last executing test programs: 2m57.11768744s ago: executing program 2 (id=4828): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 2m56.90560236s ago: executing program 2 (id=4835): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) 2m56.831580942s ago: executing program 2 (id=4836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000580)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 2m56.670171142s ago: executing program 2 (id=4840): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x16, "43720705000000004786b89e6fb2be5c3f000000a69e"}}) 2m56.591486628s ago: executing program 2 (id=4842): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 2m56.496994541s ago: executing program 2 (id=4846): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m41.454813277s ago: executing program 32 (id=4846): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m25.479985692s ago: executing program 0 (id=5775): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2m25.327892627s ago: executing program 0 (id=5780): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e21, 0x4, @local, 0x7}, @in6={0xa, 0x4e21, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}], 0x58) 2m25.162830813s ago: executing program 0 (id=5784): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 2m24.997057714s ago: executing program 0 (id=5790): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8004b709, 0x0) 2m24.806302501s ago: executing program 0 (id=5797): r0 = socket(0x1, 0x803, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) 2m24.706263659s ago: executing program 0 (id=5802): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m16.794953901s ago: executing program 5 (id=6058): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) 2m16.650224009s ago: executing program 5 (id=6063): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x2f, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e8688174bf243d1d59a9323b2a0cee700785b191fc2"}}) 2m16.449335045s ago: executing program 5 (id=6071): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000180)) 2m16.379891759s ago: executing program 5 (id=6073): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 2m16.262198118s ago: executing program 5 (id=6078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f000000a900)={0x0, 0x0, &(0x7f000000a8c0)={&(0x7f000000a7c0)={0x48, 0x2, 0x1, 0x207, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2m16.195069914s ago: executing program 5 (id=6080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m9.648402432s ago: executing program 33 (id=5802): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m1.145588079s ago: executing program 34 (id=6080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.948248832s ago: executing program 1 (id=9585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001b40)={0x18, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 1.861149554s ago: executing program 1 (id=9588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="030308000c0018000c0045"], 0x30) 1.598407715s ago: executing program 1 (id=9596): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.448409188s ago: executing program 1 (id=9601): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfbe1}]}, 0x1c}}, 0x20040000) 1.385059118s ago: executing program 6 (id=9602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1.328046483s ago: executing program 1 (id=9606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.218866855s ago: executing program 6 (id=9609): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00090000000000008000001c0000000d"], 0x24}}, 0x4000800) 1.026440806s ago: executing program 6 (id=9614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x0, 0x0, 0x2000002}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 894.138242ms ago: executing program 7 (id=9616): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 856.784012ms ago: executing program 6 (id=9618): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x400) sendto$inet6(r0, 0x0, 0x0, 0x400a048, 0xffffffffffffffff, 0x0) 785.634207ms ago: executing program 7 (id=9620): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockname(r0, 0x0, 0x0) 670.223738ms ago: executing program 3 (id=9621): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 669.78276ms ago: executing program 6 (id=9622): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x4000000, {0x1, @empty, 'geneve0\x00'}}) 663.620152ms ago: executing program 4 (id=9623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001780), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000017c0)={0x14, r1, 0x315, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44000) 614.784437ms ago: executing program 7 (id=9624): sendmmsg(0xffffffffffffffff, &(0x7f000000ce80)=[{{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000002d00)="05", 0x1}], 0x1}}], 0x1, 0x880) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 584.918893ms ago: executing program 3 (id=9625): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x40840) 583.766608ms ago: executing program 6 (id=9626): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10) 482.260488ms ago: executing program 4 (id=9627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000d80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000070021"], 0x24}}, 0x40004) 418.611826ms ago: executing program 4 (id=9628): unshare(0x20000400) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003300)={0xc, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) 404.309923ms ago: executing program 7 (id=9629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 278.655509ms ago: executing program 7 (id=9630): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) accept4(r0, 0x0, 0x0, 0x800) 278.178569ms ago: executing program 3 (id=9631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 237.330404ms ago: executing program 4 (id=9632): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x2, 0x0, 0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) 196.483539ms ago: executing program 3 (id=9633): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) 164.349724ms ago: executing program 1 (id=9634): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="2300000000000000140012800900010076657468"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) 128.533819ms ago: executing program 7 (id=9635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001300)="d7b5576c8b", 0x5) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000015c0)) 97.985738ms ago: executing program 4 (id=9636): unshare(0x2c020400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000080)=0x79) 97.259971ms ago: executing program 3 (id=9637): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x13}}]}, 0x30}}, 0x4048000) 1.786537ms ago: executing program 4 (id=9638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x19}, @void, @val={0xc, 0x99, {0x4, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) 0s ago: executing program 3 (id=9639): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) kernel console output (not intermixed with test programs): 6] netlink: 'syz.0.3209': attribute type 8 has an invalid length. [ 208.668549][T12606] netlink: 'syz.0.3209': attribute type 9 has an invalid length. [ 208.750331][T12610] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3211'. [ 208.783329][T12612] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 209.513093][T12661] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3236'. [ 209.522342][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3236'. [ 209.556924][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3236'. [ 209.567857][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3236'. [ 209.635088][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3240'. [ 209.776948][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3245'. [ 209.787381][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 209.796572][T12679] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 209.829447][T12679] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3243'. [ 210.269974][T12708] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 210.657064][T12731] netlink: 'syz.4.3271': attribute type 5 has an invalid length. [ 210.932996][T12747] team0: entered promiscuous mode [ 210.948344][T12747] team_slave_0: entered promiscuous mode [ 210.961445][T12747] team_slave_1: entered promiscuous mode [ 210.967676][T12747] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 211.568384][T12778] bond3: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 211.619135][T12778] bond3: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 212.131299][T12827] netlink: 'syz.4.3317': attribute type 1 has an invalid length. [ 212.162821][T12833] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 212.795429][T12871] netlink: 'syz.0.3340': attribute type 10 has an invalid length. [ 212.834876][T12871] .`: (slave bridge0): Enslaving as an active interface with an up link [ 213.108111][T12877] bond1: option updelay: invalid value (18446744072924056005) [ 213.154348][T12877] bond1: option updelay: allowed values 0 - 2147483647 [ 213.218425][T12877] bond1 (unregistering): Released all slaves [ 213.334795][T12883] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 213.346037][T12883] bond0: (slave sit0): Error -95 calling set_mac_address [ 213.366302][T12889] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 213.471124][T12893] openvswitch: netlink: Message has 4 unknown bytes. [ 213.891741][T12919] netlink: zone id is out of range [ 213.911458][T12919] netlink: zone id is out of range [ 213.936110][T12922] netlink: 'syz.2.3362': attribute type 10 has an invalid length. [ 213.993032][T12922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.021535][T12922] bond0: entered promiscuous mode [ 214.032317][T12922] : entered promiscuous mode [ 214.044990][T12922] bond_slave_1: entered promiscuous mode [ 214.052936][T12922] team0: Port device bond0 added [ 214.507820][T12960] __nla_validate_parse: 6 callbacks suppressed [ 214.507839][T12960] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3381'. [ 214.606879][T12960] .` (unregistering): (slave bridge0): Releasing backup interface [ 214.660750][T12960] .` (unregistering): Released all slaves [ 215.085969][T12995] unsupported nlmsg_type 40 [ 215.169911][T12999] netlink: 'syz.2.3401': attribute type 21 has an invalid length. [ 215.211683][T12999] netlink: 'syz.2.3401': attribute type 3 has an invalid length. [ 215.251342][T12999] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3401'. [ 215.504946][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3410'. [ 215.532815][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3410'. [ 215.627380][T13019] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.687046][T13028] m1Ie5n: entered promiscuous mode [ 215.800825][T13033] lo: left promiscuous mode [ 215.813365][T13036] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 215.822045][T13033] batadv0: left promiscuous mode [ 215.833431][T13033] bond1: left promiscuous mode [ 215.850560][T13033] gre1: left allmulticast mode [ 216.010309][T13048] Cannot find add_set index 2 as target [ 216.061572][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 216.305525][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3433'. [ 216.414415][T13075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3434'. [ 216.727835][T13095] Cannot find map_set index 135 as target [ 216.752774][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 216.788484][T13101] netlink: 'syz.1.3449': attribute type 10 has an invalid length. [ 216.812543][T13097] bond1: option broadcast_neighbor: invalid value (30) [ 216.978103][T13097] bond1 (unregistering): Released all slaves [ 217.047834][T13101] team0: Port device dummy0 added [ 217.461886][T13133] netlink: 'syz.1.3464': attribute type 3 has an invalid length. [ 217.470359][T13133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.540027][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 217.884367][T13162] netlink: 'syz.4.3477': attribute type 10 has an invalid length. [ 218.119086][T13175] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3485'. [ 218.135397][T13175] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 218.247238][T13180] netlink: 'syz.1.3487': attribute type 32 has an invalid length. [ 218.365943][T13187] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 218.837229][T13221] netlink: 'syz.4.3508': attribute type 49 has an invalid length. [ 218.950546][T13227] netlink: 'syz.0.3510': attribute type 15 has an invalid length. [ 218.991699][T13231] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 219.022000][T13231] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 219.035464][T13231] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 219.084728][T13231] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 219.182651][T13241] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 219.866074][T13285] __nla_validate_parse: 5 callbacks suppressed [ 219.866092][T13285] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3537'. [ 219.932712][T13290] netlink: 'syz.3.3540': attribute type 1 has an invalid length. [ 220.035571][T13294] Cannot find set identified by id 65534 to match [ 220.216613][T13303] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.236696][T13309] netlink: 'syz.4.3549': attribute type 10 has an invalid length. [ 220.270883][T13309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3549'. [ 220.306674][T13309] batadv0: entered promiscuous mode [ 220.336111][T13309] batadv0: entered allmulticast mode [ 220.359069][T13309] bridge0: port 3(batadv0) entered blocking state [ 220.379040][T13309] bridge0: port 3(batadv0) entered disabled state [ 220.403907][T13309] bridge0: port 3(batadv0) entered blocking state [ 220.410517][T13309] bridge0: port 3(batadv0) entered forwarding state [ 220.421735][ T1167] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 220.433131][ T1167] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 