mac_address [ 178.456913][T13041] netlink: 'syz.1.3231': attribute type 1 has an invalid length. [ 179.640812][T13125] __nla_validate_parse: 8 callbacks suppressed [ 179.640830][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 179.673964][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 179.943812][T13143] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20000 [ 180.478068][T13153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.491746][T13153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.718935][T13153] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 180.756345][T13153] batman_adv: batadv0: Interface deactivated: macvtap1 [ 180.850934][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3282'. [ 180.866265][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3282'. [ 180.917347][ T1015] net_ratelimit: 15 callbacks suppressed [ 180.917365][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.924791][ T5658] s`z1: Port: 1 Link DOWN [ 181.003564][T10344] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.003592][T10344] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.003628][T10344] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.003646][T10344] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.003668][T10344] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.003685][T10344] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.012588][T13165] openvswitch: netlink: IPv4 tunnel dst address is zero [ 181.069170][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3287'. [ 181.069187][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3287'. [ 181.069194][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3287'. [ 181.371740][T13178] netlink: 'syz.1.3291': attribute type 33 has an invalid length. [ 181.473688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.553534][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 181.555405][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.555552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.433709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.434004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.434258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.434467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.434684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.453750][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3300'. [ 182.651051][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3306'. [ 182.981693][T13243] netlink: 'syz.1.3319': attribute type 4 has an invalid length. [ 183.081914][T13251] syzkaller0: entered promiscuous mode [ 183.081934][T13251] syzkaller0: entered allmulticast mode [ 183.359310][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 184.325623][T13331] batadv_slave_1 (unregistering): left allmulticast mode [ 184.348940][T13333] pim6reg1: entered promiscuous mode [ 184.348956][T13333] pim6reg1: entered allmulticast mode [ 184.545102][T13348] netlink: 'syz.0.3367': attribute type 3 has an invalid length. [ 184.773509][T13369] __nla_validate_parse: 3 callbacks suppressed [ 184.773551][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3377'. [ 185.116116][T13391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3386'. [ 185.116136][T13391] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 185.560002][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3403'. [ 185.564419][T13432] xt_TCPMSS: Only works on TCP SYN packets [ 185.620211][T13434] bond8: Removing last ns target with arp_interval on [ 185.920474][T13458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3415'. [ 185.920503][T13458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3415'. [ 186.424284][T13481] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.3427'. [ 186.424308][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3427'. [ 186.424321][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3427'. [ 186.554488][T13493] netlink: 'syz.0.3432': attribute type 21 has an invalid length. [ 186.588804][T13493] wg2 speed is unknown, defaulting to 1000 [ 186.588851][T13493] wg2 speed is unknown, defaulting to 1000 [ 186.589614][T13493] wg2 speed is unknown, defaulting to 1000 [ 186.596292][T13493] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 186.596317][T13493] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 186.596340][T13493] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 186.625353][T13493] wg2 speed is unknown, defaulting to 1000 [ 186.627814][T13493] wg2 speed is unknown, defaulting to 1000 [ 186.630292][T13493] wg2 speed is unknown, defaulting to 1000 [ 186.656350][T13499] tipc: Enabled bearer , priority 10 [ 186.779722][T13511] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3437'. [ 186.819573][T13508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3435'. [ 186.990277][T13527] netlink: 'syz.1.3445': attribute type 29 has an invalid length. [ 188.105779][ T688] tipc: Node number set to 805357122 [ 188.402203][T13591] pim6reg: entered allmulticast mode [ 188.407795][T13591] xt_nfacct: accounting object `syz0' does not exist [ 188.408660][T13590] pim6reg: left allmulticast mode [ 188.726789][T13615] syzkaller0: entered promiscuous mode [ 188.726806][T13615] syzkaller0: entered allmulticast mode [ 188.923146][T13629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.975442][T13636] syzkaller1: entered promiscuous mode [ 188.975461][T13636] syzkaller1: entered allmulticast mode [ 189.085670][T13644] netlink: 'syz.1.3501': attribute type 2 has an invalid length. [ 189.334740][T13661] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.340366][T13661] bond8: (slave lo): Enslaving as an active interface with an up link [ 189.350022][T13661] net_ratelimit: 129 callbacks suppressed [ 189.350039][T13661] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 189.842510][T13688] tipc: Enabled bearer , priority 0 [ 189.850459][T13685] tipc: Resetting bearer [ 189.877446][T13685] tipc: Disabling bearer [ 190.140182][T13708] __nla_validate_parse: 8 callbacks suppressed [ 190.140199][T13708] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3531'. [ 191.146925][T13750] xt_l2tp: unknown flags: e7 [ 191.219096][T13759] netlink: 'syz.2.3553': attribute type 29 has an invalid length. [ 191.220114][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'. [ 191.220123][T13758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3554'. [ 191.220129][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'. [ 191.220133][T13758] netlink: 'syz.0.3554': attribute type 5 has an invalid length. [ 191.284151][T13765] xt_hashlimit: invalid interval [ 191.361685][T13770] netlink: 'syz.2.3557': attribute type 83 has an invalid length. [ 191.820304][T13799] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3571'. [ 192.359698][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3585'. [ 192.375105][T13830] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3585'. [ 192.433443][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 192.478404][T13839] ip_tables: iptables: counters copy to user failed while replacing table [ 192.598649][T13843] sctp: [Deprecated]: syz.0.3591 (pid 13843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.598649][T13843] Use struct sctp_sack_info instead [ 192.757436][T13858] netlink: 'syz.0.3597': attribute type 23 has an invalid length. [ 192.934236][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 193.251372][T13887] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3610'. [ 193.251392][T13887] netlink: 'syz.2.3610': attribute type 3 has an invalid length. [ 193.274587][T13888] bridge_slave_0: Caught tx_queue_len zero misconfig [ 193.309499][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'. [ 193.341474][T13896] bridge0: port 2(vlan4) entered blocking state [ 193.343084][T13896] bridge0: port 2(vlan4) entered disabled state [ 193.343156][T13896] vlan4: entered allmulticast mode [ 193.343164][T13896] geneve0: entered allmulticast mode [ 193.356637][T13896] vlan4: entered promiscuous mode [ 193.356649][T13896] geneve0: entered promiscuous mode [ 193.379728][T13898] sctp: [Deprecated]: syz.1.3617 (pid 13898) Use of int in max_burst socket option deprecated. [ 193.379728][T13898] Use struct sctp_assoc_value instead [ 193.636935][T13924] ip_tables: iptables: counters copy to user failed while replacing table [ 193.650387][T13924] syzkaller1: entered promiscuous mode [ 193.650404][T13924] syzkaller1: entered allmulticast mode [ 193.784359][T13934] syzkaller0: entered promiscuous mode [ 193.784378][T13934] syzkaller0: entered allmulticast mode [ 194.161358][T13958] netlink: 'syz.1.3645': attribute type 39 has an invalid length. [ 194.744282][T13995] openvswitch: netlink: Key type 29 is not supported [ 195.449527][T14043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.253195][T14075] __nla_validate_parse: 1 callbacks suppressed [ 196.253215][T14075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3698'. [ 196.311379][T14081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3700'. [ 196.363035][T14083] netlink: Unknown nat attribute (0) [ 196.363054][T14083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.952759][T14106] syzkaller0: entered promiscuous mode [ 196.952784][T14106] syzkaller0: entered allmulticast mode [ 196.960187][T14106] tipc: Enabled bearer , priority 0 [ 196.962379][T14105] tipc: Resetting bearer [ 196.990361][T14105] tipc: Disabling bearer [ 197.111544][T14119] netlink: 'syz.2.3717': attribute type 11 has an invalid length. [ 197.164732][T14123] ip_tables: iptables: counters copy to user failed while replacing table [ 197.716261][T14144] syzkaller0: entered promiscuous mode [ 197.716273][T14144] syzkaller0: entered allmulticast mode [ 197.855861][T14160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3738'. [ 197.924711][T14166] syzkaller1: entered promiscuous mode [ 197.924724][T14166] syzkaller1: entered allmulticast mode [ 198.016600][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 198.096025][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3747'. [ 198.171100][T14188] openvswitch: netlink: Duplicate or invalid key (type 0). [ 198.224275][T14192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.286271][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3757'. [ 198.286329][T14202] netlink: 'syz.0.3757': attribute type 2 has an invalid length. [ 198.286337][T14202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3757'. [ 198.405366][T14216] syzkaller0: entered promiscuous mode [ 198.405380][T14216] syzkaller0: entered allmulticast mode [ 198.506625][T14228] ip_tables: iptables: counters copy to user failed while replacing table [ 198.507434][T14228] ip_tables: iptables: counters copy to user failed while replacing table [ 198.600843][T14241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.624229][T14244] netlink: 'syz.2.3775': attribute type 6 has an invalid length. [ 198.657962][T14246] netlink: 'syz.2.3776': attribute type 1 has an invalid length. [ 198.868129][T14261] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.3782'. [ 198.868165][T14261] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.3782'. [ 198.976001][T14265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3784'. [ 