last executing test programs: 3m43.509058815s ago: executing program 0 (id=1932): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000240)="e1", 0x1, 0x7fffffffffffffff) 3m43.400089671s ago: executing program 0 (id=1934): r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000037c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x10001}}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc4}}], 0x3, 0x40000) 3m43.23932068s ago: executing program 0 (id=1938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) 3m43.059436649s ago: executing program 0 (id=1941): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 3m42.81193599s ago: executing program 0 (id=1945): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="780000001c00b5f52abd7000fedbdf2502000000", @ANYRES32=r0, @ANYBLOB="0000050308000b003f78e60008000a000000000008000f0001000000080001"], 0x78}}, 0x0) 3m42.513166081s ago: executing program 0 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 3m27.503502485s ago: executing program 32 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m41.161027808s ago: executing program 2 (id=3681): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 2m41.03861327s ago: executing program 2 (id=3685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m40.828158222s ago: executing program 2 (id=3692): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001380)=@ethtool_cmd={0xa, 0x8, 0x57f959ea, 0x8, 0x6, 0x3, 0xc0, 0x4, 0xca, 0x2, 0x0, 0x4, 0x3, 0x3, 0x7, 0x8, [0x8, 0x34]}}) 2m40.711683284s ago: executing program 2 (id=3697): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) 2m40.63706646s ago: executing program 2 (id=3699): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) 2m40.520877371s ago: executing program 2 (id=3703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m30.758144533s ago: executing program 3 (id=3989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) 2m30.532761832s ago: executing program 3 (id=3995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) 2m30.473993446s ago: executing program 3 (id=3999): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 2m30.35982671s ago: executing program 3 (id=4002): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000003040)=[{}], 0x1, 0x3) 2m30.217236146s ago: executing program 3 (id=4006): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) 2m30.060277669s ago: executing program 3 (id=4010): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m25.471960949s ago: executing program 33 (id=3703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m14.986650625s ago: executing program 34 (id=4010): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 1.631656209s ago: executing program 5 (id=7740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e", 0x60}, {&(0x7f0000000680)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9741bbefa08e31c991acb6c96a9b97d507ab4d9d9c6f66e11a31e528df5570aa43e0275fae14ceeaed60847c23360b0ee4ac087abc7def3979bd64d3745f8dfa3ca", 0xb0}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x44854) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000500)=""/184, 0xb8}], 0x2}, 0x0) 1.526011584s ago: executing program 7 (id=7743): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 1.476744773s ago: executing program 5 (id=7745): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.351730618s ago: executing program 7 (id=7748): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.351038255s ago: executing program 5 (id=7749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x200, 0x22, 0x200, 0x70bd29, 0x25dfdbfe, {0xd}, [@nested={0x1ec, 0x2d, 0x0, 0x1, [@nested={0x1e8, 0x109, 0x0, 0x1, [@nested={0x1e4, 0xad, 0x0, 0x1, [@nested={0x1de, 0x22, 0x0, 0x1, [@nested={0x34, 0xd9, 0x0, 0x1, [@nested={0x2d, 0x62, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @uid}, @generic="897c745520d9647943d8b27fd70dc991363f1cd864fffcbee3e2752c94ed6039d3"]}]}, @nested={0xd5, 0xcf, 0x0, 0x1, [@generic="a0356d3c8747a87afafdc9d91377ec09c910d0074f9ffb9acac333dbe3cfa9", @generic="c777210b0078fc01df8a5fd3a6dd3083c04eed80115274e7d70b9e2c7ee5f3b4dcaa22ec719f3910af68e86b62f970c044eacfbd84bdf222b71fb36905ae846b1a4c9d13c7e584a01f91417e0d6fd6896dbde0d08b94f7c27921c3235277cab1783b5a5eb03c25d2d42ad42c039e3a72309e95d9105db6e9f82bd4d6bdb535c060105f9ba964549635480b415b17ea054204b1e1e3988abc2fc75a70bbfc3402141e4b6a7f992f0a0d86", @typed={0x8, 0x5f, 0x0, 0x0, @uid}]}, @generic="e07242642b359c12ea3ee8a49b2dd3716b8215c57306eb0408298cbf76f72c3ceed1854a5e7cfdf3eeb0a147728c497e1752800b2d01f4ee71d3af0f1a766499181cf41d80a2dfed03859ec4c928d8e9ec1c49f6f5ab2dc7cb53806361eb3a25bf7051822e21568060e91d4ae8923eb22443424fefa6032ef169d452f1b8fe88dabc941155b9cce77a8486ec455bf7471ea743b58da27f9119cc0c74cc95a10ae0ea8350de18c251ca3814c5aef5bfe74a112ccef109cb2497ad9d842accd0f3af1829cb90bc04aa672577b8bb82"]}]}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40800}, 0x40086) 1.228254029s ago: executing program 7 (id=7752): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/216, 0xd8}], 0x1}, 0x2) 1.165141595s ago: executing program 4 (id=7754): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r1, 0x2) 1.147847562s ago: executing program 7 (id=7755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) 1.140093945s ago: executing program 4 (id=7756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 969.068942ms ago: executing program 6 (id=7758): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88035b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 817.462587ms ago: executing program 6 (id=7762): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 756.993683ms ago: executing program 7 (id=7763): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060"], 0xfce) 746.885805ms ago: executing program 4 (id=7764): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 644.350933ms ago: executing program 1 (id=7765): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x100, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 643.421311ms ago: executing program 4 (id=7766): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4040) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 631.139572ms ago: executing program 6 (id=7767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x1fcf}}, 0x0, 0x0, 0x3f, 0x0, "34b4cd04032119e5b9358ab008d64d23d37d0684330b9822d52059f471d511c3730f4ee62103b8782c561daf37d3b4c7c540a693f71a75782f24ebaf48637f6026d20b578d4f9799d13ceafef728cf68"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 525.002778ms ago: executing program 4 (id=7768): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 524.702684ms ago: executing program 6 (id=7769): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10001, 0x0, 0x0) 501.606885ms ago: executing program 4 (id=7770): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x4044814) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@loopback, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 499.875413ms ago: executing program 1 (id=7771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) close(0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 468.450955ms ago: executing program 7 (id=7772): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) write$cgroup_subtree(r2, 0x0, 0x10448) 396.158408ms ago: executing program 6 (id=7773): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) 372.169513ms ago: executing program 5 (id=7774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 348.438674ms ago: executing program 1 (id=7775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc66, 0x8, 0x2}, {0x4, 0x5, 0x3}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20049090}, 0x0) 269.563768ms ago: executing program 5 (id=7776): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) 259.618657ms ago: executing program 6 (id=7777): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 185.044693ms ago: executing program 1 (id=7778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 130.626663ms ago: executing program 1 (id=7779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 28.36463ms ago: executing program 5 (id=7780): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl(r0, 0x8b29, &(0x7f0000000040)) 0s ago: executing program 1 (id=7781): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x10}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x10) kernel console output (not intermixed with test programs): 008] veth1_vlan: entered promiscuous mode [ 172.503101][T11288] delete_channel: no stack [ 172.518598][T11284] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 172.537536][T11284] bond2 (unregistering): Released all slaves [ 172.705646][T11008] veth0_macvtap: entered promiscuous mode [ 172.725180][T11008] veth1_macvtap: entered promiscuous mode [ 172.791710][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.814794][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.922112][ T5926] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.939744][ T5926] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.008391][ T5926] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.030145][ T5926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.242385][ T5926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.250242][ T5926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.349645][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.375854][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.831929][ T5826] Bluetooth: hci5: command tx timeout [ 173.938081][T11361] netlink: 'syz.5.2498': attribute type 4 has an invalid length. [ 173.966541][T11363] netlink: 'syz.2.2499': attribute type 8 has an invalid length. [ 174.016020][T11366] netlink: 'syz.1.2502': attribute type 4 has an invalid length. [ 174.337108][T11386] x_tables: duplicate entry at hook 3 [ 174.525223][T11390] bond4: option all_slaves_active: invalid value (222) [ 174.566538][T11390] bond4 (unregistering): Released all slaves [ 174.884985][T11416] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2528'. [ 174.921264][T11416] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 174.963083][T11416] 0ªî{X¹¦: entered allmulticast mode [ 174.969001][T11416] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 175.004150][T11423] netlink: 'syz.5.2530': attribute type 2 has an invalid length. [ 175.016230][T11423] netlink: 'syz.5.2530': attribute type 1 has an invalid length. [ 175.318270][T11443] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2539'. [ 175.382452][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 175.551198][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2545'. [ 175.916402][ T5826] Bluetooth: hci5: command tx timeout [ 176.106393][T11491] netlink: get zone limit has 4 unknown bytes [ 176.629763][T11523] netlink: 'syz.4.2579': attribute type 1 has an invalid length. [ 176.661121][T11523] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2579'. [ 177.536432][T11577] netlink: 'syz.1.2604': attribute type 7 has an invalid length. [ 177.764715][T11590] x_tables: duplicate underflow at hook 2 [ 177.836283][T11560] infiniband : set down [ 177.854053][T11594] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 177.854092][T11560] infiniband : added ipvlan0 [ 177.881275][T11594] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 177.990185][T11560] RDS/IB: : added [ 178.000356][T11560] smc: adding ib device  with port count 1 [ 178.008017][T11560] smc: ib device  port 1 has no pnetid [ 178.557101][T11628] netlink: 'syz.4.2630': attribute type 21 has an invalid length. [ 178.573212][T11628] netlink: 'syz.4.2630': attribute type 6 has an invalid length. [ 178.597091][T11628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2630'. [ 178.921718][T11647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.505182][T11675] nftables ruleset with unbound set [ 179.608064][T11679] xt_hashlimit: max too large, truncated to 1048576 [ 180.199559][T11704] netlink: 'syz.3.2668': attribute type 1 has an invalid length. [ 180.209627][T11704] netlink: 'syz.3.2668': attribute type 2 has an invalid length. [ 180.352249][T11713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.662087][T11764] xt_policy: output policy not valid in PREROUTING and INPUT [ 182.200348][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2706'. [ 182.227868][T11785] geneve2: entered promiscuous mode [ 182.955660][T11822] IPv6: sit1: Disabled Multicast RS [ 182.989963][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2722'. [ 182.992056][T11822] sit1: entered allmulticast mode [ 183.631985][T11864] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 183.677000][T11864] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 183.708142][T11864] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 184.098227][T11895] netlink: 'syz.1.2758': attribute type 1 has an invalid length. [ 184.109571][T11895] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.2758'. [ 184.266925][T11905] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.270403][T11903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2764'. [ 184.440154][T11915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2769'. [ 184.514331][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2770'. [ 185.832082][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2811'. [ 186.493776][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2826'. [ 186.898133][T12060] netlink: 'syz.1.2841': attribute type 21 has an invalid length. [ 186.951507][T12064] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 187.025134][T12070] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.101241][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'. [ 187.564430][T12100] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 187.801600][T12115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.834033][T12119] netlink: 'syz.3.2867': attribute type 10 has an invalid length. [ 188.083776][T12135] netlink: 'syz.3.2875': attribute type 61 has an invalid length. [ 188.101846][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2875'. [ 188.131287][T12136] netlink: 'syz.2.2874': attribute type 9 has an invalid length. [ 188.139052][T12136] netlink: 'syz.2.2874': attribute type 6 has an invalid length. [ 188.367300][T12153] netlink: 'syz.4.2885': attribute type 2 has an invalid length. [ 188.393587][T12153] netlink: 'syz.4.2885': attribute type 8 has an invalid length. [ 188.401651][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2884'. [ 188.433203][T12153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2885'. [ 188.608338][T12168] netlink: 'syz.3.2892': attribute type 24 has an invalid length. [ 188.737628][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 189.104082][T12198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2906'. [ 189.173462][T12206] netlink: 'syz.5.2910': attribute type 6 has an invalid length. [ 189.192536][T12198] bond1 (unregistering): Released all slaves [ 189.222617][T12203] bond0: entered promiscuous mode [ 189.227690][T12203] bond_slave_0: entered promiscuous mode [ 189.233831][T12203] bond_slave_1: entered promiscuous mode [ 189.381852][T12214] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2914'. [ 189.557184][T12227] openvswitch: netlink: IPv4 tunnel dst address is zero [ 189.720387][T12237] netlink: 'syz.4.2924': attribute type 11 has an invalid length. [ 189.728618][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 189.741288][T12237] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2924'. [ 190.039633][T12260] netlink: 'syz.1.2936': attribute type 10 has an invalid length. [ 190.075983][T12260] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 190.107543][T12260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.137842][T12267] SET target dimension over the limit! [ 190.615949][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2956'. [ 190.886215][T12319] openvswitch: netlink: IP tunnel dst address not specified [ 191.093501][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2972'. [ 