220.636047][T13331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.705663][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3564'. [ 221.065752][T13355] bond2: option fail_over_mac: invalid value (127) [ 221.126368][T13355] bond2 (unregistering): Released all slaves [ 221.614482][T13392] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3589'. [ 222.181342][T13420] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3605'. [ 222.198080][T13422] netlink: 820 bytes leftover after parsing attributes in process `syz.3.3607'. [ 222.213003][T13422] netlink: 820 bytes leftover after parsing attributes in process `syz.3.3607'. [ 222.450761][T13436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3612'. [ 222.636927][T13444] bridge0: port 3(batadv0) entered disabled state [ 222.655090][T13444] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 222.713907][T13443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3616'. [ 222.872362][T13452] Cannot find del_set index 2 as target [ 223.313822][T13480] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3633'. [ 223.912060][T13514] syz.3.3652: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 223.946056][T13514] CPU: 0 UID: 0 PID: 13514 Comm: syz.3.3652 Not tainted syzkaller #0 PREEMPT(full) [ 223.946096][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 223.946108][T13514] Call Trace: [ 223.946115][T13514] [ 223.946122][T13514] dump_stack_lvl+0xe8/0x150 [ 223.946153][T13514] warn_alloc+0x249/0x340 [ 223.946173][T13514] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 223.946202][T13514] ? __pfx_warn_alloc+0x10/0x10 [ 223.946228][T13514] ? kasan_save_track+0x4f/0x80 [ 223.946244][T13514] ? kasan_save_track+0x3e/0x80 [ 223.946260][T13514] ? __kasan_kmalloc+0x93/0xb0 [ 223.946277][T13514] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 223.946303][T13514] ? xskq_create+0x56/0x170 [ 223.946323][T13514] ? xsk_setsockopt+0x54c/0x990 [ 223.946342][T13514] ? do_sock_setsockopt+0x17c/0x1b0 [ 223.946365][T13514] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 223.946388][T13514] ? do_syscall_64+0xe2/0xf80 [ 223.946414][T13514] __vmalloc_node_range_noprof+0x132/0x1730 [ 223.946461][T13514] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.946485][T13514] ? __kasan_kmalloc+0x93/0xb0 [ 223.946506][T13514] vmalloc_user_noprof+0xad/0xe0 [ 223.946523][T13514] ? xskq_create+0xbf/0x170 [ 223.946546][T13514] xskq_create+0xbf/0x170 [ 223.946572][T13514] xsk_init_queue+0xad/0x110 [ 223.946595][T13514] xsk_setsockopt+0x54c/0x990 [ 223.946619][T13514] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.946639][T13514] ? __pfx_aa_sk_perm+0x10/0x10 [ 223.946665][T13514] ? aa_sock_opt_perm+0xff/0x1a0 [ 223.946692][T13514] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 223.946711][T13514] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.946734][T13514] do_sock_setsockopt+0x17c/0x1b0 [ 223.946763][T13514] __x64_sys_setsockopt+0x13d/0x1b0 [ 223.946792][T13514] do_syscall_64+0xe2/0xf80 [ 223.946813][T13514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.946831][T13514] ? trace_irq_disable+0x37/0x100 [ 223.946872][T13514] ? clear_bhb_loop+0x60/0xb0 [ 223.946892][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.946908][T13514] RIP: 0033:0x7fefc9b9aeb9 [ 223.946924][T13514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.946938][T13514] RSP: 002b:00007fefca9c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.946957][T13514] RAX: ffffffffffffffda RBX: 00007fefc9e15fa0 RCX: 00007fefc9b9aeb9 [ 223.946970][T13514] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 223.946981][T13514] RBP: 00007fefc9c08c1f R08: 0000000000000004 R09: 0000000000000000 [ 223.946993][T13514] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.947004][T13514] R13: 00007fefc9e16038 R14: 00007fefc9e15fa0 R15: 00007ffccba88c38 [ 223.947034][T13514] [ 223.947394][T13514] Mem-Info: [ 224.245637][T13525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.257055][T13514] active_anon:5448 inactive_anon:5 isolated_anon:0 [ 224.257055][T13514] active_file:2964 inactive_file:40210 isolated_file:0 [ 224.257055][T13514] unevictable:768 dirty:345 writeback:0 [ 224.257055][T13514] slab_reclaimable:10809 slab_unreclaimable:115823 [ 224.257055][T13514] mapped:29136 shmem:1352 pagetables:1658 [ 224.257055][T13514] sec_pagetables:0 bounce:0 [ 224.257055][T13514] kernel_misc_reclaimable:0 [ 224.257055][T13514] free:1280911 free_pcp:18955 free_cma:0 [ 224.366395][T13514] Node 0 active_anon:21992kB inactive_anon:20kB active_file:11856kB inactive_file:160636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116544kB dirty:1380kB writeback:0kB shmem:3872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11936kB pagetables:6300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 224.434055][T13514] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 224.543645][T13514] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.622229][T13514] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 224.641566][T13514] Node 0 DMA32 free:1271136kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21892kB inactive_anon:20kB active_file:11856kB inactive_file:160636kB unevictable:1536kB writepending:1380kB zspages:0kB present:3129332kB managed:2554028kB mlocked:0kB bounce:0kB free_pcp:49012kB local_pcp:13696kB free_cma:0kB [ 224.686506][T13540] netlink: 'syz.1.3664': attribute type 11 has an invalid length. [ 224.711255][T13514] lowmem_reserve[]: 0 0 1 1 1 [ 224.719433][T13514] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.743129][T13540] netlink: 'syz.1.3664': attribute type 11 has an invalid length. [ 224.783621][T13514] lowmem_reserve[]: 0 0 0 0 0 [ 224.788529][T13514] Node 1 Normal free:3894400kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:7392kB free_cma:0kB [ 224.843951][T13514] lowmem_reserve[]: 0 0 0 0 0 [ 224.849192][T13514] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 224.922871][T13514] Node 0 DMA32: 4456*4kB (UM) 2926*8kB (UM) 1391*16kB (UME) 809*32kB (UM) 919*64kB (UM) 704*128kB (UME) 580*256kB (UME) 453*512kB (UM) 302*1024kB (UM) 94*2048kB (UM) 42*4096kB (UM) = 1292512kB [ 224.991229][T13514] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 225.040721][T13514] Node 1 Normal: 204*4kB (UME) 50*8kB (UME) 40*16kB (UME) 104*32kB (UME) 39*64kB (UME) 9*128kB (UME) 4*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3894400kB [ 225.074447][T13553] __nla_validate_parse: 7 callbacks suppressed [ 225.074468][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3670'. [ 225.087165][T13514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.121229][T13514] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.164738][T13514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.181759][T13514] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.191548][T13514] 44524 total pagecache pages [ 225.196255][T13514] 0 pages in swap cache [ 225.200425][T13514] Free swap = 124996kB [ 225.255060][T13514] Total swap = 124996kB [ 225.265756][T13514] 2097051 pages RAM [ 225.269604][T13514] 0 pages HighMem/MovableOnly [ 225.307513][T13514] 426646 pages reserved [ 225.322078][T13514] 0 pages cma reserved [ 225.735724][T13594] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3689'. [ 225.822501][T13587] bond1: Removing last ns target with arp_interval on [ 225.966108][T13607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.187770][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3702'. [ 226.268476][T13572] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 227.474953][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'. [ 227.491613][ T5140] Bluetooth: hci0: command 0x0c20 tx timeout [ 227.529385][T13703] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3744'. [ 227.531683][T13711] validate_nla: 1 callbacks suppressed [ 227.531700][T13711] netlink: 'syz.0.3745': attribute type 10 has an invalid length. [ 227.555929][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'. [ 227.576263][T13709] delete_channel: no stack [ 227.650846][T13711] veth0_vlan: left promiscuous mode [ 227.679393][T13711] veth0_vlan: entered promiscuous mode [ 227.706586][T13711] team0: Device veth0_vlan failed to register rx_handler [ 227.855070][T13727] netlink: 'syz.3.3756': attribute type 10 has an invalid length. [ 227.876573][T13727] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3756'. [ 228.177277][T13748] netlink: 'syz.2.3763': attribute type 4 has an invalid length. [ 228.240052][T13752] netlink: 'syz.3.3766': attribute type 3 has an invalid length. [ 228.243937][T13748] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3763'. [ 228.274239][T13752] netlink: 'syz.3.3766': attribute type 2 has an invalid length. [ 228.284799][T13752] netlink: 'syz.3.3766': attribute type 2 has an invalid length. [ 228.402973][T13762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.412244][T13761] netlink: 'syz.3.3770': attribute type 1 has an invalid length. [ 228.422113][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3770'. [ 228.458871][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 228.903788][T13796] lo: entered allmulticast mode [ 228.932257][T13796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.676665][T13849] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 231.649456][T13971] __nla_validate_parse: 2 callbacks suppressed [ 231.649477][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3873'. [ 232.615560][T14019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3896'. [ 232.644383][T14019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3896'. [ 232.768361][T14028] netlink: 'syz.3.3902': attribute type 1 has an invalid length. [ 232.786618][T14028] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3902'. [ 233.076666][T14049] netlink: 'syz.4.3912': attribute type 11 has an invalid length. [ 233.222418][T14057] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3917'. [ 233.660740][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'. [ 233.700780][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'. [ 233.731828][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'. [ 233.754464][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'. [ 233.781973][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'. [ 234.092654][T14109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.446301][T14130] netlink: 'syz.0.3949': attribute type 1 has an invalid length. [ 235.306277][T14181] netlink: 'syz.1.3969': attribute type 1 has an invalid length. [ 235.574601][T14196] IPv6: Can't replace route, no match found [ 235.858423][T14214] netlink: 'syz.3.3982': attribute type 2 has an invalid length. [ 236.645579][T14258] netlink: 'syz.2.3999': attribute type 1 has an invalid length. [ 236.716123][T14258] netlink: 'syz.2.3999': attribute type 2 has an invalid length. [ 237.123405][T14290] __nla_validate_parse: 73 callbacks suppressed [ 237.123425][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4011'. [ 237.221259][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4011'. [ 238.128555][T14352] netlink: 'syz.1.4043': attribute type 1 has an invalid length. [ 238.171644][T14352] netlink: 'syz.1.4043': attribute type 11 has an invalid length. [ 238.194475][T14359] netlink: 'syz.0.4044': attribute type 21 has an invalid length. [ 238.202069][T14352] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4043'. [ 238.586387][T14386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4057'. [ 238.829856][T14401] netlink: 'syz.0.4066': attribute type 2 has an invalid length. [ 238.840380][T14401] netlink: 1696 bytes leftover after parsing attributes in process `syz.0.4066'. [ 239.070866][T14420] sock: sock_timestamping_bind_phc: sock not bind to device [ 239.132471][T14422] netlink: 'syz.0.4076': attribute type 2 has an invalid length. [ 239.653342][T14456] ip6gretap1: entered promiscuous mode [ 240.285831][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4113'. [ 240.583635][T14510] xt_CT: No such helper "syz0" [ 240.637004][T14523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4125'. [ 240.731805][T14527] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 241.034030][T14542] bond0: entered promiscuous mode [ 241.047677][T14542] bond0: entered allmulticast mode [ 241.067663][T14542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.089101][T14556] Cannot find map_set index 0 as target [ 241.198296][T14548] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 241.294592][T14563] xt_hashlimit: overflow, rate too high: 0 [ 241.298171][T14568] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4144'. [ 241.311092][T14568] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4144'. [ 241.334146][T14569] netlink: 'syz.0.4145': attribute type 4 has an invalid length. [ 241.725665][T14594] netlink: 'syz.2.4158': attribute type 61 has an invalid length. [ 241.751958][T14597] netlink: 'syz.3.4159': attribute type 1 has an invalid length. [ 241.923265][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4164'. [ 242.252222][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4173'. [ 242.375959][T14631] openvswitch: netlink: IP tunnel dst address not specified [ 242.800103][T14661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4191'. [ 243.112767][T14686] TCP: TCP_TX_DELAY enabled [ 243.470883][T14704] netlink: 'syz.2.4209': attribute type 12 has an invalid length. [ 243.488977][T14704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4209'. [ 243.534495][T14710] virt_wifi0 speed is unknown, defaulting to 1000 [ 243.606105][T14710] virt_wifi0 speed is unknown, defaulting to 1000 [ 243.615415][T14710] virt_wifi0 speed is unknown, defaulting to 1000 [ 243.697965][T14710] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 243.787897][T14710] virt_wifi0 speed is unknown, defaulting to 1000 [ 243.843537][T14710] virt_wifi0 speed is unknown, defaulting to 1000 [ 243.887585][T14710] virt_wifi0 speed is unknown, defaulting to 1000 [ 243.937230][T14710] virt_wifi0 speed is unknown, defaulting to 1000 [ 243.945818][T14710] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.249749][T14742] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4217'. [ 