199.249754][T14277] netlink: 'syz.2.3790': attribute type 62 has an invalid length. [ 199.700369][T14304] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 199.721537][ T61] tipc: Resetting bearer [ 200.176725][T14324] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.512050][T14349] netlink: 'syz.0.3825': attribute type 11 has an invalid length. [ 200.540610][T14350] sctp: [Deprecated]: syz.2.3824 (pid 14350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.540610][T14350] Use struct sctp_sack_info instead [ 201.069968][T14378] bond0: option arp_all_targets: invalid value (10) [ 201.227726][T14387] macsec0: entered promiscuous mode [ 201.252803][T14387] net_ratelimit: 1 callbacks suppressed [ 201.252818][T14387] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 201.630065][T14419] netlink: 'syz.2.3858': attribute type 10 has an invalid length. [ 201.630079][T14419] __nla_validate_parse: 7 callbacks suppressed [ 201.630084][T14419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3858'. [ 201.630149][T14419] batadv0: entered promiscuous mode [ 201.630157][T14419] batadv0: entered allmulticast mode [ 201.631280][T14419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.631609][T14419] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 202.001827][T14446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.161027][T14454] rxe_eth0 speed is unknown, defaulting to 1000 [ 202.448426][ T35] audit: type=1804 audit(1792157254.380:4): pid=14457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3874" name="/newroot/1193/cgroup.controllers" dev="tmpfs" ino=6026 res=1 errno=0 [ 202.448593][ T35] audit: type=1800 audit(1792157254.380:5): pid=14457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3874" name="cgroup.controllers" dev="tmpfs" ino=6026 res=0 errno=0 [ 202.477994][T14454] wg2 speed is unknown, defaulting to 1000 [ 203.312496][T14502] ipt_ECN: cannot use operation on non-tcp rule [ 203.973977][T14551] netlink: 'syz.0.3913': attribute type 2 has an invalid length. [ 203.973999][T14551] netlink: 'syz.0.3913': attribute type 1 has an invalid length. [ 203.974008][T14551] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3913'. [ 204.185475][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3920'. [ 204.239545][T14569] tc_dump_action: action bad kind [ 204.290642][T14569] netlink: 'syz.0.3922': attribute type 2 has an invalid length. [ 204.290656][T14569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 204.323167][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3924'. [ 204.417241][T14582] hsr0: entered allmulticast mode [ 204.417255][T14582] hsr_slave_0: entered allmulticast mode [ 204.417262][T14582] hsr_slave_1: entered allmulticast mode [ 204.420728][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3927'. [ 204.421693][T14582] hsr_slave_0: left promiscuous mode [ 204.422373][T14582] hsr_slave_1: left promiscuous mode [ 204.439369][T14582] hsr0 (unregistering): left allmulticast mode [ 204.622492][T14590] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3932'. [ 204.771453][T14604] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3938'. [ 204.907831][T14616] tc_dump_action: action bad kind [ 205.079331][T14618] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3944'. [ 205.295434][T14623] netlink: 'syz.0.3945': attribute type 9 has an invalid length. [ 205.371053][T14627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3947'. [ 205.730356][T14641] 8021q: VLANs not supported on ip6_vti0 [ 206.069262][T14668] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 206.070031][T14668] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 207.062923][T14734] __nla_validate_parse: 5 callbacks suppressed [ 207.062936][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3995'. [ 207.787715][T14784] xt_hashlimit: overflow, try lower: 0/0 [ 207.868342][T14793] netlink: 'syz.0.4023': attribute type 2 has an invalid length. [ 207.868362][T14793] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4023'. [ 207.946734][T14796] syzkaller0: entered promiscuous mode [ 207.946753][T14796] syzkaller0: entered allmulticast mode [ 208.102785][T14807] sit0: entered promiscuous mode [ 208.123635][T14807] netlink: 'syz.0.4029': attribute type 1 has an invalid length. [ 208.123657][T14807] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4029'. [ 208.131552][T14807] netlink: 'syz.0.4029': attribute type 1 has an invalid length. [ 208.131569][T14807] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4029'. [ 208.239459][T14814] Bluetooth: hci0: unsupported parameter 5135 [ 208.239562][T14814] Bluetooth: hci0: unsupported parameter 8192 [ 208.239572][T14814] Bluetooth: hci0: unsupported parameter 5135 [ 208.239681][T14814] Bluetooth: hci0: unsupported parameter 8192 [ 208.244026][T14813] syzkaller0: entered promiscuous mode [ 208.244042][T14813] syzkaller0: entered allmulticast mode [ 208.247368][T14813] simple: /dev/video#_1 [ 208.247382][T14813] simple: /dev/video#_2 [ 208.247387][T14813] simple: /dev/video#_3 [ 208.247393][T14813] simple: /dev/video#_4 [ 208.247399][T14813] simple: /dev/video#_5 [ 208.247404][T14813] simple: /dev/video#_6 [ 208.247409][T14813] simple: /dev/video#_7 [ 208.247416][T14813] simple: /dev/video#_8 [ 208.247422][T14813] simple: /dev/video#_9 [ 208.247426][T14813] simple: /dev/video#_10 [ 208.247432][T14813] simple: /dev/video#_11 [ 208.247439][T14813] simple: /dev/video#_12 [ 208.247445][T14813] simple: /dev/video#_13 [ 208.247450][T14813] simple: /dev/video#_14 [ 208.247457][T14813] simple: /dev/video#_15 [ 208.247462][T14813] simple: /dev/video#_16 [ 208.247468][T14813] simple: /dev/video#_17 [ 208.247475][T14813] simple: /dev/video#_18 [ 208.247481][T14813] simple: /dev/video#_19 [ 208.247486][T14813] simple: /dev/video#_20 [ 208.247491][T14813] simple: /dev/video#_21 [ 208.247498][T14813] simple: /dev/video#_22 [ 208.247503][T14813] simple: /dev/video#_23 [ 208.247508][T14813] simple: /dev/video#_24 [ 208.247515][T14813] simple: /dev/video#_25 [ 208.247521][T14813] simple: /dev/video#_26 [ 208.247526][T14813] simple: /dev/video#_27 [ 208.247531][T14813] simple: /dev/video#_28 [ 208.247538][T14813] simple: /dev/video#_29 [ 208.247543][T14813] simple: /dev/video#_30 [ 208.247548][T14813] simple: /dev/video#_31 [ 208.247553][T14813] simple: /dev/video#_32 [ 208.247562][T14813] TC_ACT_REPEAT abuse ? [ 208.322129][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4032'. [ 208.933355][T14868] IPVS: length: 155 != 8 [ 209.022932][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4062'. [ 209.185611][T14890] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4066'. [ 210.264486][T14920] netlink: 'syz.1.4077': attribute type 7 has an invalid length. [ 210.264505][T14920] netlink: 'syz.1.4077': attribute type 3 has an invalid length. [ 210.264514][T14920] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4077'. [ 210.332497][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4079'. [ 210.332517][T14926] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4079'. [ 210.427351][T14932] dvmrp0: entered allmulticast mode [ 210.734181][T14950] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 212.014843][T14989] syz_tun: left allmulticast mode [ 212.014909][T14989] syz_tun: left promiscuous mode [ 212.015024][T14989] bridge0: port 1(syz_tun) entered disabled state [ 212.038247][T14989] bond0: (slave bond_slave_0): Releasing backup interface [ 212.051451][T14989] bond0: (slave bond_slave_1): Releasing backup interface [ 212.059235][T14989] team0: Port device team_slave_1 removed [ 212.059495][T14989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.060357][T14989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.061147][T14989] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.149076][T14994] __nla_validate_parse: 6 callbacks suppressed [ 212.149092][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4110'. [ 212.601685][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4114'. [ 213.067093][T15020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4121'. [ 213.067125][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4121'. [ 213.162991][T15022] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 213.167485][T15025] sctp: [Deprecated]: syz.1.4123 (pid 15025) Use of int in max_burst socket option. [ 213.167485][T15025] Use struct sctp_assoc_value instead [ 213.181385][T15022] bond9: (slave macvlan3): Enslaving as an active interface with a down link [ 213.806327][T15067] netlink: 'syz.2.4143': attribute type 10 has an invalid length. [ 213.806418][T15067] batadv0: left promiscuous mode [ 213.806427][T15067] batadv0: left allmulticast mode [ 213.827512][T15067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.862268][T15070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.921146][T15072] vlan0: entered promiscuous mode [ 214.018383][T15081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4150'. [ 214.018405][T15081] netlink: 'syz.1.4150': attribute type 1 has an invalid length. [ 214.018415][T15081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4150'. [ 214.059472][T15084] netlink: 'syz.1.4151': attribute type 1 has an invalid length. [ 214.086216][T15086] netlink: 'syz.2.4152': attribute type 61 has an invalid length. [ 214.086239][T15086] netlink: 'syz.2.4152': attribute type 268 has an invalid length. [ 214.181445][T15094] netlink: 'syz.2.4156': attribute type 1 has an invalid length. [ 214.181468][T15094] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4156'. [ 214.217726][T15096] ebt_among: dst integrity fail: 200 [ 214.376385][T15105] block nbd0: Receive control failed (result -32) [ 214.378188][ T56] block nbd0: Receive control failed (result -32) [ 214.907293][T15129] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4170'. [ 215.311634][T15133] netlink: 'syz.1.4172': attribute type 2 has an invalid length. [ 215.311831][T15133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.386172][T15135] tipc: Enabling of bearer rejected, failed to enable media [ 215.596743][T15146] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4178'. [ 215.649638][T15152] No such timeout policy "s" [ 215.649655][T15152] netlink: Failed to associated timeout policy 's' [ 215.920100][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'. [ 216.022040][T15177] netlink: 'syz.0.4193': attribute type 1 has an invalid length. [ 216.086037][T15177] bond9: (slave veth9): Enslaving as an active interface with a down link [ 216.098765][T15177] bond9: (slave veth0_to_bond): making interface the new active one [ 216.101868][T15177] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 216.112662][T15177] 8021q: adding VLAN 0 to HW filter on device bond9 [ 216.266396][T15195] vlan5: entered allmulticast mode [ 216.266410][T15195] bridge_slave_0: entered allmulticast mode [ 216.266563][T15195] bridge0: port 1(vlan5) entered blocking state [ 216.271638][T15195] bridge0: port 1(vlan5) entered disabled state [ 216.272616][T15195] vlan5: entered promiscuous mode [ 216.272626][T15195] bridge_slave_0: entered promiscuous mode [ 216.367808][T15203] netlink: 'syz.2.4203': attribute type 6 has an invalid length. [ 