191.878968][T12385] ieee802154 phy0 wpan0: encryption failed: -90 [ 191.891401][T12388] ipt_REJECT: ECHOREPLY no longer supported. [ 192.191426][T12407] validate_nla: 1 callbacks suppressed [ 192.191443][T12407] netlink: 'syz.3.3009': attribute type 1 has an invalid length. [ 192.431909][T12422] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 192.468972][T12424] netlink: 'syz.1.3018': attribute type 1 has an invalid length. [ 192.554132][T12430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.881321][T12446] openvswitch: netlink: IP tunnel TTL not specified. [ 193.034120][T12458] netlink: zone id is out of range [ 193.064804][T12458] netlink: get zone limit has 4 unknown bytes [ 193.273281][T12474] netlink: 'syz.2.3043': attribute type 5 has an invalid length. [ 193.290742][T12474] __nla_validate_parse: 8 callbacks suppressed [ 193.290760][T12474] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3043'. [ 193.367491][T12480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3047'. [ 193.480455][T12486] netlink: 'syz.2.3049': attribute type 21 has an invalid length. [ 193.506732][T12486] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.519720][T12490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3051'. [ 193.638965][T12498] lo speed is unknown, defaulting to 1000 [ 193.679216][T12498] lo speed is unknown, defaulting to 1000 [ 193.686367][T12498] lo speed is unknown, defaulting to 1000 [ 193.709539][T12498] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 193.737130][T12498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.766587][T12498] lo speed is unknown, defaulting to 1000 [ 193.785812][T12498] lo speed is unknown, defaulting to 1000 [ 193.798969][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3058'. [ 193.814708][T12498] lo speed is unknown, defaulting to 1000 [ 193.873160][T12506] bond4: option xmit_hash_policy: invalid value (64) [ 193.952990][T12506] bond4 (unregistering): Released all slaves [ 194.022880][T12498] lo speed is unknown, defaulting to 1000 [ 194.031582][T12498] lo speed is unknown, defaulting to 1000 [ 194.039059][T12498] lo speed is unknown, defaulting to 1000 [ 194.251060][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.300599][T12536] xt_cgroup: xt_cgroup: no path or classid specified [ 194.309089][T12535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.681273][T12560] netlink: 'syz.2.3085': attribute type 4 has an invalid length. [ 195.038182][T12584] netlink: 'syz.3.3095': attribute type 10 has an invalid length. [ 195.253194][T12600] netlink: 'syz.2.3104': attribute type 11 has an invalid length. [ 195.291156][T12600] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3104'. [ 195.629954][T12626] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3117'. [ 195.652629][T12626] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3117'. [ 195.685558][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3121'. [ 195.696091][T12630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.016405][T12651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.051208][T12651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.082035][T12651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.089453][T12651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.274041][T12663] : entered promiscuous mode [ 196.281859][T12666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.610971][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3147'. [ 196.751279][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 196.977886][T12708] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 197.063058][T12708] veth0_vlan: left promiscuous mode [ 197.082878][T12708] veth0_vlan: entered promiscuous mode [ 197.105570][T12708] team0: Device veth0_vlan failed to register rx_handler [ 197.501294][T12729] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 197.574499][T12732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.040838][T12764] delete_channel: no stack [ 198.102736][T12758] bond1: option mode: invalid value (133) [ 198.142663][T12758] bond1 (unregistering): Released all slaves [ 198.462606][T12788] __nla_validate_parse: 2 callbacks suppressed [ 198.462626][T12788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3196'. [ 198.487158][T12791] netlink: 'syz.1.3197': attribute type 3 has an invalid length. [ 198.511563][T12791] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3197'. [ 198.546394][T12795] netlink: 'syz.5.3199': attribute type 5 has an invalid length. [ 198.621010][T12797] netlink: 'syz.2.3201': attribute type 12 has an invalid length. [ 199.157315][T12837] netlink: 'syz.3.3220': attribute type 21 has an invalid length. [ 199.175952][T12837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3220'. [ 199.339001][T12849] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 199.415139][T12856] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 200.037142][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3246'. [ 200.115190][T12905] netlink: 'syz.3.3250': attribute type 21 has an invalid length. [ 200.151184][T12905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3250'. [ 200.509507][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'. [ 200.551355][T12932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.738573][T12947] netlink: 'syz.5.3271': attribute type 1 has an invalid length. [ 200.777204][T12947] netlink: 'syz.5.3271': attribute type 2 has an invalid length. [ 200.842498][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 201.050611][T12968] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 201.055980][T12971] netlink: 'syz.3.3283': attribute type 1 has an invalid length. [ 201.076983][T12971] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3283'. [ 201.252542][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3288'. [ 201.463393][T12993] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3294'. [ 201.596824][T13002] openvswitch: netlink: Flow key attr not present in new flow. [ 201.656345][T13007] delete_channel: no stack [ 201.813300][T13017] : entered promiscuous mode [ 202.209715][T13043] xt_l2tp: invalid flags combination: 8 [ 202.315010][T13047] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 202.330922][T13047] bond3 (unregistering): Released all slaves [ 202.707836][T13076] pim6reg: entered allmulticast mode [ 203.678972][T13134] xt_CT: No such helper "syz1" [ 203.889059][T13157] validate_nla: 6 callbacks suppressed [ 203.889076][T13157] netlink: 'syz.3.3370': attribute type 11 has an invalid length. [ 204.031216][T13161] __nla_validate_parse: 7 callbacks suppressed [ 204.031235][T13161] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3374'. [ 204.194400][T13171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.534062][T13193] wlan0 speed is unknown, defaulting to 1000 [ 204.540157][T13193] wlan0 speed is unknown, defaulting to 1000 [ 204.558618][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3391'. [ 204.590420][T13193] wlan0 speed is unknown, defaulting to 1000 [ 204.648853][T13193] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 204.693898][T13201] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3394'. [ 204.757884][T13204] openvswitch: netlink: Message has -2 unknown bytes. [ 204.789449][T13193] wlan0 speed is unknown, defaulting to 1000 [ 204.825126][T13193] wlan0 speed is unknown, defaulting to 1000 [ 204.843949][T13193] wlan0 speed is unknown, defaulting to 1000 [ 204.867756][T13193] wlan0 speed is unknown, defaulting to 1000 [ 204.933089][T13193] wlan0 speed is unknown, defaulting to 1000 [ 204.945811][T13193] wlan0 speed is unknown, defaulting to 1000 [ 205.117395][T13223] netlink: 'syz.4.3404': attribute type 15 has an invalid length. [ 205.137710][T13225] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 205.152300][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3404'. [ 205.593575][T13253] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 205.673236][T13255] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 206.031750][T13279] openvswitch: netlink: Invalid VLAN frame [ 206.039599][T13283] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3435'. [ 206.073446][T13283] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3435'. [ 206.092735][T13283] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3435'. [ 206.183410][T13291] netlink: 'syz.1.3438': attribute type 1 has an invalid length. [ 206.246441][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3438'. [ 206.276606][T13298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3443'. [ 206.432312][T13305] netlink: 'syz.5.3445': attribute type 3 has an invalid length. [ 206.456303][T13305] netlink: 'syz.5.3445': attribute type 1 has an invalid length. [ 206.509951][T13305] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3445'. [ 206.851189][ T5879] IPVS: starting estimator thread 0... [ 206.941179][T13335] IPVS: using max 33 ests per chain, 79200 per kthread [ 207.272311][T13362] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 208.229440][T13426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.974595][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.252326][T13496] __nla_validate_parse: 4 callbacks suppressed [ 209.252346][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3540'. [ 209.281338][T13494] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 209.289108][T13494] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3539'. [ 209.331279][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3539'. [ 209.378975][T13504] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3542'. [ 209.414667][T13504] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3542'. [ 209.693118][T13522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.885966][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'. [ 210.039502][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3560'. [ 210.046909][T13535] delete_channel: no stack [ 210.067134][T13540] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 210.264462][T13549] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 [ 210.738038][T13583] netlink: 'syz.5.3582': attribute type 5 has an invalid length. [ 211.270231][T13618] netlink: 'syz.3.3597': attribute type 1 has an invalid length. [ 211.301170][T13618] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3597'. [ 211.704547][T13649] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3613'. [ 212.058890][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3623'. [ 212.286250][T13690] netlink: 'syz.5.3633': attribute type 2 has an invalid length. [ 212.326047][T13690] 9: entered promiscuous mode [ 212.502455][T13704] netlink: 'syz.2.3641': attribute type 10 has an invalid length. [ 212.534022][T13704] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 212.993543][T13739] openvswitch: netlink: Duplicate key (type 32). [ 214.844558][T13866] netlink: 'syz.1.3720': attribute type 1 has an invalid length. [ 214.878085][T13866] __nla_validate_parse: 7 callbacks suppressed [ 214.878102][T13866] netlink: 476 bytes leftover after parsing attributes in process `syz.1.3720'. [ 214.912431][T13866] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3720'. [ 215.063623][T13879] netlink: 'syz.4.3727': attribute type 1 has an invalid length. [ 215.148500][T13887] netlink: 'syz.3.3731': attribute type 29 has an invalid length. [ 215.176333][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3731'. [ 215.425754][T13901] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3738'. [ 215.440328][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3738'. [ 215.452781][T13901] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3738'. [ 215.467848][T13901] netlink: 'syz.5.3738': attribute type 2 has an invalid length. [ 215.478214][T13901] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3738'. [ 215.478387][T13905] unsupported nla_type 33542 [ 216.511581][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'. [ 216.644064][T13985] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 216.689706][T13985] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 216.903832][T14001] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3786'. [ 217.556204][T14041] SET target dimension over the limit! [ 217.689362][T14045] veth3: entered promiscuous mode [ 217.700341][T14045] veth3: entered allmulticast mode [ 217.824963][T14057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3815'. [ 217.846618][T14061] xt_hashlimit: invalid rate [ 218.018365][T14066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.095180][T14074] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 218.324229][T14087] Cannot find del_set index 49151 as target [ 219.083004][T14139] netlink: 'syz.5.3854': attribute type 10 has an invalid length. [ 219.488763][T14167] openvswitch: netlink: IP tunnel dst address not specified [ 219.648503][T14174] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 219.689880][T14176] netlink: 'syz.5.3872': attribute type 3 has an invalid length. [ 220.830977][T14254] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 221.040029][T14266] netlink: 'syz.3.3917': attribute type 1 has an invalid length. [ 221.085319][T14270] __nla_validate_parse: 5 callbacks suppressed [ 221.085337][T14270] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3919'. [ 221.894285][T14321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3944'. [ 221.931156][T14321] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3944'. [ 221.945812][T14321] netlink: 'syz.3.3944': attribute type 6 has an invalid length. [ 221.958129][T14321] netlink: 'syz.3.3944': attribute type 5 has an invalid length. [ 221.970039][T14326] netlink: 'syz.4.3946': attribute type 2 has an invalid length. [ 221.970750][T14321] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3944'. [ 221.978464][T14326] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3946'. [ 222.880246][T14359] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.888125][T14359] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.277917][T14359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.305048][T14359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.585847][ T1094] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.627144][ T1094] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.660541][ T1094] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.670450][ T1094] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.209329][T14429] netlink: 'syz.3.3995': attribute type 1 has an invalid length. [ 224.222967][T14431] netlink: 'syz.1.3996': attribute type 8 has an invalid length. [ 224.354455][T14436] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3997'. [ 224.430561][T14439] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 224.528745][T14439] bond2 (unregistering): Released all slaves [ 224.554582][T14450] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4004'. [ 224.651351][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4007'. [ 224.726275][T14456] netlink: 'syz.4.4008': attribute type 3 has an invalid length. [ 225.218413][T14490] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4025'. [ 225.388097][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4029'. [ 225.399747][T14497] geneve3: entered promiscuous mode [ 225.763126][T14520] IPv6: sit1: Disabled Multicast RS [ 225.924757][T14530] erspan0: entered promiscuous mode [ 225.935878][T14530] erspan0: entered allmulticast mode [ 226.325692][T14556] netlink: 'syz.4.4056': attribute type 1 has an invalid length. [ 226.343536][T14556] __nla_validate_parse: 2 callbacks suppressed [ 226.343554][T14556] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4056'. [ 226.361196][T14556] netlink: 658 bytes leftover after parsing attributes in process `syz.4.4056'. [ 226.370284][T14556] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4056'. [ 226.539978][T14568] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 