244.385491][T14750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4221'. [ 244.400095][T14750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4221'. [ 244.484143][T14755] bridge_slave_0: entered promiscuous mode [ 244.514240][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4223'. [ 244.543735][T14755] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 244.984995][T14786] x_tables: duplicate underflow at hook 1 [ 245.189958][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 245.364337][T14810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4244'. [ 245.404201][T14810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4244'. [ 246.186632][T14867] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 246.638810][T14891] netlink: 'syz.0.4278': attribute type 1 has an invalid length. [ 246.849185][T14901] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 246.940232][T14906] netlink: 'syz.4.4286': attribute type 1 has an invalid length. [ 247.373184][T14932] xt_cgroup: invalid path, errno=-2 [ 247.604709][T14944] netlink: 'syz.1.4305': attribute type 5 has an invalid length. [ 247.752152][T14953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.759588][T14953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.803852][T14953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.814448][T14953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.913133][T14959] netlink: 'syz.2.4313': attribute type 10 has an invalid length. [ 247.939133][T14959] __nla_validate_parse: 3 callbacks suppressed [ 247.939153][T14959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4313'. [ 248.193269][T14974] delete_channel: no stack [ 248.432929][T14990] netlink: 'syz.0.4328': attribute type 2 has an invalid length. [ 248.471009][T14994] openvswitch: netlink: Missing key (keys=40, expected=80) [ 248.493955][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4330'. [ 248.494054][T14997] netlink: 'syz.2.4332': attribute type 13 has an invalid length. [ 248.691557][T15008] netlink: 'syz.2.4337': attribute type 5 has an invalid length. [ 248.721994][T15008] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.4337'. [ 248.736052][T15012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4339'. [ 248.856514][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'. [ 248.899198][T15023] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 248.925450][T15023] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 249.127277][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4350'. [ 249.444738][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4361'. [ 249.454208][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4361'. [ 249.723935][T15076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4369'. [ 249.751852][T15076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4369'. [ 250.013683][T15096] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 250.416292][T15118] netlink: 'syz.2.4391': attribute type 10 has an invalid length. [ 250.449047][T15116] gretap0: entered promiscuous mode [ 250.485197][T15118] team0: Device geneve0 is up. Set it down before adding it as a team port [ 250.525086][T15118] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 250.906772][T15146] netlink: 'syz.3.4405': attribute type 1 has an invalid length. [ 251.805679][T15202] openvswitch: netlink: Message has 4 unknown bytes. [ 251.860598][T15202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.158674][T15229] netlink: 'syz.3.4445': attribute type 1 has an invalid length. [ 252.198004][T15232] netlink: 'syz.4.4447': attribute type 2 has an invalid length. [ 252.258343][T15235] tipc: Can't bind to reserved service type 2 [ 253.135707][T15289] bond5 (unregistering): Released all slaves [ 253.253117][T15306] netlink: 'syz.1.4484': attribute type 58 has an invalid length. [ 253.261577][T15306] __nla_validate_parse: 14 callbacks suppressed [ 253.261596][T15306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4484'. [ 253.498854][T15318] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 253.549642][T15322] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4490'. [ 253.632929][T15328] netlink: 'syz.2.4494': attribute type 1 has an invalid length. [ 253.646921][T15328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4494'. [ 253.777650][T15338] netlink: 'syz.2.4499': attribute type 1 has an invalid length. [ 254.005752][T15351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.516473][T15387] netlink: 508 bytes leftover after parsing attributes in process `syz.1.4522'. [ 254.605854][T15393] x_tables: duplicate entry at hook 3 [ 254.736359][T15401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4529'. [ 254.776860][T15401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4529'. [ 254.810917][T15401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4529'. [ 254.840558][T15401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4529'. [ 254.876092][T15401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4529'. [ 254.895785][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4534'. [ 255.184427][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.201212][T15408] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 255.208966][T15408] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 255.415110][T15433] macvtap0: entered promiscuous mode [ 255.884750][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.194017][T15488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.425038][T15503] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.435328][T15502] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 258.215065][T15624] netlink: 'syz.3.4639': attribute type 21 has an invalid length. [ 259.162359][T15687] bond1: option ad_actor_sys_prio: invalid value (0) [ 259.169199][T15687] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 259.181032][T15687] bond1 (unregistering): Released all slaves [ 259.765581][T15731] netlink: 'syz.2.4690': attribute type 1 has an invalid length. [ 260.322851][T15769] __nla_validate_parse: 28 callbacks suppressed [ 260.322871][T15769] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4709'. [ 260.524113][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4717'. [ 260.833755][T15801] netlink: 'syz.3.4726': attribute type 11 has an invalid length. [ 260.926846][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'. [ 261.192140][T15821] netlink: 'syz.2.4736': attribute type 4 has an invalid length. [ 261.211526][T15821] netlink: 'syz.2.4736': attribute type 1 has an invalid length. [ 261.220063][T15821] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4736'. [ 261.695284][T15850] xt_hashlimit: max too large, truncated to 1048576 [ 261.709310][T15850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.711872][T15846] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 261.778181][T15846] bond3 (unregistering): Released all slaves [ 262.351831][T15886] openvswitch: netlink: Flow actions attr not present in new flow. [ 262.742241][T15907] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 263.171093][T15931] ip6tnl4: entered promiscuous mode [ 263.511382][T15951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4800'. [ 263.520383][T15951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4800'. [ 264.070699][T15995] netlink: 'syz.1.4821': attribute type 21 has an invalid length. [ 264.078754][T15995] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.087219][T15995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.094526][T15995] IPv6: NLM_F_CREATE should be set when creating new route [ 264.101895][T15995] IPv6: NLM_F_CREATE should be set when creating new route [ 264.109136][T15995] IPv6: NLM_F_CREATE should be set when creating new route [ 264.250137][T16001] netlink: 'syz.1.4826': attribute type 21 has an invalid length. [ 264.274563][T16001] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.359626][T16063] netlink: 'syz.0.4856': attribute type 21 has an invalid length. [ 265.376930][T16063] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4856'. [ 265.389574][T16065] netlink: 'syz.4.4857': attribute type 6 has an invalid length. [ 265.511512][T16073] batadv0: entered promiscuous mode [ 265.559435][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4863'. [ 265.756598][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4868'. [ 266.032422][T16105] netlink: 'syz.1.4876': attribute type 1 has an invalid length. [ 266.061522][T16105] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.4876'. [ 266.124275][T16111] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4880'. [ 267.098592][T16170] netlink: 'syz.1.4909': attribute type 1 has an invalid length. [ 267.108682][T16174] netlink: 'syz.4.4910': attribute type 3 has an invalid length. [ 267.111350][T16170] netlink: 'syz.1.4909': attribute type 1 has an invalid length. [ 267.435954][T16194] IPv6: Can't replace route, no match found [ 267.797592][T16219] netlink: 'syz.1.4932': attribute type 1 has an invalid length. [ 267.811431][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4935'. [ 267.917795][T16228] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4937'. [ 267.977107][T16234] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 268.159804][T16248] xt_hashlimit: size too large, truncated to 1048576 [ 268.215537][T16252] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4949'. [ 268.224028][T16248] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 269.060660][T16312] netlink: 'syz.4.4979': attribute type 1 has an invalid length. [ 269.253997][T16322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.947471][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5008'. [ 270.353426][T16396] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5020'. [ 270.440337][T16402] __nla_validate_parse: 1 callbacks suppressed [ 270.440356][T16402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5023'. [ 270.677125][T16421] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 270.834381][T16432] xt_policy: neither incoming nor outgoing policy selected [ 270.889048][T16436] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 271.616777][T16488] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5065'. [ 271.972050][T16512] netlink: 'syz.4.5078': attribute type 1 has an invalid length. [ 271.982762][T16512] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5078'. [ 272.077561][T16522] netlink: 'syz.0.5083': attribute type 2 has an invalid length. [ 272.090898][T16519] netlink: 'syz.1.5081': attribute type 8 has an invalid length. [ 272.562705][T16554] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5096'. [ 272.801466][T16568] netlink: 'syz.1.5105': attribute type 3 has an invalid length. [ 273.041219][T16586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.205017][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5120'. [ 273.257742][T16598] gre0: entered promiscuous mode [ 273.417181][T16612] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 273.573854][T16620] xt_TCPMSS: Only works on TCP SYN packets [ 273.646145][T16628] Cannot find del_set index 4 as target [ 273.716110][T16629] delete_channel: no stack [ 273.729762][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5138'. [ 273.747378][T16636] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 273.757823][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5138'. [ 273.925841][T16647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5144'. [ 274.545080][T16690] xt_TPROXY: Can be used only with -p tcp or -p udp [ 275.033428][T16724] netlink: 'syz.0.5184': attribute type 3 has an invalid length. [ 275.254036][T16736] netlink: 'syz.4.5188': attribute type 3 has an invalid length. [ 275.418194][T16740] bond1: entered promiscuous mode [ 275.423630][T16740] bond1: entered allmulticast mode [ 275.429300][T16740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.643072][T16762] sctp: [Deprecated]: syz.3.5202 (pid 16762) Use of int in max_burst socket option. [ 275.643072][T16762] Use struct sctp_assoc_value instead [ 276.142552][T16791] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5215'. [ 276.704228][T16812] netlink: 'syz.1.5226': attribute type 41 has an invalid length. [ 276.911692][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5232'. [ 277.048769][T16834] netlink: 'syz.0.5237': attribute type 7 has an invalid length. [ 277.325682][T16848] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 277.354628][T16850] netlink: 'syz.4.5244': attribute type 1 has an invalid length. [ 277.373770][T16850] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5244'. [ 277.378934][T16848] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 277.648880][T16862] netlink: 'syz.4.5252': attribute type 4 has an invalid length. [ 277.656994][T16862] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5252'. [ 278.350112][T16906] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5273'. [ 278.363516][T16906] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 278.436828][T16910] xt_connbytes: Forcing CT accounting to be enabled [ 278.670871][T16929] netlink: 'syz.3.5284': attribute type 7 has an invalid length. [ 278.702284][T16929] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5284'. [ 278.886797][T16945] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5291'. [ 279.055360][T16957] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 279.176177][T16966] netlink: 644 bytes leftover after parsing attributes in process `syz.0.5301'. [ 279.508747][T16983] netlink: 'syz.3.5308': attribute type 3 has an invalid length. [ 279.533049][T16983] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5308'. [ 280.080412][T17024] netlink: 'syz.1.5329': attribute type 21 has an invalid length. [ 280.122690][T17024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5329'. [ 280.208467][T17031] netlink: 'syz.1.5334': attribute type 11 has an invalid length. [ 