216.891522][T15242] openvswitch: netlink: Unknown key attributes 2 [ 217.108017][T15259] Bluetooth: hci0: unsupported parameter 5134 [ 217.108039][T15259] Bluetooth: hci0: unsupported parameter 8192 [ 217.108054][T15259] Bluetooth: hci0: unsupported parameter 5134 [ 217.108062][T15259] Bluetooth: hci0: unsupported parameter 8192 [ 217.367779][T15274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.472546][T15284] __nla_validate_parse: 2 callbacks suppressed [ 217.472564][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4242'. [ 217.748983][T15302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4251'. [ 218.130555][T15325] tipc: Enabling of bearer rejected, failed to enable media [ 218.182660][T15328] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.4262'. [ 218.370763][T15337] tipc: Resetting bearer [ 218.977456][T15383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4287'. [ 219.209875][T15397] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4293'. [ 219.281058][T15403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4297'. [ 219.318324][T15405] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4298'. [ 219.451166][T15413] erspan0: entered promiscuous mode [ 219.474274][T15413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.475665][T15413] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.478404][T15413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.536474][T15413] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.536495][T15413] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.561448][T15413] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 219.596142][ T25] s`z1: Port: 1 Link ACTIVE [ 219.681932][T15419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.700499][T15425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.734643][T15419] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.734940][T15423] netlink: 'syz.0.4305': attribute type 1 has an invalid length. [ 219.778436][T15423] 8021q: adding VLAN 0 to HW filter on device bond10 [ 220.194528][T15445] netlink: 'syz.2.4311': attribute type 2 has an invalid length. [ 220.398080][T15419] wg2 speed is unknown, defaulting to 1000 [ 220.926214][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4313'. [ 220.926228][T15452] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4313'. [ 220.943180][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4313'. [ 220.943194][T15452] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 221.294219][T15470] bond11: entered promiscuous mode [ 221.447442][T15480] openvswitch: netlink: IP tunnel TTL not specified. [ 221.447470][T15480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.059205][T15510] smc: net device lo applied user defined pnetid SYZ0 [ 222.536216][T15527] sch_fq: defrate 4294967293 ignored. [ 223.390250][T15563] ip_tables: iptables: counters copy to user failed while replacing table [ 223.519384][T15571] syzkaller1: entered promiscuous mode [ 223.519402][T15571] syzkaller1: entered allmulticast mode [ 223.630093][T15581] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.630886][T15581] gre0: entered promiscuous mode [ 223.630898][T15581] gre0: entered allmulticast mode [ 223.692139][T15585] netlink: 'syz.2.4371': attribute type 6 has an invalid length. [ 224.008122][T15619] __nla_validate_parse: 3 callbacks suppressed [ 224.008132][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 224.241604][T15626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4387'. [ 225.176383][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4397'. [ 225.352489][T15672] Cannot find add_set index 2 as target [ 225.435765][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4412'. [ 225.460823][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4415'. [ 225.480950][T15685] 8021q: adding VLAN 0 to HW filter on device bond10 [ 225.484089][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4412'. [ 225.588995][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4420'. [ 225.714304][ T5659] page_pool_release_retry() stalled pool shutdown: id 75, 1 inflight 60 sec [ 225.809731][T15713] bond9: entered allmulticast mode [ 225.816887][T15713] macvlan0: entered promiscuous mode [ 225.816897][T15713] macvlan0: entered allmulticast mode [ 225.818932][T15713] bond9: (slave macvlan0): Opening slave failed [ 225.959597][T15724] netlink: 'syz.1.4432': attribute type 21 has an invalid length. [ 225.959609][T15724] netlink: 'syz.1.4432': attribute type 22 has an invalid length. [ 225.959615][T15724] netlink: 'syz.1.4432': attribute type 23 has an invalid length. [ 225.959619][T15724] netlink: 'syz.1.4432': attribute type 25 has an invalid length. [ 225.959624][T15724] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4432'. [ 226.222565][T15750] sctp: [Deprecated]: syz.1.4444 (pid 15750) Use of int in maxseg socket option. [ 226.222565][T15750] Use struct sctp_assoc_value instead [ 227.072074][T15792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4462'. [ 227.302034][T15802] netlink: 'syz.1.4467': attribute type 49 has an invalid length. [ 227.381191][T15802] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 227.381283][T15802] ip6gretap0: entered promiscuous mode [ 227.381296][T15802] ip6gretap0: entered allmulticast mode [ 227.599664][T15820] syzkaller0: entered promiscuous mode [ 227.599682][T15820] syzkaller0: entered allmulticast mode [ 227.736199][T15832] xt_CT: No such helper "netbios-ns" [ 227.781631][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4478'. [ 227.978308][T15846] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 228.332965][T15878] netlink: 'syz.1.4493': attribute type 21 has an invalid length. [ 228.333009][T15878] netlink: 'syz.1.4493': attribute type 4 has an invalid length. [ 228.333015][T15878] netlink: 'syz.1.4493': attribute type 3 has an invalid length. [ 228.362859][T15881] ipt_ah: unknown flags FF [ 228.430158][T15878] tipc: Resetting bearer [ 228.430277][T15878] tipc: Resetting bearer [ 228.588401][T15900] geneve1: Caught tx_queue_len zero misconfig [ 229.556377][T15918] __nla_validate_parse: 4 callbacks suppressed [ 229.556387][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4509'. [ 229.556433][T15918] openvswitch: netlink: Message has 4 unknown bytes. [ 229.818845][T15939] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 230.004120][T15955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.010573][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4520'. [ 230.010588][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4520'. [ 230.404078][ T25] s`z1: Port: 1 Link DOWN [ 230.531256][T15968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4528'. [ 230.723949][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4539'. [ 230.872586][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4549'. [ 230.884571][T16011] xt_ipcomp: unknown flags 1D [ 231.215585][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4562'. [ 231.311137][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4562'. [ 231.751923][T16023] syz.0.4555 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 231.751946][T16023] CPU: 1 UID: 0 PID: 16023 Comm: syz.0.4555 Not tainted syzkaller #0 PREEMPT(full) [ 231.751955][T16023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 231.751960][T16023] Call Trace: [ 231.751964][T16023] [ 231.751968][T16023] dump_stack_lvl+0xe8/0x150 [ 231.751982][T16023] dump_header+0xd3/0x4b0 [ 231.752012][T16023] oom_kill_process+0x3ab/0x9e0 [ 231.752027][T16023] out_of_memory+0x1064/0x1480 [ 231.752036][T16023] ? try_charge_memcg+0xc32/0x15e0 [ 231.752052][T16023] ? __pfx_out_of_memory+0x10/0x10 [ 231.752060][T16023] ? do_raw_spin_unlock+0x4d/0x200 [ 231.752076][T16023] try_charge_memcg+0xcdf/0x15e0 [ 231.752093][T16023] ? __pfx_try_charge_memcg+0x10/0x10 [ 231.752112][T16023] ? charge_memcg+0x47/0x310 [ 231.752122][T16023] charge_memcg+0x1dd/0x310 [ 231.752132][T16023] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 231.752141][T16023] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 231.752152][T16023] swap_cache_alloc_folio+0x4de/0x990 [ 231.752169][T16023] swap_cache_read_folio+0x44/0x120 [ 231.752182][T16023] swap_cluster_readahead+0x392/0x630 [ 231.752193][T16023] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 231.752214][T16023] swapin_readahead+0x1a3/0xc50 [ 231.752226][T16023] ? __pfx_swapin_readahead+0x10/0x10 [ 231.752236][T16023] ? swap_table_get+0x1e/0x260 [ 231.752246][T16023] ? swap_table_get+0x1e/0x260 [ 231.752255][T16023] ? swap_table_get+0x1e/0x260 [ 231.752265][T16023] ? swap_table_get+0x216/0x260 [ 231.752276][T16023] ? swap_cache_get_folio+0x2e7/0x2f0 [ 231.752290][T16023] do_swap_page+0x3fb/0x4c10 [ 231.752308][T16023] ? __lock_acquire+0x747/0x2de0 [ 231.752315][T16023] ? do_swap_page+0x126/0x4c10 [ 231.752326][T16023] ? __pfx_do_swap_page+0x10/0x10 [ 231.752334][T16023] ? __pte_offset_map+0x1ae/0x240 [ 231.752349][T16023] ? pte_offset_map_rw_nolock+0xea/0x160 [ 231.752361][T16023] handle_mm_fault+0x1398/0x3750 [ 231.752376][T16023] ? handle_mm_fault+0xf1/0x3750 [ 231.752391][T16023] ? __pfx_handle_mm_fault+0x10/0x10 [ 231.752400][T16023] ? lock_vma_under_rcu+0x45a/0x500 [ 231.752418][T16023] do_user_addr_fault+0xa4f/0x1340 [ 231.752458][T16023] ? trace_page_fault_user+0x84/0x1e0 [ 231.752475][T16023] exc_page_fault+0x6a/0xc0 [ 231.752490][T16023] asm_exc_page_fault+0x26/0x30 [ 231.752500][T16023] RIP: 0033:0x7fc66db596b8 [ 231.752509][T16023] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 231.752516][T16023] RSP: 002b:00007ffe52095920 EFLAGS: 00010246 [ 231.752524][T16023] RAX: 0000000000000000 RBX: 000055558a8e1500 RCX: 00007fc66db5ed8e [ 231.752529][T16023] RDX: 00007ffe52095970 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.752534][T16023] RBP: 00007fc66de27da0 R08: 0000000000000000 R09: 0000000000000000 [ 231.752538][T16023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000038931 [ 231.752543][T16023] R13: 00007fc66de25fac R14: 0000000000038625 R15: 00007ffe52095aa0 [ 231.752555][T16023] [ 231.844063][T16023] memory: usage 307200kB, limit 307200kB, failcnt 2340 [ 231.844074][T16023] memory+swap: usage 307320kB, limit 9007199254740988kB, failcnt 0 [ 231.844079][T16023] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 231.844084][T16023] Memory cgroup stats for /syz0: [ 231.844141][T16023] cache 0 [ 231.844144][T16023] rss 0 [ 231.844147][T16023] rss_huge 0 [ 231.844149][T16023] shmem 0 [ 231.844152][T16023] mapped_file 0 [ 231.844154][T16023] dirty 0 [ 231.844157][T16023] writeback 0 [ 231.844159][T16023] workingset_refault_anon 8 [ 231.844162][T16023] workingset_refault_file 3 [ 231.844165][T16023] swap 122880 [ 231.844167][T16023] swapcached 204800 [ 231.844169][T16023] pgpgin 118642 [ 231.844172][T16023] pgpgout 118639 [ 231.844174][T16023] pgfault 268887 [ 231.844176][T16023] pgmajfault 11 [ 231.844179][T16023] inactive_anon 4096 [ 231.844181][T16023] active_anon 8192 [ 231.844184][T16023] inactive_file 0 [ 231.844186][T16023] active_file 0 [ 231.844189][T16023] unevictable 0 [ 231.844191][T16023] hierarchical_memory_limit 314572800 [ 231.844194][T16023] hierarchical_memsw_limit 9223372036854771712 [ 231.844197][T16023] total_cache 