last executing test programs: 4m37.303700916s ago: executing program 0 (id=1680): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='scalable', 0x5a) 4m37.098917899s ago: executing program 0 (id=1685): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xfffffffffffffe44) 4m36.90691818s ago: executing program 0 (id=1689): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) 4m36.705090435s ago: executing program 0 (id=1692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a0001002abd700000000000020000000000000004"], 0x20}}, 0x0) 4m36.480544271s ago: executing program 0 (id=1696): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000100)=0xf1d1a5b05657698c) 4m36.240792204s ago: executing program 0 (id=1701): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x38, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 4m21.18098113s ago: executing program 32 (id=1701): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x38, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m37.113217353s ago: executing program 5 (id=4546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x70}}, 0x0) 2m36.950339191s ago: executing program 5 (id=4551): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x22, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 2m36.703262454s ago: executing program 5 (id=4558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30400000000900010073797a300000000030000380"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 2m36.482682439s ago: executing program 5 (id=4563): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) 2m36.357886599s ago: executing program 5 (id=4567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000d060103000000000000000002000003050001"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x4) 2m36.160881192s ago: executing program 5 (id=4573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) 2m21.137112893s ago: executing program 33 (id=4573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) 1.175963111s ago: executing program 6 (id=8342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 1.072299252s ago: executing program 4 (id=8344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a03000000000000000000020000080900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) 1.045467112s ago: executing program 6 (id=8346): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 906.972442ms ago: executing program 3 (id=8347): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) 904.579844ms ago: executing program 2 (id=8348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 854.172698ms ago: executing program 4 (id=8350): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) 776.268143ms ago: executing program 3 (id=8351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1}, 0x3) 749.172084ms ago: executing program 2 (id=8352): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400), 0x8) 713.804681ms ago: executing program 4 (id=8353): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000400)=0x9) 706.771465ms ago: executing program 1 (id=8354): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5bd}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 685.53677ms ago: executing program 3 (id=8355): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25ff02000000000000dc8b850f238466ccfff57a000000ad6e911b51818462b400", 0x30}], 0x1}, 0x0) 589.110041ms ago: executing program 1 (id=8356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23002abd7000ffdbfe2501000000000000000741000000c6"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050) 556.711146ms ago: executing program 6 (id=8357): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 556.289442ms ago: executing program 2 (id=8358): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) 555.901697ms ago: executing program 3 (id=8359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) 464.23003ms ago: executing program 4 (id=8360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13022cbd7000fbdbdf25010000000000000009410000004c00180000008662726f6164636173742d6c696e6b00"/72], 0x68}}, 0x4000080) 399.198066ms ago: executing program 6 (id=8361): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 398.44161ms ago: executing program 1 (id=8362): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 386.177279ms ago: executing program 3 (id=8363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) epoll_create(0xf) 332.047982ms ago: executing program 2 (id=8364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x24060400) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) 331.249751ms ago: executing program 4 (id=8365): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) 287.485651ms ago: executing program 1 (id=8366): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40010021, 0x0) 274.002292ms ago: executing program 6 (id=8367): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) 186.476859ms ago: executing program 2 (id=8368): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 180.593955ms ago: executing program 3 (id=8369): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000001500)={r1, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x28f9fed5}}, 0xfffe}, 0x90) 161.462903ms ago: executing program 1 (id=8370): unshare(0x2c020400) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f00000002c0)) 125.439004ms ago: executing program 4 (id=8371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x38}}, 0x0) 124.591651ms ago: executing program 6 (id=8372): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) 250.509µs ago: executing program 2 (id=8373): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x1) close(r0) 0s ago: executing program 1 (id=8374): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) kernel console output (not intermixed with test programs): 7] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.202954][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.232067][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.319185][T10299] unsupported nlmsg_type 40 [ 200.403295][ T5870] Bluetooth: hci5: command tx timeout [ 200.705267][T10323] dvmrp0: entered allmulticast mode [ 200.862612][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.900861][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.933184][T10211] bridge_slave_0: entered allmulticast mode [ 200.953067][T10211] bridge_slave_0: entered promiscuous mode [ 200.968265][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.985268][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.996356][T10211] bridge_slave_1: entered allmulticast mode [ 201.018623][T10211] bridge_slave_1: entered promiscuous mode [ 201.213256][T10211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.249935][T10211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.539127][T10211] team0: Port device team_slave_0 added [ 201.570423][T10211] team0: Port device team_slave_1 added [ 201.731365][T10211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.738384][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.782469][T10211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.796636][T10377] netlink: 'syz.3.2112': attribute type 3 has an invalid length. [ 201.824258][T10211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.861367][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.956147][T10211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.169561][T10395] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.191018][T10211] hsr_slave_0: entered promiscuous mode [ 202.213950][T10211] hsr_slave_1: entered promiscuous mode [ 202.237017][T10211] debugfs: 'hsr0' already exists in 'hsr' [ 202.257675][T10211] Cannot create hsr debugfs directory [ 202.363426][T10404] netlink: 'syz.2.2123': attribute type 11 has an invalid length. [ 202.390136][T10404] netlink: 'syz.2.2123': attribute type 11 has an invalid length. [ 202.427081][T10404] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2123'. [ 202.480467][ T5870] Bluetooth: hci5: command tx timeout [ 202.724018][ T30] audit: type=1107 audit(1759240397.324:2): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 202.928713][T10211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.008630][T10211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.059262][T10211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.105873][T10211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.218107][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 203.457899][T10211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.526135][T10211] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.585713][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.592975][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.664308][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.671632][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.238631][T10211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.562164][ T5870] Bluetooth: hci5: command tx timeout [ 204.634380][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 204.934782][T10530] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 205.146456][T10211] veth0_vlan: entered promiscuous mode [ 205.217008][T10211] veth1_vlan: entered promiscuous mode [ 205.263704][T10548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2183'. [ 205.285460][T10547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2184'. [ 205.295498][T10548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2183'. [ 205.365826][T10211] veth0_macvtap: entered promiscuous mode [ 205.392987][T10211] veth1_macvtap: entered promiscuous mode [ 205.468827][T10211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.509809][T10211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.554356][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.575297][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.626790][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.653443][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.891095][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.899386][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.000385][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.019653][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.642764][ T5870] Bluetooth: hci5: command tx timeout [ 207.091419][T10634] netlink: 'syz.5.2223': attribute type 1 has an invalid length. [ 207.382824][T10650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2232'. [ 207.480307][T10655] netlink: 508 bytes leftover after parsing attributes in process `syz.4.2233'. [ 207.720450][T10670] netlink: 'syz.5.2242': attribute type 7 has an invalid length. [ 207.858148][T10675] sctp: [Deprecated]: syz.3.2245 (pid 10675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.858148][T10675] Use struct sctp_sack_info instead [ 208.309202][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2257'. [ 208.623201][T10713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.864521][T10727] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 208.891436][T10727] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 209.054282][T10740] netlink: 'syz.5.2274': attribute type 10 has an invalid length. [ 209.108937][T10740] team0: Cannot enslave team device to itself [ 209.364818][T10757] netlink: 'syz.2.2282': attribute type 12 has an invalid length. [ 209.399460][T10757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2282'. [ 209.601052][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 209.647802][T10773] netlink: 'syz.1.2289': attribute type 1 has an invalid length. [ 209.650687][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 209.665270][T10773] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2289'. [ 209.690180][T10771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.819877][T10782] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 210.029259][T10794] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 210.628748][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2315'. [ 211.091188][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2330'. [ 211.108543][T10854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2330'. [ 211.182077][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2330'. [ 211.702733][T10887] netlink: 'syz.2.2347': attribute type 21 has an invalid length. [ 211.729559][T10887] netlink: 'syz.2.2347': attribute type 4 has an invalid length. [ 211.748066][T10887] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 212.633179][T10931] __nla_validate_parse: 5 callbacks suppressed [ 212.633203][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2368'. [ 212.900329][T10941] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 212.908244][T10941] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2373'. [ 213.346579][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 213.379635][T10960] netlink: 'syz.5.2382': attribute type 9 has an invalid length. [ 213.394137][T10960] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2382'. [ 214.169897][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 214.602510][T11025] netlink: 134820 bytes leftover after parsing attributes in process `syz.4.2412'. [ 215.142295][T11052] netlink: 'syz.1.2422': attribute type 1 has an invalid length. [ 215.163249][T11052] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2422'. [ 215.488495][T11067] netlink: 'syz.5.2430': attribute type 3 has an invalid length. [ 215.516806][T11067] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2430'. [ 215.761907][T11079] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 216.432864][T11112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.609436][T11122] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2456'. [ 216.662699][T11127] netlink: 45 bytes leftover after parsing attributes in process `syz.5.2459'. [ 217.363630][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 217.363908][ T5877] Bluetooth: hci0: command 0x0406 tx timeout [ 217.369923][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 217.375998][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 217.382489][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 217.845198][T11191] __nla_validate_parse: 2 callbacks suppressed [ 217.845223][T11191] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2491'. [ 217.956846][T11195] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2494'. [ 217.992000][T11195] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.323647][T11216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2504'. [ 218.415325][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2508'. [ 218.539193][T11228] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.2509'. [ 218.557644][T11227] delete_channel: no stack [ 218.663275][T11233] netdevsim netdevsim1: loading /lib/firmware// failed with error -22 [ 218.690242][T11233] netdevsim netdevsim1: Direct firmware load for / failed with error -22 [ 218.740272][T11233] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 218.929800][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2520'. [ 219.153018][T11261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2525'. [ 219.771406][T11293] bridge1: entered allmulticast mode [ 219.996214][T11311] netlink: 676 bytes leftover after parsing attributes in process `syz.4.2552'. [ 220.005659][T11311] netlink: 676 bytes leftover after parsing attributes