280.263204][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.272060][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.282017][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.307638][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.326524][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.435713][T17034] lo speed is unknown, defaulting to 1000 [ 280.446598][T17034] xfrm0 speed is unknown, defaulting to 1000 [ 280.633360][T17051] xt_bpf: check failed: parse error [ 280.846910][T17034] virt_wifi0 speed is unknown, defaulting to 1000 [ 281.278290][T17034] chnl_net:caif_netlink_parms(): no params data found [ 281.362634][T17102] __nla_validate_parse: 1 callbacks suppressed [ 281.362652][T17102] netlink: 34 bytes leftover after parsing attributes in process `syz.3.5366'. [ 281.503512][T17034] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.512782][T17034] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.520037][T17034] bridge_slave_0: entered allmulticast mode [ 281.563214][T17034] bridge_slave_0: entered promiscuous mode [ 281.573113][T17034] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.591840][T17034] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.599440][T17034] bridge_slave_1: entered allmulticast mode [ 281.618302][T17034] bridge_slave_1: entered promiscuous mode [ 281.633820][T17117] netlink: 'syz.1.5371': attribute type 4 has an invalid length. [ 281.683423][T17119] openvswitch: netlink: Message has -2 unknown bytes. [ 281.715931][T17119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.722836][T17034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.737948][T17034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.846910][T17034] team0: Port device team_slave_0 added [ 281.864007][T17034] team0: Port device team_slave_1 added [ 281.928901][T17034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.958883][T17034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.011244][T17034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.038817][T17034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.062015][T17034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.110078][T17034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.272843][T17034] hsr_slave_0: entered promiscuous mode [ 282.280312][T17034] hsr_slave_1: entered promiscuous mode [ 282.312015][T17034] debugfs: 'hsr0' already exists in 'hsr' [ 282.317799][T17034] Cannot create hsr debugfs directory [ 282.373657][ T5140] Bluetooth: hci5: command tx timeout [ 282.425452][T17154] netlink: 'syz.3.5390': attribute type 11 has an invalid length. [ 282.716742][T17170] netlink: 'syz.0.5397': attribute type 2 has an invalid length. [ 282.756520][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5397'. [ 282.768709][T17034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.782339][T17034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.792241][T17176] netlink: 'syz.3.5401': attribute type 1 has an invalid length. [ 282.835654][T17034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.880118][T17034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.040224][T17199] sctp: [Deprecated]: syz.0.5409 (pid 17199) Use of int in maxseg socket option. [ 283.040224][T17199] Use struct sctp_assoc_value instead [ 283.108448][T17034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.176857][T17034] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.198625][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5412'. [ 283.213127][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.220317][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.238259][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5412'. [ 283.256314][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.263530][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.442673][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5420'. [ 283.769292][T17245] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 283.821631][T17034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.898137][T17253] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5434'. [ 283.924179][T17253] netlink: 245 bytes leftover after parsing attributes in process `syz.1.5434'. [ 283.944527][T17258] netlink: 'syz.4.5432': attribute type 1 has an invalid length. [ 283.952930][T17258] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5432'. [ 284.109053][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5437'. [ 284.243769][T17278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5441'. [ 284.270821][T17278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.333907][T17284] openvswitch: netlink: Missing valid actions attribute. [ 284.340999][T17284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.369650][T17034] veth0_vlan: entered promiscuous mode [ 284.424352][T17034] veth1_vlan: entered promiscuous mode [ 284.442013][ T5140] Bluetooth: hci5: command tx timeout [ 284.484590][T17034] veth0_macvtap: entered promiscuous mode [ 284.545071][T17034] veth1_macvtap: entered promiscuous mode [ 284.598122][T17034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.635372][T17034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.677919][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.699661][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.712938][T17304] netlink: 'syz.3.5454': attribute type 2 has an invalid length. [ 284.733651][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.768107][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.040729][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.083784][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.187527][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.221714][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.402416][T17346] nbd: must specify at least one socket [ 285.682949][T17365] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 286.059562][T17390] pim6reg: entered allmulticast mode [ 286.155017][T17395] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.170277][T17401] openvswitch: netlink: EtherType 0 is less than min 600 [ 286.210556][T17403] netlink: 'syz.4.5499': attribute type 3 has an invalid length. [ 286.219007][T17403] netlink: 'syz.4.5499': attribute type 3 has an invalid length. [ 286.468764][T17418] bond1: option arp_all_targets: invalid value (129) [ 286.493013][T17418] bond1 (unregistering): Released all slaves [ 286.521845][ T5140] Bluetooth: hci5: command tx timeout [ 286.640180][T17424] geneve2: entered promiscuous mode [ 286.654682][T17424] geneve2: entered allmulticast mode [ 286.796629][T17436] __nla_validate_parse: 6 callbacks suppressed [ 286.796648][T17436] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5514'. [ 286.819282][T17436] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5514'. [ 287.597189][T17478] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5536'. [ 288.141947][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5552'. [ 288.181399][T17511] openvswitch: netlink: Missing key (keys=40, expected=80) [ 288.392911][T17523] No such timeout policy "syz1" [ 288.472038][T17528] netlink: zone id is out of range [ 288.477199][T17528] netlink: zone id is out of range [ 288.501307][T17528] netlink: zone id is out of range [ 288.506816][T17528] netlink: zone id is out of range [ 288.516981][T17528] netlink: zone id is out of range [ 288.601535][ T5140] Bluetooth: hci5: command tx timeout [ 288.658977][T17536] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 288.838269][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5568'. [ 288.865071][T17544] netlink: 'syz.0.5568': attribute type 1 has an invalid length. [ 288.957405][T17551] xt_cgroup: xt_cgroup: no path or classid specified [ 289.126627][T17561] netlink: 'syz.5.5574': attribute type 6 has an invalid length. [ 289.266488][T17569] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5577'. [ 289.358581][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5579'. [ 290.301387][T17618] bond2: Unable to set up delay as MII monitoring is disabled [ 290.343398][T17618] bond2 (unregistering): Released all slaves [ 290.593806][T17641] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5607'. [ 290.877748][T17661] netlink: 'syz.5.5614': attribute type 1 has an invalid length. [ 290.903689][T17661] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5614'. [ 291.016439][T17670] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.5618'. [ 291.346804][T17694] xt_ipcomp: unknown flags 1D [ 291.403425][T17690] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 291.436402][T17690] bond1 (unregistering): Released all slaves [ 291.918423][T17728] net_ratelimit: 10 callbacks suppressed [ 291.918443][T17728] openvswitch: netlink: Duplicate or invalid key (type 0). [ 291.960954][T17728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.907438][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5668'. [ 292.939202][T17789] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5668'. [ 292.957470][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5668'. [ 292.967099][T17791] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 293.273409][T17807] ip6t_srh: unknown srh invflags BA61 [ 293.644424][T17833] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 293.715864][T17837] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5691'. [ 293.776894][T17837] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 294.084751][T17867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5706'. [ 294.261519][T17877] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 294.268283][T17877] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 294.370083][T17886] netlink: 424 bytes leftover after parsing attributes in process `syz.0.5718'. [ 294.411587][T17886] netlink: 'syz.0.5718': attribute type 1 has an invalid length. [ 294.549877][T17901] netlink: 'syz.0.5725': attribute type 10 has an invalid length. [ 294.551552][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5722'. [ 294.626483][T17904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.903486][T17924] bridge_slave_0: left allmulticast mode [ 294.922576][T17924] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.977085][T17924] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 294.984832][T17931] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5740'. [ 295.190102][T17937] xt_bpf: check failed: parse error [ 295.191087][T17939] raw_sendmsg: syz.0.5745 forgot to set AF_INET. Fix it! [ 295.328515][T17945] netlink: 'syz.4.5749': attribute type 3 has an invalid length. [ 295.379464][T17953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5751'. [ 295.947600][T17991] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 295.971001][T17991] bond3 (unregistering): Released all slaves [ 295.994644][T17996] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5772'. [ 296.013567][T17998] bridge_slave_1: default FDB implementation only supports local addresses [ 296.379873][T18018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.699324][T18048] netlink: 'syz.5.5798': attribute type 58 has an invalid length. [ 296.838708][T18058] delete_channel: no stack [ 296.985788][T18064] netlink: del zone limit has 4 unknown bytes [ 297.035762][T18069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.169560][T18078] netlink: 'syz.1.5813': attribute type 11 has an invalid length. [ 297.218930][T18084] openvswitch: netlink: IP tunnel dst address not specified [ 297.407060][T18097] netlink: 'syz.3.5822': attribute type 1 has an invalid length. [ 298.183356][T18153] Cannot find map_set index 4 as target [ 298.275414][T18159] xfrm1: entered allmulticast mode [ 298.456476][T18173] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 298.467352][T18175] xt_connbytes: Forcing CT accounting to be enabled [ 298.474311][T18175] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 298.641711][T18186] __nla_validate_parse: 2 callbacks suppressed [ 298.641732][T18186] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5865'. [ 298.690498][T18189] netlink: 'syz.1.5868': attribute type 2 has an invalid length. [ 298.822584][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5870'. [ 298.889125][T18203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5874'. [ 299.093128][T18219] netlink: 348 bytes leftover after parsing attributes in process `syz.5.5882'. [ 299.487931][T18244] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5893'. [ 299.501538][T18245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.647353][T18255] netlink: 'syz.5.5900': attribute type 2 has an invalid length. [ 299.958849][T18275] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5908'. [ 300.198847][T18290] bond3: option resend_igmp: invalid value (2878) [ 300.205832][T18290] bond3: option resend_igmp: allowed values 0 - 255 [ 300.214833][T18290] bond3 (unregistering): Released all slaves [ 300.696026][T18320] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5931'. [ 301.422674][T18377] delete_channel: no stack [ 301.556871][T18388] netlink: 'syz.4.5962': attribute type 1 has an invalid length. [ 301.565324][T18388] netlink: 'syz.4.5962': attribute type 2 has an invalid length. [ 301.625675][T18390] netlink: 'syz.5.5963': attribute type 1 has an invalid length. [ 301.662117][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5963'. [ 301.967843][T18416] netlink: 'syz.1.5976': attribute type 30 has an invalid length. [ 301.982062][T18416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5976'. [ 302.040806][T18416] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 302.054929][T18416] bond3 (unregistering): Released all slaves [ 302.116644][T18423] bond1: option all_slaves_active: invalid value (13) [ 302.137395][T18423] bond1 (unregistering): Released all slaves [ 302.281807][T18436] IPv6: Can't replace route, no match found [ 302.306349][T18435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5985'. [ 302.613583][T18458] netlink: 'syz.4.5996': attribute type 1 has an invalid length. [ 302.705363][T18466] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 303.115371][T18493] netlink: 'syz.1.6012': attribute type 29 has an invalid length. [ 303.203296][T18502] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 