0 [ 231.844199][T16023] total_rss 0 [ 231.844202][T16023] total_rss_huge 0 [ 231.844204][T16023] total_shmem 0 [ 231.844206][T16023] total_mapped_file 0 [ 231.844209][T16023] total_dirty 0 [ 231.844211][T16023] total_writeback 0 [ 231.844214][T16023] total_workingset_refault_anon 8 [ 231.844217][T16023] total_workingset_refault_file 3 [ 231.844219][T16023] total_swap 122880 [ 231.844222][T16023] total_swapcached 204800 [ 231.844224][T16023] total_pgpgin 118642 [ 231.844227][T16023] total_pgpgout 118639 [ 231.844230][T16023] total_pgfault 268887 [ 231.844232][T16023] total_pgmajfault 11 [ 231.844235][T16023] total_inactive_anon 4096 [ 231.844237][T16023] total_active_anon 8192 [ 231.844240][T16023] total_inactive_file 0 [ 231.844242][T16023] total_active_file 0 [ 231.844245][T16023] total_unevictable 0 [ 231.844247][T16023] anon_cost 0 [ 231.844249][T16023] file_cost 0 [ 231.844252][T16023] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4555,pid=16023,uid=0 [ 231.844321][T16023] Memory cgroup out of memory: Killed process 16023 (syz.0.4555) total-vm:102192kB, anon-rss:1272kB, file-rss:21964kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 232.111399][ T5597] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 232.111453][ T5597] CPU: 1 UID: 0 PID: 5597 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 232.111468][ T5597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 232.111476][ T5597] Call Trace: [ 232.111481][ T5597] [ 232.111486][ T5597] dump_stack_lvl+0xe8/0x150 [ 232.111507][ T5597] dump_header+0xd3/0x4b0 [ 232.111523][ T5597] oom_kill_process+0x3ab/0x9e0 [ 232.111543][ T5597] out_of_memory+0x1064/0x1480 [ 232.111557][ T5597] ? try_charge_memcg+0xc32/0x15e0 [ 232.111578][ T5597] ? __pfx_out_of_memory+0x10/0x10 [ 232.111589][ T5597] ? do_raw_spin_unlock+0x4d/0x200 [ 232.111633][ T5597] try_charge_memcg+0xcdf/0x15e0 [ 232.111660][ T5597] ? __pfx_try_charge_memcg+0x10/0x10 [ 232.111681][ T5597] ? percpu_ref_tryget+0x15/0x180 [ 232.111704][ T5597] ? __memcg_kmem_charge_page+0x15a/0x520 [ 232.111719][ T5597] __memcg_kmem_charge_page+0x330/0x520 [ 232.111730][ T5597] ? __memcg_kmem_charge_page+0x15a/0x520 [ 232.111746][ T5597] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 232.111763][ T5597] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.111779][ T5597] ? __pfx_policy_nodemask+0x10/0x10 [ 232.111796][ T5597] ? do_raw_spin_lock+0x12b/0x2f0 [ 232.111817][ T5597] alloc_pages_mpol+0x21e/0x390 [ 232.111837][ T5597] alloc_pages_noprof+0xb1/0x2b0 [ 232.111856][ T5597] pte_alloc_one+0x22/0x370 [ 232.111874][ T5597] __pte_alloc+0x25/0x1a0 [ 232.111891][ T5597] copy_pmd_range+0x539a/0x5c10 [ 232.111913][ T5597] ? __lock_acquire+0x747/0x2de0 [ 232.111945][ T5597] ? __pfx_copy_pmd_range+0x10/0x10 [ 232.111967][ T5597] ? __lock_acquire+0x747/0x2de0 [ 232.111984][ T5597] ? mas_wr_store_type+0xf80/0x1980 [ 232.112003][ T5597] copy_page_range+0xc82/0x1290 [ 232.112031][ T5597] ? __pfx_copy_page_range+0x10/0x10 [ 232.112050][ T5597] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 232.112062][ T5597] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 232.112078][ T5597] dup_mmap+0xf17/0x1dc0 [ 232.112099][ T5597] ? __pfx_dup_mmap+0x10/0x10 [ 232.112112][ T5597] ? do_raw_spin_lock+0x12b/0x2f0 [ 232.112138][ T5597] ? lock_acquire+0x115/0x350 [ 232.112161][ T5597] copy_mm+0x115/0x480 [ 232.112179][ T5597] copy_process+0x1e79/0x4400 [ 232.112193][ T5597] ? __lock_acquire+0x747/0x2de0 [ 232.112211][ T5597] ? copy_process+0xd16/0x4400 [ 232.112238][ T5597] ? __pfx_copy_process+0x10/0x10 [ 232.112271][ T5597] kernel_clone+0x2d7/0x940 [ 232.112287][ T5597] ? cgroup1_freezing+0x20/0x350 [ 232.112309][ T5597] ? __pfx_kernel_clone+0x10/0x10 [ 232.112336][ T5597] __x64_sys_clone+0x1b6/0x230 [ 232.112354][ T5597] ? __pfx___x64_sys_clone+0x10/0x10 [ 232.112385][ T5597] ? do_user_addr_fault+0xc4c/0x1340 [ 232.112406][ T5597] do_syscall_64+0x166/0x520 [ 232.112447][ T5597] ? trace_irq_disable+0x3b/0x140 [ 232.112463][ T5597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.112480][ T5597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.112493][ T5597] RIP: 0033:0x7fc66dbc6fd2 [ 232.112507][ T5597] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 232.112517][ T5597] RSP: 002b:00007ffe52095a50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 232.112533][ T5597] RAX: ffffffffffffffda RBX: 00007ffe52095a50 RCX: 00007fc66dbc6fd2 [ 232.112542][ T5597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 232.112550][ T5597] RBP: 00007ffe52095bdc R08: 0000000000000000 R09: 0000000000000001 [ 232.112557][ T5597] R10: 000055558a8e17d0 R11: 0000000000000246 R12: 0000000000000001 [ 232.112565][ T5597] R13: 00000000000927c0 R14: 00000000000385f8 R15: 00007ffe52095c30 [ 232.112587][ T5597] [ 232.208937][ T5597] memory: usage 307200kB, limit 307200kB, failcnt 2421 [ 232.208956][ T5597] memory+swap: usage 307244kB, limit 9007199254740988kB, failcnt 0 [ 232.208966][ T5597] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 232.208977][ T5597] Memory cgroup stats for /syz0: [ 232.209140][ T5597] cache 0 [ 232.209148][ T5597] rss 0 [ 232.209172][ T5597] rss_huge 0 [ 232.209176][ T5597] shmem 0 [ 232.209180][ T5597] mapped_file 0 [ 232.209185][ T5597] dirty 0 [ 232.209189][ T5597] writeback 0 [ 232.209195][ T5597] workingset_refault_anon 16 [ 232.209200][ T5597] workingset_refault_file 3 [ 232.209205][ T5597] swap 45056 [ 232.209209][ T5597] swapcached 274432 [ 232.209216][ T5597] pgpgin 118663 [ 232.209219][ T5597] pgpgout 118662 [ 232.209223][ T5597] pgfault 268915 [ 232.209228][ T5597] pgmajfault 27 [ 232.209233][ T5597] inactive_anon 0 [ 232.209238][ T5597] active_anon 4096 [ 232.209243][ T5597] inactive_file 0 [ 232.209247][ T5597] active_file 0 [ 232.209251][ T5597] unevictable 0 [ 232.209255][ T5597] hierarchical_memory_limit 314572800 [ 232.209262][ T5597] hierarchical_memsw_limit 9223372036854771712 [ 232.209267][ T5597] total_cache 0 [ 232.209271][ T5597] total_rss 0 [ 232.209275][ T5597] total_rss_huge 0 [ 232.209282][ T5597] total_shmem 0 [ 232.209286][ T5597] total_mapped_file 0 [ 232.209290][ T5597] total_dirty 0 [ 232.209294][ T5597] total_writeback 0 [ 232.209301][ T5597] total_workingset_refault_anon 16 [ 232.209306][ T5597] total_workingset_refault_file 3 [ 232.209310][ T5597] total_swap 45056 [ 232.209315][ T5597] total_swapcached 274432 [ 232.209319][ T5597] total_pgpgin 118663 [ 232.209323][ T5597] total_pgpgout 118662 [ 232.209328][ T5597] total_pgfault 268915 [ 232.209335][ T5597] total_pgmajfault 27 [ 232.209339][ T5597] total_inactive_anon 0 [ 232.209343][ T5597] total_active_anon 4096 [ 232.209349][ T5597] total_inactive_file 0 [ 232.209355][ T5597] total_active_file 0 [ 232.209359][ T5597] total_unevictable 0 [ 232.209363][ T5597] anon_cost 0 [ 232.209367][ T5597] file_cost 0 [ 232.209374][ T5597] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor,pid=5597,uid=0 [ 232.209578][ T5597] Memory cgroup out of memory: Killed process 5597 (syz-executor) total-vm:98220kB, anon-rss:1304kB, file-rss:21788kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:0 [ 232.459659][T16080] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4581'. [ 232.744198][ T5597] tipc: Resetting bearer [ 232.827362][ T5597] syz_tun (unregistering): left allmulticast mode [ 232.828581][ T5597] tipc: Disabling bearer [ 233.172640][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.177169][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.179525][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.179599][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 233.182836][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.197988][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.224292][ T4993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.226915][ T4993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.229485][ T4993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.230490][ T4993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.235927][ T4993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.291278][T16105] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 233.538119][T16095] rxe_eth0 speed is unknown, defaulting to 1000 [ 233.548944][T16123] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 233.781143][T16095] wg2 speed is unknown, defaulting to 1000 [ 234.066985][T16095] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.067097][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.067159][T16095] bridge_slave_0: entered allmulticast mode [ 234.067958][T16095] bridge_slave_0: entered promiscuous mode [ 234.069990][T16095] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.070134][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.070226][T16095] bridge_slave_1: entered allmulticast mode [ 234.071273][T16095] bridge_slave_1: entered promiscuous mode [ 234.087798][T16095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.089353][T16095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.107543][T16095] team0: Port device team_slave_0 added [ 234.109223][T16095] team0: Port device team_slave_1 added [ 234.128835][T16095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.128847][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.128856][T16095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.129841][T16095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.129848][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.129858][T16095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.177073][T16095] hsr_slave_0: entered promiscuous mode [ 234.177875][T16095] hsr_slave_1: entered promiscuous mode [ 234.416475][T16095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.423192][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 234.427101][T16095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.448971][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 234.452922][T16095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.464491][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 234.465082][T16095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.474799][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 234.501820][T16095] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.501871][T16095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.501974][T16095] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.502018][T16095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.568538][T16187] 8021q: adding VLAN 0 to HW filter on device bond10 [ 234.584010][T16095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.592283][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.592861][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.610476][T16095] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.616583][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.616627][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.620445][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.620715][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.958583][T16095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.003003][T16095] veth0_vlan: entered promiscuous mode [ 235.015885][T16095] veth1_vlan: entered