in process `syz.4.2552'. [ 220.053324][T11314] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 220.070264][T11314] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 220.173828][T11321] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.2557'. [ 220.193686][T11322] IPVS: length: 4096 != 8 [ 220.813308][T11359] netlink: 'syz.5.2576': attribute type 4 has an invalid length. [ 221.985012][T11431] netlink: 'syz.5.2610': attribute type 1 has an invalid length. [ 222.177967][T11437] ip6erspan0: entered promiscuous mode [ 222.829325][T11473] netlink: 'syz.5.2628': attribute type 1 has an invalid length. [ 222.886317][T11478] __nla_validate_parse: 10 callbacks suppressed [ 222.886342][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2629'. [ 223.028984][T11485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2636'. [ 223.334426][T11506] @ÿ: renamed from veth0_vlan (while UP) [ 223.787691][T11534] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 223.796692][T11534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2658'. [ 223.973563][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'. [ 224.434985][T11568] gre1: entered allmulticast mode [ 224.452303][T11570] openvswitch: netlink: IP tunnel attribute has 17 unknown bytes. [ 224.506328][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 224.718121][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 224.771434][T11592] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2686'. [ 224.962605][T11602] pim6reg: entered allmulticast mode [ 225.191728][T11614] netlink: 'syz.1.2694': attribute type 1 has an invalid length. [ 225.405563][T11625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2700'. [ 225.901674][T11652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2713'. [ 226.124483][T11666] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2719'. [ 226.475026][T11687] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 227.081927][T11719] openvswitch: netlink: Flow actions attr not present in new flow. [ 228.002513][T11770] __nla_validate_parse: 2 callbacks suppressed [ 228.002535][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'. [ 228.037176][T11773] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2761'. [ 228.082711][T11773] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2761'. [ 228.398746][T11791] netlink: 'syz.2.2771': attribute type 49 has an invalid length. [ 228.626449][T11803] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2776'. [ 228.888961][T11820] netlink: 'syz.4.2784': attribute type 7 has an invalid length. [ 229.027020][T11824] @0Ù: renamed from bond_slave_1 (while UP) [ 229.200223][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2793'. [ 229.882823][T11874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2809'. [ 230.019568][T11882] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 230.742880][T11923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2830'. [ 230.845223][T11930] netlink: 'syz.5.2834': attribute type 39 has an invalid length. [ 230.888069][T11930] veth0_macvtap: left promiscuous mode [ 230.967356][T11937] netlink: 'syz.3.2839': attribute type 9 has an invalid length. [ 231.142572][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2842'. [ 231.395735][T11959] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2851'. [ 231.703000][T11974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2857'. [ 231.789631][T11982] netlink: 'syz.4.2861': attribute type 2 has an invalid length. [ 231.811049][T11982] netlink: 'syz.4.2861': attribute type 1 has an invalid length. [ 231.861951][T11986] netlink: 'syz.5.2864': attribute type 1 has an invalid length. [ 232.221347][T12006] IPv6: sit2: Disabled Multicast RS [ 232.231709][T12006] sit2: entered allmulticast mode [ 232.470590][T12018] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 232.540791][T12026] netlink: 'syz.4.2882': attribute type 1 has an invalid length. [ 233.307083][T12072] netlink: 'syz.5.2905': attribute type 14 has an invalid length. [ 233.327767][T12074] netlink: 'syz.2.2906': attribute type 13 has an invalid length. [ 233.360868][T12074] netlink: 'syz.2.2906': attribute type 17 has an invalid length. [ 233.436148][T12077] openvswitch: netlink: Key type 186 is out of range max 32 [ 233.621357][T12074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.644540][T12074] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.682498][T12074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.350541][T12118] __nla_validate_parse: 5 callbacks suppressed [ 234.350565][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 234.398892][T12120] tc_dump_action: action bad kind [ 234.408283][T12118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2926'. [ 234.408953][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2929'. [ 234.438107][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2929'. [ 234.478626][T12122] netlink: 'syz.5.2929': attribute type 1 has an invalid length. [ 234.567281][T12128] veth0_macvtap: left promiscuous mode [ 234.976767][T12154] netdevsim0: mtu greater than device maximum [ 234.986802][T12152] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2945'. [ 235.019570][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2945'. [ 235.147074][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 235.380913][T12178] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2956'. [ 235.469412][T12184] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2959'. [ 235.612368][T12192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2961'. [ 235.639397][T12189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.686423][T12189] bond0: (slave rose0): Enslaving as an active interface with an up link [ 235.736273][T12198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.151844][T12219] IPv6: Can't replace route, no match found [ 237.369524][T12288] validate_nla: 3 callbacks suppressed [ 237.369548][T12288] netlink: 'syz.4.3002': attribute type 25 has an invalid length. [ 237.650269][T12304] netlink: 'syz.3.3009': attribute type 1 has an invalid length. [ 237.849048][T12315] netlink: 'syz.2.3011': attribute type 21 has an invalid length. [ 237.863266][T10248] IPVS: starting estimator thread 0... [ 237.900453][T12315] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.908512][T12315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.915817][T12315] IPv6: NLM_F_CREATE should be set when creating new route [ 237.923195][T12315] IPv6: NLM_F_CREATE should be set when creating new route [ 237.930601][T12315] IPv6: NLM_F_CREATE should be set when creating new route [ 237.974327][T12319] IPVS: using max 25 ests per chain, 60000 per kthread [ 239.427887][T12407] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 240.284047][T12453] __nla_validate_parse: 6 callbacks suppressed [ 240.284069][T12453] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3071'. [ 240.340114][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3071'. [ 240.349128][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 241.056310][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 241.067812][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 242.150454][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3126'. [ 242.181572][T12564] netlink: 'syz.1.3126': attribute type 5 has an invalid length. [ 242.189816][T12564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3126'. [ 242.244867][T12564] geneve3: entered promiscuous mode [ 242.264920][T12564] geneve3: entered allmulticast mode [ 242.288384][T12570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3128'. [ 242.288926][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 242.318669][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 242.343731][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 242.385917][T12570] vlan0: entered promiscuous mode [ 242.401401][ T37] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 242.740688][T12595] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.867598][T12603] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3143'. [ 243.111601][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3151'. [ 243.383347][T12633] netlink: 'syz.5.3157': attribute type 7 has an invalid length. [ 243.403946][T12633] netlink: 'syz.5.3157': attribute type 8 has an invalid length. [ 244.625579][T12708] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 244.649742][T12708] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 244.844278][T12719] ip6gre1: entered allmulticast mode [ 245.520018][T12757] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 245.765886][T12770] __nla_validate_parse: 8 callbacks suppressed [ 245.765908][T12770] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3219'. [ 245.820976][T12778] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3220'. [ 246.230534][T12801] netlink: 'syz.3.3227': attribute type 1 has an invalid length. [ 246.327898][T12760] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.360444][T12760] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 246.417745][T12760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.449631][T12760] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 246.516093][T12760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.560439][T12760] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 246.600160][T12815] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 246.609837][T12760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.621974][T12760] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 246.628605][T12815] netlink: 15 bytes leftover after parsing attributes in process `syz.4.3235'. [ 246.717839][T12760] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 246.758925][T12823] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3239'. [ 246.765079][T12760] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 246.907791][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3242'. [ 246.979397][T12831] netlink: 'syz.4.3243': attribute type 13 has an invalid length. [ 247.013701][T12831] netlink: 'syz.4.3243': attribute type 17 has an invalid length. [ 247.200574][T12831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.541201][T12760] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 247.570113][T12760] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 248.398173][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3271'. [ 248.600123][T12911] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3275'. [ 248.651520][T12911] hsr_slave_0: left promiscuous mode [ 248.675836][T12911] hsr_slave_1: left promiscuous mode [ 249.113161][T12940] 8021q: VLANs not supported on lo [ 249.341284][T12947] bond1: entered promiscuous mode [ 249.346403][T12947] bond1: entered allmulticast mode [ 249.378494][T12956] netlink: 'syz.2.3292': attribute type 21 has an invalid length. [ 249.398195][T12947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.460176][T12956] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3292'. [ 250.510378][T13021] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 250.564157][T13021] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.839138][T13040] netlink: 'syz.5.3325': attribute type 1 has an invalid length. [ 251.447042][T13075] sctp: [Deprecated]: syz.4.3340 (pid 13075) Use of int in max_burst socket option. [ 251.447042][T13075] Use struct sctp_assoc_value instead [ 251.711590][T13094] netlink: 'syz.5.3348': attribute type 21 has an invalid length. [ 251.729849][T13094] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3348'. [ 251.765363][T13094] netlink: 'syz.5.3348': attribute type 1 has an invalid length. [ 251.876764][T13101] netlink: 'syz.1.3351': attribute type 9 has an invalid length. [ 251.899162][T13101] netlink: 'syz.1.3351': attribute type 6 has an invalid length. [ 252.242925][T13123] TCP: TCP_TX_DELAY enabled [ 252.621253][T13144] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3369'. [ 252.631870][T13147] netlink: 'syz.1.3370': attribute type 21 has an invalid length. [ 252.639917][T13147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3370'. [ 253.379367][T13190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.439549][T13192] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 253.659425][T13203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3392'. [ 253.686006][T13203] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3392'. [ 253.705037][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3392'. [ 254.032676][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 254.109964][T13229] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3404'. [ 254.335943][T13242] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 254.369699][T13246] netlink: 'syz.1.3410': attribute type 1 has an invalid length. [ 255.179047][T13290] netlink: 'syz.3.3429': attribute type 21 has an invalid length. [ 255.222452][T13290] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3429'. [ 255.250350][T13290] netlink: 'syz.3.3429': attribute type 5 has an invalid length. [ 255.258157][T13290] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3429'. [ 255.577787][T13312] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 255.663898][T13318] sctp: [Deprecated]: syz.1.3442 (pid 13318) Use of int in max_burst socket option. [ 255.663898][T13318] Use struct sctp_assoc_value instead [ 256.300340][T13353] netlink: 'syz.5.3455': attribute type 16 has an invalid length. [ 256.330396][T13353] netlink: 'syz.5.3455': attribute type 17 has an invalid length. [ 256.360237][T13353] netlink: 'syz.5.3455': attribute type 27 has an invalid length. [ 256.401188][ T51] Bluetooth: hci0: command tx timeout [ 256.675287][T13376] netlink: 'syz.4.3464': attribute type 4 has an invalid length. [ 257.615581][T13429] netlink: 'syz.4.3487': attribute type 1 has an invalid length. [ 257.670420][T13433] __nla_validate_parse: 1 callbacks suppressed [ 257.670446][T13433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3488'. [ 257.795703][T13438] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3491'. [ 258.050893][T13450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3495'. [ 258.075253][T13450] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 258.594567][T13484] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3509'. [ 259.176019][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3522'. [ 259.203943][T13517] netlink: 'syz.5.3522': attribute type 5 has an invalid length. [ 259.220188][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3522'. [ 259.234057][T13520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3523'. [ 259.278247][T13517] geneve2: entered promiscuous mode [ 259.297453][T13517] geneve2: entered allmulticast mode [ 259.318093][ T37] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 259.338058][ T198] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 259.380147][ T198] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 259.404143][ T198] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 259.518867][T13531] netlink: 'syz.1.3528': attribute type 13 has an invalid length. [ 259.543148][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3530'. [ 259.560759][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3530'. [ 259.592392][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3530'. [ 259.974336][T13555] ip6gre1: entered promiscuous mode [ 260.180224][T13565] netlink: 'syz.4.3541': attribute type 16 has an invalid length. [ 261.365879][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.372613][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.438530][T13634] gre2: entered promiscuous mode [ 261.455105][T13634] gre2: entered allmulticast mode [ 261.957247][T13663] netlink: 'syz.3.3579': attribute type 10 has an invalid length. [ 262.314227][T13682] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 262.903481][T13716] __nla_validate_parse: 82 callbacks suppressed [ 262.903504][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3601'. [ 263.019020][T13721] veth1_virt_wifi: entered promiscuous mode [ 263.056940][T13721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3604'. [ 263.120335][T13721] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 264.657545][T13786] netlink: 'syz.3.3628': attribute type 61 has an invalid length. [ 265.051732][T13800] netlink: 'syz.3.3635': attribute type 64 has an invalid length. [ 265.231032][T13812] netlink: 'syz.3.3639': attribute type 11 has an invalid length. [ 265.439363][T13824] netlink: 'syz.3.3644': attribute type 17 has an invalid length. [ 265.470234][T13824] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3644'. [ 265.830584][T13838] delete_channel: no stack [ 266.075517][T13857] syz_tun: entered promiscuous mode [ 266.770256][T13887] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.939564][T13899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3675'. [ 267.382711][T13920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.591297][T13936] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3690'. [ 268.210682][T13971] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 268.242989][T13971] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 268.381311][T13981] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 268.410278][T13981] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 268.604992][T13995] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3714'. [ 268.787993][T14004] netlink: 'syz.5.3718': attribute type 9 has an invalid length. [ 269.493738][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3737'. [ 269.515716][T14044] netlink: 'syz.5.3738': attribute type 9 has an invalid length. [ 269.534393][T14044] netlink: 'syz.5.3738': attribute type 7 has an invalid length. [ 269.550183][T14044] netlink: 'syz.5.3738': attribute type 8 has an invalid length. [ 269.591194][T14049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3740'. [ 269.636266][T14049] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3740'. [ 269.678056][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3743'. [ 269.731907][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'. [ 270.048988][T14076] netlink: 'syz.5.3755': attribute type 10 has an invalid length. [ 270.085849][T14076] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3755'. [ 270.153263][T14076] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 270.168169][T14076] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 270.176500][T14076] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 270.433949][T14099] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 270.453229][T14099] bridge2: entered allmulticast mode [ 270.823318][T14123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3776'. [ 271.086775][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3783'. [ 271.911377][T14181] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 271.955764][T14183] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 272.007456][T14183] bridge1: entered allmulticast mode [ 272.112025][T14193] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 272.190270][T14195] ieee802154 phy0 wpan0: encryption failed: -90 [ 272.235030][T14199] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3811'. [ 272.291028][T14199] ..0·: renamed from hsr0 (while UP) [ 272.326074][T14199] ..0·: entered allmulticast mode [ 272.338808][T14199] hsr_slave_0: entered allmulticast mode [ 272.347987][T14199] hsr_slave_1: entered allmulticast mode [ 272.354830][T14199] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 272.378879][T14203] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 273.061593][T14248] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.127623][T14253] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.689428][T14284] __nla_validate_parse: 3 callbacks suppressed [ 273.689452][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'. [ 273.750209][T14284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3853'. [ 273.759589][T14284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3853'. [ 273.949867][T14300] netlink: 'syz.4.3860': attribute type 1 has an invalid length. [ 274.027112][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3861'. [ 274.044818][T14304] netlink: 'syz.5.3862': attribute type 21 has an invalid length. [ 274.054972][T14304] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3862'. [ 274.188259][T14311] netlink: 'syz.2.3866': attribute type 1 has an invalid length. [ 274.224922][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3866'. [ 275.021611][T14363] batadv1: entered allmulticast mode [ 275.054343][T14363] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 275.315080][T14381] netlink: 'syz.4.3900': attribute type 1 has an invalid length. [ 275.891631][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'. [ 276.140327][T14432] netlink: 'syz.1.3924': attribute type 1 has an invalid length. [ 276.531475][T14456] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3937'. [ 276.708548][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 276.761208][T14466] ip6gretap2: entered promiscuous mode [ 276.783889][T14466] ip6gretap2: entered allmulticast mode [ 276.801640][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3942'. [ 277.201654][T14495] netlink: 'syz.1.3956': attribute type 2 has an invalid length. [ 277.693263][T14517] mac80211_hwsim hwsim5 ªªªªª;: renamed from wlan0 [ 277.757846][T14519] netlink: 'syz.2.3968': attribute type 4 has an invalid length. [ 277.959286][T14531] netlink: 'syz.2.3973': attribute type 41 has an invalid length. [ 278.139013][T14540] netlink: 'syz.1.3978': attribute type 21 has an invalid length. [ 278.686749][T14574] netlink: set zone limit has 8 unknown bytes [ 279.785956][T14627] __nla_validate_parse: 8 callbacks suppressed [ 279.785980][T14627] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4013'. [ 281.142582][T14695] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4040'. [ 281.837421][T14723] netlink: 'syz.5.4051': attribute type 21 has an invalid length. [ 281.860186][T14723] netlink: 'syz.5.4051': attribute type 6 has an invalid length. [ 281.868084][T14723] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4051'. [ 282.223186][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4058'. [ 282.262711][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4058'. [ 283.374480][T14784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4081'. [ 283.575298][T14795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4085'. [ 283.733862][T14800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4089'. [ 283.821423][T14806] netlink: 'syz.5.4092': attribute type 4 has an invalid length. [ 283.935972][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'. [ 284.342988][T14830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.516567][T14838] Zero length message leads to an empty skb [ 284.623963][T14842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4110'. [ 284.889068][T14853] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 285.074919][T14861] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.960323][T14906] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4141'. [ 285.969441][T14906] netlink: 'syz.4.4141': attribute type 1 has an invalid length. [ 286.390477][T14924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.117650][T14956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.293210][T10248] IPVS: starting estimator thread 0... [ 287.333171][T14968] netlink: 'syz.2.4171': attribute type 32 has an invalid length. [ 287.390368][T14969] IPVS: using max 26 ests per chain, 62400 per kthread [ 287.675443][T14984] pimreg: entered allmulticast mode [ 288.327382][T15020] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4196'. [ 288.337457][T15020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4196'. [ 288.347943][T15020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4196'. [ 288.724493][T15036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4204'. [ 288.992077][T10262] IPVS: starting estimator thread 0... [ 289.102502][T15051] IPVS: using max 25 ests per chain, 60000 per kthread [ 289.129725][T15059] syz.2.4215: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 289.172897][T15059] CPU: 1 UID: 0 PID: 15059 Comm: syz.2.4215 Not tainted syzkaller #0 PREEMPT(full) [ 289.172948][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.172969][T15059] Call Trace: [ 289.172982][T15059] [ 289.172993][T15059] dump_stack_lvl+0x189/0x250 [ 289.173033][T15059] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 289.173066][T15059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.173091][T15059] ? __pfx__printk+0x10/0x10 [ 289.173121][T15059] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 289.173146][T15059] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 289.173176][T15059] warn_alloc+0x214/0x310 [ 289.173217][T15059] ? stack_depot_save_flags+0x40/0x860 [ 289.173254][T15059] ? __pfx_warn_alloc+0x10/0x10 [ 289.173288][T15059] ? kasan_save_track+0x4f/0x80 [ 289.173314][T15059] ? xskq_create+0x56/0x170 [ 289.173334][T15059] ? xsk_init_queue+0xb0/0x110 [ 289.173352][T15059] ? xsk_setsockopt+0x4dc/0x8d0 [ 289.173383][T15059] ? do_sock_setsockopt+0x179/0x1b0 [ 289.173409][T15059] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 289.173433][T15059] ? do_syscall_64+0xfa/0x3b0 [ 289.173456][T15059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.173488][T15059] __vmalloc_node_range_noprof+0x125/0x12f0 [ 289.173558][T15059] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 289.173597][T15059] ? __kasan_kmalloc+0x93/0xb0 [ 289.173630][T15059] vmalloc_user_noprof+0xad/0xf0 [ 289.173660][T15059] ? xskq_create+0xbf/0x170 [ 289.173683][T15059] xskq_create+0xbf/0x170 [ 289.173709][T15059] xsk_init_queue+0xb0/0x110 [ 289.173732][T15059] xsk_setsockopt+0x4dc/0x8d0 [ 289.173771][T15059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 289.173807][T15059] ? __pfx_aa_sk_perm+0x10/0x10 [ 289.173845][T15059] ? aa_sock_opt_perm+0xff/0x1b0 [ 289.173870][T15059] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 289.173893][T15059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 289.173929][T15059] do_sock_setsockopt+0x179/0x1b0 [ 289.173962][T15059] __x64_sys_setsockopt+0x13f/0x1b0 [ 289.173998][T15059] do_syscall_64+0xfa/0x3b0 [ 289.174028][T15059] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.174058][T15059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.174080][T15059] ? clear_bhb_loop+0x60/0xb0 [ 289.174108][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.174129][T15059] RIP: 0033:0x7f5acdd8eec9 [ 289.174157][T15059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.174176][T15059] RSP: 002b:00007f5acec4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.174199][T15059] RAX: ffffffffffffffda RBX: 00007f5acdfe5fa0 RCX: 00007f5acdd8eec9 [ 289.174224][T15059] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 289.174242][T15059] RBP: 00007f5acde11f91 R08: 0000000000000004 R09: 0000000000000000 [ 289.174256][T15059] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.174270][T15059] R13: 00007f5acdfe6038 R14: 00007f5acdfe5fa0 R15: 00007fffcc775168 [ 289.174304][T15059] [ 289.175453][T15059] Mem-Info: [ 289.480799][T15059] active_anon:6203 inactive_anon:0 isolated_anon:0 [ 289.480799][T15059] active_file:3144 inactive_file:39952 isolated_file:0 [ 289.480799][T15059] unevictable:768 dirty:282 writeback:0 [ 289.480799][T15059] slab_reclaimable:11551 slab_unreclaimable:174532 [ 289.480799][T15059] mapped:34331 shmem:1369 pagetables:1607 [ 289.480799][T15059] sec_pagetables:0 bounce:0 [ 289.480799][T15059] kernel_misc_reclaimable:0 [ 289.480799][T15059] free:1237140 free_pcp:13740 free_cma:0 [ 289.558308][T15059] Node 0 active_anon:24812kB inactive_anon:0kB active_file:12576kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137224kB dirty:1124kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13188kB pagetables:5984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 289.600865][T15059] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 289.659972][T15074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4222'. [ 289.669435][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4222'. [ 289.678903][T15059] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.731680][T15059] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 289.751512][T15059] Node 0 DMA32 free:1046356kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24764kB inactive_anon:0kB active_file:12576kB inactive_file:157764kB unevictable:1536kB writepending:1124kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:36308kB local_pcp:18592kB free_cma:0kB [ 289.790352][T15059] lowmem_reserve[]: 0 0 1 1 1 [ 289.795351][T15059] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 289.860291][T15059] lowmem_reserve[]: 0 0 0 0 0 [ 289.865134][T15059] Node 1 Normal free:3886840kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:9344kB free_cma:0kB [ 289.930146][T15059] lowmem_reserve[]: 0 0 0 0 0 [ 289.934964][T15059] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.980488][T15059] Node 0 DMA32: 1495*4kB (UM) 311*8kB (U) 160*16kB (UM) 880*32kB (UME) 1149*64kB (UME) 648*128kB (UM) 403*256kB (UME) 224*512kB (UME) 94*1024kB (UM) 6*2048kB (UM) 128*4096kB (UM) = 1046356kB [ 290.041631][T15059] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 290.110074][T15059] Node 1 Normal: 182*4kB (UME) 48*8kB (UME) 54*16kB (UME) 106*32kB (UME) 34*64kB (UME) 11*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3886840kB [ 290.125174][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4233'. [ 290.191067][T15059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.194914][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4234'. [ 290.234143][T15059] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.273786][T15059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.296214][T15059] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.323403][T15059] 44461 total pagecache pages [ 290.334435][T15059] 0 pages in swap cache [ 290.339516][T15059] Free swap = 124996kB [ 290.352076][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4236'. [ 290.365985][T15059] Total swap = 124996kB [ 290.371295][T15103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.387150][T15059] 2097051 pages RAM [ 290.391751][T15059] 0 pages HighMem/MovableOnly [ 290.396473][T15059] 424998 pages reserved [ 290.401389][T15059] 0 pages cma reserved [ 291.056481][T15138] IPv6: sit1: Disabled Multicast RS [ 291.073732][T15138] sit1: entered allmulticast mode [ 291.160491][T15145] netlink: set zone limit has 8 unknown bytes [ 291.551386][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4268'. [ 