226.569975][T14568] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 226.593694][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4066'. [ 226.801583][T14584] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4072'. [ 226.821186][T14584] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 227.208433][T14610] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 227.549109][T14626] bond3: entered promiscuous mode [ 227.555754][T14626] bond3: entered allmulticast mode [ 227.561886][T14626] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.764423][T14641] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 228.277564][T14673] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4114'. [ 228.378102][T14681] netlink: 'syz.1.4117': attribute type 2 has an invalid length. [ 228.405003][T14677] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 228.422483][T14677] bond4 (unregistering): Released all slaves [ 228.763725][T14704] netlink: 'syz.1.4128': attribute type 6 has an invalid length. [ 229.036251][T14717] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 229.048367][T14717] bond3 (unregistering): Released all slaves [ 229.450818][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.464257][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.472715][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.482735][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.490665][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.627021][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4146'. [ 229.656278][T14742] netlink: 'syz.4.4146': attribute type 5 has an invalid length. [ 229.673022][T14742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4146'. [ 229.712778][T14742] geneve2: entered promiscuous mode [ 229.724790][T14742] geneve2: entered allmulticast mode [ 229.742703][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 229.760355][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 229.791526][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 229.841156][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 230.018710][T14737] lo speed is unknown, defaulting to 1000 [ 230.378429][T14737] chnl_net:caif_netlink_parms(): no params data found [ 230.719627][T14737] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.740672][T14737] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.750122][T14737] bridge_slave_0: entered allmulticast mode [ 230.759502][T14737] bridge_slave_0: entered promiscuous mode [ 230.769345][T14737] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.797465][T14737] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.806002][T14737] bridge_slave_1: entered allmulticast mode [ 230.814523][T14737] bridge_slave_1: entered promiscuous mode [ 230.889831][T14792] netlink: 'syz.5.4168': attribute type 21 has an invalid length. [ 230.913399][T14792] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4168'. [ 230.924237][T14737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.946749][T14737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.074276][T14737] team0: Port device team_slave_0 added [ 231.094239][T14737] team0: Port device team_slave_1 added [ 231.169117][T14737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.186931][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.216259][T14737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.229959][T14737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.237111][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.266872][T14737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.416092][T14737] hsr_slave_0: entered promiscuous mode [ 231.423007][T14737] hsr_slave_1: entered promiscuous mode [ 231.447709][T14737] debugfs: 'hsr0' already exists in 'hsr' [ 231.463116][T14737] Cannot create hsr debugfs directory [ 231.468921][T14816] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4180'. [ 231.484117][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4181'. [ 231.603556][ T5826] Bluetooth: hci6: command tx timeout [ 231.960291][T14737] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 231.984682][T14737] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 232.060244][T14737] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 232.132937][T14737] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 232.149079][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'. [ 232.359130][T14737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.405396][T14737] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.446277][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.453465][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.486914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.494185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.517711][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4204'. [ 232.597113][T14737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.669354][T14878] sctp: [Deprecated]: syz.5.4207 (pid 14878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.669354][T14878] Use struct sctp_sack_info instead [ 232.993062][T14737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.044345][T14900] syz.4.4216: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.080928][T14900] CPU: 0 UID: 0 PID: 14900 Comm: syz.4.4216 Not tainted syzkaller #0 PREEMPT(full) [ 233.080978][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.080994][T14900] Call Trace: [ 233.081002][T14900] [ 233.081014][T14900] dump_stack_lvl+0xe8/0x150 [ 233.081041][T14900] warn_alloc+0x249/0x340 [ 233.081061][T14900] ? stack_trace_save+0xa9/0x100 [ 233.081085][T14900] ? __pfx_warn_alloc+0x10/0x10 [ 233.081109][T14900] ? kasan_save_track+0x4f/0x80 [ 233.081124][T14900] ? kasan_save_track+0x3e/0x80 [ 233.081137][T14900] ? __kasan_kmalloc+0x93/0xb0 [ 233.081153][T14900] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 233.081168][T14900] ? xskq_create+0x56/0x170 [ 233.081185][T14900] ? xsk_setsockopt+0x54c/0x990 [ 233.081208][T14900] ? do_sock_setsockopt+0x17c/0x1b0 [ 233.081227][T14900] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 233.081248][T14900] ? do_syscall_64+0xe2/0xf80 [ 233.081273][T14900] __vmalloc_node_range_noprof+0x132/0x1730 [ 233.081322][T14900] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.081358][T14900] ? __kasan_kmalloc+0x93/0xb0 [ 233.081382][T14900] vmalloc_user_noprof+0xad/0xe0 [ 233.081401][T14900] ? xskq_create+0xbf/0x170 [ 233.081419][T14900] xskq_create+0xbf/0x170 [ 233.081438][T14900] xsk_init_queue+0xad/0x110 [ 233.081467][T14900] xsk_setsockopt+0x54c/0x990 [ 233.081505][T14900] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.081533][T14900] ? __pfx_aa_sk_perm+0x10/0x10 [ 233.081557][T14900] ? aa_sock_opt_perm+0xff/0x1a0 [ 233.081580][T14900] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 233.081596][T14900] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.081621][T14900] do_sock_setsockopt+0x17c/0x1b0 [ 233.081647][T14900] __x64_sys_setsockopt+0x13d/0x1b0 [ 233.081674][T14900] do_syscall_64+0xe2/0xf80 [ 233.081693][T14900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.081710][T14900] ? trace_irq_disable+0x37/0x100 [ 233.081728][T14900] ? clear_bhb_loop+0x60/0xb0 [ 233.081750][T14900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.081768][T14900] RIP: 0033:0x7f01bfb9aeb9 [ 233.081793][T14900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.081809][T14900] RSP: 002b:00007f01c09e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 233.081828][T14900] RAX: ffffffffffffffda RBX: 00007f01bfe15fa0 RCX: 00007f01bfb9aeb9 [ 233.081842][T14900] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 233.081853][T14900] RBP: 00007f01bfc08c1f R08: 0000000000000004 R09: 0000000000000000 [ 233.081865][T14900] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.081877][T14900] R13: 00007f01bfe16038 R14: 00007f01bfe15fa0 R15: 00007ffecd235bb8 [ 233.081907][T14900] [ 233.390251][T14900] Mem-Info: [ 233.398550][T14900] active_anon:6753 inactive_anon:0 isolated_anon:0 [ 233.398550][T14900] active_file:2889 inactive_file:39989 isolated_file:0 [ 233.398550][T14900] unevictable:768 dirty:196 writeback:0 [ 233.398550][T14900] slab_reclaimable:11035 slab_unreclaimable:108190 [ 233.398550][T14900] mapped:39398 shmem:1359 pagetables:1655 [ 233.398550][T14900] sec_pagetables:0 bounce:0 [ 233.398550][T14900] kernel_misc_reclaimable:0 [ 233.398550][T14900] free:1289159 free_pcp:12998 free_cma:0 [ 233.476393][T14900] Node 0 active_anon:26912kB inactive_anon:0kB active_file:11556kB inactive_file:159756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157592kB dirty:780kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:6580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.526239][T14900] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.572524][T14900] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.604942][T14900] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 233.611778][T14900] Node 0 DMA32 free:1245192kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27012kB inactive_anon:0kB active_file:11556kB inactive_file:159756kB unevictable:1536kB writepending:780kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:35072kB local_pcp:14820kB free_cma:0kB [ 233.653613][T14900] lowmem_reserve[]: 0 0 1 1 1 [ 233.658854][T14900] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.691465][ T5826] Bluetooth: hci6: command tx timeout [ 233.771534][T14900] lowmem_reserve[]: 0 0 0 0 0 [ 233.777368][T14900] Node 1 Normal free:3895784kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17792kB local_pcp:6560kB free_cma:0kB [ 233.810739][T14900] lowmem_reserve[]: 0 0 0 0 0 [ 233.822657][T14900] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.842261][T14900] Node 0 DMA32: 525*4kB (UM) 2345*8kB (UM) 837*16kB (UM) 549*32kB (UME) 974*64kB (UME) 554*128kB (UME) 395*256kB (UM) 225*512kB (UME) 88*1024kB (U) 12*2048kB (UME) 178*4096kB (M) = 1245164kB [ 233.859209][T14737] veth0_vlan: entered promiscuous mode [ 233.904189][T14737] veth1_vlan: entered promiscuous mode [ 233.934890][T14900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 233.955815][T14900] Node 1 Normal: 210*4kB (UME) 46*8kB (UME) 43*16kB (UME) 96*32kB (UME) 30*64kB (UME) 10*128kB (UME) 4*256kB (UME) 7*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3895784kB [ 233.976262][T14900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.986637][T14900] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.994600][T14737] veth0_macvtap: entered promiscuous mode [ 234.008691][T14737] veth1_macvtap: entered promiscuous mode [ 234.023773][T14900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.040907][T14900] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.048085][T14737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.058360][T14900] 44234 total pagecache pages [ 234.064619][T14900] 0 pages in swap cache [ 234.069013][T14900] Free swap = 124996kB [ 234.074564][T14900] Total swap = 124996kB [ 234.078738][T14900] 2097051 pages RAM [ 234.083168][T14900] 0 pages HighMem/MovableOnly [ 234.089572][T14737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.107236][T14900] 426624 pages reserved [ 234.120900][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.121516][T14900] 0 pages cma reserved [ 234.144116][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.168773][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.201646][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.497578][T14945] gtp0: entered promiscuous mode [ 234.504647][T14945] gtp0: entered allmulticast mode [ 234.518001][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.535793][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.615322][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.625198][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.695496][T14954] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 234.744053][T14956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4241'. [ 234.768047][T14956] netlink: 'syz.4.4241': attribute type 3 has an invalid length. [ 235.220046][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4252'. [ 235.310863][T14989] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4257'. [ 235.751553][ T5826] Bluetooth: hci6: command tx timeout [ 235.771822][T15017] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4271'. [ 235.854310][T15021] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 235.860897][T15021] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 236.865976][T15077] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.994344][T15039] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 237.373374][T15105] xt_ecn: cannot match TCP bits for non-tcp packets [ 237.405241][T15109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.441315][T15111] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 237.832695][ T5826] Bluetooth: hci6: command tx timeout [ 237.908864][T15140] Driver unsupported XDP return value 0 on prog (id 315) dev N/A, expect packet loss! [ 237.964121][T15141] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 237.983460][T15141] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 238.489592][T15172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4347'. [ 238.827582][T15191] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.095458][T15208] Zero length message leads to an empty skb [ 239.105344][T15207] Bluetooth: MGMT ver 1.23 [ 239.334026][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4371'. [ 239.811433][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4383'. [ 240.016578][ T5823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.031275][ T5823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.039779][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.049504][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.052357][T15257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4387'. [ 240.070160][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.147638][T15265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4391'. [ 240.697811][T15258] lo speed is unknown, defaulting to 1000 [ 241.079337][T15308] Bluetooth: MGMT ver 1.23 [ 241.296482][T15258] chnl_net:caif_netlink_parms(): no params data found [ 241.553436][T15258] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.560867][T15258] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.607278][T15258] bridge_slave_0: entered allmulticast mode [ 241.633830][T15258] bridge_slave_0: entered promiscuous mode [ 241.675857][T15258] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.690717][T15258] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.713843][T15258] bridge_slave_1: entered allmulticast mode [ 241.729085][T15258] bridge_slave_1: entered promiscuous mode [ 241.815100][T15258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.847195][T15258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.907775][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4431'. [ 241.971613][T15357] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 242.003800][T15258] team0: Port device team_slave_0 added [ 242.034817][T15258] team0: Port device team_slave_1 added [ 242.145423][T15367] Bluetooth: MGMT ver 1.23 [ 242.151122][ T5826] Bluetooth: hci7: command tx timeout [ 242.216722][T15258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.259172][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.315794][T15258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.328431][T15258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.336167][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.419368][T15377] IPVS: ip_vs_edit_dest(): server weight less than zero [ 242.432135][ T5879] IPVS: starting estimator thread 0... [ 242.437898][T15258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.460726][T15369] netlink: 'syz.6.4440': attribute type 3 has an invalid length. [ 242.487930][T15369] netlink: 766 bytes leftover after parsing attributes in process `syz.6.4440'. [ 242.531332][T15378] IPVS: using max 31 ests per chain, 74400 per kthread [ 242.729360][T15258] hsr_slave_0: entered promiscuous mode [ 242.749358][T15258] hsr_slave_1: entered promiscuous mode [ 242.782083][T15258] debugfs: 'hsr0' already exists in 'hsr' [ 242.788028][T15258] Cannot create hsr debugfs directory [ 242.885703][T15399] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4455'. [ 242.903374][T15400] tipc: Enabling of bearer rejected, failed to enable media [ 243.028689][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4458'. [ 243.272997][T15420] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4461'. [ 243.561583][T15258] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.585227][T15258] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 243.623848][T15258] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.665560][T15258] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.858670][T15258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.897561][T15258] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.939219][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.946466][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.029310][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.036555][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.055639][T15465] __nla_validate_parse: 1 callbacks suppressed [ 244.055659][T15465] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4481'. [ 244.231968][ T5826] Bluetooth: hci7: command tx timeout [ 244.359425][T15258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.898525][T15506] smc: net device team0 applied user defined pnetid SYZ2 [ 245.068071][T15258] veth0_vlan: entered promiscuous mode [ 245.083807][T15258] veth1_vlan: entered promiscuous mode [ 245.162572][T15517] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4502'. [ 245.202888][T15258] veth0_macvtap: entered promiscuous mode [ 245.225742][T15258] veth1_macvtap: entered promiscuous mode [ 245.250867][T15258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.307757][T15258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.345822][T15523] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4505'. [ 245.363931][ T5926] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.376152][ T5926] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.390080][T15523] nbd: illegal input index -8454144 [ 245.399172][ T5926] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.412311][T15529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.444093][ T5926] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.619543][T15535] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4509'. [ 245.782541][ T5926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.813435][ T5926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.825188][T15547] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4516'. [ 245.897244][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.920298][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.312727][ T5826] Bluetooth: hci7: command tx timeout [ 246.433586][T15573] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 246.606568][T15582] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4532'. [ 246.992859][T15608] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4545'. [ 247.023300][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4545'. [ 247.097725][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4545'. [ 247.127931][T15607] netlink: 'syz.1.4544': attribute type 4 has an invalid length. [ 247.152057][T15607] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4544'. [ 247.494840][T15638] netlink: 'syz.1.4559': attribute type 1 has an invalid length. [ 248.083519][T15668] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 248.399195][ T5823] Bluetooth: hci7: command tx timeout [ 249.219714][T15733] xt_hashlimit: size too large, truncated to 1048576 [ 249.342450][T15742] sctp: [Deprecated]: syz.5.4610 (pid 15742) Use of int in max_burst socket option deprecated. [ 249.342450][T15742] Use struct sctp_assoc_value instead [ 250.056382][T15780] __nla_validate_parse: 5 callbacks suppressed [ 250.056401][T15780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4628'. [ 250.076679][T15780] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4628'. [ 250.089480][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4628'. [ 250.474740][ T5823] Bluetooth: hci7: command 0x0405 tx timeout [ 251.408194][T15855] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4664'. [ 251.470921][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4667'. [ 251.511942][T15863] netlink: 176 bytes leftover after parsing attributes in process `syz.6.4668'. [ 251.531276][T15863] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4668'. [ 251.860305][T15879] netlink: 'syz.4.4676': attribute type 2 has an invalid length. [ 252.173732][T15900] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4686'. [ 252.727008][T15934] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4702'. [ 252.760443][ T30] audit: type=1107 audit(1770387906.545:2): pid=15935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 253.041206][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4713'. [ 253.060871][T15957] xt_limit: Overflow, try lower: 604147548/4200216962 [ 253.393844][T15976] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 253.414458][T15978] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 253.916898][T16010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.089051][T16073] vlan2: entered promiscuous mode [ 255.101800][T16073] geneve1: entered promiscuous mode [ 255.112906][T16073] vlan2: entered allmulticast mode [ 255.124618][T16073] geneve1: entered allmulticast mode [ 255.682891][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.553778][T16142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.823669][T16162] netlink: 'syz.4.4815': attribute type 29 has an invalid length. [ 257.196917][T16187] netlink: 'syz.4.4826': attribute type 29 has an invalid length. [ 257.231267][T16189] __nla_validate_parse: 1 callbacks suppressed [ 257.231292][T16189] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4827'. [ 257.293488][T16189] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4827'. [ 257.696387][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4841'. [ 257.858238][T16231] tipc: Failed to obtain node identity [ 257.872899][T16231] tipc: Enabling of bearer rejected, failed to enable media [ 257.982822][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4851'. [ 258.633750][T16278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4870'. [ 258.645927][T16278] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4870'. [ 258.683751][T16278] netlink: 'syz.4.4870': attribute type 6 has an invalid length. [ 258.691898][T16280] tipc: Started in network mode [ 258.707285][T16280] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 258.726821][T16278] netlink: 'syz.4.4870': attribute type 5 has an invalid length. [ 258.737641][T16280] tipc: Enabled bearer , priority 10 [ 258.744404][T16278] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4870'. [ 258.765882][T16282] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 258.895253][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4877'. [ 258.926380][T16292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4876'. [ 259.542621][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4896'. [ 259.852312][ T5886] tipc: Node number set to 4269801492 [ 260.590551][T16391] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 260.621203][T16391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.881692][ T1094] wlan1: Trigger new scan to find an IBSS to join [ 260.940942][T16414] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0 [ 260.954153][T16413] IPVS: stopping master sync thread 16414 ... [ 261.849019][T16472] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 262.208420][T16491] sock: sock_set_timeout: `syz.4.4971' (pid 16491) tries to set negative timeout [ 262.231884][ T5893] IPVS: starting estimator thread 0... [ 262.285890][T16496] __nla_validate_parse: 3 callbacks suppressed [ 262.285910][T16496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4973'. [ 262.331764][T16494] IPVS: using max 31 ests per chain, 74400 per kthread [ 262.525829][T16510] rdma_op ffff888024aa19f0 conn xmit_rdma 0000000000000000 [ 262.680693][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4984'. [ 262.863459][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4991'. [ 263.697087][T16587] netlink: 'syz.1.5017': attribute type 8 has an invalid length. [ 263.833043][ T12] wlan1: Trigger new scan to find an IBSS to join [ 264.033817][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'. [ 264.052888][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5029'. [ 264.084669][T16610] netlink: 'syz.1.5029': attribute type 6 has an invalid length. [ 264.236858][T16620] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 265.085920][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5057'. [ 265.201709][T16676] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 265.946321][T16722] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5081'. [ 266.052020][T16730] netlink: 'syz.7.5086': attribute type 11 has an invalid length. [ 266.059891][T16730] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.5086'. [ 266.872018][ T12] wlan1: Trigger new scan to find an IBSS to join [ 266.965678][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5108'. [ 267.341971][T16807] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5119'. [ 267.672584][T16825] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5130'. [ 267.728073][T16832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.735383][T16832] IPv6: NLM_F_CREATE should be set when creating new route [ 267.742667][T16832] IPv6: NLM_F_CREATE should be set when creating new route [ 267.749898][T16832] IPv6: NLM_F_CREATE should be set when creating new route [ 267.783655][ T51] wlan1: Creating new IBSS network, BSSID 26:03:2c:05:e8:22 [ 267.792901][T16832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.107942][T16856] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5143'. [ 268.194023][T16844] "syz.5.5140" (16844) uses obsolete ecb(arc4) skcipher [ 268.332041][T16871] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5150'. [ 268.455051][T16877] netlink: 'syz.1.5153': attribute type 2 has an invalid length. [ 268.470639][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5152'. [ 269.576088][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5182'. [ 269.844104][T16956] netlink: 'syz.4.5191': attribute type 1 has an invalid length. [ 269.863852][T16956] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5191'. [ 270.214413][T16978] netlink: 'syz.7.5202': attribute type 2 has an invalid length. [ 270.523565][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5210'. [ 270.564984][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5210'. [ 270.955725][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5222'. [ 271.009550][T17027] bridge0: entered promiscuous mode [ 271.042854][T17027] macsec1: entered promiscuous mode [ 271.062118][T17027] macsec1: entered allmulticast mode [ 271.067456][T17027] bridge0: entered allmulticast mode [ 271.089958][T17027] bridge0: port 3(macsec1) entered blocking state [ 271.100910][T17027] bridge0: port 3(macsec1) entered disabled state [ 271.126909][T17027] bridge0: left allmulticast mode [ 271.133423][T17027] bridge0: left promiscuous mode [ 271.917904][T17086] xt_socket: unknown flags 0xe4 [ 272.226973][T17107] netlink: 'syz.7.5261': attribute type 1 has an invalid length. [ 272.267850][T17107] netlink: 'syz.7.5261': attribute type 3 has an invalid length. [ 272.278257][T17107] NCSI netlink: No device for ifindex 813332851 [ 272.734373][T17137] sctp: [Deprecated]: syz.7.5276 (pid 17137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.734373][T17137] Use struct sctp_sack_info instead [ 272.777689][T17137] sctp: [Deprecated]: syz.7.5276 (pid 17137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.777689][T17137] Use struct sctp_sack_info instead [ 273.263596][T17164] netlink: 'syz.5.5288': attribute type 7 has an invalid length. [ 273.938469][T17170] lo speed is unknown, defaulting to 1000 [ 274.165340][T17215] netlink: 'syz.1.5310': attribute type 3 has an invalid length. [ 274.174083][T17215] netlink: 'syz.1.5310': attribute type 1 has an invalid length. [ 274.184813][T17215] __nla_validate_parse: 2 callbacks suppressed [ 274.184829][T17215] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5310'. [ 274.556305][T17229] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 274.580177][T17229] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.589298][T17229] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.288391][T17273] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5337'. [ 275.301874][T17273] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5337'. [ 275.753121][T17298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.790566][ T5893] lo speed is unknown, defaulting to 1000 [ 276.059187][T17317] macvlan0: entered promiscuous mode [ 276.521632][T17342] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.827858][T17434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5417'. [ 277.938121][T17440] tipc: Started in network mode [ 277.947365][T17440] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 277.968959][T17440] tipc: Enabled bearer , priority 2 [ 278.037001][T17446] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5422'. [ 278.285115][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5431'. [ 278.411451][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5434'. [ 279.082569][ T894] tipc: Node number set to 10463914 [ 279.165993][T17511] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5453'. [ 279.207483][T17516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5456'. [ 279.627710][T17542] netlink: 'syz.5.5469': attribute type 1 has an invalid length. [ 279.658307][T17544] pim6reg527: entered allmulticast mode [ 279.665727][T17542] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5469'. [ 279.679920][T17546] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5471'. [ 279.713305][T17542] netlink: 'syz.5.5469': attribute type 1 has an invalid length. [ 279.719844][T17546] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5471'. [ 279.740532][T17542] netlink: 'syz.5.5469': attribute type 8 has an invalid length. [ 279.768828][T17542] netlink: 606 bytes leftover after parsing attributes in process `syz.5.5469'. [ 279.818208][T17542] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5469'. [ 279.855534][T17550] netlink: 'syz.1.5473': attribute type 1 has an invalid length. [ 279.882566][T17550] netlink: 'syz.1.5473': attribute type 3 has an invalid length. [ 279.890335][T17550] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5473'. [ 279.905882][T17550] NCSI netlink: No device for ifindex 813332851 [ 280.072212][T17564] IPVS: ip_vs_add_dest(): server weight less than zero [ 280.899834][T17616] netlink: 'syz.7.5505': attribute type 83 has an invalid length. [ 281.092153][T17628] netlink: 'syz.5.5511': attribute type 32 has an invalid length. [ 281.100013][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5511'. [ 281.236288][T17628] bond4: option coupled_control: invalid value (52) [ 281.245520][T17628] bond4 (unregistering): Released all slaves [ 281.717532][T17668] netlink: 'syz.7.5529': attribute type 1 has an invalid length. [ 281.878473][T17677] netlink: 'syz.6.5536': attribute type 4 has an invalid length. [ 281.891122][T17677] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5536'. [ 282.176722][T17696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5544'. [ 283.498783][T17779] nbd: must specify an index to disconnect [ 283.583615][T17785] netlink: 'syz.7.5580': attribute type 1 has an invalid length. [ 283.755715][T17792] xt_policy: neither incoming nor outgoing policy selected [ 284.092009][T17814] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 284.171291][T17814] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 284.693947][T17848] __nla_validate_parse: 5 callbacks suppressed [ 284.693966][T17848] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5604'. [ 284.741222][T17848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5604'. [ 284.760496][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5607'. [ 284.771078][T17848] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5604'. [ 284.780045][T17848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5604'. [ 284.791422][T17850] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 284.820285][T17848] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5604'. [ 285.001563][T17864] validate_nla: 2 callbacks suppressed [ 285.001580][T17864] netlink: 'syz.6.5611': attribute type 1 has an invalid length. [ 285.273658][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5620'. [ 285.581688][T17899] xt_l2tp: v2 tid > 0xffff: 1114244 [ 285.979775][T17922] netlink: 'syz.1.5639': attribute type 3 has an invalid length. [ 286.087073][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5643'. [ 286.154400][T17931] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5644'. [ 286.832698][T17968] netlink: 7060 bytes leftover after parsing attributes in process `syz.7.5663'. [ 287.130127][T17991] pim6reg: entered allmulticast mode [ 287.180878][T17998] pim6reg: left allmulticast mode [ 288.463895][T18071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.664725][T18071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.829436][T18071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.960096][T18071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.207389][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.313114][ T5926] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.382167][ T5926] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.401215][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.569829][T18138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.889032][T18158] netlink: 'syz.6.5753': attribute type 2 has an invalid length. [ 289.892206][T18159] __nla_validate_parse: 1 callbacks suppressed [ 289.892223][T18159] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5754'. [ 289.934358][T18158] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5753'. [ 290.560146][T18188] team0: Device gtp0 is up. Set it down before adding it as a team port [ 291.320212][T18237] netlink: 'syz.1.5791': attribute type 23 has an invalid length. [ 291.353837][T18189] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 291.661934][T18254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.825614][T18271] netlink: 'syz.5.5806': attribute type 1 has an invalid length. [ 291.983006][T18280] netlink: zone id is out of range [ 292.005135][T18280] netlink: zone id is out of range [ 292.034062][T18280] netlink: zone id is out of range [ 292.039290][T18280] netlink: zone id is out of range [ 292.076542][T18280] netlink: zone id is out of range [ 292.101910][T18280] netlink: zone id is out of range [ 292.107179][T18280] netlink: zone id is out of range [ 292.136470][T18280] netlink: zone id is out of range [ 292.362584][T18301] xt_hashlimit: size too large, truncated to 1048576 [ 292.851727][T18328] nbd: socks must be embedded in a SOCK_ITEM attr [ 293.030313][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5839'. [ 293.279010][T18357] sctp: [Deprecated]: syz.4.5847 (pid 18357) Use of int in maxseg socket option. [ 293.279010][T18357] Use struct sctp_assoc_value instead [ 293.603731][T18376] netlink: 'syz.7.5856': attribute type 2 has an invalid length. [ 293.695295][T18383] tipc: MTU too low for tipc bearer [ 293.990106][T18404] netlink: 'syz.5.5870': attribute type 1 has an invalid length. [ 294.025334][T18407] tipc: Enabling of bearer rejected, failed to enable media [ 294.590227][ T5826] Bluetooth: hci7: link tx timeout [ 294.596239][ T5826] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 294.958208][T18467] bridge0: port 3(veth0_to_bridge) entered blocking state [ 294.987230][T18467] bridge0: port 3(veth0_to_bridge) entered disabled state [ 295.013100][T18467] veth0_to_bridge: entered allmulticast mode [ 295.013233][T18472] netlink: 'syz.7.5902': attribute type 1 has an invalid length. [ 295.022585][T18467] veth0_to_bridge: entered promiscuous mode [ 295.058181][T18472] net_ratelimit: 47 callbacks suppressed [ 295.058201][T18472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.062034][T18467] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.112263][T18467] bridge0: port 3(veth0_to_bridge) entered blocking state [ 295.119864][T18467] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 295.303671][T18486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5911'. [ 295.353684][T18493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.565967][T18505] tipc: Started in network mode [ 295.570880][T18505] tipc: Node identity 16afbeb9b2f1, cluster identity 4711 [ 295.628973][T18505] tipc: Enabled bearer , priority 11 [ 295.826248][T18526] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5928'. [ 295.858160][T18526] netlink: 'syz.1.5928': attribute type 9 has an invalid length. [ 295.871459][T18528] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5929'. [ 296.574047][T18574] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.636180][ T5823] Bluetooth: hci7: command 0x0405 tx timeout [ 296.703631][T18584] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5950'. [ 296.741406][ T5886] tipc: Node number set to 2757672633 [ 297.159208][T18613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5963'. [ 297.273549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.286032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.298431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.310781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.323206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.335559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.347914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.360290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.815843][ T5926] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.406293][T18653] netlink: 'syz.6.5983': attribute type 1 has an invalid length. [ 298.462889][T18653] netlink: 'syz.6.5983': attribute type 2 has an invalid length. [ 298.470666][T18653] netlink: 'syz.6.5983': attribute type 1 has an invalid length. [ 298.591223][T18653] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5983'. [ 300.061156][ C1] net_ratelimit: 7488 callbacks suppressed [ 300.061190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.079394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.091926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.104424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.116833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.129372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.141755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.154187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.166579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.179000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.925287][T18735] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6021'. [ 300.948141][T18734] netlink: 'syz.6.6023': attribute type 2 has an invalid length. [ 301.919138][T18766] netlink: 'syz.1.6037': attribute type 1 has an invalid length. [ 303.487880][T18822] netlink: 'syz.5.6062': attribute type 5 has an invalid length. [ 303.844830][T18828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6065'. [ 304.661793][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6073'. [ 304.670871][T18849] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6073'. [ 305.071118][ C1] net_ratelimit: 13893 callbacks suppressed [ 305.071140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.090090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.102522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.114946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.127469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.140025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.152496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.164918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.177306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.189732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.393619][T18898] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 306.409959][T18898] syzkaller1: linktype set to 823 [ 306.619061][T18906] netlink: 'syz.7.6103': attribute type 10 has an invalid length. [ 306.699150][T18906] team0: Port device dummy0 added [ 306.722322][T18908] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6104'. [ 307.569723][T18927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6115'. [ 307.592121][T18927] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6115'. [ 308.066657][T18939] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.6119'. [ 309.611729][T18984] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6140'. [ 309.675744][T18986] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6142'. [ 309.905331][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6142'. [ 310.081048][ C1] net_ratelimit: 13732 callbacks suppressed [ 310.081068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.099369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.111753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.124191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.136584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.148989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.161405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.173780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.186181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.198557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.565092][T19012] sctp: [Deprecated]: syz.6.6153 (pid 19012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.565092][T19012] Use struct sctp_sack_info instead [ 311.619999][T19042] netlink: 'syz.1.6169': attribute type 1 has an invalid length. [ 311.669572][T19042] netlink: 'syz.1.6169': attribute type 7 has an invalid length. [ 311.700313][T19042] netlink: 'syz.1.6169': attribute type 8 has an invalid length. [ 311.765594][T19042] netlink: 208 bytes leftover after parsing attributes in process `syz.1.6169'. [ 311.798971][T19042] NCSI netlink: No device for ifindex 65584 [ 311.934123][T19049] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 312.566161][T19072] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6181'. [ 312.907417][T19082] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6185'. [ 313.114216][T19086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6188'. [ 313.252971][T19090] netlink: 1044 bytes leftover after parsing attributes in process `syz.7.6191'. [ 313.511736][T19099] Bluetooth: hci1: too big key_count value 32778 [ 313.590727][T19094] sctp: [Deprecated]: syz.5.6193 (pid 19094) Use of int in max_burst socket option deprecated. [ 313.590727][T19094] Use struct sctp_assoc_value instead [ 315.091279][ C1] net_ratelimit: 13911 callbacks suppressed [ 315.091300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.109582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.121947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.134376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.146753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.159106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.171542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.183912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.196318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.208920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.786711][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6239'. [ 316.836965][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6239'. [ 317.275228][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.154008][T19220] tipc: Started in network mode [ 318.191516][T19220] tipc: Node identity ac14140f, cluster identity 4711 [ 318.249562][T19220] tipc: New replicast peer: 255.255.255.255 [ 318.288351][T19220] tipc: Enabled bearer , priority 10 [ 318.919677][T19236] netlink: 'syz.6.6259': attribute type 12 has an invalid length. [ 318.941374][T19236] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.6259'. [ 319.196649][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 319.401534][ T10] tipc: Node number set to 2886997007 [ 319.786206][T19262] vxlan0: entered promiscuous mode [ 319.807638][T19262] vxlan0: entered allmulticast mode [ 319.828934][ T1094] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.887814][ T1094] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.955754][ T1094] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.012333][ T1094] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.098722][T19272] netlink: 'syz.6.6274': attribute type 16 has an invalid length. [ 320.101158][ C1] net_ratelimit: 13783 callbacks suppressed [ 320.101173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.124917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.137339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.149794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.154961][T19272] netlink: 'syz.6.6274': attribute type 17 has an invalid length. [ 320.162212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.182229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.194664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.207093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.219548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.231969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.236803][T19267] bridge0: port 3(veth0_to_bridge) entered disabled state [ 320.297316][T19267] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.329427][T19267] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.375350][T19267] tipc: Resetting bearer [ 320.396311][T19267] tipc: Resetting bearer [ 320.576644][T19292] netlink: 'syz.7.6286': attribute type 6 has an invalid length. [ 320.902185][T19310] netlink: 54 bytes leftover after parsing attributes in process `syz.4.6292'. [ 320.933038][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6292'. [ 320.946406][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6294'. [ 321.072179][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6294'. [ 321.439710][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6309'. [ 321.779062][T19369] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6318'. [ 321.922219][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6323'. [ 321.971581][T19377] netlink: 'syz.1.6323': attribute type 30 has an invalid length. [ 321.997849][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6323'. [ 322.099366][T19386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6328'. [ 322.554873][T19414] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6342'. [ 322.665272][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6345'. [ 322.843795][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6350'. [ 323.170257][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6360'. [ 323.234705][T19459] netlink: 'syz.6.6364': attribute type 83 has an invalid length. [ 323.748067][T19487] netlink: 'syz.1.6377': attribute type 5 has an invalid length. [ 323.780949][T19489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6376'. [ 323.821041][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6376'. [ 323.969490][T19501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.976839][T19501] IPv6: NLM_F_CREATE should be set when creating new route [ 323.984131][T19501] IPv6: NLM_F_CREATE should be set when creating new route [ 324.023741][T19503] netlink: 