promiscuous mode [ 235.051453][T16095] veth0_macvtap: entered promiscuous mode [ 235.055932][T16095] veth1_macvtap: entered promiscuous mode [ 235.071463][T16095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.079810][T16095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.103855][ T5650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.103897][ T5650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.103920][ T5650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.103941][ T5650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.217289][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.217308][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.288024][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.288043][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.315301][ T55] Bluetooth: hci0: command tx timeout [ 237.240609][T16292] netlink: 'syz.1.4659': attribute type 1 has an invalid length. [ 237.260283][T16292] 8021q: adding VLAN 0 to HW filter on device bond11 [ 237.285328][T16292] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 237.301163][T16297] __nla_validate_parse: 1 callbacks suppressed [ 237.301182][T16297] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4661'. [ 237.302935][T16292] bridge8: entered promiscuous mode [ 237.307935][T16292] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 237.336067][T16297] hsr_slave_0 (unregistering): left promiscuous mode [ 237.393496][ T55] Bluetooth: hci0: command tx timeout [ 239.290825][T16253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.293075][T16327] netlink: 'syz.3.4671': attribute type 11 has an invalid length. [ 239.293093][T16327] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4671'. [ 239.473735][ T55] Bluetooth: hci0: command tx timeout [ 239.542234][T16347] syzkaller0: entered promiscuous mode [ 239.542253][T16347] syzkaller0: entered allmulticast mode [ 240.177787][T16391] policy can only be matched on NF_INET_PRE_ROUTING [ 240.177801][T16391] unable to load match [ 240.436774][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.816057][T16425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 240.979533][T16430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4712'. [ 241.188160][T16450] batman_adv: batadv0: Adding interface: syzkaller0 [ 241.188175][T16450] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.188329][T16450] batman_adv: batadv0: Interface activated: syzkaller0 [ 241.215534][T16448] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 241.246252][T16448] batman_adv: batadv0: Removing interface: syzkaller0 [ 241.554710][ T55] Bluetooth: hci0: command tx timeout [ 243.424820][T16579] @0Ù: renamed from bond_slave_1 (while UP) [ 243.562515][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4791'. [ 243.562535][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4791'. [ 243.617602][T16599] erspan0: left promiscuous mode [ 243.652792][T16599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.655807][T16599] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.660828][T16599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.738539][T16599] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 243.744173][T16605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.744230][ T7244] s`z1: Port: 1 Link ACTIVE [ 243.847140][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4799'. [ 243.847162][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4799'. [ 243.867677][T16615] netlink: Failed to add %pK helper -22 [ 243.867706][T16615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.019994][T16635] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 244.842002][T16674] netlink: 'syz.2.4828': attribute type 33 has an invalid length. [ 244.842014][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4828'. [ 244.842026][T16674] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 246.743974][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4871'. [ 246.744040][T16764] netlink: 'syz.3.4871': attribute type 1 has an invalid length. [ 246.744052][T16764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4871'. [ 246.878305][T16770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4874'. [ 247.110868][T16784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4880'. [ 247.242369][T16792] xt_hashlimit: overflow, try lower: 18446744073709551615/8388608 [ 247.446696][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4891'. [ 247.525098][T16816] syzkaller0: entered promiscuous mode [ 247.525118][T16816] syzkaller0: entered allmulticast mode [ 247.767058][T16827] syzkaller0: entered promiscuous mode [ 247.767078][T16827] syzkaller0: entered allmulticast mode [ 247.768346][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.768357][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.769125][T16827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.016744][T16837] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 248.135446][T16841] tc_dump_action: action bad kind [ 249.296487][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4921'. [ 251.629710][T16863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.258860][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4937'. [ 252.258910][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4937'. [ 253.549581][T16980] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 253.588859][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'. [ 253.876334][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4972'. [ 254.020305][T17015] netlink: 'syz.1.4977': attribute type 30 has an invalid length. [ 254.326008][T17041] tipc: Started in network mode [ 254.326025][T17041] tipc: Node identity c24b2960236e, cluster identity 4711 [ 254.326135][T17041] tipc: Enabled bearer , priority 0 [ 254.326480][T17041] +: renamed from syzkaller0 [ 254.327327][T17041] tipc: Disabling bearer [ 254.421808][T17045] ip_tables: iptables: counters copy to user failed while replacing table [ 255.845914][ T5452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.845942][ T5452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.845958][ T5452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 255.930623][ T5452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.930651][ T5452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.930668][ T5452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 256.017949][ T5452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.017977][ T5452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.017993][ T5452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 256.086138][ T5452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.086165][ T5452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.086181][ T5452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 256.488874][ T5452] erspan0 (unregistering): left promiscuous mode [ 256.601555][ T5452] bond0 (unregistering): left promiscuous mode [ 256.601576][ T5452] bond_slave_0: left promiscuous mode [ 256.601810][ T5452] bond_slave_1: left promiscuous mode [ 256.606725][ T5452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.618838][ T5452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.620275][ T5452] bond0 (unregistering): Released all slaves [ 256.627422][ T5452] bond1 (unregistering): Released all slaves [ 256.640308][ T5452] bond2 (unregistering): (slave veth3): Releasing active interface [ 256.641787][ T5452] bond2 (unregistering): Released all slaves [ 256.653781][ T5452] bond3 (unregistering): Released all slaves [ 256.663191][ T5452] bond4 (unregistering): Released all slaves [ 256.674981][ T5452] bond5 (unregistering): Released all slaves [ 256.693203][ T5452] bond6 (unregistering): Released all slaves [ 256.710763][ T5452] bond7 (unregistering): Released all slaves [ 256.722683][ T5452] bond8 (unregistering): Released all slaves [ 256.746748][ T5452] bond9 (unregistering): (slave veth9): Releasing active interface [ 256.746772][ T5452] veth0_to_bond: entered promiscuous mode [ 256.750277][ T5452] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 256.750301][ T5452] veth0_to_bond: left promiscuous mode [ 256.752145][ T5452] bond9 (unregistering): Released all slaves [ 256.778628][ T5452] bond10 (unregistering): Released all slaves [ 256.789238][ T5452] bond11 (unregistering): Released all slaves [ 256.802705][ T9] wg2 speed is unknown, defaulting to 1000 [ 256.802728][ T9] syz2: Port: 1 Link DOWN [ 257.003881][ T5452] tipc: Left network mode [ 257.442803][ T5452] team0: left promiscuous mode [ 257.442822][ T5452] team_slave_0: left promiscuous mode [ 257.442976][ T5452] team_slave_1: left promiscuous mode [ 257.499511][ T5452] veth1_macvtap: left promiscuous mode [ 257.499583][ T5452] veth0_macvtap: left promiscuous mode [ 257.499704][ T5452] veth1_vlan: left promiscuous mode [ 257.499770][ T5452] veth0_vlan: left promiscuous mode [ 257.676251][ T27] smc: removing ib device syz1 [ 257.760426][T17078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.790238][T17069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.942667][ T5452] team0 (unregistering): Port device team_slave_1 removed [ 257.970991][ T5452] team0 (unregistering): Port device team_slave_0 removed [ 258.077878][T17151] netlink: NAT attribute has 4 unknown bytes [ 258.077910][T17151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.118761][ T9658] smbdirect: ib_dev[syz2] removed [ 258.249679][ T5659] infiniband syz1: ib_query_port failed (-19) [ 258.250089][T17141] ÿÿÿ: renamed from bond_slave_0 (while UP) [ 258.380462][T17167] netlink: 'syz.3.5042': attribute type 11 has an invalid length. [ 258.425608][ T27] smbdirect: ib_dev[syz1] removed [ 258.443167][ T5338] 8021q: adding VLAN 0 to HW filter on device eth1 [ 258.830445][ T5338] 8021q: adding VLAN 0 to HW filter on device eth2 [ 259.386513][T17223] xt_hashlimit: max too large, truncated to 1048576 [ 259.386784][T17223] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 259.763823][ T5338] 8021q: adding VLAN 0 to HW filter on device eth3 [ 259.868852][ T5452] IPVS: stop unused estimator thread 0... [ 259.898519][T17247] bridge_slave_1: entered promiscuous mode [ 259.918169][ T5338] 8021q: adding VLAN 0 to HW filter on device eth4 [ 260.789577][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5067'. [ 261.301225][T17293] netlink: 264 bytes leftover after parsing attributes in process `syz.1.5076'. [ 261.301254][T17293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5076'. [ 261.340072][T17300] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 261.340085][T17300] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 261.439741][T17310] tipc: Enabling of bearer rejected, failed to enable media [ 262.433063][T17333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 262.550433][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5096'. [ 262.601184][T17339] ip6gre2: entered promiscuous mode [ 262.601202][T17339] ip6gre2: entered allmulticast mode [ 262.617590][ T5650] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.617750][ T5650] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.657187][ T5711] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.863582][ T5711] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 263.142332][T17358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5104'. [ 263.393704][ T5711] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 263.648331][T17385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5117'. [ 263.648598][T17385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5117'. [ 263.762736][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5121'. [ 263.827493][T17398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5123'. [ 265.409197][T17425] syzkaller0: entered promiscuous mode [ 265.409213][T17425] syzkaller0: entered allmulticast mode [ 265.417186][T17426] tipc: Enabled bearer , priority 0 [ 265.418734][T17429] tipc: Resetting bearer [ 265.460993][T17436] netlink: 'syz.2.5139': attribute type 1 has an invalid length. [ 265.643831][T17453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5146'. [ 265.843705][T17469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5150'. [ 265.848716][T17471] bridge_slave_0: left allmulticast mode [ 265.848731][T17471] bridge_slave_0: left promiscuous mode [ 265.848830][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.852427][T17471] bridge_slave_1: left allmulticast mode [ 265.852442][T17471] bridge_slave_1: left promiscuous mode [ 265.852606][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.898178][T17471] bond0: (slave 17ÿÿÿ): Releasing backup interface [ 265.919661][T17471] bond0: (slave c@0Ù): Releasing backup interface [ 265.946884][T17471] team0: Port device team_slave_0 removed [ 265.961029][T17471] team0: Port device team_slave_1 removed [ 265.961419][T17471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.961430][T17471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.975066][T17471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.975081][T17471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.991817][T17471] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 266.126507][T10344] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 266.189677][T17487] netlink: 'syz.1.5160': attribute type 30 has an invalid length. [ 266.363409][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 266.905570][T17532] : option downdelay: invalid value (18446744073709547007) [ 266.905586][T17532] : option downdelay: allowed values 0 - 2147483647 [ 266.907078][T17532]  (unregistering): Released all slaves [ 267.162966][T17547] pimreg: entered allmulticast mode [ 267.229361][T17554] Bluetooth: MGMT ver 1.23 [ 267.229380][T17554] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 268.636035][T17590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5204'. [ 268.638321][T17590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5204'. [ 269.010108][T17477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.222667][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5216'. [ 270.265310][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5232'. [ 270.387401][T17663] tap0: tun_chr_ioctl cmd 1074025677 [ 270.387469][T17663] tap0: linktype set to 774 [ 270.986931][T17705] netlink: 'syz.1.5254': attribute type 32 has an invalid length. [ 270.986943][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5254'. [ 270.986956][T17705] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 271.139417][T17716] syzkaller0: left promiscuous mode [ 271.139434][T17716] syzkaller0: left allmulticast mode [ 272.354510][ T55] Bluetooth: hci0: command tx timeout [ 272.772605][T17803] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5290'. [ 272.858375][T17786] syzkaller1: entered promiscuous mode [ 272.858389][T17786] syzkaller1: entered allmulticast mode [ 273.129150][T17829] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5300'. [ 273.129167][T17829] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5300'. [ 273.171320][ T55] Bluetooth: hci0: ISO packet for unknown connection handle 3684 [ 273.353210][T17857] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 273.966345][ T29] IPVS: starting estimator thread 0... [ 273.978332][T17903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.978692][T17903] bridge0: port 1(bond1) entered blocking state [ 273.978773][T17903] bridge0: port 1(bond1) entered disabled state [ 273.978879][T17903] bond1: entered allmulticast mode [ 273.980059][T17903] bond1: entered promiscuous mode [ 273.981283][T17903] bridge0: port 1(bond1) entered blocking state [ 273.981380][T17903] bridge0: port 1(bond1) entered forwarding state [ 273.985384][ T29] bridge0: port 1(bond1) entered disabled state [ 274.053372][T17904] IPVS: using max 83 ests per chain, 199200 per kthread [ 274.353536][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 275.582436][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5354'. [ 275.642167][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5355'. [ 278.324085][T17992] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5367'. [ 278.500551][T18001] sctp: [Deprecated]: syz.2.5371 (pid 18001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.500551][T18001] Use struct sctp_sack_info instead [ 278.704036][T18014] netlink: 'syz.1.5376': attribute type 10 has an invalid length. [ 278.709833][T18014] bond11: (slave veth0_to_bond): Releasing backup interface [ 278.709847][T18014] bond11: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 278.759662][T18022] syzkaller1: entered promiscuous mode [ 278.759674][T18022] syzkaller1: entered allmulticast mode [ 278.858460][T18027] veth1_vlan: left promiscuous mode [ 278.867658][T18027] veth1_vlan: entered promiscuous mode [ 278.872232][T18027] veth1_macvtap: left promiscuous mode [ 278.872787][T18027] veth0_macvtap: left promiscuous mode [ 278.877410][T18027] veth0_macvtap: entered promiscuous mode [ 278.881986][T18027] veth1_macvtap: entered promiscuous mode [ 278.898041][T18027] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.900262][T18027] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.901851][T18027] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.902356][T18027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.910412][T18027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.911221][T18027] bridge0: port 1(vlan5) entered blocking state [ 278.911270][T18027] bridge0: port 1(vlan5) entered forwarding state [ 278.920073][T18027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.920904][T18027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.927250][T18027] batman_adv: batadv0: Interface activated: ip6gretap1 [ 278.928245][T18027] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.940206][T18027] batman_adv: batadv0: Interface activated: macvtap1 [ 278.968580][T18027] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.977441][T18027] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.980122][T18027] erspan0: entered promiscuous mode [ 278.982659][T18027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.984013][T18027] bridge0: port 2(vlan4) entered blocking state [ 278.984069][T18027] bridge0: port 2(vlan4) entered forwarding state [ 278.989490][T18027] 8021q: adding VLAN 0 to HW filter on device bond9 [ 278.990005][T18027] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 278.990556][T18027] 8021q: adding VLAN 0 to HW filter on device bond10 [ 279.016485][T18035] netlink: 'syz.3.5385': attribute type 1 has an invalid length. [ 279.036848][T18035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.038536][T18032] netlink: 'syz.2.5383': attribute type 3 has an invalid length. [ 279.038649][T18032] netlink: 'syz.2.5383': attribute type 3 has an invalid length. [ 279.063457][ T5650] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.063477][ T5650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.079321][T18034] bond2: (slave erspan1): making interface the new active one [ 279.080181][T18034] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 279.108045][ T5650] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.108064][ T5650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.108088][ T5650] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.108097][ T5650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.134380][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 279.245009][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 279.328756][T18041] syzkaller1: entered promiscuous mode [ 279.328771][T18041] syzkaller1: entered allmulticast mode [ 279.330501][T18041] 0: reclassify loop, rule prio 0, protocol 03 [ 279.373419][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 279.432068][T18043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5388'. [ 279.485766][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 279.593844][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 279.703607][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 279.813635][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 279.923548][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 279.924947][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5401'. [ 280.035033][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 281.146176][T18106] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5413'. [ 281.146891][T18106] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5413'. [ 281.331503][T18134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5420'. [ 281.344113][T18134] ipvlan1: entered promiscuous mode [ 281.346562][T18134] ipvlan1: left promiscuous mode [ 282.578850][T18055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.218786][T18225] v: renamed from veth0_vlan (while UP) [ 283.220550][T18228] netlink: 'syz.2.5458': attribute type 3 has an invalid length. [ 283.421347][T18245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5468'. [ 283.421361][T18245] tipc: Invalid UDP bearer configuration [ 283.421381][T18245] tipc: Enabling of bearer rejected, failed to enable media [ 283.495979][T18255] xt_limit: Overflow, try lower: 6/2147483648 [ 283.522474][T18258] netlink: 'syz.3.5475': attribute type 14 has an invalid length. [ 283.522485][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5475'. [ 283.522496][T18258] bond0: option xmit_hash_policy: invalid value (10) [ 283.679036][T18280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5484'. [ 283.686163][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5484'. [ 283.723475][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5487'. [ 283.723489][T18282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5487'. [ 283.782487][T18288] veth1: Caught tx_queue_len zero misconfig [ 284.163399][T10344] net_ratelimit: 36 callbacks suppressed [ 284.163411][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 284.454404][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 284.500094][T18346] netlink: 'syz.3.5509': attribute type 4 has an invalid length. [ 284.500108][T18346] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5509'. [ 284.564135][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 284.674293][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 284.715280][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5517'. [ 284.717265][T18369] netlink: 'syz.1.5516': attribute type 4 has an invalid length. [ 