291.568343][T15167] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4268'. [ 291.589910][T15166] nicvf0: entered promiscuous mode [ 292.821628][T15248] netlink: 'syz.2.4308': attribute type 1 has an invalid length. [ 292.829747][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 292.884653][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 292.899655][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 292.925535][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 292.952890][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 292.973683][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 293.014358][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 293.066926][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 293.106294][T15246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.480720][T15277] netlink: 'syz.5.4321': attribute type 3 has an invalid length. [ 295.299572][T15383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.542947][T15400] netlink: 'syz.2.4374': attribute type 32 has an invalid length. [ 296.098618][T15431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.993758][T15482] netlink: 'syz.2.4414': attribute type 11 has an invalid length. [ 297.028743][T15484] netlink: 'syz.4.4415': attribute type 1 has an invalid length. [ 297.193488][T15495] netlink: 'syz.2.4420': attribute type 20 has an invalid length. [ 298.026912][T15543] netlink: 'syz.5.4445': attribute type 12 has an invalid length. [ 298.244768][T15555] __nla_validate_parse: 15 callbacks suppressed [ 298.244792][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4450'. [ 298.289436][T15561] bond0: (slave gre0): Error: Device type is different from other slaves [ 298.318999][T15555] bridge2: entered allmulticast mode [ 298.957807][T15599] netlink: 23432 bytes leftover after parsing attributes in process `syz.5.4470'. [ 298.988245][T15603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.149479][T15611] netlink: 'syz.5.4478': attribute type 3 has an invalid length. [ 299.456440][T15626] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4486'. [ 299.470593][T15624] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4484'. [ 299.492059][T15624] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4484'. [ 299.517692][T15624] netlink: 'syz.3.4484': attribute type 5 has an invalid length. [ 299.536630][T15624] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4484'. [ 299.619821][T15635] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 299.841177][T15647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.138668][T15665] IPv6: Can't replace route, no match found [ 300.231106][T15668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.125624][T15725] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.4535'. [ 301.170352][T15725] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.4535'. [ 301.540480][T15749] netlink: 'syz.4.4547': attribute type 9 has an invalid length. [ 301.924774][T15776] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4558'. [ 301.944351][T15775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.475273][T15808] netlink: 'syz.1.4576': attribute type 1 has an invalid length. [ 303.349149][T15867] netlink: 'syz.3.4604': attribute type 30 has an invalid length. [ 303.370826][T15867] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 303.400282][T15867] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 303.695753][T15888] netlink: 'syz.3.4614': attribute type 21 has an invalid length. [ 303.705742][T15888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4614'. [ 303.837633][T15898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4619'. [ 303.855341][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4620'. [ 303.860976][T15898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4619'. [ 304.127344][T15913] netlink: 'syz.4.4627': attribute type 10 has an invalid length. [ 304.137525][T15913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4627'. [ 304.149473][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4628'. [ 304.150941][T15913] batman_adv: batadv0: Adding interface: virt_wifi0 [ 304.165597][T15913] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.175014][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4628'. [ 304.198598][T15913] batman_adv: batadv0: Interface activated: virt_wifi0 [ 304.252006][T15916] ip6tnl1: entered promiscuous mode [ 304.257486][T15916] ip6tnl1: entered allmulticast mode [ 304.379249][T15929] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4633'. [ 304.544127][T15939] netlink: 'syz.1.4639': attribute type 15 has an invalid length. [ 304.762697][T15953] ip6erspan0: entered promiscuous mode [ 305.284037][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'. [ 305.297068][T15987] bridge_slave_1: left allmulticast mode [ 305.302949][T15987] bridge_slave_1: left promiscuous mode [ 305.308966][T15987] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.343056][T15987] bridge_slave_0: left allmulticast mode [ 305.356096][T15987] bridge_slave_0: left promiscuous mode [ 305.370730][T15987] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.725637][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4673'. [ 305.952419][T16021] netlink: 'syz.2.4681': attribute type 1 has an invalid length. [ 306.156702][T16034] netlink: 'syz.1.4687': attribute type 33 has an invalid length. [ 306.732548][T16075] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 306.745523][T16075] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 307.697919][T16134] netlink: 'syz.4.4736': attribute type 1 has an invalid length. [ 308.003035][T16153] netlink: 'syz.3.4745': attribute type 1 has an invalid length. [ 309.061041][T16206] netlink: 'syz.3.4768': attribute type 21 has an invalid length. [ 309.534199][T16235] __nla_validate_parse: 8 callbacks suppressed [ 309.534219][T16235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4781'. [ 309.713218][T16246] bridge_slave_0: left allmulticast mode [ 309.726692][T16246] bridge_slave_0: left promiscuous mode [ 309.737543][T16246] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.759406][T16250] netlink: 'syz.4.4790': attribute type 30 has an invalid length. [ 309.768659][T16246] bond0: (slave 30): Releasing backup interface [ 309.798952][T16246] bond0: (slave bond_slave_1): Releasing backup interface [ 309.836664][T16246] team0: Port device team_slave_0 removed [ 309.873622][T16246] team0: Port device team_slave_1 removed [ 309.891293][T16246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.898765][T16246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.922330][T16246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.929796][T16246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.362470][T16282] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4805'. [ 310.617726][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4812'. [ 310.648725][T16301] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 4, id = 0 [ 310.940329][T16320] sctp: [Deprecated]: syz.4.4823 (pid 16320) Use of int in maxseg socket option. [ 310.940329][T16320] Use struct sctp_assoc_value instead [ 311.297933][T16337] openvswitch: netlink: Message has 4 unknown bytes. [ 311.445170][T16342] netlink: 'syz.1.4835': attribute type 13 has an invalid length. [ 312.592178][T16405] netlink: 'syz.1.4867': attribute type 1 has an invalid length. [ 312.797290][T16421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4874'. [ 313.469836][T16463] netlink: 'syz.1.4895': attribute type 5 has an invalid length. [ 313.492490][T16465] netlink: 'syz.2.4896': attribute type 13 has an invalid length. [ 313.687821][T16477] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4902'. [ 314.279084][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4922'. [ 314.288568][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4922'. [ 314.314416][T16523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4925'. [ 314.407351][T16526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4928'. [ 314.549995][T16537] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.4932'. [ 315.038626][T16566] veth3: entered promiscuous mode [ 315.119159][T16572] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4949'. [ 315.425726][T16593] netlink: 'syz.1.4960': attribute type 8 has an invalid length. [ 315.817130][T16621] bridge_slave_0: left allmulticast mode [ 315.826937][T16621] bridge_slave_0: left promiscuous mode [ 315.833943][T16621] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.866018][T16621] bridge_slave_1: left allmulticast mode [ 315.872645][T16621] bridge_slave_1: left promiscuous mode [ 315.878675][T16621] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.910291][T16621] bond0: (slave bond_slave_0): Releasing backup interface [ 315.929601][T16621] bond0: (slave bond_slave_1): Releasing backup interface [ 315.965507][T16621] team0: Port device team_slave_0 removed [ 315.979363][T16621] team0: Port device team_slave_1 removed [ 315.989638][T16621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.999079][T16621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.019559][T16621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.028070][T16621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.039693][T16621] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.533441][T16659] netlink: 'syz.3.4993': attribute type 15 has an invalid length. [ 316.553453][T16659] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4993'. [ 316.930618][T16687] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 316.990968][T16690] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.251302][T16706] veth4: entered promiscuous mode [ 317.256413][T16706] veth4: entered allmulticast mode [ 317.289600][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5019'. [ 317.307904][T16713] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 317.472127][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5023'. [ 317.923032][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5034'. [ 317.941825][T16741] veth1: entered promiscuous mode [ 317.969074][T16741] netlink: 'syz.4.5034': attribute type 8 has an invalid length. [ 317.984536][T16741] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 318.003530][T16747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5036'. [ 318.017826][ T5873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.027484][ T5873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.035544][T16747] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5036'. [ 318.036154][ T5873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.060588][ T5873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.069965][ T5873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.294121][T16762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5042'. [ 318.328376][T16762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5042'. [ 318.685675][T16786] netlink: 'syz.3.5051': attribute type 1 has an invalid length. [ 318.704604][T16786] netlink: 'syz.3.5051': attribute type 4 has an invalid length. [ 318.778703][T16748] chnl_net:caif_netlink_parms(): no params data found [ 319.122297][T16748] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.133461][T16748] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.141045][T16748] bridge_slave_0: entered allmulticast mode [ 319.149244][T16748] bridge_slave_0: entered promiscuous mode [ 319.162574][T16748] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.170654][T16748] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.178549][T16748] bridge_slave_1: entered allmulticast mode [ 319.204656][T16748] bridge_slave_1: entered promiscuous mode [ 319.258791][T16818] netlink: 'syz.3.5066': attribute type 11 has an invalid length. [ 319.284002][T16820] C: renamed from lo [ 319.294667][T16820] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 319.385087][T16748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.442074][T16748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.461789][T16828] bridge0: port 3(netdevsim2) entered blocking state [ 319.468694][T16828] bridge0: port 3(netdevsim2) entered disabled state [ 319.485967][T16828] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 319.496850][T16828] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 319.512484][T16828] bridge0: port 3(netdevsim2) entered blocking state [ 319.519474][T16828] bridge0: port 3(netdevsim2) entered forwarding state [ 319.598646][T16835] netlink: 'syz.2.5074': attribute type 32 has an invalid length. [ 319.614146][T16835] __nla_validate_parse: 136 callbacks suppressed [ 319.614166][T16835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5074'. [ 319.648214][T16839] netlink: 'syz.3.5076': attribute type 1 has an invalid length. [ 319.683724][T16748] team0: Port device team_slave_0 added [ 319.702801][T16748] team0: Port device team_slave_1 added [ 319.807143][T16846] netlink: 'syz.4.5079': attribute type 2 has an invalid length. [ 319.850503][T16748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.866692][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.947874][T16748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.982978][T16748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.002670][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.054819][T16748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.077944][T16853] netlink: 4928 bytes leftover after parsing attributes in process `syz.1.5080'. [ 320.163160][ T51] Bluetooth: hci6: command tx timeout [ 320.232591][T16748] hsr_slave_0: entered promiscuous mode [ 320.239472][T16748] hsr_slave_1: entered promiscuous mode [ 320.247097][T16748] debugfs: 'hsr0' already exists in 'hsr' [ 320.253261][T16748] Cannot create hsr debugfs directory [ 320.691085][T16885] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 320.731946][T16888] netlink: 'syz.4.5096': attribute type 96 has an invalid length. [ 320.968788][T16748] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 321.054807][T16748] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 321.130867][T16748] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 321.165160][T16748] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 321.437528][T16748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.514322][T16748] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.572438][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.579742][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.637656][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.645744][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.707381][T16940] netlink: 'syz.4.5118': attribute type 1 has an invalid length. [ 321.729829][T16940] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5118'. [ 322.157032][T16748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.240306][ T51] Bluetooth: hci6: command tx timeout [ 322.243317][T16964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5127'. [ 322.516275][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5133'. [ 322.787222][T16748] veth0_vlan: entered promiscuous mode [ 322.806359][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.841087][T16748] veth1_vlan: entered promiscuous mode [ 322.928469][T16748] veth0_macvtap: entered promiscuous mode [ 322.962322][T16748] veth1_macvtap: entered promiscuous mode [ 323.036626][T16748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.070282][T17008] netlink: 'syz.4.5145': attribute type 10 has an invalid length. [ 323.083529][T16748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.116004][T17008] ..0·: left allmulticast mode [ 323.135814][T17008] hsr_slave_0: left allmulticast mode [ 323.145947][T17008] hsr_slave_1: left allmulticast mode [ 323.164490][T17008] ..0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 323.232944][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.268664][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.292535][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.316549][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.383402][T17022] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5151'. [ 323.441217][T17022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5151'. [ 323.463761][T17022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5151'. [ 323.481809][T17022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5151'. [ 323.612544][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.642765][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.719962][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.728481][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.072273][T17057] netlink: 'syz.4.5169': attribute type 1 has an invalid length. [ 324.087916][T17057] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5169'. [ 324.330292][ T51] Bluetooth: hci6: command tx timeout [ 324.419869][T17076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.449451][T17078] IPv6: sit1: Disabled Multicast RS [ 324.606013][T17084] IPVS: Unknown mcast interface: hsr0 [ 324.685018][T17086] : entered promiscuous mode [ 324.690163][T17091] __nla_validate_parse: 2 callbacks suppressed [ 324.690183][T17091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5183'. [ 325.030413][T17092] infiniband syz2: set active [ 325.035497][T17092] infiniband syz2: added bridge_slave_0 [ 325.093997][T17092] RDS/IB: syz2: added [ 325.106966][ T982] IPVS: starting estimator thread 0... [ 325.204432][T17110] IPVS: using max 22 ests per chain, 52800 per kthread [ 325.232889][T17116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.674354][T17131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5202'. [ 326.333865][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5216'. [ 326.400428][ T51] Bluetooth: hci6: command tx timeout [ 327.177924][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5238'. [ 328.056183][T17249] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.5257'. [ 328.496405][T17267] batadv1: entered promiscuous mode [ 328.536615][T17267] batadv1: entered allmulticast mode [ 328.926189][T17291] netlink: 'syz.2.5279': attribute type 1 has an invalid length. [ 328.936103][T17291] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5279'. [ 329.089046][T17297] netlink: 'syz.3.5281': attribute type 1 has an invalid length. [ 329.127957][T17297] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5281'. [ 329.412937][T17315] netlink: 'syz.4.5291': attribute type 1 has an invalid length. [ 329.833250][T17337] netlink: 'syz.2.5302': attribute type 1 has an invalid length. [ 329.983463][T17345] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 330.716185][T17385] netdevsim netdevsim6: Direct firmware load for þ failed with error -2 [ 330.740141][T17385] netdevsim netdevsim6: Falling back to sysfs fallback for: þ [ 330.782302][T17388] ieee802154 phy1 wpan1: encryption failed: -90 [ 331.034869][T17407] netlink: 352 bytes leftover after parsing attributes in process `syz.1.5337'. [ 331.148432][T17411] geneve3: entered promiscuous mode [ 331.709519][ T30] audit: type=1107 audit(1759240526.304:3): pid=17444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 332.172602][T17477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5372'. [ 332.372598][T17477] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5372'. [ 332.387801][T17477] netlink: 'syz.3.5372': attribute type 6 has an invalid length. [ 332.404677][T17485] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.412883][T17477] netlink: 'syz.3.5372': attribute type 5 has an invalid length. [ 332.425430][T17477] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5372'. [ 332.484846][T17487] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5377'. [ 333.304323][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5399'. [ 333.320459][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5399'. [ 333.505503][T17538] syz_tun: entered promiscuous mode [ 333.522092][T17538] syz_tun: entered allmulticast mode [ 333.728263][T17551] netlink: 'syz.6.5409': attribute type 1 has an invalid length. [ 333.777626][T17551] netlink: 232 bytes leftover after parsing attributes in process `syz.6.5409'. [ 333.861376][T17559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.014113][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5416'. [ 334.023902][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5416'. [ 335.016466][T17632] netlink: 'syz.1.5449': attribute type 4 has an invalid length. [ 335.525744][T17662] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.025906][T17689] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 336.859672][T17730] __nla_validate_parse: 2 callbacks suppressed [ 336.859694][T17730] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5497'. [ 336.882644][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5498'. [ 336.889036][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5499'. [ 337.184854][T17730] bond0 (unregistering): Released all slaves [ 337.232890][T17735] bridge3: entered promiscuous mode [ 337.486160][T17761] sock: sock_timestamping_bind_phc: sock not bind to device [ 338.072958][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5531'. [ 339.282547][T17859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5558'. [ 339.422906][T17867] netlink: 'syz.6.5561': attribute type 1 has an invalid length. [ 339.493990][T17875] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5565'. [ 339.583774][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5568'. [ 339.618690][T17883] Unknown options in mask b7f2 [ 339.795027][T17893] netlink: 'syz.2.5573': attribute type 21 has an invalid length. [ 339.810998][T17893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5573'. [ 339.983196][T17903] netlink: 'syz.6.5577': attribute type 21 has an invalid length. [ 340.020126][T17903] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5577'. [ 340.030545][T17903] netlink: 'syz.6.5577': attribute type 4 has an invalid length. [ 340.044037][T17903] netlink: 'syz.6.5577': attribute type 5 has an invalid length. [ 340.066652][T17903] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5577'. [ 340.254610][T17916] netlink: 'syz.2.5585': attribute type 1 has an invalid length. [ 340.311438][T17921] syz.6.5584 uses old SIOCAX25GETINFO [ 340.432408][T17925] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 340.454896][T17925] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 340.575954][T17937] netlink: 'syz.2.5595': attribute type 3 has an invalid length. [ 341.413063][T17985] netlink: 'syz.2.5617': attribute type 2 has an invalid length. [ 341.423126][T17985] netlink: 'syz.2.5617': attribute type 2 has an invalid length. [ 341.516726][T17993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.718825][T18064] __nla_validate_parse: 4 callbacks suppressed [ 342.718847][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5657'. [ 342.744344][T18064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.083703][T18088] netlink: 'syz.6.5668': attribute type 1 has an invalid length. [ 343.092602][T18088] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5668'. [ 343.244637][T18094] openvswitch: netlink: Flow key attribute not present in set flow. [ 343.643950][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5683'. [ 343.797129][T18128] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 343.844818][T18133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.216410][T18157] netlink: 'syz.3.5701': attribute type 21 has an invalid length. [ 344.509645][T18171] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5709'. [ 345.374324][T18207] bridge5: entered promiscuous mode [ 345.379627][T18207] bridge5: entered allmulticast mode [ 345.587017][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5732'. [ 345.619727][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5734'. [ 346.280279][T18260] netlink: 'syz.3.5753': attribute type 1 has an invalid length. [ 346.356582][T18262] netlink: 'syz.6.5754': attribute type 1 has an invalid length. [ 346.401469][ T5873] Bluetooth: hci6: command 0x0405 tx timeout [ 346.898181][T18298] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5771'. [ 347.144531][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.154494][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.289467][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5784'. [ 347.411931][T18329] netlink: 'syz.2.5787': attribute type 10 has an invalid length. [ 347.614142][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5793'. [ 347.673166][T18345] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.826385][T18354] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5799'. [ 347.897870][T18358] netlink: 'syz.3.5802': attribute type 1 has an invalid length. [ 348.006443][T18365] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5805'. [ 348.112722][T18372] netlink: 'syz.1.5807': attribute type 1 has an invalid length. [ 348.525310][T18365] team0: Port device bond0 removed [ 348.543074][T18365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.558289][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5818'. [ 348.575826][T18365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.591372][T18365] bond0 (unregistering): Released all slaves [ 349.294176][T18433] netlink: 'syz.3.5839': attribute type 1 has an invalid length. [ 349.706150][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5850'. [ 349.872700][T18466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.580804][T18511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5878'. [ 352.197796][T18594] unsupported nla_type 52263 [ 352.459348][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5919'. [ 352.494492][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5919'. [ 352.527429][T18607] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5919'. [ 353.328746][T18648] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5933'. [ 353.375365][T18648] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5933'. [ 353.573023][T18659] netlink: 'syz.6.5937': attribute type 4 has an invalid length. [ 353.684615][T18651] ip6tnl1: left promiscuous mode [ 353.753734][T18651] veth3: left promiscuous mode [ 353.775351][T18651] bridge3: left promiscuous mode [ 354.026834][T18674] netlink: 'syz.1.5943': attribute type 21 has an invalid length. [ 354.070262][T18674] netlink: 'syz.1.5943': attribute type 1 has an invalid length. [ 354.102976][T18674] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5943'. [ 354.150953][T18676] ûý: entered promiscuous mode [ 354.735580][T18712] netlink: 'syz.1.5959': attribute type 5 has an invalid length. [ 354.988665][T18725] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5965'. [ 355.080269][T18731] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5969'. [ 355.389239][T18725] bond0 (unregistering): Released all slaves [ 355.431971][T18731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5969'. [ 355.880991][T18767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5987'. [ 356.472577][T18806] ip6gre1: entered allmulticast mode [ 356.869036][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6019'. [ 356.909139][T18831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6019'. [ 357.125866][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6025'. [ 357.209196][T18848] bridge_slave_0: left allmulticast mode [ 357.216871][T18848] bridge_slave_0: left promiscuous mode [ 357.223194][T18848] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.237060][T18848] bridge_slave_1: left allmulticast mode [ 357.243765][T18848] bridge_slave_1: left promiscuous mode [ 357.264315][T18848] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.291537][T18848] bond0: (slave bond_slave_0): Releasing backup interface [ 357.321159][T18848] bond0: (slave bond_slave_1): Releasing backup interface [ 357.350722][T18848] team0: Port device team_slave_0 removed [ 357.379292][T18848] team0: Port device team_slave_1 removed [ 357.387095][T18848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.395721][T18848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.406084][T18848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.414765][T18848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.425493][T18848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.383553][T18908] sctp: [Deprecated]: syz.2.6055 (pid 18908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.383553][T18908] Use struct sctp_sack_info instead [ 358.674529][T18926] __nla_validate_parse: 1 callbacks suppressed [ 358.674554][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6063'. [ 358.960927][T18943] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 359.160377][T18956] netlink: 'syz.6.6079': attribute type 9 has an invalid length. [ 359.190286][T18956] netlink: 'syz.6.6079': attribute type 7 has an invalid length. [ 359.198271][T18956] netlink: 'syz.6.6079': attribute type 8 has an invalid length. [ 359.620554][T18984] dummy0: mtu less than device minimum [ 360.168959][T19003] netlink: 'syz.4.6102': attribute type 1 has an invalid length. [ 360.243060][T19003] netlink: 'syz.4.6102': attribute type 2 has an invalid length. [ 360.314811][T19009] netlink: 'syz.2.6105': attribute type 1 has an invalid length. [ 360.510248][T19015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6107'. [ 360.550456][T19015] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6107'. [ 360.881316][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6117'. [ 361.499690][T19063] netlink: 'syz.1.6131': attribute type 5 has an invalid length. [ 361.668294][T19069] netlink: 'syz.6.6134': attribute type 15 has an invalid length. [ 361.740519][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6136'. [ 361.881882][T19079] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6139'. [ 361.894906][T19080] wg1 speed is unknown, defaulting to 1000 [ 361.923567][T19080] wg1 speed is unknown, defaulting to 1000 [ 361.942333][T19080] wg1 speed is unknown, defaulting to 1000 [ 362.012321][T19080] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 362.078997][T19080] wg1 speed is unknown, defaulting to 1000 [ 362.101510][T19080] wg1 speed is unknown, defaulting to 1000 [ 362.112233][T19080] wg1 speed is unknown, defaulting to 1000 [ 362.135429][T19080] wg1 speed is unknown, defaulting to 1000 [ 362.172199][T19080] wg1 speed is unknown, defaulting to 1000 [ 362.193807][T19080] wg1 speed is unknown, defaulting to 1000 [ 362.221255][T19080] wg1 speed is unknown, defaulting to 1000 [ 362.359772][T19094] netlink: 'syz.2.6146': attribute type 6 has an invalid length. [ 362.449712][T19097] veth0_to_bond: entered allmulticast