303.834568][T18541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.841904][T18541] IPv6: NLM_F_CREATE should be set when creating new route [ 303.849466][T18541] IPv6: NLM_F_CREATE should be set when creating new route [ 304.311551][T18572] xt_l2tp: v2 doesn't support IP mode [ 304.435085][T18581] xt_TCPMSS: Only works on TCP SYN packets [ 304.838757][T18611] bridge0: port 1(veth1_to_hsr) entered blocking state [ 304.849931][T18611] bridge0: port 1(veth1_to_hsr) entered disabled state [ 304.858128][T18611] veth1_to_hsr: entered allmulticast mode [ 304.867351][T18611] veth1_to_hsr: entered promiscuous mode [ 304.924460][T18611] bridge0: port 1(veth1_to_hsr) entered blocking state [ 304.931628][T18611] bridge0: port 1(veth1_to_hsr) entered forwarding state [ 305.060747][T18626] __nla_validate_parse: 2 callbacks suppressed [ 305.060767][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6070'. [ 305.689920][T18672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6093'. [ 305.715865][T18672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6093'. [ 305.952173][T18688] netlink: 'syz.1.6102': attribute type 1 has an invalid length. [ 305.968740][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6102'. [ 306.016624][T18690] xt_CT: No such helper "snmp_trap" [ 306.320549][T18717] Zero length message leads to an empty skb [ 306.708621][T18748] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 306.850061][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6134'. [ 306.859192][T18756] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6134'. [ 306.861709][T18758] openvswitch: netlink: Invalid VLAN frame [ 307.238655][T18780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6144'. [ 308.095916][T18848] sctp: [Deprecated]: syz.4.6178 (pid 18848) Use of int in maxseg socket option. [ 308.095916][T18848] Use struct sctp_assoc_value instead [ 308.469158][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'. [ 308.690365][T18892] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 308.714860][T18892] bond3 (unregistering): Released all slaves [ 309.056914][T18919] netlink: 'syz.4.6213': attribute type 1 has an invalid length. [ 309.149325][T18928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6217'. [ 309.286723][T18939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6224'. [ 309.704241][T18968] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 310.073609][T18993] ip6gretap2: entered promiscuous mode [ 310.369094][T19013] __nla_validate_parse: 1 callbacks suppressed [ 310.369114][T19013] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6255'. [ 310.732918][T19039] netlink: 21 bytes leftover after parsing attributes in process `syz.3.6269'. [ 311.028567][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6276'. [ 311.454668][T19075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.064688][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.080289][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.088839][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.101197][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.109022][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.220103][T19098] lo speed is unknown, defaulting to 1000 [ 312.235274][T19098] xfrm0 speed is unknown, defaulting to 1000 [ 312.425604][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6304'. [ 312.599607][T19098] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.949342][T19098] chnl_net:caif_netlink_parms(): no params data found [ 313.134275][T19098] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.141675][T19098] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.148928][T19098] bridge_slave_0: entered allmulticast mode [ 313.157182][T19098] bridge_slave_0: entered promiscuous mode [ 313.166661][T19098] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.174278][T19098] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.182179][T19098] bridge_slave_1: entered allmulticast mode [ 313.189806][T19098] bridge_slave_1: entered promiscuous mode [ 313.230436][T19098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.250612][T19098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.324301][T19098] team0: Port device team_slave_0 added [ 313.340175][T19098] team0: Port device team_slave_1 added [ 313.387325][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6330'. [ 313.422717][T19098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.440830][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.468931][T19098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.482589][T19098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.490190][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.535361][T19098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.628292][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6335'. [ 313.639673][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6336'. [ 313.661556][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6336'. [ 313.671298][T19189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.713013][T19098] hsr_slave_0: entered promiscuous mode [ 313.742282][T19098] hsr_slave_1: entered promiscuous mode [ 313.748728][T19098] debugfs: 'hsr0' already exists in 'hsr' [ 313.756726][T19098] Cannot create hsr debugfs directory [ 313.954220][T19210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6345'. [ 314.168608][T19098] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.180573][T19098] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.202034][ T5140] Bluetooth: hci6: command tx timeout [ 314.219352][T19098] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.238039][T19098] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.300933][T19231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6353'. [ 314.396591][T19098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.453713][T19098] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.471959][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.479189][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.517779][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.525098][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.686397][T19254] --map-set only usable from mangle table [ 314.727979][T19256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.854652][T19098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.015839][T19277] netlink: 'syz.4.6372': attribute type 2 has an invalid length. [ 315.042129][T19277] netlink: 'syz.4.6372': attribute type 1 has an invalid length. [ 315.298726][T19098] veth0_vlan: entered promiscuous mode [ 315.335603][T19098] veth1_vlan: entered promiscuous mode [ 315.408172][T19098] veth0_macvtap: entered promiscuous mode [ 315.443783][T19098] veth1_macvtap: entered promiscuous mode [ 315.495727][T19098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.524205][T19098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.564036][ T1102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.597309][ T1102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.637745][ T1102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.697724][ T1102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.781258][T19322] __nla_validate_parse: 5 callbacks suppressed [ 315.781274][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6393'. [ 315.841925][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.871490][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.909618][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.934037][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.979463][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6398'. [ 315.997449][T19332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6398'. [ 316.062935][T19336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.282382][ T5140] Bluetooth: hci6: command tx timeout [ 316.398264][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6409'. [ 316.603601][T19368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6415'. [ 316.633287][T19368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6415'. [ 316.645945][T19368] netlink: 'syz.1.6415': attribute type 3 has an invalid length. [ 316.903281][T19386] netlink: 'syz.1.6425': attribute type 1 has an invalid length. [ 317.330980][T19417] xt_hashlimit: size too large, truncated to 1048576 [ 317.342115][T19419] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6441'. [ 317.346964][T19417] xt_hashlimit: max too large, truncated to 1048576 [ 317.351342][T19420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6440'. [ 317.569483][T19430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6446'. [ 317.585448][T19430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6446'. [ 317.585665][T19432] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 318.361245][ T5140] Bluetooth: hci6: command tx timeout [ 318.399279][T19486] x9: renamed from bridge_slave_0 [ 318.590924][T19498] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 319.225787][T19536] netlink: 'syz.4.6496': attribute type 3 has an invalid length. [ 319.551985][T19552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.569693][T19549] bond1: option mode: invalid value (254) [ 319.598316][T19549] bond1 (unregistering): Released all slaves [ 320.009872][T19579] netlink: 'syz.4.6514': attribute type 2 has an invalid length. [ 320.202443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.441535][ T5140] Bluetooth: hci6: command tx timeout [ 320.526021][ T5863] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.539231][ T5863] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.551917][ T5863] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.566605][ T5863] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.574649][ T5863] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.690966][T19611] lo speed is unknown, defaulting to 1000 [ 320.732145][T19611] xfrm0 speed is unknown, defaulting to 1000 [ 320.818629][T19628] netlink: 'syz.4.6540': attribute type 1 has an invalid length. [ 320.836238][T19628] __nla_validate_parse: 11 callbacks suppressed [ 320.836254][T19628] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6540'. [ 320.836576][T19630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.213730][T19611] virt_wifi0 speed is unknown, defaulting to 1000 [ 321.702363][T19611] chnl_net:caif_netlink_parms(): no params data found [ 321.973006][T19705] xt_hashlimit: invalid rate [ 322.077671][T19611] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.109010][T19611] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.135068][T19611] bridge_slave_0: entered allmulticast mode [ 322.154389][T19611] bridge_slave_0: entered promiscuous mode [ 322.161759][T19712] netlink: 'syz.6.6579': attribute type 1 has an invalid length. [ 322.163870][T19611] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.177440][T19611] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.185319][T19611] bridge_slave_1: entered allmulticast mode [ 322.193627][T19611] bridge_slave_1: entered promiscuous mode [ 322.206476][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6580'. [ 322.290272][T19611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.316763][T19611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.427260][T19611] team0: Port device team_slave_0 added [ 322.449135][T19611] team0: Port device team_slave_1 added [ 322.531432][T19611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.538440][T19611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.580696][T19611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.601603][ T5140] Bluetooth: hci7: command tx timeout [ 322.639078][T19611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.646759][T19611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.675673][T19611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.765007][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6595'. [ 322.892812][T19611] hsr_slave_0: entered promiscuous mode [ 322.900233][T19611] hsr_slave_1: entered promiscuous mode [ 322.927669][T19611] debugfs: 'hsr0' already exists in 'hsr' [ 322.950836][T19611] Cannot create hsr debugfs directory [ 323.164662][T19768] sctp: [Deprecated]: syz.6.6605 (pid 19768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.164662][T19768] Use struct sctp_sack_info instead [ 323.395563][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6614'. [ 323.416367][T19780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6614'. [ 323.564150][T19789] netlink: 'syz.6.6615': attribute type 9 has an invalid length. [ 323.688609][T19611] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 323.728756][T19611] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.765021][T19611] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 323.812696][T19611] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 324.023090][T19819] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 324.156807][T19611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.182683][T19611] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.216140][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.223334][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.273110][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.280253][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.320539][T19834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6634'. [ 324.469567][T19840] netlink: 'syz.4.6641': attribute type 1 has an invalid length. [ 324.485226][T19840] netlink: 'syz.4.6641': attribute type 2 has an invalid length. [ 324.515156][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6641'. [ 324.647466][T19853] netlink: 1053 bytes leftover after parsing attributes in process `syz.6.6644'. [ 324.681622][ T5140] Bluetooth: hci7: command tx timeout [ 324.733334][T19859] netlink: 'syz.3.6647': attribute type 2 has an invalid length. [ 324.872961][T19611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.946209][T19873] openvswitch: netlink: IP tunnel dst address not specified [ 325.056481][T19876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6653'. [ 