'syz.7.6385': attribute type 4 has an invalid length. [ 324.027661][T19501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.478238][T19528] sctp: [Deprecated]: syz.6.6398 (pid 19528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.478238][T19528] Use struct sctp_sack_info instead [ 324.764551][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6406'. [ 324.799491][T19546] bond0: entered promiscuous mode [ 324.821074][T19546] bond_slave_0: entered promiscuous mode [ 324.826975][T19546] bond_slave_1: entered promiscuous mode [ 324.870280][T19546] bond0: left promiscuous mode [ 324.879614][T19546] bond_slave_0: left promiscuous mode [ 324.916665][T19546] bond_slave_1: left promiscuous mode [ 324.994357][T19550] nbd1: detected capacity change from 0 to 127 [ 325.012712][ T5826] block nbd1: Receive control failed (result -32) [ 325.030346][ T8968] block nbd1: Dead connection, failed to find a fallback [ 325.056391][ T8968] block nbd1: shutting down sockets [ 325.063851][ T8968] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.075564][ T8968] Buffer I/O error on dev nbd1, logical block 0, async page read [ 325.084170][ T8968] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.100638][ T8968] Buffer I/O error on dev nbd1, logical block 1, async page read [ 325.110225][ T8968] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.120566][ T8968] Buffer I/O error on dev nbd1, logical block 2, async page read [ 325.130150][ T8968] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.147696][ T8968] Buffer I/O error on dev nbd1, logical block 3, async page read [ 325.158266][ T8968] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.170028][ T8968] Buffer I/O error on dev nbd1, logical block 0, async page read [ 325.206901][ T8968] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.230463][ T8968] Buffer I/O error on dev nbd1, logical block 1, async page read [ 325.247038][ T8968] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.260139][ T8968] Buffer I/O error on dev nbd1, logical block 2, async page read [ 325.270144][ T8968] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.332158][ T8968] Buffer I/O error on dev nbd1, logical block 3, async page read [ 325.356966][ T8968] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.392752][ T8968] Buffer I/O error on dev nbd1, logical block 0, async page read [ 325.410885][ T8968] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.429396][ T8968] Buffer I/O error on dev nbd1, logical block 1, async page read [ 325.459288][ T8968] ldm_validate_partition_table(): Disk read failed. [ 325.470168][ T8968] Dev nbd1: unable to read RDB block 0 [ 325.480407][ T8968] nbd1: unable to read partition table [ 325.522578][ T8968] ldm_validate_partition_table(): Disk read failed. [ 325.550237][ T8968] Dev nbd1: unable to read RDB block 0 [ 325.571772][ T8968] nbd1: unable to read partition table [ 326.273882][T19622] team0: No ports can be present during mode change [ 328.073024][T19711] __nla_validate_parse: 4 callbacks suppressed [ 328.073044][T19711] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6484'. [ 328.114604][T19716] netlink: 248 bytes leftover after parsing attributes in process `syz.7.6485'. [ 328.213796][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6486'. [ 328.446189][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6493'. [ 328.891226][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6509'. [ 329.047703][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 329.273164][T19791] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6521'. [ 329.703275][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6535'. [ 329.759582][T19828] netlink: 'syz.1.6539': attribute type 6 has an invalid length. [ 329.811485][T19828] netlink: 'syz.1.6539': attribute type 6 has an invalid length. [ 330.299307][T19862] netlink: 'syz.4.6556': attribute type 21 has an invalid length. [ 330.321719][T19862] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6556'. [ 330.330946][T19862] netlink: 'syz.4.6556': attribute type 4 has an invalid length. [ 330.375951][T19862] netlink: 'syz.4.6556': attribute type 5 has an invalid length. [ 330.376093][T19869] netlink: 'syz.4.6556': attribute type 21 has an invalid length. [ 330.410574][T19869] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6556'. [ 330.415676][T19862] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6556'. [ 330.452128][T19868] ip6gre0: Master is either lo or non-ether device [ 330.474594][T19869] netlink: 'syz.4.6556': attribute type 4 has an invalid length. [ 330.483502][T19869] netlink: 'syz.4.6556': attribute type 5 has an invalid length. [ 330.681959][T19877] nbd2: detected capacity change from 0 to 127 [ 330.719994][ T5826] block nbd2: Receive control failed (result -32) [ 330.742076][ T8968] block nbd2: Dead connection, failed to find a fallback [ 330.760161][ T8968] block nbd2: shutting down sockets [ 330.766185][ T8968] blk_print_req_error: 138 callbacks suppressed [ 330.766200][ T8968] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.783278][ T8968] buffer_io_error: 138 callbacks suppressed [ 330.783293][ T8968] Buffer I/O error on dev nbd2, logical block 0, async page read [ 330.801825][ T8968] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.813710][ T8968] Buffer I/O error on dev nbd2, logical block 1, async page read [ 330.822169][ T8968] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.833555][ T8968] Buffer I/O error on dev nbd2, logical block 2, async page read [ 330.844048][ T8968] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.853969][ T8968] Buffer I/O error on dev nbd2, logical block 3, async page read [ 330.862865][ T8968] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.873848][ T8968] Buffer I/O error on dev nbd2, logical block 0, async page read [ 330.882775][ T8968] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.894215][ T8968] Buffer I/O error on dev nbd2, logical block 1, async page read [ 330.911326][ T8968] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.920836][ T8968] Buffer I/O error on dev nbd2, logical block 2, async page read [ 330.971851][ T8968] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 330.988445][ T8968] Buffer I/O error on dev nbd2, logical block 3, async page read [ 331.002749][ T8968] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.015107][ T8968] Buffer I/O error on dev nbd2, logical block 0, async page read [ 331.025073][ T8968] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.036376][ T8968] Buffer I/O error on dev nbd2, logical block 1, async page read [ 331.067253][ T8968] ldm_validate_partition_table(): Disk read failed. [ 331.093151][ T8968] Dev nbd2: unable to read RDB block 0 [ 331.113407][ T8968] nbd2: unable to read partition table [ 331.130581][ T8968] ldm_validate_partition_table(): Disk read failed. [ 331.142743][ T8968] Dev nbd2: unable to read RDB block 0 [ 331.155016][ T8968] nbd2: unable to read partition table [ 332.776900][T20009] team0: Cannot enslave team device to itself [ 332.871924][ T1094] wlan1: Trigger new scan to find an IBSS to join [ 333.240283][T20025] __nla_validate_parse: 7 callbacks suppressed [ 333.240303][T20025] netlink: 27 bytes leftover after parsing attributes in process `syz.7.6630'. [ 333.363445][T20032] netlink: 'syz.1.6633': attribute type 33 has an invalid length. [ 333.397949][T20035] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.6635'. [ 333.498311][T20032] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 333.516497][T20032] bond2 (unregistering): Released all slaves [ 333.634740][T20044] netlink: 'syz.6.6639': attribute type 2 has an invalid length. [ 333.958729][T20062] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6647'. [ 333.967451][T20059] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6646'. [ 334.607666][ T36] tipc: Subscription rejected, illegal request [ 335.110029][T20123] tipc: Enabling of bearer rejected, already enabled [ 335.212568][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6679'. [ 335.487303][T20147] netlink: 'syz.5.6688': attribute type 83 has an invalid length. [ 335.644395][T20157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6691'. [ 335.689532][T20157] xfrm1: entered promiscuous mode [ 335.721425][T20157] xfrm1: entered allmulticast mode [ 335.738772][T20157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6691'. [ 335.832519][ T36] wlan1: Trigger new scan to find an IBSS to join [ 335.879759][T20169] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.829755][T20221] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.280703][T20258] netlink: 'syz.6.6739': attribute type 14 has an invalid length. [ 337.474618][T20268] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.482443][T20268] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.799095][T20292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6754'. [ 337.808200][T20289] xt_hashlimit: size too large, truncated to 1048576 [ 337.879734][T20295] –: renamed from vxcan1 (while UP) [ 338.090342][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6760'. [ 338.183890][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6761'. [ 338.268926][T20314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6765'. [ 338.289837][T20314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6765'. [ 338.313470][T20314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6765'. [ 338.496398][T20327] veth0_to_bridge: entered promiscuous mode [ 338.514478][T20325] netlink: 'syz.4.6770': attribute type 9 has an invalid length. [ 338.533160][T20324] veth0_to_bridge: left promiscuous mode [ 338.794168][ T36] wlan1: Trigger new scan to find an IBSS to join [ 339.264041][T20382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6796'. [ 339.444123][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6802'. [ 339.455903][T20394] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6802'. [ 339.693100][ T12] wlan1: Creating new IBSS network, BSSID b6:00:04:84:84:e4 [ 340.464885][T20462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6830'. [ 341.305062][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6854'. [ 341.905423][T20562] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6875'. [ 342.035837][T20573] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6881'. [ 342.335421][T20591] netlink: 'syz.4.6890': attribute type 83 has an invalid length. [ 342.572186][T20605] netlink: 'syz.6.6897': attribute type 1 has an invalid length. [ 342.580117][T20605] netlink: 'syz.6.6897': attribute type 3 has an invalid length. [ 342.601485][T20605] netlink: 'syz.6.6897': attribute type 7 has an invalid length. [ 342.613564][T20605] netlink: 'syz.6.6897': attribute type 8 has an invalid length. [ 342.636935][T20605] NCSI netlink: No device for ifindex 131092 [ 343.143687][T20642] netlink: 'syz.7.6914': attribute type 4 has an invalid length. [ 343.605980][T20671] __nla_validate_parse: 3 callbacks suppressed [ 343.605998][T20671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6926'. [ 343.679056][T20671] netlink: 'syz.5.6926': attribute type 1 has an invalid length. [ 343.693354][T20674] sctp: [Deprecated]: syz.7.6927 (pid 20674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.693354][T20674] Use struct sctp_sack_info instead [ 343.722052][T20671] netlink: 'syz.5.6926': attribute type 2 has an invalid length. [ 344.124920][T20703] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 344.570816][T20733] veth0: entered promiscuous mode [ 344.586921][T20733] veth0: left promiscuous mode [ 344.852380][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6952'. [ 345.337421][T20779] syz.6.6965: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 345.381397][T20779] CPU: 1 UID: 0 PID: 20779 Comm: syz.6.6965 Not tainted syzkaller #0 PREEMPT(full) [ 345.381435][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 345.381460][T20779] Call Trace: [ 345.381468][T20779] [ 345.381476][T20779] dump_stack_lvl+0xe8/0x150 [ 345.381506][T20779] warn_alloc+0x249/0x340 [ 345.381526][T20779] ? stack_trace_save+0xa9/0x100 [ 345.381552][T20779] ? __pfx_warn_alloc+0x10/0x10 [ 345.381576][T20779] ? kasan_save_track+0x4f/0x80 [ 345.381591][T20779] ? kasan_save_track+0x3e/0x80 [ 345.381607][T20779] ? __kasan_kmalloc+0x93/0xb0 [ 345.381624][T20779] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 345.381641][T20779] ? xskq_create+0x56/0x170 [ 345.381659][T20779] ? xsk_setsockopt+0x54c/0x990 [ 345.381683][T20779] ? do_sock_setsockopt+0x17c/0x1b0 [ 345.381702][T20779] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 345.381723][T20779] ? do_syscall_64+0xe2/0xf80 [ 345.381744][T20779] __vmalloc_node_range_noprof+0x132/0x1730 [ 345.381789][T20779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 345.381814][T20779] ? __kasan_kmalloc+0x93/0xb0 [ 345.381836][T20779] vmalloc_user_noprof+0xad/0xe0 [ 345.381854][T20779] ? xskq_create+0xbf/0x170 [ 345.381873][T20779] xskq_create+0xbf/0x170 [ 345.381894][T20779] xsk_init_queue+0xad/0x110 [ 345.381924][T20779] xsk_setsockopt+0x54c/0x990 [ 345.381953][T20779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 345.381979][T20779] ? __pfx_aa_sk_perm+0x10/0x10 [ 345.382004][T20779] ? aa_sock_opt_perm+0xff/0x1a0 [ 345.382030][T20779] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 345.382049][T20779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 345.382078][T20779] do_sock_setsockopt+0x17c/0x1b0 [ 345.382105][T20779] __x64_sys_setsockopt+0x13d/0x1b0 [ 345.382133][T20779] do_syscall_64+0xe2/0xf80 [ 345.382153][T20779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.382180][T20779] ? trace_irq_disable+0x37/0x100 [ 345.382199][T20779] ? clear_bhb_loop+0x60/0xb0 [ 345.382223][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.382242][T20779] RIP: 0033:0x7f8a7559aeb9 [ 345.382260][T20779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.382277][T20779] RSP: 002b:00007f8a76431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 345.382298][T20779] RAX: ffffffffffffffda RBX: 00007f8a75815fa0 RCX: 00007f8a7559aeb9 [ 345.382312][T20779] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 345.382324][T20779] RBP: 00007f8a75608c1f R08: 0000000000000004 R09: 0000000000000000 [ 345.382337][T20779] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.382349][T20779] R13: 00007f8a75816038 R14: 00007f8a75815fa0 R15: 00007ffc990e6f38 [ 345.382381][T20779] [ 345.382390][T20779] Mem-Info: [ 345.542245][T20786] netlink: 'syz.4.6969': attribute type 83 has an invalid length. [ 345.558867][T20779] active_anon:8619 inactive_anon:0 isolated_anon:0 [ 345.558867][T20779] active_file:2889 inactive_file:40039 isolated_file:0 [ 345.558867][T20779] unevictable:768 dirty:336 writeback:0 [ 345.558867][T20779] slab_reclaimable:11862 slab_unreclaimable:114534 [ 345.558867][T20779] mapped:44627 shmem:1359 pagetables:1770 [ 345.558867][T20779] sec_pagetables:0 bounce:0 [ 345.558867][T20779] kernel_misc_reclaimable:0 [ 345.558867][T20779] free:1266213 free_pcp:13444 free_cma:0 [ 345.744771][T20779] Node 0 active_anon:34376kB inactive_anon:0kB active_file:11556kB inactive_file:159956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178408kB dirty:1340kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13836kB pagetables:6640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 345.779908][T20779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 345.896811][T20779] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.952849][T20803] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6973'. [ 345.969881][T20779] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 345.987431][T20779] Node 0 DMA32 free:1152160kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34456kB inactive_anon:0kB active_file:11556kB inactive_file:159956kB unevictable:1536kB writepending:1340kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:37756kB local_pcp:17556kB free_cma:0kB [ 346.128966][T20779] lowmem_reserve[]: 