mode [ 362.632070][T19106] netlink: 308 bytes leftover after parsing attributes in process `syz.1.6152'. [ 362.841903][T19115] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 363.571752][T19150] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6172'. [ 363.586005][T19150] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 363.667753][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6174'. [ 363.860611][T19163] geneve3: entered promiscuous mode [ 364.699448][T19211] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6200'. [ 364.881214][ T5873] Bluetooth: hci0: command tx timeout [ 365.418615][T19253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.480214][T19257] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 365.807961][T19277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6232'. [ 365.850270][T19277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6232'. [ 365.943162][T19282] netlink: 'syz.4.6234': attribute type 10 has an invalid length. [ 366.541163][T19321] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6253'. [ 366.580132][T19321] netlink: 'syz.4.6253': attribute type 1 has an invalid length. [ 366.910248][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6262'. [ 367.105778][T19351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6266'. [ 367.135181][T19351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6266'. [ 367.482900][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6274'. [ 367.499591][T19366] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6274'. [ 367.520174][T19372] netlink: 'syz.2.6276': attribute type 1 has an invalid length. [ 368.593947][T19436] netlink: 'syz.2.6309': attribute type 2 has an invalid length. [ 368.774405][T19447] openvswitch: netlink: Duplicate or invalid key (type 0). [ 368.782480][T19447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.951419][T19454] netlink: 596 bytes leftover after parsing attributes in process `syz.4.6317'. [ 370.738541][T19563] veth3: entered promiscuous mode [ 370.765912][T19563] bond0: (slave veth3): Enslaving as an active interface with an up link [ 370.848693][T19573] __nla_validate_parse: 3 callbacks suppressed [ 370.848717][T19573] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6377'. [ 370.892489][T19573] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6377'. [ 370.918261][T19573] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6377'. [ 371.003154][T19583] openvswitch: netlink: EtherType 0 is less than min 600 [ 371.331977][T19603] netlink: 'syz.3.6392': attribute type 1 has an invalid length. [ 371.350575][T19603] netlink: 'syz.3.6392': attribute type 2 has an invalid length. [ 371.622824][T19618] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.007874][T19641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6411'. [ 372.101200][T19645] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6410'. [ 372.593120][T19677] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 372.630437][T19677] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 372.813750][T19689] netlink: 'syz.2.6434': attribute type 2 has an invalid length. [ 372.821708][T19689] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6434'. [ 373.079206][T19703] netlink: 'syz.1.6440': attribute type 10 has an invalid length. [ 373.120258][T19703] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6440'. [ 373.252693][T19710] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6444'. [ 373.848759][T19749] openvswitch: netlink: Flow key attr not present in new flow. [ 373.850484][T19750] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 374.577416][T19784] netlink: 'syz.2.6481': attribute type 1 has an invalid length. [ 374.594327][T19787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.599751][T19784] netlink: 'syz.2.6481': attribute type 1 has an invalid length. [ 374.927923][T19807] netlink: 34 bytes leftover after parsing attributes in process `syz.4.6493'. [ 375.101998][T19817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6498'. [ 375.278909][T19824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.661629][T19892] __nla_validate_parse: 3 callbacks suppressed [ 376.661653][T19892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6536'. [ 377.047053][T19910] netlink: 'syz.2.6544': attribute type 3 has an invalid length. [ 377.210279][T19918] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.6546'. [ 377.843296][T19954] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6563'. [ 377.859422][T19956] netlink: 4264 bytes leftover after parsing attributes in process `syz.4.6565'. [ 377.896984][T19956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.518444][T19995] netlink: 'syz.2.6585': attribute type 13 has an invalid length. [ 378.556132][T19997] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6587'. [ 378.567358][T20000] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6588'. [ 378.677478][T20004] netlink: 'syz.6.6592': attribute type 9 has an invalid length. [ 379.955917][T20085] netlink: 288 bytes leftover after parsing attributes in process `syz.3.6629'. [ 380.194128][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6637'. [ 380.208090][T20100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.286051][T20105] netlink: 'syz.4.6639': attribute type 1 has an invalid length. [ 380.535385][T20118] netlink: 'syz.2.6647': attribute type 9 has an invalid length. [ 380.564798][T20118] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6647'. [ 380.940231][T20143] netlink: 'syz.6.6659': attribute type 12 has an invalid length. [ 381.156758][T20152] delete_channel: no stack [ 381.294473][T20145] infiniband syz!: set down [ 381.300203][T20145] infiniband syz!: added team_slave_0 [ 381.349009][T20145] RDS/IB: syz!: added [ 381.574654][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6670'. [ 382.328494][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6684'. [ 382.889810][T20233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6696'. [ 382.940730][T20233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6696'. [ 383.006085][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6698'. [ 383.390284][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6705'. [ 383.447293][T20259] sctp: [Deprecated]: syz.4.6707 (pid 20259) Use of int in maxseg socket option. [ 383.447293][T20259] Use struct sctp_assoc_value instead [ 383.602191][T20267] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6709'. [ 384.245419][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.258256][T20293] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 384.359235][T20299] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6722'. [ 384.971237][T20329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6734'. [ 385.320162][T20347] netlink: 'syz.1.6741': attribute type 2 has an invalid length. [ 385.350860][T20347] netlink: 'syz.1.6741': attribute type 1 has an invalid length. [ 385.380127][T20347] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6741'. [ 386.203209][T20386] xfrm1: entered allmulticast mode [ 386.361093][T20394] netlink: 'syz.6.6762': attribute type 5 has an invalid length. [ 386.387180][T20394] ip6erspan0: entered promiscuous mode [ 386.434706][T20399] Bluetooth: MGMT ver 1.23 [ 386.535863][T20404] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6767'. [ 386.546254][T20404] netlink: 'syz.6.6767': attribute type 3 has an invalid length. [ 386.557135][T20404] netlink: 'syz.6.6767': attribute type 2 has an invalid length. [ 386.567450][T20404] netlink: 'syz.6.6767': attribute type 2 has an invalid length. [ 388.872742][T20426] syz.4.6777: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 388.893811][T20426] CPU: 0 UID: 0 PID: 20426 Comm: syz.4.6777 Not tainted syzkaller #0 PREEMPT(full) [ 388.893841][T20426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.893870][T20426] Call Trace: [ 388.893883][T20426] [ 388.893893][T20426] dump_stack_lvl+0x189/0x250 [ 388.893928][T20426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.893953][T20426] ? __pfx__printk+0x10/0x10 [ 388.893983][T20426] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 388.894010][T20426] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 388.894036][T20426] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 388.894065][T20426] warn_alloc+0x214/0x310 [ 388.894105][T20426] ? __pfx_warn_alloc+0x10/0x10 [ 388.894148][T20426] ? __get_vm_area_node+0x28f/0x300 [ 388.894178][T20426] ? veth_dev_init+0x363/0x570 [ 388.894217][T20426] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 388.894248][T20426] ? veth_newlink+0x5d4/0xa60 [ 388.894307][T20426] ? alloc_pages_mpol+0x3cd/0x4a0 [ 388.894338][T20426] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 388.894367][T20426] ? __kasan_kmalloc_large+0x1c/0xa0 [ 388.894401][T20426] ? rcu_is_watching+0x15/0xb0 [ 388.894424][T20426] ? veth_dev_init+0x363/0x570 [ 388.894455][T20426] ? veth_dev_init+0x363/0x570 [ 388.894487][T20426] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 388.894517][T20426] ? veth_dev_init+0x363/0x570 [ 388.894559][T20426] veth_dev_init+0x363/0x570 [ 388.894601][T20426] register_netdevice+0x6bf/0x1ae0 [ 388.894647][T20426] ? snprintf+0xda/0x120 [ 388.894683][T20426] ? __pfx_register_netdevice+0x10/0x10 [ 388.894714][T20426] ? __pfx_snprintf+0x10/0x10 [ 388.894759][T20426] ? __asan_memset+0x22/0x50 [ 388.894788][T20426] ? dev_addr_mod+0x2ce/0x3d0 [ 388.894825][T20426] veth_newlink+0x5d4/0xa60 [ 388.894869][T20426] ? __pfx_veth_newlink+0x10/0x10 [ 388.894904][T20426] ? css_rstat_updated+0x23a/0x4f0 [ 388.895016][T20426] ? validate_linkmsg+0x765/0x950 [ 388.895064][T20426] ? __pfx_veth_newlink+0x10/0x10 [ 388.895099][T20426] rtnl_newlink_create+0x310/0xb00 [ 388.895134][T20426] ? __lock_acquire+0xab9/0xd20 [ 388.895173][T20426] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 388.895206][T20426] ? __pfx___mutex_lock+0x10/0x10 [ 388.895244][T20426] ? ns_capable+0x8a/0xf0 [ 388.895283][T20426] rtnl_newlink+0x16e4/0x1c80 [ 388.895310][T20426] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 388.895356][T20426] ? __pfx_rtnl_newlink+0x10/0x10 [ 388.895464][T20426] ? __dev_queue_xmit+0x1d79/0x3b50 [ 388.895502][T20426] ? __lock_acquire+0xab9/0xd20 [ 388.895563][T20426] ? __pfx_rtnl_newlink+0x10/0x10 [ 388.895587][T20426] rtnetlink_rcv_msg+0x7cc/0xb70 [ 388.895618][T20426] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 388.895643][T20426] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.895665][T20426] ? ref_tracker_free+0x63a/0x7d0 [ 388.895701][T20426] ? __asan_memcpy+0x40/0x70 [ 388.895725][T20426] ? __pfx_ref_tracker_free+0x10/0x10 [ 388.895757][T20426] ? __skb_clone+0x63/0x7a0 [ 388.895795][T20426] netlink_rcv_skb+0x208/0x470 [ 388.895823][T20426] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.895859][T20426] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.895899][T20426] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.895932][T20426] netlink_unicast+0x82c/0x9e0 [ 388.895963][T20426] ? __pfx_netlink_unicast+0x10/0x10 [ 388.895988][T20426] ? netlink_sendmsg+0x642/0xb30 [ 388.896013][T20426] ? skb_put+0x11b/0x210 [ 388.896044][T20426] netlink_sendmsg+0x805/0xb30 [ 388.896079][T20426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.896107][T20426] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.896142][T20426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.896163][T20426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.896191][T20426] __sock_sendmsg+0x21c/0x270 [ 388.896229][T20426] ____sys_sendmsg+0x505/0x830 [ 388.896263][T20426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.896303][T20426] ? import_iovec+0x74/0xa0 [ 388.896335][T20426] ___sys_sendmsg+0x21f/0x2a0 [ 388.896368][T20426] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.896435][T20426] ? __fget_files+0x2a/0x420 [ 388.896465][T20426] ? __fget_files+0x3a0/0x420 [ 388.896507][T20426] __x64_sys_sendmsg+0x19b/0x260 [ 388.896539][T20426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.896581][T20426] ? rcu_is_watching+0x15/0xb0 [ 388.896608][T20426] ? do_syscall_64+0xbe/0x3b0 [ 388.896638][T20426] do_syscall_64+0xfa/0x3b0 [ 388.896661][T20426] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.896684][T20426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.896704][T20426] ? clear_bhb_loop+0x60/0xb0 [ 388.896731][T20426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.896751][T20426] RIP: 0033:0x7f8ec578eec9 [ 388.896771][T20426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.896791][T20426] RSP: 002b:00007f8ec6603038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.896814][T20426] RAX: ffffffffffffffda RBX: 00007f8ec59e5fa0 RCX: 00007f8ec578eec9 [ 388.896833][T20426] RDX: 8ae257a062cc3564 RSI: 0000200000000200 RDI: 0000000000000003 [ 388.896859][T20426] RBP: 00007f8ec5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.896875][T20426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.896890][T20426] R13: 00007f8ec59e6038 R14: 00007f8ec59e5fa0 R15: 00007ffd2a795c98 [ 388.896928][T20426] [ 388.896947][T20426] Mem-Info: [ 389.415010][T20426] active_anon:6191 inactive_anon:0 isolated_anon:0 [ 389.415010][T20426] active_file:3209 inactive_file:39993 isolated_file:0 [ 389.415010][T20426] unevictable:768 dirty:301 writeback:0 [ 389.415010][T20426] slab_reclaimable:12136 slab_unreclaimable:188354 [ 389.415010][T20426] mapped:39436 shmem:1364 pagetables:1507 [ 389.415010][T20426] sec_pagetables:0 bounce:0 [ 389.415010][T20426] kernel_misc_reclaimable:0 [ 389.415010][T20426] free:1170296 free_pcp:14222 free_cma:0 [ 389.463483][T20426] Node 0 active_anon:24764kB inactive_anon:0kB active_file:12836kB inactive_file:159768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157744kB dirty:1200kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13616kB pagetables:5884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 389.496079][T20426] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 389.527598][T20426] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.556745][T20426] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 389.562638][T20426] Node 0 DMA32 free:777024kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24716kB inactive_anon:0kB active_file:12836kB inactive_file:157928kB unevictable:1536kB writepending:1200kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:40788kB local_pcp:19424kB free_cma:0kB [ 389.595357][T20426] lowmem_reserve[]: 0 0 1 1 1 [ 389.600324][T20426] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 389.629610][T20426] lowmem_reserve[]: 0 0 0 0 0 [ 389.634853][T20426] Node 1 Normal free:3888772kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17328kB local_pcp:9776kB free_cma:0kB [ 389.666295][T20426] lowmem_reserve[]: 0 0 0 0 0 [ 389.671229][T20426] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 389.684083][T20426] Node 0 DMA32: 472*4kB (ME) 140*8kB (ME) 48*16kB (UM) 32*32kB (UM) 204*64kB (UM) 607*128kB (UME) 378*256kB (UM) 222*512kB (UME) 92*1024kB (UME) 0*2048kB 92*4096kB (UM) = 777024kB [ 389.702245][T20426] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 389.714249][T20426] Node 1 Normal: 183*4kB (UME) 49*8kB (UME) 54*16kB (UME) 140*32kB (UME) 45*64kB (UME) 12*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3888772kB [ 