284.770735][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5519'. [ 284.770756][T18375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.785134][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 284.893865][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 285.005992][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 285.066432][T18400] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5531'. [ 285.103756][T18402] batadv_slave_1: entered promiscuous mode [ 285.113803][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 285.223525][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 285.681504][T18455] batadv0: entered promiscuous mode [ 285.683164][T18455] macvtap2: entered promiscuous mode [ 285.688145][T18455] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 285.689521][T18455] batadv0: left promiscuous mode [ 286.153088][T18486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.699312][T18516] syzkaller0: entered promiscuous mode [ 286.699325][T18516] syzkaller0: entered allmulticast mode [ 287.066225][T18540] smc: removing ib device sy [ 287.207692][T18540] smbdirect: ib_dev[sy] removed [ 287.532310][T18554] syzkaller0: entered promiscuous mode [ 287.532334][T18554] syzkaller0: entered allmulticast mode [ 287.536108][ T12] syzkaller0: tun_net_xmit 48 [ 287.541227][T18558] syzkaller0: tun_net_xmit 1 [ 287.659836][T18560] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 289.086626][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.407811][T18584] __nla_validate_parse: 5 callbacks suppressed [ 289.407827][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5614'. [ 289.713163][T18584] hsr_slave_1 (unregistering): left promiscuous mode [ 289.773591][ T12] net_ratelimit: 20 callbacks suppressed [ 289.773612][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 289.863599][T18596] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 289.883775][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 289.972110][T18603] netlink: 'syz.2.5621': attribute type 4 has an invalid length. [ 289.993509][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 290.026652][T18606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5622'. [ 290.114598][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 290.140146][T18614] ip_tables: iptables: counters copy to user failed while replacing table [ 290.171883][T18616] syzkaller0: entered promiscuous mode [ 290.171894][T18616] syzkaller0: entered allmulticast mode [ 290.182519][T18616] tipc: Enabled bearer , priority 0 [ 290.186404][T18615] tipc: Resetting bearer [ 290.212636][T18615] tipc: Disabling bearer [ 290.224745][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 290.227191][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5628'. [ 290.230614][T18618] vlan2: entered promiscuous mode [ 290.230626][T18618] batadv0: entered promiscuous mode [ 290.274488][ T4993] Bluetooth: hci0: command 0x0405 tx timeout [ 290.344800][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 290.398757][T18624] ip_tables: iptables: counters copy to user failed while replacing table [ 290.447102][T18628] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5633'. [ 290.447254][T18628] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5633'. [ 290.465787][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 290.573553][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 291.210627][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'. [ 291.845670][T18705] netlink: 'syz.2.5669': attribute type 10 has an invalid length. [ 291.949489][T18712] bond11: entered allmulticast mode [ 291.955842][T18712] macvlan5: entered promiscuous mode [ 291.955854][T18712] macvlan5: entered allmulticast mode [ 291.956382][T18712] bond11: entered promiscuous mode [ 291.956739][T18712] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 291.967006][T18712] bond11: left promiscuous mode [ 292.468263][T18730] tipc: Enabled bearer , priority 10 [ 292.478473][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5682'. [ 292.848389][T18759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5695'. [ 293.073636][T18772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5700'. [ 294.592438][T18833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5727'. [ 294.637340][T18838] tipc: Can't bind to reserved service type 0 [ 294.769526][T18844] syzkaller0: entered promiscuous mode [ 294.769547][T18844] syzkaller0: entered allmulticast mode [ 294.823658][ T5650] net_ratelimit: 39 callbacks suppressed [ 294.825029][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 294.933593][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 295.063764][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 295.173521][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 295.202882][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5745'. [ 295.283875][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 295.395105][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 295.503409][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 295.614247][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 295.633109][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5752'. [ 295.633127][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5752'. [ 295.667257][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 295.702764][T18891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.733744][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 295.843641][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 295.933966][T18920] syzkaller0: entered promiscuous mode [ 295.933977][T18920] syzkaller0: entered allmulticast mode [ 295.936696][T18920] tipc: Enabled bearer , priority 0 [ 295.937661][T18919] tipc: Resetting bearer [ 295.964780][T18919] tipc: Disabling bearer [ 296.890533][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5794'. [ 296.953332][T18991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.011969][T18991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.816006][ T35] audit: type=1800 audit(1792157349.750:6): pid=19021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5809" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9740 res=0 errno=0 [ 297.889901][T19027] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5811'. [ 298.055848][T19038] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 298.443823][T19052] netlink: 'syz.1.5819': attribute type 4 has an invalid length. [ 299.844312][T19114] netlink: 'syz.1.5846': attribute type 2 has an invalid length. [ 299.844333][T19114] netlink: 'syz.1.5846': attribute type 2 has an invalid length. [ 299.927366][ T5650] net_ratelimit: 36 callbacks suppressed [ 299.927413][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 300.040704][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 300.154567][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 300.207649][T19116] netlink: Unknown conntrack attr (0) [ 300.283632][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 300.393449][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 300.504128][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 300.615363][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 300.717797][T19147] sctp: [Deprecated]: syz.2.5862 (pid 19147) Use of int in max_burst socket option. [ 300.717797][T19147] Use struct sctp_assoc_value instead [ 300.724944][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 300.835093][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 300.836151][T19148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5863'. [ 300.846613][T19148] vxcan0: entered allmulticast mode [ 301.226089][T19186] syzkaller0: entered promiscuous mode [ 301.226108][T19186] syzkaller0: entered allmulticast mode [ 301.343577][T19193] netlink: 67 bytes leftover after parsing attributes in process `syz.3.5885'. [ 301.426858][T19193] v: left promiscuous mode [ 301.433764][T19193] v: entered promiscuous mode [ 301.499497][T19193] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 302.085699][T19237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5900'. [ 302.304321][T19241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5898'. [ 302.831488][T19261] netlink: 'syz.3.5908': attribute type 1 has an invalid length. [ 302.867255][T19261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.899317][T19261] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 303.317635][T19288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5921'. [ 303.320540][T19288] netlink: 'syz.2.5921': attribute type 1 has an invalid length. [ 303.409891][T19292] bridge0: port 3(veth0) entered blocking state [ 303.410682][T19292] bridge0: port 3(veth0) entered disabled state [ 303.410808][T19292] veth0: entered allmulticast mode [ 303.417311][T19292] veth0: entered promiscuous mode [ 303.417775][T19292] bridge0: port 3(veth0) entered blocking state [ 303.417851][T19292] bridge0: port 3(veth0) entered forwarding state [ 303.558093][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5925'. [ 303.671207][T19303] tipc: Enabling of bearer rejected, failed to enable media [ 303.917103][T19318] No such timeout policy "syz0" [ 303.926875][T19319] x_tables: unsorted entry at hook 3 [ 304.382188][T19349] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5945'. [ 304.983483][T10344] net_ratelimit: 38 callbacks suppressed [ 304.983503][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 305.093961][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 305.203861][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 305.317587][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 305.354140][T19401] netlink: 'syz.2.5973': attribute type 361 has an invalid length. [ 305.433575][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 305.527362][T19411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5977'. [ 305.543613][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 305.653718][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 305.763565][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 305.778510][T19419] lo: MTU too low for tipc bearer [ 305.778540][T19419] tipc: Enabling of bearer rejected, failed to enable media [ 305.866955][T19421] netlink: 'syz.3.5983': attribute type 3 has an invalid length. [ 305.874236][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 305.983647][ T13] bond9: (slave macvlan3): failed to get link speed/duplex [ 306.285797][T19434] xt_TPROXY: Can be used only with -p tcp or -p udp [ 306.518780][T19451] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5998'. [ 306.528311][T19451] syzkaller1: entered promiscuous mode [ 306.528322][T19451] syzkaller1: entered allmulticast mode [ 306.630517][ T35] audit: type=1804 audit(1792157358.560:7): pid=19456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6000" name="cgroup.controllers" dev="tmpfs" ino=10070 res=1 errno=0 [ 306.632225][ T35] audit: type=1800 audit(1792157358.560:8): pid=19456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6000" name="cgroup.controllers" dev="tmpfs" ino=10070 res=0 errno=0 [ 306.862789][T19470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6007'. [ 306.862823][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6007'. [ 