325.082164][T19878] netlink: 4456 bytes leftover after parsing attributes in process `syz.6.6654'. [ 325.437879][T19611] veth0_vlan: entered promiscuous mode [ 325.469288][T19611] veth1_vlan: entered promiscuous mode [ 325.564507][T19611] veth0_macvtap: entered promiscuous mode [ 325.590132][T19611] veth1_macvtap: entered promiscuous mode [ 325.653833][T19611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.684752][T19611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.716235][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.738353][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.769094][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.788921][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.029398][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.049393][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.142344][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.168758][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.254667][T19937] netlink: 'syz.6.6680': attribute type 10 has an invalid length. [ 326.277767][T19933] bond1 (unregistering): Released all slaves [ 326.295606][T19937] __nla_validate_parse: 1 callbacks suppressed [ 326.295622][T19937] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6680'. [ 326.333351][T19937] dummy0: entered promiscuous mode [ 326.339270][T19937] bridge0: port 3(dummy0) entered blocking state [ 326.380684][T19937] bridge0: port 3(dummy0) entered disabled state [ 326.398058][T19937] dummy0: entered allmulticast mode [ 326.417808][T19937] bridge0: port 3(dummy0) entered blocking state [ 326.424352][T19937] bridge0: port 3(dummy0) entered forwarding state [ 326.692911][T19957] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6690'. [ 326.763780][ T5140] Bluetooth: hci7: command tx timeout [ 327.002028][ T30] audit: type=1107 audit(1770382381.361:3): pid=19977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 327.044986][ T30] audit: type=1107 audit(1770382381.381:4): pid=19978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 327.168890][T19990] xt_limit: Overflow, try lower: 268435456/134217728 [ 328.074229][T20045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6733'. [ 328.217548][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6735'. [ 328.418273][T20064] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 328.421411][T20061] xt_connbytes: Forcing CT accounting to be enabled [ 328.464056][T20061] Cannot find set identified by id 65470 to match [ 328.618994][T20073] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6747'. [ 328.819899][T20087] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6753'. [ 328.845024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 328.852021][ T5140] Bluetooth: hci7: command tx timeout [ 329.051484][T20101] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 329.501728][T20127] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6772'. [ 329.564723][T20127] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6772'. [ 329.640673][T20133] IPv6: sit1: Disabled Multicast RS [ 330.038662][T20161] netlink: 'syz.3.6791': attribute type 21 has an invalid length. [ 330.086192][T20161] netlink: 'syz.3.6791': attribute type 6 has an invalid length. [ 330.134938][T20161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6791'. [ 330.332599][T20179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.402596][T20182] netlink: 'syz.7.6801': attribute type 11 has an invalid length. [ 330.410590][T20182] netlink: 228 bytes leftover after parsing attributes in process `syz.7.6801'. [ 331.327821][T20243] sctp: [Deprecated]: syz.4.6830 (pid 20243) Use of int in maxseg socket option. [ 331.327821][T20243] Use struct sctp_assoc_value instead [ 331.353452][T20242] net veth1_virt_wifi : renamed from virt_wifi0 [ 331.799970][T20271] __nla_validate_parse: 1 callbacks suppressed [ 331.799990][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6846'. [ 331.830399][T20274] xt_ecn: cannot match TCP bits for non-tcp packets [ 331.838258][T20271] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6846'. [ 332.016884][T20281] netlink: 'syz.1.6852': attribute type 2 has an invalid length. [ 332.044858][T20281] netlink: 'syz.1.6852': attribute type 8 has an invalid length. [ 332.073107][T20281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6852'. [ 332.388199][T20293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.587112][T20306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.626825][T20301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6861'. [ 332.693271][T20308] netlink: 'syz.7.6863': attribute type 21 has an invalid length. [ 332.712158][T20308] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6863'. [ 332.742044][T20308] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6863'. [ 333.045406][T20322] delete_channel: no stack [ 333.492646][T20348] netlink: 'syz.7.6883': attribute type 32 has an invalid length. [ 333.816537][T20370] netlink: zone id is out of range [ 333.837758][T20370] netlink: zone id is out of range [ 333.847590][T20370] netlink: zone id is out of range [ 333.897820][T20370] netlink: zone id is out of range [ 333.921365][T20374] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 333.935322][T20370] netlink: zone id is out of range [ 333.960886][T20370] netlink: zone id is out of range [ 334.021450][T20378] netlink: 'syz.4.6898': attribute type 1 has an invalid length. [ 334.272484][T20397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6907'. [ 334.385822][T20396] bond1: option tlb_dynamic_lb: invalid value (5) [ 334.423282][T20396] bond1 (unregistering): Released all slaves [ 334.450301][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6912'. [ 334.486800][T20405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6912'. [ 334.701259][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6918'. [ 334.715317][T20422] netlink: 'syz.7.6919': attribute type 30 has an invalid length. [ 335.222170][T20457] netlink: 'syz.3.6936': attribute type 1 has an invalid length. [ 335.254070][T20457] netlink: 'syz.3.6936': attribute type 3 has an invalid length. [ 335.385639][T20467] net_ratelimit: 9 callbacks suppressed [ 335.385662][T20467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.042187][T20508] netlink: 'syz.3.6962': attribute type 1 has an invalid length. [ 336.374167][T20527] netlink: 'syz.7.6971': attribute type 1 has an invalid length. [ 337.783601][T20606] validate_nla: 1 callbacks suppressed [ 337.783619][T20606] netlink: 'syz.7.7008': attribute type 7 has an invalid length. [ 337.973536][T20620] __nla_validate_parse: 7 callbacks suppressed [ 337.973558][T20620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7014'. [ 338.010890][T20623] : renamed from veth0_to_bond (while UP) [ 338.032989][T20624] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7017'. [ 338.480383][T20648] netlink: 'syz.7.7030': attribute type 10 has an invalid length. [ 338.517658][T20648] netlink: 156 bytes leftover after parsing attributes in process `syz.7.7030'. [ 338.750703][T20665] openvswitch: netlink: IP tunnel dst address not specified [ 338.949182][T20675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7043'. [ 339.158976][T20686] netlink: 'syz.4.7048': attribute type 1 has an invalid length. [ 339.217570][T20686] netlink: 'syz.4.7048': attribute type 11 has an invalid length. [ 339.238697][T20686] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7048'. [ 339.511741][T20709] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7060'. [ 339.583242][T20713] ip6gre3: entered promiscuous mode [ 339.589262][T20713] ip6gre3: entered allmulticast mode [ 339.824296][T20730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7070'. [ 339.974968][T20739] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 340.495286][T20777] gre0: entered promiscuous mode [ 340.500407][T20775] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 340.508441][T20774] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 340.521380][T20777] gre0: entered allmulticast mode [ 340.616375][T20783] netlink: 'syz.6.7097': attribute type 62 has an invalid length. [ 340.676484][T20785] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7098'. [ 341.228563][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7117'. [ 341.229953][T20823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.242281][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7117'. [ 341.570501][T20847] netlink: 'syz.3.7124': attribute type 1 has an invalid length. [ 341.873426][T20862] netlink: 'syz.6.7131': attribute type 7 has an invalid length. [ 341.921251][T20862] netlink: 'syz.6.7131': attribute type 8 has an invalid length. [ 342.327909][T20889] netlink: 'syz.3.7144': attribute type 2 has an invalid length. [ 342.348501][T20889] netlink: 'syz.3.7144': attribute type 1 has an invalid length. [ 342.461586][T20898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.371062][T20926] __nla_validate_parse: 2 callbacks suppressed [ 343.371081][T20926] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7163'. [ 343.395858][T20930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7166'. [ 343.525838][T20934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7167'. [ 343.545442][T20934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7167'. [ 343.585095][T20934] netlink: 'syz.6.7167': attribute type 14 has an invalid length. [ 343.621069][T20934] netlink: 'syz.6.7167': attribute type 12 has an invalid length. [ 343.791065][T20951] block nbd7: not configured, cannot reconfigure [ 344.162719][T20970] block nbd6: not configured, cannot reconfigure [ 344.465929][T20986] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 344.506264][T20986] macsec1: entered promiscuous mode [ 344.676751][T20997] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7199'. [ 345.331064][T21031] Bluetooth: MGMT ver 1.23 [ 345.483523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 346.028081][T21056] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.035836][T21056] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.186049][T21090] netlink: 'syz.3.7237': attribute type 1 has an invalid length. [ 346.438355][T21056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.470978][T21056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.115718][T21058] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7228'. [ 347.170417][T21094] vlan2: entered promiscuous mode [ 347.193934][T21094] gretap0: entered promiscuous mode [ 347.243430][ T1150] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.255277][T21108] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 347.264800][ T1150] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.285413][ T1150] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.335145][ T1150] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.602271][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7257'. [ 348.419903][T21185] netlink: 'syz.1.7283': attribute type 298 has an invalid length. [ 348.653609][T21199] netlink: 'syz.3.7290': attribute type 10 has an invalid length. [ 348.708265][T21203] netlink: 64106 bytes leftover after parsing attributes in process `syz.1.7291'. [ 348.813257][T21211] netlink: 'syz.3.7296': attribute type 2 has an invalid length. [ 349.055727][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7304'. [ 349.086255][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7304'. [ 349.098288][T21226] netlink: 'syz.6.7304': attribute type 18 has an invalid length. [ 349.633461][T21257] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 349.679648][T21257] batman_adv: batadv0: Adding interface: gretap0 [ 349.747647][T21257] batman_adv: batadv0: Interface activated: gretap0 [ 350.532072][T21305] netlink: 252 bytes leftover after parsing attributes in process `syz.1.7341'. [ 350.908410][T21330] tipc: Started in network mode [ 350.923640][T21330] tipc: Node identity ac141441, cluster identity 4711 [ 350.952940][T21330] tipc: Enabled bearer , priority 10 [ 351.754519][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7380'. [ 351.764058][T21384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7380'. [ 351.778156][T21384] netlink: 'syz.1.7380': attribute type 7 has an invalid length. [ 351.930278][T21389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7381'. [ 351.941667][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7383'. [ 351.978890][T21389] nbd: illegal input index 38656 [ 352.008415][T21392] macsec1: entered allmulticast mode [ 352.027266][T21392] hsr0: entered allmulticast mode [ 352.040225][T21392] hsr_slave_0: entered allmulticast mode [ 352.077678][T21392] hsr_slave_1: entered allmulticast mode [ 352.099670][T21392] hsr0: left allmulticast mode [ 352.113878][T21392] hsr_slave_0: left allmulticast mode [ 352.119340][T21392] hsr_slave_1: left allmulticast mode [ 352.165315][ T5975] tipc: Node number set to 2886997057 [ 352.190891][T21398] veth3: entered promiscuous mode [ 352.196944][T21403] netem: change failed [ 352.332751][T21407] tipc: Started in network mode [ 352.344601][T21407] tipc: Node identity ac14142f, cluster identity 4711 [ 352.368326][T21407] tipc: New replicast peer: 0.0.0.0 [ 352.390753][T21407] tipc: Enabled bearer , priority 10 [ 353.022042][T21444] tipc: Started in network mode [ 353.034011][T21444] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 353.071585][T21444] tipc: Enabling of bearer rejected, failed to enable media [ 353.502366][ T48] tipc: Node number set to 2886997039 [ 353.605662][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7417'. [ 353.885075][T21484] tipc: Enabling not permitted [ 353.904691][T21484] tipc: Enabling of bearer rejected, failed to enable media [ 353.960504][T21491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7429'. [ 354.250752][T21511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7438'. [ 354.857187][T21541] netlink: 296 bytes leftover after parsing attributes in process `syz.3.7453'. [ 355.344575][T21565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7465'. [ 