389.732574][T20426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.742610][T20426] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 389.752024][T20426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.761650][T20426] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 389.771116][T20426] 44564 total pagecache pages [ 389.775825][T20426] 0 pages in swap cache [ 389.780071][T20426] Free swap = 124996kB [ 389.784252][T20426] Total swap = 124996kB [ 389.788431][T20426] 2097051 pages RAM [ 389.793277][T20426] 0 pages HighMem/MovableOnly [ 389.797974][T20426] 424998 pages reserved [ 389.803460][T20426] 0 pages cma reserved [ 391.209424][T20477] __nla_validate_parse: 3 callbacks suppressed [ 391.209449][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6801'. [ 391.238330][T20478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6800'. [ 391.251489][T20477] netlink: 'syz.6.6801': attribute type 5 has an invalid length. [ 391.259336][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6801'. [ 391.496519][T20489] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6807'. [ 391.949847][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6821'. [ 392.165128][T20534] netlink: 512 bytes leftover after parsing attributes in process `syz.1.6828'. [ 392.539628][T20556] netlink: 'syz.2.6838': attribute type 7 has an invalid length. [ 392.549426][T20556] netlink: 'syz.2.6838': attribute type 8 has an invalid length. [ 392.824263][T20569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6844'. [ 392.855505][T20569] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6844'. [ 393.025947][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6850'. [ 393.035565][T20581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.061691][T20579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6849'. [ 393.087194][T20579] netlink: 'syz.6.6849': attribute type 2 has an invalid length. [ 393.111485][T20579] netlink: 'syz.6.6849': attribute type 1 has an invalid length. [ 395.986152][T20734] bond4: entered promiscuous mode [ 396.016640][T20734] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.058974][T20746] netlink: 'syz.2.6928': attribute type 3 has an invalid length. [ 396.090853][T20746] netlink: 'syz.2.6928': attribute type 1 has an invalid length. [ 396.424650][T20763] __nla_validate_parse: 10 callbacks suppressed [ 396.424672][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6938'. [ 396.433084][T20769] bond0: Unable to set down delay as MII monitoring is disabled [ 396.469465][T20763] netlink: 620 bytes leftover after parsing attributes in process `syz.4.6938'. [ 396.484425][T20763] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6938'. [ 396.507576][T20771] sock: sock_timestamping_bind_phc: sock not bind to device [ 396.522261][T20772] netlink: 'syz.2.6942': attribute type 1 has an invalid length. [ 396.531739][T20772] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.6942'. [ 396.955097][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6954'. [ 396.976546][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6954'. [ 396.988009][T20799] xt_HMARK: spi-set and port-set can't be combined [ 397.384306][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6966'. [ 397.679279][T20841] netlink: 'syz.3.6975': attribute type 5 has an invalid length. [ 397.988859][T20860] netlink: 'syz.2.6985': attribute type 1 has an invalid length. [ 398.002022][T20860] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6985'. [ 398.453689][T20882] netlink: 'syz.4.6995': attribute type 11 has an invalid length. [ 401.075099][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7046'. [ 401.557807][T21014] bridge_slave_0: default FDB implementation only supports local addresses [ 402.084502][T21038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7068'. [ 402.646688][T21066] netlink: 'syz.4.7082': attribute type 4 has an invalid length. [ 402.659484][T21066] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7082'. [ 403.000591][T21082] C: entered allmulticast mode [ 403.007641][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7091'. [ 403.018372][T21082] C: left allmulticast mode [ 403.167253][T21092] vlan2: entered promiscuous mode [ 403.175460][T21092] geneve1: entered promiscuous mode [ 403.183431][T21092] vlan2: entered allmulticast mode [ 403.189014][T21092] geneve1: entered allmulticast mode [ 403.799118][T21128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7113'. [ 403.822139][T21128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7113'. [ 403.864376][T21128] gretap0: entered promiscuous mode [ 403.882658][T21128] gretap0: left promiscuous mode [ 404.055771][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7118'. [ 404.624368][T21167] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 404.716160][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7135'. [ 404.947325][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7143'. [ 405.240342][T21204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7149'. [ 405.576552][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7159'. [ 405.598405][T21222] openvswitch: netlink: Key 2 has unexpected len 72 expected 4 [ 406.533835][T21279] xt_l2tp: invalid flags combination: 0 [ 407.492962][T21325] netlink: 'syz.3.7207': attribute type 33 has an invalid length. [ 407.503878][T21325] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7207'. [ 407.642644][T21333] netlink: 'syz.1.7212': attribute type 32 has an invalid length. [ 408.113553][T21358] netlink: 'syz.6.7224': attribute type 1 has an invalid length. [ 409.847308][T21455] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 409.910066][T21458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7269'. [ 410.160324][T21467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7275'. [ 410.833574][T21496] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7290'. [ 410.856519][T21497] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7289'. [ 410.907779][T21497] vlan3: entered allmulticast mode [ 410.919468][T21497] gretap0: entered allmulticast mode [ 411.246557][T21512] netlink: 'syz.2.7295': attribute type 2 has an invalid length. [ 411.348098][T21522] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7301'. [ 411.545631][T21533] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7305'. [ 411.585377][T21533] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7305'. [ 411.820203][T21543] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7311'. [ 411.870554][T21543] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7311'. [ 412.192852][T21562] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 412.242783][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 412.333444][T21569] Bluetooth: MGMT ver 1.23 [ 415.044870][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7392'. [ 415.120673][T21720] netlink: 'syz.2.7394': attribute type 3 has an invalid length. [ 415.514493][T21742] netlink: 'syz.1.7407': attribute type 6 has an invalid length. [ 415.926815][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7415'. [ 416.001196][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7417'. [ 416.154184][T21774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7419'. [ 416.184980][T21774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7419'. [ 416.226159][T21778] netlink: 'syz.2.7422': attribute type 1 has an invalid length. [ 416.299427][T21778] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7422'. [ 416.333173][T21778] netlink: 'syz.2.7422': attribute type 1 has an invalid length. [ 416.348429][T21778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7422'. [ 416.507113][T21790] netlink: zone id is out of range [ 416.516045][T21790] netlink: zone id is out of range [ 416.526141][T21790] netlink: del zone limit has 8 unknown bytes [ 416.529497][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7429'. [ 417.453601][T21851] ip6tnl2: entered promiscuous mode [ 417.460512][T21851] ip6tnl2: entered allmulticast mode [ 417.468076][T21851] team0: Refused to change device type [ 417.862370][T21876] pim6reg: entered allmulticast mode [ 417.900122][T21876] pim6reg: left allmulticast mode [ 418.286731][T21900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7478'. [ 418.571128][T21914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7488'. [ 420.321505][T22002] Bluetooth: MGMT ver 1.23 [ 420.332019][T22005] netlink: 336 bytes leftover after parsing attributes in process `syz.4.7532'. [ 420.370307][T22006] netlink: 'syz.1.7531': attribute type 1 has an invalid length. [ 420.731357][T22025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7542'. [ 420.754377][T22025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7542'. [ 421.131186][T22047] sock: sock_set_timeout: `syz.4.7552' (pid 22047) tries to set negative timeout [ 421.399714][T22061] netlink: 'syz.6.7560': attribute type 3 has an invalid length. [ 421.727297][T22082] netlink: 14679 bytes leftover after parsing attributes in process `syz.3.7570'. [ 422.067069][T22102] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7579'. [ 422.747084][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7594'. [ 422.767085][T22132] netlink: 'syz.6.7594': attribute type 5 has an invalid length. [ 422.775968][T22132] netlink: 'syz.6.7594': attribute type 8 has an invalid length. [ 422.796231][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7594'. [ 422.838805][T22132] geneve2: entered promiscuous mode [ 422.851698][T22132] geneve2: entered allmulticast mode [ 422.889470][ T35] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 422.933835][ T35] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 422.982544][T22120] wg1 speed is unknown, defaulting to 1000 [ 422.989003][ T13] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 423.171432][ T13] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 424.000167][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 424.806161][T22183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 424.961012][T22193] atomic_op ffff8880758e1998 conn xmit_atomic 0000000000000000 [ 425.330524][T22214] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7631'. [ 425.351502][T22210] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7631'. [ 425.386289][T22217] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 425.994390][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7649'. [ 426.742196][T22273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7660'. [ 426.917195][T22277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7662'. [ 427.255117][T22292] nbd: illegal input index -1 [ 427.527398][T22308] bridge0: entered promiscuous mode [ 427.558345][T22308] bridge0: port 3(macvlan2) entered blocking state [ 427.567614][T22308] bridge0: port 3(macvlan2) entered disabled state [ 427.575430][T22308] macvlan2: entered allmulticast mode [ 427.582291][T22308] bridge0: entered allmulticast mode [ 427.591409][T22308] macvlan2: left allmulticast mode [ 427.604514][T22308] bridge0: left allmulticast mode [ 427.613787][T22308] bridge0: left promiscuous mode [ 427.976057][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7685'. [ 428.518142][T22354] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 428.520704][T22355] Bluetooth: MGMT ver 1.23 [ 428.846342][T22373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7707'. [ 428.864063][T22373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7707'. [ 429.157916][T22389] dvmrp8: entered allmulticast mode [ 429.321004][T22401] netlink: 'syz.6.7720': attribute type 23 has an invalid length. [ 430.061196][T22441] sch_fq: defrate 4294967293 ignored. [ 430.127126][T22445] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7743'. [ 430.137549][T22445] nbd: illegal input index 65508 [ 430.649253][T22464] netlink: 'syz.6.7752': attribute type 1 has an invalid length. [ 430.971459][T22484] netlink: 'syz.3.7763': attribute type 2 has an invalid length. [ 430.991406][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7763'. [ 431.582538][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7780'. [ 431.604503][T22518] tipc: Enabling of bearer rejected, failed to enable media [ 432.266000][T22547] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7790'. [ 432.597745][T22560] vlan0: entered allmulticast mode [ 432.610126][T22560] bridge_slave_0: entered allmulticast mode [ 433.177261][T22580] netlink: 'syz.4.7806': attribute type 3 has an invalid length. [ 433.212775][T22566] wg1 speed is unknown, defaulting to 1000 [ 433.488879][T22588] sctp: [Deprecated]: syz.2.7809 (pid 22588) Use of int in max_burst socket option deprecated. [ 433.488879][T22588] Use struct sctp_assoc_value instead [ 435.712751][T22655] netlink: 'syz.6.7841': attribute type 3 has an invalid length. [ 435.721992][T22655] netlink: 'syz.6.7841': attribute type 1 has an invalid length. [ 435.730455][T22655] netlink: 192 bytes leftover after parsing attributes in process `syz.6.7841'. [ 435.739758][T22655] NCSI netlink: No device for ifindex 0 [ 436.001954][T22665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7846'. [ 436.011887][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7846'. [ 436.483009][ T5873] Bluetooth: hci6: command 0x0405 tx timeout [ 436.779731][T22702] vlan3: entered promiscuous mode [ 436.789641][T22702] geneve1: entered promiscuous mode [ 436.797691][T22702] vlan3: entered allmulticast mode [ 436.804418][T22702] geneve1: entered allmulticast mode [ 437.261755][T22736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7878'. [ 437.497227][T22749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7885'. [ 437.594203][T22752] netlink: 'syz.1.7887': attribute type 1 has an invalid length. [ 437.612385][T22752] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7887'. [ 437.625664][T22752] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7887'. [ 437.642279][T22757] openvswitch: netlink: Message has 5436 unknown bytes. [ 437.664413][T22757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.960778][T22772] netlink: 11 bytes leftover after parsing attributes in process `syz.3.7897'. [ 438.339886][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7909'. [ 438.631728][T22814] netlink: 'syz.1.7918': attribute type 1 has an invalid length. [ 438.639541][T22814] netlink: 'syz.1.7918': attribute type 2 has an invalid length. [ 438.775330][T22825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7923'. [ 438.787703][T22825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7923'. [ 438.797421][T22825] tipc: Started in network mode [ 438.803068][T22825] tipc: Node identity fffffe01, cluster identity 64 [ 438.838016][T22825] tipc: Node number set to 4294966785 [ 438.848212][T22825] tipc: Cannot configure node identity twice [ 439.028709][T22835] bridge0: port 1(bond0) entered blocking state [ 439.054385][T22835] bridge0: port 1(bond0) entered disabled state [ 439.061802][T22835] bond0: entered allmulticast mode [ 439.069892][T22835] bond0: entered promiscuous mode [ 439.097975][T22838] netlink: 'syz.2.7928': attribute type 10 has an invalid length. [ 439.672026][T22875] nbd: couldn't find device at index 536870912 [ 440.081723][T22898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.258487][T22960] __nla_validate_parse: 3 callbacks suppressed [ 441.258512][T22960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7988'. [ 