306.862829][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6007'. [ 306.862857][T19470] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6007'. [ 306.862863][T19470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6007'. [ 307.064764][T19478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6011'. [ 307.622555][T19482] macsec1: entered promiscuous mode [ 308.092953][T19508] netlink: 'syz.2.6026': attribute type 66 has an invalid length. [ 308.602684][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6041'. [ 308.602700][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6041'. [ 309.327123][T19597] IPv6: NLM_F_REPLACE set, but no existing node found! [ 309.332599][T19599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6067'. [ 309.559151][T19618] RDS: rds_bind could not find a transport for 0:0:5d00::, load rds_tcp or rds_rdma? [ 310.033822][ T12] net_ratelimit: 34 callbacks suppressed [ 310.033836][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 310.065624][T19655] veth9: entered allmulticast mode [ 310.092563][T19660] openvswitch: netlink: Key type 4128 is out of range max 32 [ 310.143494][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 310.253639][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 310.363475][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 310.473547][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 310.498185][T19696] netlink: 'syz.1.6112': attribute type 1 has an invalid length. [ 310.588270][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 310.694717][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 310.803530][T10344] bond9: (slave macvlan3): failed to get link speed/duplex [ 310.914042][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 311.683073][T19792] netlink: 'syz.2.6153': attribute type 15 has an invalid length. [ 311.724350][T19794] __nla_validate_parse: 2 callbacks suppressed [ 311.724363][T19794] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6154'. [ 313.982528][T19732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.114607][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6167'. [ 314.736842][T19865] tun0: tun_chr_ioctl cmd 1074025675 [ 314.736854][T19865] tun0: persist enabled [ 314.738668][T19865] tun0: tun_chr_ioctl cmd 1074025675 [ 314.738676][T19865] tun0: persist enabled [ 315.012918][T19883] netlink: 'syz.2.6195': attribute type 2 has an invalid length. [ 315.012947][T19883] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6195'. [ 315.065492][ T5650] net_ratelimit: 38 callbacks suppressed [ 315.065513][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 315.234482][T19755] bond9: (slave macvlan3): failed to get link speed/duplex [ 315.354318][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 315.463605][T19755] bond9: (slave macvlan3): failed to get link speed/duplex [ 315.584673][ T12] bond9: (slave macvlan3): failed to get link speed/duplex [ 315.703573][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 315.723173][T19931] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6216'. [ 315.723192][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6216'. [ 315.813635][T19755] bond9: (slave macvlan3): failed to get link speed/duplex [ 315.923689][T19755] bond9: (slave macvlan3): failed to get link speed/duplex [ 316.033665][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 316.147523][ T5650] bond9: (slave macvlan3): failed to get link speed/duplex [ 316.196126][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6225'. [ 316.196187][T19957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6225'. [ 316.205848][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6225'. [ 316.206015][T19957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6225'. [ 316.522094][T19965] syzkaller0: entered promiscuous mode [ 316.522112][T19965] syzkaller0: entered allmulticast mode [ 316.640995][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6230'. [ 316.681009][T19968] tipc: Resetting bearer [ 316.701288][T19968] tipc: Resetting bearer [ 316.701533][T19968] tipc: Resetting bearer [ 317.236655][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 318.468479][T19921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.064213][T19990] 8021q: adding VLAN 0 to HW filter on device bond12 [ 319.065506][T19990] team0: Port device bond12 added [ 319.117778][T19995] netlink: 'syz.2.6242': attribute type 17 has an invalid length. [ 319.117789][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6242'. [ 319.117802][T19995] bond0: option all_slaves_active: invalid value (10) [ 319.292136][T20009] netlink: 'syz.2.6249': attribute type 2 has an invalid length. [ 319.292154][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6249'. [ 319.340562][T20011] netlink: 'syz.2.6250': attribute type 6 has an invalid length. [ 319.621038][T20024] x_tables: duplicate underflow at hook 2 [ 319.714963][T20031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6257'. [ 319.942407][ T5452] ------------[ cut here ]------------ [ 319.942420][ T5452] conntrack cleanup blocked for 60s [ 319.942425][ T5452] WARNING: net/netfilter/nf_conntrack_core.c:2504 at nf_conntrack_cleanup_net_list+0x21f/0x360, CPU#0: kworker/u8:2/5452 [ 319.954275][ T5452] Modules linked in: [ 319.956260][ T5452] CPU: 0 UID: 0 PID: 5452 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 319.960391][ T5452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 319.964698][ T5452] Workqueue: netns cleanup_net [ 319.966819][ T5452] RIP: 0010:nf_conntrack_cleanup_net_list+0x21f/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 319.969607][ T5452] Code: 4c 89 ef e8 63 bd 37 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 f5 eb c6 f7 45 31 e4 e9 a5 fe ff ff e8 e8 eb c6 f7 48 8d 3d 41 56 88 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 319.978103][ T5452] RSP: 0018:ffffc9000408f8b0 EFLAGS: 00010293 [ 319.980708][ T5452] RAX: ffffffff8a011228 RBX: dffffc0000000000 RCX: ffff8881001c0000 [ 319.984129][ T5452] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff91896870 [ 319.987344][ T5452] RBP: 0000000000000001 R08: ffff888171dfd003 R09: 1ffff1102e3bfa00 [ 319.991126][ T5452] R10: dffffc0000000000 R11: ffffed102e3bfa01 R12: 000000010000070d [ 319.994572][ T5452] R13: ffffc9000408fa50 R14: ffffc9000408fa50 R15: 000000010000070e [ 319.997883][ T5452] FS: 0000000000000000(0000) GS:ffff88818c4d4000(0000) knlGS:0000000000000000 [ 320.001394][ T5452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.004234][ T5452] CR2: 00007fccbba27dac CR3: 0000000173b7a000 CR4: 00000000000006f0 [ 320.007460][ T5452] Call Trace: [ 320.008801][ T5452] [ 320.010014][ T5452] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 320.012518][ T5452] ops_undo_list+0x4b4/0x8d0 [ 320.014669][ T5452] ? __pfx_ops_undo_list+0x10/0x10 [ 320.016753][ T5452] ? idr_destroy+0x227/0x290 [ 320.018729][ T5452] cleanup_net+0x572/0x810 [ 320.020578][ T5452] ? __pfx_cleanup_net+0x10/0x10 [ 320.022596][ T5452] ? rcu_is_watching+0x16/0xb0 [ 320.024709][ T5452] ? process_scheduled_works+0x97a/0x1630 [ 320.027043][ T5452] process_scheduled_works+0xc3d/0x1630 [ 320.029395][ T5452] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.031878][ T5452] ? assign_work+0x3cf/0x5d0 [ 320.033988][ T5452] worker_thread+0xa47/0xfb0 [ 320.035932][ T5452] kthread+0x38b/0x480 [ 320.037627][ T5452] ? __pfx_worker_thread+0x10/0x10 [ 320.039747][ T5452] ? __pfx_kthread+0x10/0x10 [ 320.041679][ T5452] ret_from_fork+0x514/0xb70 [ 320.043746][ T5452] ? __pfx_ret_from_fork+0x10/0x10 [ 320.045870][ T5452] ? __switch_to+0xc89/0x1420 [ 320.047755][ T5452] ? __pfx_kthread+0x10/0x10 [ 320.049658][ T5452] ret_from_fork_asm+0x1a/0x30 [ 320.051652][ T5452] [ 320.052891][ T5452] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.055819][ T5452] CPU: 0 UID: 0 PID: 5452 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 320.059662][ T5452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 320.063776][ T5452] Workqueue: netns cleanup_net [ 320.065714][ T5452] Call Trace: [ 320.067101][ T5452] [ 320.068296][ T5452] vpanic+0x56d/0xa60 [ 320.069876][ T5452] ? __pfx__printk+0x10/0x10 [ 320.071802][ T5452] ? __pfx_vpanic+0x10/0x10 [ 320.073629][ T5452] ? is_bpf_text_address+0x292/0x2b0 [ 320.075784][ T5452] ? is_bpf_text_address+0x26/0x2b0 [ 320.077920][ T5452] panic+0xc5/0xd0 [ 320.079382][ T5452] ? __pfx_panic+0x10/0x10 [ 320.080815][ T5452] ? ret_from_fork_asm+0x1a/0x30 [ 320.082439][ T5452] __warn+0x315/0x4c0 [ 320.083756][ T5452] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 320.085918][ T5452] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 320.088386][ T5452] __report_bug+0x276/0x570 [ 320.090268][ T5452] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 320.092656][ T5452] ? __pfx___report_bug+0x10/0x10 [ 320.094633][ T5452] ? nf_conntrack_cleanup_net_list+0x136/0x360 [ 320.097059][ T5452] report_bug_entry+0x19b/0x290 [ 320.099051][ T5452] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 320.101516][ T5452] ? nf_conntrack_cleanup_net_list+0x224/0x360 [ 320.103740][ T5452] handle_bug+0xce/0x200 [ 320.105132][ T5452] exc_invalid_op+0x1a/0x50 [ 320.106835][ T5452] asm_exc_invalid_op+0x1a/0x20 [ 320.108427][ T5452] RIP: 0010:nf_conntrack_cleanup_net_list+0x21f/0x360 [ 320.110995][ T5452] Code: 4c 89 ef e8 63 bd 37 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 f5 eb c6 f7 45 31 e4 e9 a5 fe ff ff e8 e8 eb c6 f7 48 8d 3d 41 56 88 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 320.118880][ T5452] RSP: 0018:ffffc9000408f8b0 EFLAGS: 00010293 [ 320.121365][ T5452] RAX: ffffffff8a011228 RBX: dffffc0000000000 RCX: ffff8881001c0000 [ 320.124573][ T5452] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff91896870 [ 320.127778][ T5452] RBP: 0000000000000001 R08: ffff888171dfd003 R09: 1ffff1102e3bfa00 [ 320.130983][ T5452] R10: dffffc0000000000 R11: ffffed102e3bfa01 R12: 000000010000070d [ 320.134222][ T5452] R13: ffffc9000408fa50 R14: ffffc9000408fa50 R15: 000000010000070e [ 320.137450][ T5452] ? nf_conntrack_cleanup_net_list+0x218/0x360 [ 320.140064][ T5452] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 320.142654][ T5452] ops_undo_list+0x4b4/0x8d0 [ 320.144589][ T5452] ? __pfx_ops_undo_list+0x10/0x10 [ 320.146527][ T5452] ? idr_destroy+0x227/0x290 [ 320.148138][ T5452] cleanup_net+0x572/0x810 [ 320.149709][ T5452] ? __pfx_cleanup_net+0x10/0x10 [ 320.151647][ T5452] ? rcu_is_watching+0x16/0xb0 [ 320.153578][ T5452] ? process_scheduled_works+0x97a/0x1630 [ 320.155960][ T5452] process_scheduled_works+0xc3d/0x1630 [ 320.158205][ T5452] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.160580][ T5452] ? assign_work+0x3cf/0x5d0 [ 320.162572][ T5452] worker_thread+0xa47/0xfb0 [ 320.164517][ T5452] kthread+0x38b/0x480 [ 320.166299][ T5452] ? __pfx_worker_thread+0x10/0x10 [ 320.168396][ T5452] ? __pfx_kthread+0x10/0x10 [ 320.170443][ T5452] ret_from_fork+0x514/0xb70 [ 320.172381][ T5452] ? __pfx_ret_from_fork+0x10/0x10 [ 320.174459][ T5452] ? __switch_to+0xc89/0x1420 [ 320.176410][ T5452] ? __pfx_kthread+0x10/0x10 [ 320.178264][ T5452] ret_from_fork_asm+0x1a/0x30 [ 320.180195][ T5452] [ 320.182229][ T5452] Kernel Offset: disabled [ 320.184022][ T5452] Rebooting in 86400 seconds..