355.492241][T21575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7469'. [ 355.937067][T21606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7483'. [ 356.199652][T21622] netlink: 'syz.3.7488': attribute type 66 has an invalid length. [ 356.466345][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7498'. [ 356.619574][T21652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7503'. [ 356.828810][T21664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7510'. [ 356.998254][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7515'. [ 357.338840][T21697] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 357.359273][T21697] bond1 (unregistering): Released all slaves [ 357.457630][T21700] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 358.508844][T21762] xt_hashlimit: size too large, truncated to 1048576 [ 359.018311][T21788] __nla_validate_parse: 4 callbacks suppressed [ 359.018331][T21788] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7566'. [ 359.036155][T21790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7569'. [ 359.045942][T21790] netlink: 'syz.3.7569': attribute type 3 has an invalid length. [ 359.112102][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7570'. [ 359.150662][T21794] bridge: RTM_NEWNEIGH with invalid ether address [ 359.450827][T21815] Bluetooth: MGMT ver 1.23 [ 359.452611][T21813] tipc: Enabling of bearer rejected, failed to enable media [ 360.019775][T21856] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7600'. [ 360.073980][T21853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7597'. [ 360.233735][T21862] tipc: Enabling of bearer rejected, failed to enable media [ 360.450446][T21875] netlink: 'syz.4.7609': attribute type 3 has an invalid length. [ 360.596791][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7612'. [ 360.794982][T21891] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7617'. [ 361.045458][T21908] ip6gretap2: entered allmulticast mode [ 361.358008][T21922] netlink: 280 bytes leftover after parsing attributes in process `syz.4.7631'. [ 361.425659][ T36] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.447597][ T36] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.476346][ T36] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.490061][ T36] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.595735][T21936] netlink: 'syz.7.7638': attribute type 1 has an invalid length. [ 361.629811][T21938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7639'. [ 361.931017][T21953] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7646'. [ 362.368916][T21969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.831630][T22000] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 363.569836][T21076] IPVS: starting estimator thread 0... [ 363.681370][T22043] IPVS: using max 37 ests per chain, 88800 per kthread [ 363.808015][T22055] netlink: 'syz.1.7694': attribute type 15 has an invalid length. [ 364.079785][T22072] __nla_validate_parse: 3 callbacks suppressed [ 364.079804][T22072] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7701'. [ 364.299530][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7708'. [ 364.351728][T22086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7708'. [ 364.377116][T22086] netlink: 'syz.4.7708': attribute type 13 has an invalid length. [ 364.461966][T22092] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7710'. [ 364.918797][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7722'. [ 364.973439][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7722'. [ 365.002536][T22116] netlink: 'syz.6.7722': attribute type 13 has an invalid length. [ 365.020989][T22116] netlink: 'syz.6.7722': attribute type 11 has an invalid length. [ 365.307477][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7731'. [ 365.351449][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7731'. [ 365.778916][T22161] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7744'. [ 365.964977][T22175] netlink: 'syz.6.7750': attribute type 1 has an invalid length. [ 366.748730][T22225] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 367.336214][T22253] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7786'. [ 367.939831][ T30] audit: type=1804 audit(1770382422.281:5): pid=22283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7800" name="/newroot/1677/cgroup.controllers" dev="tmpfs" ino=8411 res=1 errno=0 [ 368.052162][ T30] audit: type=1800 audit(1770382422.281:6): pid=22283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7800" name="cgroup.controllers" dev="tmpfs" ino=8411 res=0 errno=0 [ 369.206604][T22341] openvswitch: netlink: Missing valid actions attribute. [ 369.228066][T22341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.764419][T22378] __nla_validate_parse: 2 callbacks suppressed [ 369.764439][T22378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7844'. [ 369.840121][T22383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7846'. [ 370.010831][T22396] : renamed from team_slave_1 (while UP) [ 370.168839][T22405] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 370.397993][T22415] dvmrp1: entered allmulticast mode [ 370.430915][T22415] dvmrp1: left allmulticast mode [ 370.590575][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7868'. [ 370.677055][T22428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.040599][T22455] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7882'. [ 371.340429][T22473] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7890'. [ 371.350762][T22473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7890'. [ 371.877898][T22507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7907'. [ 371.912656][T22509] netlink: 'syz.1.7904': attribute type 10 has an invalid length. [ 372.198776][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7915'. [ 372.507554][T22548] netlink: 'syz.6.7927': attribute type 1 has an invalid length. [ 372.540107][T22551] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 372.968648][T22577] netlink: 'syz.3.7941': attribute type 2 has an invalid length. [ 373.073558][T22582] syz.3.7944 uses old SIOCAX25GETINFO [ 373.120184][T22585] nbd: must specify a device to reconfigure [ 373.673880][T22621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7961'. [ 373.732910][T22620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7960'. [ 373.767193][T22620] vlan3: entered promiscuous mode [ 373.777168][T22620] gretap0: entered promiscuous mode [ 374.324274][T22661] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 374.879720][T22688] __nla_validate_parse: 1 callbacks suppressed [ 374.879741][T22688] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7992'. [ 375.108770][ T5140] Bluetooth: hci7: link tx timeout [ 375.115359][ T5140] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 375.193124][T22704] netlink: 'syz.6.8002': attribute type 178 has an invalid length. [ 375.876204][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8017'. [ 376.075303][T22747] netlink: 'syz.7.8022': attribute type 27 has an invalid length. [ 376.215617][ T30] audit: type=1800 audit(1770382430.581:7): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8028" name="memory.events" dev="tmpfs" ino=8678 res=0 errno=0 [ 376.307231][ T30] audit: type=1804 audit(1770382430.611:8): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8028" name="/newroot/1730/memory.events" dev="tmpfs" ino=8678 res=1 errno=0 [ 376.516995][T22773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8034'. [ 376.546733][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8034'. [ 376.606431][T22777] netlink: 'syz.6.8037': attribute type 1 has an invalid length. [ 376.843210][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 377.045238][T22802] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8049'. [ 377.076562][T22805] dvmrp12: entered allmulticast mode [ 377.115722][T22804] dvmrp12: left allmulticast mode [ 377.161880][ T5140] Bluetooth: hci7: command 0x0405 tx timeout [ 377.329303][T22809] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8053'. [ 377.381453][T22809] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8053'. [ 377.551660][T22834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8065'. [ 378.000749][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8076'. [ 378.041927][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8076'. [ 378.060805][T22857] netlink: 'syz.1.8076': attribute type 14 has an invalid length. [ 378.106180][T22857] netlink: 'syz.1.8076': attribute type 11 has an invalid length. [ 378.977348][T22895] veth1_to_hsr: entered promiscuous mode [ 378.990644][T22895] macvtap1: entered promiscuous mode [ 379.002697][T22895] macvtap1: entered allmulticast mode [ 379.017191][T22895] veth1_to_hsr: entered allmulticast mode [ 379.608458][T22937] netlink: 'syz.3.8105': attribute type 12 has an invalid length. [ 379.619680][T22937] netlink: 'syz.3.8105': attribute type 11 has an invalid length. [ 380.163336][T22971] netlink: 'syz.4.8117': attribute type 2 has an invalid length. [ 380.967964][T23016] nbd: must specify an index to disconnect [ 381.246107][T23030] gretap2: entered promiscuous mode [ 381.421855][T23038] __nla_validate_parse: 3 callbacks suppressed [ 381.421875][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8143'. [ 381.531657][T23046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8147'. [ 381.865158][T23066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8157'. [ 382.712557][T23117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8178'. [ 383.090449][T23130] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8186'. [ 383.217390][T23138] netlink: 2 bytes leftover after parsing attributes in process `syz.6.8188'. [ 383.777854][T23160] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8199'. [ 383.876620][T23165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8202'. [ 383.927426][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8202'. [ 384.244745][T23183] bond0: option all_slaves_active: invalid value (99) [ 384.484862][T23202] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 384.721497][T23217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8226'. [ 385.059227][T23240] netlink: 'syz.4.8238': attribute type 1 has an invalid length. [ 385.068150][T23240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.296448][T23301] netlink: 'syz.1.8266': attribute type 322 has an invalid length. [ 387.263347][T23342] netlink: 'syz.7.8282': attribute type 10 has an invalid length. [ 387.317826][T23342] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 387.545019][T19099] udevd[19099]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 387.573566][T23360] __nla_validate_parse: 7 callbacks suppressed [ 387.573585][T23360] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8289'. [ 387.768913][T23373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8296'. [ 387.808029][T23373] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8296'. [ 387.818549][T23373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8296'. [ 387.828044][T23373] netlink: 'syz.6.8296': attribute type 5 has an invalid length. [ 387.949878][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8300'. [ 388.139718][T23389] pimreg: entered allmulticast mode [ 388.177494][T23394] pimreg: left allmulticast mode [ 388.253617][T23397] netlink: 1 bytes leftover after parsing attributes in process `syz.7.8308'. [ 388.687752][T23423] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8321'. [ 389.031968][T23446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8331'. [ 390.102092][T23483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8350'. [ 390.438490][T23499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8359'. [ 390.733167][T23519] rdma_op ffff88802b9391f0 conn xmit_rdma 0000000000000000 [ 391.081686][ T5140] Bluetooth: hci4: command 0x0406 tx timeout [ 391.519951][T23556] tipc: Enabled bearer , priority 10 [ 392.098086][T23587] netlink: 'syz.6.8400': attribute type 2 has an invalid length. [ 392.805333][T23625] __nla_validate_parse: 3 callbacks suppressed [ 392.805355][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8419'. [ 393.168105][T23642] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8426'. [ 393.622981][T23667] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8439'. [ 393.801721][ T5863] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 394.629994][T23709] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 394.692363][T23713] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.8458'. [ 394.829205][T23721] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8464'. [ 395.106785][T23736] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 395.300383][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8477'. [ 395.759995][T23769] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.767242][T23769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.784826][T23769] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 395.836229][T23774] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8490'. [ 395.875026][T23774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8490'. [ 395.939969][T23780] netlink: 'syz.3.8493': attribute type 1 has an invalid length. [ 396.740764][T23836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.175224][T23861] netlink: 'syz.4.8532': attribute type 1 has an invalid length. [ 397.221130][T23866] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8533'. [ 397.524667][T23881] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 398.580265][ T797] IPVS: starting estimator thread 0... [ 398.681225][T23929] IPVS: using max 27 ests per chain, 64800 per kthread [ 399.112469][T23946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8569'. [ 399.289028][T23950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8572'. [ 399.516632][T23964] netlink: 'syz.6.8578': attribute type 6 has an invalid length. [ 399.565012][T23967] netlink: 'syz.6.8578': attribute type 6 has an invalid length. [ 399.656011][T19105] udevd[19105]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 399.734575][T19099] udevd[19099]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 399.810432][T23976] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!!b.