441.777657][T22982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7998'. [ 441.827260][T22982] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 441.855606][T22982] team0: Device ipvlan0 is already an upper device of the team interface [ 442.560218][T22996] wg1 speed is unknown, defaulting to 1000 [ 442.699312][T23016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8015'. [ 443.207429][T23031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8022'. [ 443.250709][T23030] tipc: Started in network mode [ 443.255653][T23030] tipc: Node identity ac141441, cluster identity 4711 [ 443.321198][T23030] tipc: Enabled bearer , priority 10 [ 444.193722][T23065] netlink: 212388 bytes leftover after parsing attributes in process `syz.1.8037'. [ 444.228886][T23069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8039'. [ 444.240871][T23065] netlink: get zone limit has 8 unknown bytes [ 444.391677][T23072] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 444.402407][T10246] tipc: Node number set to 2886997057 [ 444.867699][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8051'. [ 445.212580][T23114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8060'. [ 445.245843][T23114] erspan0: entered promiscuous mode [ 445.263908][T23114] erspan0: left promiscuous mode [ 445.466871][T23127] netlink: 'syz.1.8066': attribute type 16 has an invalid length. [ 445.482798][T23127] netlink: 'syz.1.8066': attribute type 3 has an invalid length. [ 445.492656][T23127] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.8066'. [ 445.511092][T23131] pim6reg99999999: entered allmulticast mode [ 445.517500][T23130] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8067'. [ 445.685089][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.696761][T23141] nbd: must specify at least one socket [ 447.237531][T23203] __nla_validate_parse: 2 callbacks suppressed [ 447.237589][T23203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8102'. [ 447.279140][T23203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8102'. [ 447.848757][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8116'. [ 447.859085][T23229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8116'. [ 447.890305][T23229] netlink: 'syz.2.8116': attribute type 13 has an invalid length. [ 447.898386][T23229] netlink: 'syz.2.8116': attribute type 11 has an invalid length. [ 448.239806][T23244] xt_l2tp: wrong L2TP version: 1 [ 448.412949][T23250] netlink: 'syz.6.8125': attribute type 27 has an invalid length. [ 448.847678][T23272] netlink: 'syz.2.8135': attribute type 31 has an invalid length. [ 449.432051][T23296] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 449.452361][T23296] batman_adv: batadv0: Adding interface: gretap1 [ 449.458945][T23296] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.501228][T23296] batman_adv: batadv0: Interface activated: gretap1 [ 450.173621][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8166'. [ 450.295156][T23342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8169'. [ 450.936702][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8186'. [ 450.980555][T23382] batadv0: entered promiscuous mode [ 450.993480][T23382] macsec1: entered promiscuous mode [ 451.022175][T23382] batadv0: left promiscuous mode [ 451.128616][T23388] netlink: 'syz.6.8190': attribute type 5 has an invalid length. [ 451.297574][T23393] netlink: 'syz.6.8192': attribute type 2 has an invalid length. [ 451.498753][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8195'. [ 451.680433][T23410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8201'. [ 452.245932][T23442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8215'. [ 452.614292][T23452] netlink: 'syz.4.8221': attribute type 2 has an invalid length. [ 452.650105][T23452] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8221'. [ 453.133422][T23478] nbd: must specify a size in bytes for the device [ 453.180993][T23483] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 453.621031][T23508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8247'. [ 453.750546][T23514] netlink: 'syz.3.8249': attribute type 66 has an invalid length. [ 454.081099][T23534] xt_HMARK: proto mask must be zero with L3 mode [ 454.184443][T23538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8261'. [ 454.193763][T23538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8261'. [ 454.228008][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8262'. [ 454.252523][T23542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8263'. [ 454.421130][T23554] sock: sock_timestamping_bind_phc: sock not bind to device [ 454.910636][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8279'. [ 455.120738][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8286'. [ 455.150301][T23589] netlink: 'syz.4.8286': attribute type 30 has an invalid length. [ 455.158190][T23589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8286'. [ 455.340229][T23599] block nbd0: not configured, cannot reconfigure [ 455.868994][T23630] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 456.323774][T23657] netlink: zone id is out of range [ 456.330316][T23657] netlink: zone id is out of range [ 456.338398][T23657] netlink: get zone limit has 8 unknown bytes [ 456.489706][T23665] netlink: 'syz.2.8325': attribute type 1 has an invalid length. [ 457.222107][T23694] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 457.496919][T23705] __nla_validate_parse: 6 callbacks suppressed [ 457.496941][T23705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8346'. [ 457.547859][T23709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8344'. [ 458.483715][ T31] INFO: task syz.5.4573:15804 blocked for more than 143 seconds. [ 458.501438][ T31] Not tainted syzkaller #0 [ 458.516354][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.542099][ T31] task:syz.5.4573 state:D stack:27272 pid:15804 tgid:15803 ppid:10211 task_flags:0x400040 flags:0x00004004 [ 458.559653][ T31] Call Trace: [ 458.563662][ T31] [ 458.566784][ T31] __schedule+0x1798/0x4cc0 [ 458.574401][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.579492][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.585060][ T31] ? __pfx___schedule+0x10/0x10 [ 458.591003][ T31] ? schedule+0x91/0x360 [ 458.595532][ T31] schedule+0x165/0x360 [ 458.600635][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.611377][ T31] __mutex_lock+0x7e6/0x1350 [ 458.616190][ T31] ? __mutex_lock+0x5bb/0x1350 [ 458.621244][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 458.627240][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.632516][ T31] ? __nlmsg_put+0xef/0x1b0 [ 458.637058][ T31] ? genlmsg_put+0x137/0x2e0 [ 458.641834][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 458.647538][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 458.653485][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 458.659764][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 458.666930][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 458.673236][ T31] genl_rcv_msg+0x60e/0x790 [ 458.677818][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.684354][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 458.691031][ T31] ? __asan_memcpy+0x40/0x70 [ 458.695696][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 458.701281][ T31] netlink_rcv_skb+0x208/0x470 [ 458.706331][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.711899][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.717021][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.722650][ T31] ? down_read+0x1ad/0x2e0 [ 458.727215][ T31] genl_rcv+0x28/0x40 [ 458.731766][ T31] netlink_unicast+0x82c/0x9e0 [ 458.736602][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 458.742076][ T31] ? netlink_sendmsg+0x642/0xb30 [ 458.747056][ T31] ? skb_put+0x11b/0x210 [ 458.751819][ T31] netlink_sendmsg+0x805/0xb30 [ 458.756635][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.762164][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 458.767156][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.772879][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.778233][ T31] __sock_sendmsg+0x21c/0x270 [ 458.783134][ T31] ____sys_sendmsg+0x505/0x830 [ 458.788088][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.795032][ T31] ? import_iovec+0x74/0xa0 [ 458.799627][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 458.804539][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.810525][ T31] ? __fget_files+0x2a/0x420 [ 458.815187][ T31] ? __fget_files+0x3a0/0x420 [ 458.820235][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 458.825254][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.831311][ T31] ? rcu_is_watching+0x15/0xb0 [ 458.836322][ T31] ? do_syscall_64+0xbe/0x3b0 [ 458.841265][ T31] do_syscall_64+0xfa/0x3b0 [ 458.845901][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.851580][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.857825][ T31] ? clear_bhb_loop+0x60/0xb0 [ 458.862741][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.868677][ T31] RIP: 0033:0x7f4ec798eec9 [ 458.873502][ T31] RSP: 002b:00007f4ec8776038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.884989][ T31] RAX: ffffffffffffffda RBX: 00007f4ec7be5fa0 RCX: 00007f4ec798eec9 [ 458.893435][ T31] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 458.901722][ T31] RBP: 00007f4ec7a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.910499][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.918706][ T31] R13: 00007f4ec7be6038 R14: 00007f4ec7be5fa0 R15: 00007ffcba4a0b68 [ 458.927114][ T31] [ 458.930495][ T31] [ 458.930495][ T31] Showing all locks held in the system: [ 458.938533][ T31] 1 lock held by khungtaskd/31: [ 458.944223][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 458.954664][ T31] 2 locks held by getty/5624: [ 458.959382][ T31] #0: ffff8880336ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 458.975714][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 458.986059][ T31] 2 locks held by syz.0.1701/9437: [ 458.991537][ T31] #0: ffffffff8f5a0710 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 458.999769][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 459.010574][ T31] 2 locks held by syz.5.4573/15804: [ 459.016029][ T31] #0: ffffffff8f5a0710 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 459.024381][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 459.035136][ T31] [ 459.037580][ T31] ============================================= [ 459.037580][ T31] [ 459.046261][ T31] NMI backtrace for cpu 1 [ 459.046288][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 459.046312][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.046325][ T31] Call Trace: [ 459.046334][ T31] [ 459.046343][ T31] dump_stack_lvl+0x189/0x250 [ 459.046376][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.046401][ T31] ? __pfx__printk+0x10/0x10 [ 459.046442][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 459.046480][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 459.046513][ T31] ? __pfx__printk+0x10/0x10 [ 459.046546][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 459.046580][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 459.046617][ T31] watchdog+0xf93/0xfe0 [ 459.046650][ T31] ? watchdog+0x1de/0xfe0 [ 459.046685][ T31] kthread+0x70e/0x8a0 [ 459.046714][ T31] ? __pfx_watchdog+0x10/0x10 [ 459.046742][ T31] ? __pfx_kthread+0x10/0x10 [ 459.046769][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.046788][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.046807][ T31] ? __pfx_kthread+0x10/0x10 [ 459.046833][ T31] ret_from_fork+0x439/0x7d0 [ 459.046855][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 459.046881][ T31] ? __switch_to_asm+0x39/0x70 [ 459.046906][ T31] ? __switch_to_asm+0x33/0x70 [ 459.046929][ T31] ? __pfx_kthread+0x10/0x10 [ 459.046956][ T31] ret_from_fork_asm+0x1a/0x30 [ 459.047001][ T31] [ 459.047010][ T31] Sending NMI from CPU 1 to CPUs 0: [ 459.203030][ C0] NMI backtrace for cpu 0 [ 459.203050][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 459.203070][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.203082][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 459.203108][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 69 14 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 459.203125][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 459.203142][ C0] RAX: 210b4127e4e12900 RBX: ffffffff81968528 RCX: 210b4127e4e12900 [ 459.203156][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b220d RDI: ffffffff8be33f80 [ 459.203169][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 459.203183][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa30930 [ 459.203196][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 459.203209][ C0] FS: 0000000000000000(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 459.203231][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.203243][ C0] CR2: 000055556fd965c8 CR3: 0000000024006000 CR4: 00000000003526f0 [ 459.203260][ C0] Call Trace: [ 459.203267][ C0] [ 459.203274][ C0] default_idle+0x13/0x20 [ 459.203297][ C0] default_idle_call+0x74/0xb0 [ 459.203322][ C0] do_idle+0x1e8/0x510 [ 459.203350][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 459.203373][ C0] ? __pfx_do_idle+0x10/0x10 [ 459.203406][ C0] ? do_idle+0x4ed/0x510 [ 459.203441][ C0] cpu_startup_entry+0x44/0x60 [ 459.203468][ C0] rest_init+0x2de/0x300 [ 459.203496][ C0] start_kernel+0x3a9/0x410 [ 459.203526][ C0] x86_64_start_reservations+0x24/0x30 [ 459.203547][ C0] x86_64_start_kernel+0x143/0x1c0 [ 459.203568][ C0] common_startup_64+0x13e/0x147 [ 459.203601][ C0] [ 459.204306][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 459.402169][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 459.411406][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.421527][ T31] Call Trace: [ 459.424840][ T31] [ 459.427919][ T31] dump_stack_lvl+0x99/0x250 [ 459.432627][ T31] ? __asan_memcpy+0x40/0x70 [ 459.437262][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.442481][ T31] ? __pfx__printk+0x10/0x10 [ 459.447094][ T31] vpanic+0x281/0x750 [ 459.451085][ T31] ? __pfx_vpanic+0x10/0x10 [ 459.455592][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 459.461255][ T31] ? preempt_schedule+0xae/0xc0 [ 459.466145][ T31] ? preempt_schedule_common+0x83/0xd0 [ 459.471631][ T31] panic+0xb9/0xc0 [ 459.475480][ T31] ? __pfx_panic+0x10/0x10 [ 459.479938][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 459.485373][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 459.491574][ T31] watchdog+0xfd2/0xfe0 [ 459.495767][ T31] ? watchdog+0x1de/0xfe0 [ 459.500125][ T31] kthread+0x70e/0x8a0 [ 459.504227][ T31] ? __pfx_watchdog+0x10/0x10 [ 459.508940][ T31] ? __pfx_kthread+0x10/0x10 [ 459.513572][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.518803][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.524113][ T31] ? __pfx_kthread+0x10/0x10 [ 459.528751][ T31] ret_from_fork+0x439/0x7d0 [ 459.533643][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 459.538787][ T31] ? __switch_to_asm+0x39/0x70 [ 459.543580][ T31] ? __switch_to_asm+0x33/0x70 [ 459.548594][ T31] ? __pfx_kthread+0x10/0x10 [ 459.553210][ T31] ret_from_fork_asm+0x1a/0x30 [ 459.558016][ T31] [ 459.561456][ T31] Kernel Offset: disabled [ 459.565893][ T31] Rebooting in 86400 seconds..