0 0 1 1 1 [ 346.142817][T20779] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.196301][T20779] lowmem_reserve[]: 0 0 0 0 0 [ 346.208958][T20779] Node 1 Normal free:3897532kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15968kB local_pcp:10688kB free_cma:0kB [ 346.242937][T20820] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6980'. [ 346.311565][T20779] lowmem_reserve[]: 0 0 0 0 0 [ 346.320031][T20779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 346.347080][T20779] Node 0 DMA32: 2202*4kB (UM) 2665*8kB (UM) 1253*16kB (UME) 117*32kB (UME) 990*64kB (UM) 519*128kB (UM) 463*256kB (UM) 280*512kB (UME) 118*1024kB (UME) 16*2048kB (UME) 135*4096kB (UM) = 1152160kB [ 346.416730][T20779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 346.457787][T20779] Node 1 Normal: 211*4kB (UME) 48*8kB (UME) 46*16kB (UME) 137*32kB (UME) 37*64kB (UME) 10*128kB (UME) 4*256kB (UME) 7*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3897612kB [ 346.477480][T20828] netlink: 'syz.7.6985': attribute type 19 has an invalid length. [ 346.509489][T20779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.526003][T20779] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 346.536745][T20834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6988'. [ 346.537823][T20779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.558197][T20779] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 346.567680][T20779] 44283 total pagecache pages [ 346.572884][T20779] 0 pages in swap cache [ 346.577048][T20779] Free swap = 124996kB [ 346.600054][T20779] Total swap = 124996kB [ 346.621055][T20779] 2097051 pages RAM [ 346.624897][T20779] 0 pages HighMem/MovableOnly [ 346.634948][T20779] 426624 pages reserved [ 346.639134][T20779] 0 pages cma reserved [ 346.818007][T20846] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 347.590330][T20898] syzkaller1: entered promiscuous mode [ 347.615966][T20898] syzkaller1: entered allmulticast mode [ 347.634658][T20898] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 348.577150][T20963] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7049'. [ 348.854247][T20978] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7056'. [ 348.889431][T20980] sctp: [Deprecated]: syz.4.7058 (pid 20980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.889431][T20980] Use struct sctp_sack_info instead [ 349.193380][T21000] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7065'. [ 349.348168][T21011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7068'. [ 349.545592][T21021] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.7074'. [ 349.596771][T21025] syzkaller1: entered promiscuous mode [ 349.623614][T21025] syzkaller1: entered allmulticast mode [ 349.644272][T21028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7077'. [ 349.653982][T21028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7077'. [ 349.945346][T21045] syzkaller1: entered promiscuous mode [ 349.950863][T21045] syzkaller1: entered allmulticast mode [ 349.988321][T21048] tipc: Enabled bearer , priority 26 [ 350.244144][T21065] veth0: entered promiscuous mode [ 350.250746][T21064] veth0: left promiscuous mode [ 350.264866][T21066] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 350.974892][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7117'. [ 351.514145][T21133] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7126'. [ 351.914241][ T5954] net_ratelimit: 1 callbacks suppressed [ 351.914260][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.928793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.219634][T21176] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7147'. [ 352.528526][T21203] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.7159'. [ 352.634055][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.831426][T21227] netlink: 'syz.1.7171': attribute type 1 has an invalid length. [ 352.839346][T21227] netlink: 'syz.1.7171': attribute type 1 has an invalid length. [ 352.955495][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.964164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.643811][T21278] sock: sock_set_timeout: `syz.7.7195' (pid 21278) tries to set negative timeout [ 353.773599][T21288] syzkaller1: entered promiscuous mode [ 353.779102][T21288] syzkaller1: entered allmulticast mode [ 354.380422][T21327] syzkaller1: entered promiscuous mode [ 354.389476][T21327] syzkaller1: entered allmulticast mode [ 354.474417][T21335] __nla_validate_parse: 4 callbacks suppressed [ 354.474437][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7222'. [ 355.042385][ T5823] Bluetooth: hci6: command 0x0406 tx timeout [ 355.393392][ C1] vcan0: j1939_tp_rxtimer: 0xffff888081df7c00: rx timeout, send abort [ 355.403470][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888081df7c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 355.503559][T21410] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.7256'. [ 356.146610][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7275'. [ 356.885125][T21492] netlink: 'syz.4.7293': attribute type 17 has an invalid length. [ 356.908025][T21492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7293'. [ 356.922250][T21492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7293'. [ 356.940308][T21492] gretap0: entered promiscuous mode [ 356.963731][T21492] gretap0: left promiscuous mode [ 357.111322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.120014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.128423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.136893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.145303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.308239][T21518] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.7303'. [ 357.467679][ T5943] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 357.501408][ T5943] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 357.510066][ T5943] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 357.520824][ T5943] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 357.530484][ T5943] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 357.538376][ T5943] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 357.545699][T21533] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7312'. [ 357.547894][ T5943] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 357.598465][T21533] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7312'. [ 357.647448][T21540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7314'. [ 357.676540][T21540] netlink: 'syz.1.7314': attribute type 7 has an invalid length. [ 357.690910][T21540] netlink: 'syz.1.7314': attribute type 8 has an invalid length. [ 357.699438][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7314'. [ 357.983949][T21561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.312706][T21586] sctp: [Deprecated]: syz.1.7335 (pid 21586) Use of int in max_burst socket option deprecated. [ 358.312706][T21586] Use struct sctp_assoc_value instead [ 358.462894][T21595] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.507125][T21600] syzkaller1: entered promiscuous mode [ 358.550755][T21600] syzkaller1: entered allmulticast mode [ 359.253959][T21644] macvtap1: entered promiscuous mode [ 359.263655][T21644] macvtap1: entered allmulticast mode [ 359.271036][T21644] veth1_vlan: entered allmulticast mode [ 359.324258][T21644] macvtap2: entered promiscuous mode [ 359.329602][T21644] macvtap2: entered allmulticast mode [ 359.705117][T21672] __nla_validate_parse: 2 callbacks suppressed [ 359.705138][T21672] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.7376'. [ 359.730250][T21672] netlink: ct family unspecified [ 359.991724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.711277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.317269][T21773] syzkaller1: entered promiscuous mode [ 361.323804][T21773] syzkaller1: entered allmulticast mode [ 361.400368][T21776] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.488809][T21782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7422'. [ 361.498455][T21782] block nbd3: Unsupported socket: should be TCP or UNIX. [ 361.529132][T21776] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.605451][T21776] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.708672][T21776] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.794619][ T60] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.828508][ T1094] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.849808][ T60] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.879229][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.015320][T21796] erspan0: left allmulticast mode [ 362.023156][T21796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7428'. [ 362.540811][T21826] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 362.562095][T21831] netlink: 'syz.5.7446': attribute type 1 has an invalid length. [ 362.655862][T21837] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.662938][T21838] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7449'. [ 363.508834][T21902] syzkaller1: entered promiscuous mode [ 363.521189][T21902] syzkaller1: entered allmulticast mode [ 363.689340][T21912] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7482'. [ 364.311176][ C1] net_ratelimit: 4 callbacks suppressed [ 364.311230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.325262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.333653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.342040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.350396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.187170][T22005] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7525'. [ 365.433661][T22020] syzkaller1: entered promiscuous mode [ 365.445590][T22020] syzkaller1: entered allmulticast mode [ 365.692135][T22034] smc: net device caif0 applied user defined pnetid SYZ2 [ 365.867031][T22052] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7547'. [ 365.878869][T22052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7547'. [ 366.003917][T22058] gre0: entered promiscuous mode [ 366.011099][T22058] gre0: entered allmulticast mode [ 366.029428][T22056] syzkaller1: entered promiscuous mode [ 366.041405][T22056] syzkaller1: entered allmulticast mode [ 366.408833][ T9] lo speed is unknown, defaulting to 1000 [ 366.597485][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7569'. [ 366.947293][T22118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7577'. [ 367.018521][T22122] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7578'. [ 367.046212][T22122] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7578'. [ 367.057160][T22122] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 367.300663][T22136] syzkaller1: entered promiscuous mode [ 367.310145][T22136] syzkaller1: entered allmulticast mode [ 367.511206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.519620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.528013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.536518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.557423][ T30] audit: type=1800 audit(1770388021.345:3): pid=22144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7590" name="memory.events" dev="tmpfs" ino=3315 res=0 errno=0 [ 367.941403][T22167] block nbd3: server does not support multiple connections per device. [ 367.959389][T22167] block nbd3: shutting down sockets [ 368.233985][T22187] netlink: 'syz.5.7610': attribute type 3 has an invalid length. [ 368.266221][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7612'. [ 368.390016][T22200] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7617'. [ 369.536425][T22281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7654'. [ 369.679395][T22292] netlink: 'syz.7.7659': attribute type 1 has an invalid length. [ 369.718284][T22292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.725664][T22295] netlink: 'syz.5.7660': attribute type 12 has an invalid length. [ 369.734591][T22295] netlink: 'syz.5.7660': attribute type 29 has an invalid length. [ 369.743206][T22295] netlink: 'syz.5.7660': attribute type 2 has an invalid length. [ 369.751763][T22295] netlink: 'syz.5.7660': attribute type 1 has an invalid length. [ 369.773046][T22292] bond1: (slave geneve2): making interface the new active one [ 369.783980][T22292] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 370.215083][T22318] netlink: 'syz.4.7670': attribute type 13 has an invalid length. [ 370.224632][T22318] __nla_validate_parse: 3 callbacks suppressed [ 370.224649][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7670'. [ 370.264228][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.274414][T22318] netlink: 'syz.4.7670': attribute type 13 has an invalid length. [ 370.284557][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7670'. [ 370.294340][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.309933][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.323832][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.535464][T22338] netlink: 'syz.5.7676': attribute type 13 has an invalid length. [ 370.547579][T22338] netlink: 'syz.5.7676': attribute type 17 has an invalid length. [ 370.612042][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7681'. [ 370.748263][T22338] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.755570][T22338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.763223][T22338] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.770393][T22338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.802392][T22338] net_ratelimit: 3 callbacks suppressed [ 370.802402][T22338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.828657][T22342] veth0_to_bridge: left allmulticast mode [ 370.835187][T22342] veth0_to_bridge: left promiscuous mode [ 370.841611][T22342] bridge0: port 3(veth0_to_bridge) entered disabled state [ 370.876139][T22342] bridge_slave_1: left allmulticast mode [ 370.904338][T22342] bridge_slave_1: left promiscuous mode [ 370.910149][T22342] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.951172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.959485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.967861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.976326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.984764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.997187][T22342] bridge_slave_0: left allmulticast mode [ 371.003119][T22342] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.048994][T22365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7690'. [ 371.111228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.142617][T22355] syzkaller1: entered promiscuous mode [ 371.148278][T22355] syzkaller1: entered allmulticast mode [ 371.157999][T22365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.193278][T22371] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.7693'. [ 371.203044][T22371] netlink: Conntrack attr has 4 unknown bytes [ 371.267984][T22365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.364585][T22378] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7696'. [ 371.544338][T22386] team0: Port device dummy0 removed [ 371.555457][T22386] bridge_slave_0: left allmulticast mode [ 371.562946][T22386] bridge_slave_0: left promiscuous mode [ 371.568862][T22386] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.624225][T22386] bridge_slave_1: left allmulticast mode [ 371.630060][T22386] bridge_slave_1: left promiscuous mode [ 371.636539][T22386] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.654493][T22386] bond0: (slave bond_slave_0): Releasing backup interface [ 371.673705][T22386] bond0: (slave bond_slave_1): Releasing backup interface [ 371.692998][T22386] team0: Port device team_slave_0 removed [ 371.717249][T22386] team0: Port device team_slave_1 removed [ 371.725054][T22386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.733124][T22386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.743722][T22386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.800512][T22397] syzkaller1: entered promiscuous mode [ 371.812243][T22397] syzkaller1: entered allmulticast mode [ 372.276148][T22427] syz_tun: entered allmulticast mode [ 372.302521][T22426] syz_tun: left allmulticast mode [ 372.376894][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7722'. [ 372.531576][T22448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7726'. [ 372.542635][T22448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7726'. [ 372.561394][ T5926] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.561470][T22448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7726'. [ 372.591068][ T5926] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.599805][ T5926] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.617104][ T5926] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.706508][ T5926] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 372.813793][T22459] syzkaller1: entered promiscuous mode [ 372.833705][T22459] syzkaller1: entered allmulticast mode [ 372.900031][ T5954] lo speed is unknown, defaulting to 1000 [ 372.912393][ T5954] syz2: Port: 1 Link DOWN [ 373.353851][ T5826] block nbd3: Receive control failed (result -107) [ 373.452721][T22501] ip6erspan1: entered allmulticast mode [ 373.565314][T22509] validate_nla: 1 callbacks suppressed [ 373.565332][T22509] netlink: 'syz.6.7751': attribute type 22 has an invalid length. [ 373.649040][T22509] netlink: 'syz.6.7751': attribute type 22 has an invalid length. [ 373.679744][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.690654][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.700328][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.810586][T22527] netlink: 'syz.6.7758': attribute type 9 has an invalid length. [ 373.819125][T22527] netlink: 'syz.6.7758': attribute type 11 has an invalid length. [ 373.834856][T22527] netlink: 'syz.6.7758': attribute type 12 has an invalid length. [ 373.883128][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.973627][T22533] netlink: 'syz.6.7762': attribute type 15 has an invalid length. [ 373.998669][ T12] netdevsim netdevsim6 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 373.998678][T22533] netlink: 'syz.6.7762': attribute type 15 has an invalid length. [ 374.018207][ T12] netdevsim netdevsim6 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 374.038025][ T12] netdevsim netdevsim6 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 374.064696][ T12] netdevsim netdevsim6 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 374.311335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.527066][T22569] trusted_key: syz.6.7777 sent an empty control message without MSG_MORE. [ 374.711459][ T31] INFO: task syz.2.3703:13835 blocked for more than 143 seconds. [ 374.739940][ T31] Not tainted syzkaller #0 [ 374.750076][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.765140][ T31] task:syz.2.3703 state:D stack:27104 pid:13835 tgid:13833 ppid:5819 task_flags:0x400140 flags:0x00080002 [ 374.787106][ T31] Call Trace: [ 374.790540][ T31] [ 374.795924][ T31] __schedule+0x14ea/0x5050 [ 374.803008][ T31] ? __pfx___schedule+0x10/0x10 [ 374.808158][ T31] ? schedule+0x90/0x360 [ 374.813790][ T31] schedule+0x164/0x360 [ 374.818048][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.825361][ T31] __mutex_lock+0x7fe/0x1300 [ 374.830303][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 374.836246][ T31] ? __mutex_lock+0x5ac/0x1300 [ 374.844230][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 374.850021][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.856589][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 374.864105][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.869046][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 374.877493][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 374.884395][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 374.890099][ T31] ? __asan_memcpy+0x40/0x70 [ 374.895763][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 374.902681][ T31] ? bpf_lsm_capable+0x9/0x20 [ 374.907540][ T31] ? security_capable+0x7e/0x2c0 [ 374.913727][ T31] genl_rcv_msg+0x61c/0x7a0 [ 374.918335][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.924882][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 374.931604][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 374.937136][ T31] ? __skb_clone+0x63/0x7a0 [ 374.941855][ T31] netlink_rcv_skb+0x232/0x4b0 [ 374.946699][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.956436][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.961853][ T31] ? genl_rcv+0x19/0x40 [ 374.966150][ T31] ? down_read+0x272/0x2e0 [ 374.970646][ T31] ? genl_rcv+0xd/0x40 [ 374.974953][ T31] genl_rcv+0x28/0x40 [ 374.979075][ T31] netlink_unicast+0x80f/0x9b0 [ 374.984714][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 374.990134][ T31] ? __alloc_skb+0x193/0x390 [ 374.995733][ T31] ? netlink_sendmsg+0x650/0xb40 [ 375.000797][ T31] ? skb_put+0x11b/0x210 [ 375.005753][ T31] netlink_sendmsg+0x813/0xb40 [ 375.010615][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.016161][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 375.022208][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.028772][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.038164][ T31] ____sys_sendmsg+0xa68/0xad0 [ 375.043105][ T31] ? __might_fault+0xaf/0x130 [ 375.047878][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.053827][ T31] ? import_iovec+0x73/0xa0 [ 375.058365][ T31] ___sys_sendmsg+0x2a5/0x360 [ 375.063366][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 375.071603][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.076847][ T31] ? futex_wake+0x4ac/0x580 [ 375.081532][ T31] ? __fget_files+0x2a/0x420 [ 375.086148][ T31] ? __fget_files+0x3a0/0x420 [ 375.090856][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 375.096226][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.101768][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.107521][ T31] do_syscall_64+0xe2/0xf80 [ 375.141064][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.147203][ T31] ? trace_irq_disable+0x37/0x100 [ 375.191088][ T31] ? clear_bhb_loop+0x60/0xb0 [ 375.195826][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.225567][ T31] RIP: 0033:0x7f8edd59aeb9 [ 375.233818][ T31] RSP: 002b:00007f8ede3e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.243639][ T31] RAX: ffffffffffffffda RBX: 00007f8edd815fa0 RCX: 00007f8edd59aeb9 [ 375.252543][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 375.260623][ T31] RBP: 00007f8edd608c1f R08: 0000000000000000 R09: 0000000000000000 [ 375.269569][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.280624][ T31] R13: 00007f8edd816038 R14: 00007f8edd815fa0 R15: 00007ffe68a679e8 [ 375.292294][ T31] [ 375.297014][ T31] INFO: task syz.3.4010:14460 blocked for more than 143 seconds. [ 375.305406][ T31] Not tainted syzkaller #0 [ 375.310499][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.350739][ T31] task:syz.3.4010 state:D stack:27104 pid:14460 tgid:14457 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 375.366992][ T31] Call Trace: [ 375.370382][ T31] [ 375.373433][ T31] __schedule+0x14ea/0x5050 [ 375.378143][ T31] ? kasan_save_track+0x3e/0x80 [ 375.383434][ T31] ? kmalloc_reserve+0x136/0x290 [ 375.388482][ T31] ? __pfx___schedule+0x10/0x10 [ 375.393607][ T31] ? schedule+0x90/0x360 [ 375.397947][ T31] schedule+0x164/0x360 [ 375.402423][ T31] schedule_preempt_disabled+0x13/0x30 [ 375.407995][ T31] __mutex_lock+0x7fe/0x1300 [ 375.412814][ T31] ? __mutex_lock+0x5ac/0x1300 [ 375.417683][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 375.423841][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 375.429036][ T31] ? __nlmsg_put+0xef/0x1b0 [ 375.434712][ T31] ? genlmsg_put+0x137/0x2e0 [ 375.439485][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 375.447021][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 375.453558][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 375.460020][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 375.466137][ T31] ? __asan_memcpy+0x40/0x70 [ 375.470847][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 375.477751][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 375.484582][ T31] genl_rcv_msg+0x61c/0x7a0 [ 375.489209][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.494387][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 375.500607][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 375.507869][ T31] ? __skb_clone+0x63/0x7a0 [ 375.513888][ T31] netlink_rcv_skb+0x232/0x4b0 [ 375.518661][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.524274][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.529573][ T31] ? genl_rcv+0x19/0x40 [ 375.533980][ T31] ? down_read+0x272/0x2e0 [ 375.538787][ T31] ? genl_rcv+0xd/0x40 [ 375.543242][ T31] genl_rcv+0x28/0x40 [ 375.547240][ T31] netlink_unicast+0x80f/0x9b0 [ 375.552164][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 375.557507][ T31] ? __alloc_skb+0x193/0x390 [ 375.562306][ T31] ? netlink_sendmsg+0x650/0xb40 [ 375.567290][ T31] ? skb_put+0x11b/0x210 [ 375.571866][ T31] netlink_sendmsg+0x813/0xb40 [ 375.576742][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.582104][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 375.587075][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.592906][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.598217][ T31] ____sys_sendmsg+0xa68/0xad0 [ 375.603428][ T31] ? __might_fault+0xaf/0x130 [ 375.608162][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.613679][ T31] ? import_iovec+0x73/0xa0 [ 375.618207][ T31] ___sys_sendmsg+0x2a5/0x360 [ 375.623197][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 375.628242][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.633736][ T31] ? futex_wait+0x29a/0x380 [ 375.638681][ T31] ? __fget_files+0x2a/0x420 [ 375.643552][ T31] ? __fget_files+0x3a0/0x420 [ 375.648270][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 375.653318][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.658790][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.663837][ T31] do_syscall_64+0xe2/0xf80 [ 375.668355][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.674852][ T31] ? trace_irq_disable+0x37/0x100 [ 375.679896][ T31] ? clear_bhb_loop+0x60/0xb0 [ 375.684752][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.690663][ T31] RIP: 0033:0x7feb4c39aeb9 [ 375.695555][ T31] RSP: 002b:00007feb4d1f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.704063][ T31] RAX: ffffffffffffffda RBX: 00007feb4c615fa0 RCX: 00007feb4c39aeb9 [ 375.712214][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 375.720208][ T31] RBP: 00007feb4c408c1f R08: 0000000000000000 R09: 0000000000000000 [ 375.728554][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.736611][ T31] R13: 00007feb4c616038 R14: 00007feb4c615fa0 R15: 00007fff21067818 [ 375.744925][ T31] [ 375.748005][ T31] [ 375.748005][ T31] Showing all locks held in the system: [ 375.771300][ T31] 1 lock held by khungtaskd/31: [ 375.776192][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 375.801048][ T31] 2 locks held by getty/5580: [ 375.805840][ T31] #0: ffff88814d7150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 375.818340][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 375.829070][ T31] 2 locks held by syz.0.1950/10068: [ 375.835575][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 375.845507][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 375.855873][ T31] 2 locks held by syz.2.3703/13835: [ 375.861718][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 375.869972][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 375.880250][ T31] 2 locks held by syz.3.4010/14460: [ 375.885729][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 375.894034][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 375.904388][ T31] [ 375.906716][ T31] ============================================= [ 375.906716][ T31] [ 375.919096][ T31] NMI backtrace for cpu 1 [ 375.919115][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 375.919136][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 375.919148][ T31] Call Trace: [ 375.919156][ T31] [ 375.919165][ T31] dump_stack_lvl+0xe8/0x150 [ 375.919193][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 375.919209][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 375.919225][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 375.919240][ T31] sys_info+0x135/0x170 [ 375.919252][ T31] watchdog+0xf90/0xfe0 [ 375.919265][ T31] ? watchdog+0x209/0xfe0 [ 375.919278][ T31] kthread+0x726/0x8b0 [ 375.919290][ T31] ? __pfx_watchdog+0x10/0x10 [ 375.919299][ T31] ? __pfx_kthread+0x10/0x10 [ 375.919312][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.919320][ T31] ? __pfx_kthread+0x10/0x10 [ 375.919331][ T31] ret_from_fork+0x51b/0xa40 [ 375.919344][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 375.919352][ T31] ? __switch_to+0xc82/0x1410 [ 375.919367][ T31] ? __pfx_kthread+0x10/0x10 [ 375.919378][ T31] ret_from_fork_asm+0x1a/0x30 [ 375.919398][ T31] [ 375.919402][ T31] Sending NMI from CPU 1 to CPUs 0: [ 376.040480][ C0] NMI backtrace for cpu 0 [ 376.040497][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 376.040514][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 376.040524][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 376.040544][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 376.040557][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242 [ 376.040571][ C0] RAX: 00000000000bdc8f RBX: ffffffff8199570d RCX: 0000000080000001 [ 376.040582][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc99be RDI: ffffffff8c073a00 [ 376.040592][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 376.040603][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70 [ 376.040613][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 376.040623][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 376.040635][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.040645][ C0] CR2: 00007f4c18be4198 CR3: 000000007dc04000 CR4: 00000000003526f0 [ 376.040658][ C0] Call Trace: [ 376.040665][ C0] [ 376.040671][ C0] default_idle+0x9/0x20 [ 376.040687][ C0] default_idle_call+0x72/0xb0 [ 376.040705][ C0] do_idle+0x1bd/0x500 [ 376.040718][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.040734][ C0] ? __pfx_do_idle+0x10/0x10 [ 376.040752][ C0] cpu_startup_entry+0x43/0x60 [ 376.040765][ C0] rest_init+0x2de/0x300 [ 376.040783][ C0] start_kernel+0x380/0x3d0 [ 376.040803][ C0] x86_64_start_reservations+0x24/0x30 [ 376.040818][ C0] x86_64_start_kernel+0x143/0x1c0 [ 376.040833][ C0] common_startup_64+0x13e/0x147 [ 376.040858][ C0] [ 376.041545][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 376.041560][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 376.041580][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 376.041591][ T31] Call Trace: [ 376.041599][ T31] [ 376.041607][ T31] vpanic+0x1e0/0x670 [ 376.041632][ T31] panic+0xc5/0xd0 [ 376.041651][ T31] ? __pfx_panic+0x10/0x10 [ 376.041671][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 376.041700][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 376.041725][ T31] watchdog+0xfda/0xfe0 [ 376.041748][ T31] ? watchdog+0x209/0xfe0 [ 376.041772][ T31] kthread+0x726/0x8b0 [ 376.041795][ T31] ? __pfx_watchdog+0x10/0x10 [ 376.041811][ T31] ? __pfx_kthread+0x10/0x10 [ 376.041832][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.041849][ T31] ? __pfx_kthread+0x10/0x10 [ 376.041868][ T31] ret_from_fork+0x51b/0xa40 [ 376.041888][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.041902][ T31] ? __switch_to+0xc82/0x1410 [ 376.041927][ T31] ? __pfx_kthread+0x10/0x10 [ 376.041947][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.041980][ T31] [ 376.333824][ T31] Kernel Offset: disabled [ 376.338132][ T31] Rebooting in 86400 seconds..