>nS#^' [ 399.851255][T23976] CPU: 1 UID: 0 PID: 23976 Comm: syz.6.8582 Not tainted syzkaller #0 PREEMPT(full) [ 399.851284][T23976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 399.851304][T23976] Call Trace: [ 399.851313][T23976] [ 399.851322][T23976] dump_stack_lvl+0xe8/0x150 [ 399.851354][T23976] sysfs_warn_dup+0x8e/0xa0 [ 399.851408][T23976] sysfs_do_create_link_sd+0xc0/0x110 [ 399.851439][T23976] device_add_class_symlinks+0x1cf/0x240 [ 399.851465][T23976] device_add+0x475/0xb70 [ 399.851490][T23976] wiphy_register+0x1d73/0x2d50 [ 399.851539][T23976] ? __pfx_wiphy_register+0x10/0x10 [ 399.851563][T23976] ? __pfx_netdev_run_todo+0x10/0x10 [ 399.851591][T23976] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 399.851620][T23976] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 399.851654][T23976] ieee80211_register_hw+0x3571/0x4220 [ 399.851673][T23976] ? __lock_acquire+0x6b5/0x2cf0 [ 399.851714][T23976] ? ieee80211_register_hw+0x1431/0x4220 [ 399.851744][T23976] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 399.851781][T23976] ? __hrtimer_setup+0x181/0x200 [ 399.851801][T23976] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 399.851834][T23976] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 399.851892][T23976] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 399.851916][T23976] ? kstrndup+0xbf/0x160 [ 399.851948][T23976] hwsim_new_radio_nl+0xf35/0x1bd0 [ 399.852000][T23976] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 399.852043][T23976] ? rcu_is_watching+0x15/0xb0 [ 399.852067][T23976] ? __nla_parse+0x40/0x60 [ 399.852097][T23976] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 399.852134][T23976] genl_family_rcv_msg_doit+0x22a/0x330 [ 399.852169][T23976] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 399.852211][T23976] ? bpf_lsm_capable+0x9/0x20 [ 399.852234][T23976] ? security_capable+0x7e/0x2c0 [ 399.852265][T23976] genl_rcv_msg+0x61c/0x7a0 [ 399.852299][T23976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.852325][T23976] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 399.852367][T23976] netlink_rcv_skb+0x232/0x4b0 [ 399.852390][T23976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.852418][T23976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.852438][T23976] ? genl_rcv+0x19/0x40 [ 399.852482][T23976] ? down_read+0x272/0x2e0 [ 399.852505][T23976] ? genl_rcv+0xd/0x40 [ 399.852533][T23976] genl_rcv+0x28/0x40 [ 399.852558][T23976] netlink_unicast+0x80f/0x9b0 [ 399.852588][T23976] ? __pfx_netlink_unicast+0x10/0x10 [ 399.852611][T23976] ? netlink_sendmsg+0x650/0xb40 [ 399.852632][T23976] ? skb_put+0x11b/0x210 [ 399.852662][T23976] netlink_sendmsg+0x813/0xb40 [ 399.852695][T23976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.852725][T23976] ? aa_sock_msg_perm+0xf1/0x1b0 [ 399.852752][T23976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.852775][T23976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.852796][T23976] ____sys_sendmsg+0xa68/0xad0 [ 399.852823][T23976] ? __might_fault+0xaf/0x130 [ 399.852856][T23976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.852893][T23976] ? import_iovec+0x73/0xa0 [ 399.852925][T23976] ___sys_sendmsg+0x2a5/0x360 [ 399.852950][T23976] ? __lock_acquire+0x6b5/0x2cf0 [ 399.852982][T23976] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.853017][T23976] ? futex_wake+0x4ac/0x580 [ 399.853065][T23976] ? __fget_files+0x2a/0x420 [ 399.853087][T23976] ? __fget_files+0x3a0/0x420 [ 399.853120][T23976] __x64_sys_sendmsg+0x1bd/0x2a0 [ 399.853150][T23976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.853188][T23976] ? rcu_is_watching+0x15/0xb0 [ 399.853221][T23976] do_syscall_64+0xe2/0xf80 [ 399.853247][T23976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.853265][T23976] ? trace_irq_disable+0x37/0x100 [ 399.853284][T23976] ? clear_bhb_loop+0x60/0xb0 [ 399.853309][T23976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.853337][T23976] RIP: 0033:0x7f10d4d9aeb9 [ 399.853357][T23976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.853375][T23976] RSP: 002b:00007f10d5c14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.853398][T23976] RAX: ffffffffffffffda RBX: 00007f10d5015fa0 RCX: 00007f10d4d9aeb9 [ 399.853413][T23976] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 399.853427][T23976] RBP: 00007f10d4e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 399.853440][T23976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.853452][T23976] R13: 00007f10d5016038 R14: 00007f10d5015fa0 R15: 00007ffd5575d9a8 [ 399.853487][T23976] [ 400.958374][T24026] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 401.261696][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8615'. [ 401.379896][T24054] sctp: [Deprecated]: syz.3.8619 (pid 24054) Use of int in max_burst socket option deprecated. [ 401.379896][T24054] Use struct sctp_assoc_value instead [ 401.856476][T24086] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8633'. [ 402.606170][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 402.944862][T24146] netlink: 'syz.3.8661': attribute type 1 has an invalid length. [ 402.966453][T24146] nbd: error processing sock list [ 403.080975][T24152] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 403.514553][T24179] netlink: 'syz.1.8679': attribute type 1 has an invalid length. [ 403.543515][T24179] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8679'. [ 403.593690][T24179] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8679'. [ 403.615701][T24179] netlink: 'syz.1.8679': attribute type 1 has an invalid length. [ 403.631313][T24179] netlink: 634 bytes leftover after parsing attributes in process `syz.1.8679'. [ 403.910226][T24196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8687'. [ 404.345803][T24226] netlink: 'syz.6.8701': attribute type 62 has an invalid length. [ 405.104976][T24261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8717'. [ 405.263711][T24274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8724'. [ 405.273015][T24274] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8724'. [ 406.125105][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8749'. [ 406.406224][T24342] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8758'. [ 406.442173][ T5140] Bluetooth: hci5: command 0x0406 tx timeout [ 406.459264][T24347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8760'. [ 406.473420][T24347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8760'. [ 406.645491][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8766'. [ 407.069607][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8777'. [ 407.082568][T24385] netlink: 'syz.3.8778': attribute type 1 has an invalid length. [ 407.090425][T24385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8778'. [ 407.109389][T24383] netlink: 'syz.6.8777': attribute type 11 has an invalid length. [ 407.422740][T24408] netlink: 'syz.4.8789': attribute type 11 has an invalid length. [ 407.438610][T24408] netlink: 'syz.4.8789': attribute type 11 has an invalid length. [ 407.472073][T24399] "syz.6.8787" (24399) uses obsolete ecb(arc4) skcipher [ 407.692283][T24425] block nbd3: not configured, cannot reconfigure [ 407.764651][T24427] tipc: Started in network mode [ 407.779851][T24427] tipc: Node identity 2001, cluster identity 4711 [ 407.791323][T24427] tipc: Enabling of bearer rejected, failed to enable media [ 409.019115][T24510] Bluetooth: MGMT ver 1.23 [ 409.777465][T24552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.407747][T24589] bridge0: port 4(vlan0) entered blocking state [ 410.434898][T24589] bridge0: port 4(vlan0) entered disabled state [ 410.459733][T24589] vlan0: entered allmulticast mode [ 410.479374][T24589] bridge0: entered allmulticast mode [ 410.512365][T24589] vlan0: left allmulticast mode [ 410.517386][T24589] bridge0: left allmulticast mode [ 410.518552][T24596] __nla_validate_parse: 10 callbacks suppressed [ 410.518568][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8878'. [ 410.553794][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8878'. [ 410.573583][T24596] netlink: 'syz.1.8878': attribute type 14 has an invalid length. [ 410.916511][T24609] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8884'. [ 411.084306][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 411.090553][ T5863] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 411.439378][T24631] netlink: 'syz.1.8896': attribute type 16 has an invalid length. [ 411.468486][T24631] netlink: 'syz.1.8896': attribute type 3 has an invalid length. [ 411.486628][T24631] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.8896'. [ 412.109812][T24674] netlink: 'syz.4.8917': attribute type 1 has an invalid length. [ 412.131634][T24674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.252538][T24682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8918'. [ 412.698906][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8933'. [ 412.831718][T24721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8937'. [ 412.840628][T24721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8937'. [ 412.892756][T24721] netlink: 'syz.4.8937': attribute type 18 has an invalid length. [ 413.020821][T24731] vxcan3: entered promiscuous mode [ 413.179010][T24741] netlink: 'syz.4.8948': attribute type 8 has an invalid length. [ 414.228691][T24803] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8978'. [ 414.360048][T24811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8983'. [ 415.681969][T24897] netlink: 'syz.4.9024': attribute type 1 has an invalid length. [ 415.689861][T24897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.797769][T24902] Bluetooth: MGMT ver 1.23 [ 415.852891][T24908] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9030'. [ 415.931118][T24912] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9031'. [ 415.940118][T24912] nbd: couldn't find a device at index 0 [ 415.981805][T24916] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.9033'. [ 416.024245][T24916] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 416.316226][T24938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9045'. [ 416.611235][T24958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9055'. [ 416.961357][T24980] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 417.128118][T24989] netlink: 'syz.3.9070': attribute type 15 has an invalid length. [ 418.253012][T25060] netlink: 277 bytes leftover after parsing attributes in process `syz.1.9106'. [ 419.400369][T25128] netlink: 'syz.6.9137': attribute type 30 has an invalid length. [ 419.713878][T25143] bridge_slave_1: invalid flags given to default FDB implementation [ 419.762706][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9146'. [ 419.898454][T25153] tipc: Cannot configure node identity twice [ 422.146370][T25253] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9197'. [ 422.862037][T25294] netlink: 'syz.6.9214': attribute type 11 has an invalid length. [ 423.024397][T25303] team0: Device gtp0 is of different type [ 423.249878][T25315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9225'. [ 423.340592][T25321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9229'. [ 424.631010][T25402] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9266'. [ 425.681156][T25451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9289'. [ 425.908085][T25462] netlink: 332 bytes leftover after parsing attributes in process `syz.7.9294'. [ 425.931645][T25462] netlink: 'syz.7.9294': attribute type 9 has an invalid length. [ 425.949674][T25462] netlink: 108 bytes leftover after parsing attributes in process `syz.7.9294'. [ 425.970569][T25462] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9294'. [ 425.996912][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9296'. [ 426.188141][T25473] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9300'. [ 426.472728][T21076] IPVS: starting estimator thread 0... [ 426.602685][T25491] IPVS: using max 35 ests per chain, 84000 per kthread [ 427.036102][T25515] netlink: 'syz.1.9319': attribute type 1 has an invalid length. [ 427.090531][T25521] sctp: [Deprecated]: syz.6.9322 (pid 25521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.090531][T25521] Use struct sctp_sack_info instead [ 427.123142][T25521] sctp: [Deprecated]: syz.6.9322 (pid 25521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.123142][T25521] Use struct sctp_sack_info instead [ 427.208483][T25525] netlink: zone id is out of range [ 427.224621][T25525] netlink: zone id is out of range [ 427.255993][T25525] netlink: zone id is out of range [ 427.268629][T25530] netlink: 'syz.6.9327': attribute type 3 has an invalid length. [ 427.277204][T25525] netlink: zone id is out of range [ 427.301301][T25525] netlink: zone id is out of range [ 427.324174][T25525] netlink: zone id is out of range [ 427.329337][T25525] netlink: zone id is out of range [ 427.366649][T25525] netlink: zone id is out of range [ 427.405146][T25525] netlink: zone id is out of range [ 427.410321][T25525] netlink: zone id is out of range [ 428.862848][T25622] __nla_validate_parse: 2 callbacks suppressed [ 428.862867][T25622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9368'. [ 428.867218][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9371'. [ 428.917249][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9371'. [ 428.934596][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9370'. [ 428.951529][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9371'. [ 428.984722][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9371'. [ 429.000176][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9372'. [ 429.005027][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9371'. [ 429.186531][T25635] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9374'. [ 430.101935][T25675] lo: entered allmulticast mode [ 430.112196][T25675] lo: left allmulticast mode [ 430.165708][T25677] netlink: 'syz.6.9395': attribute type 13 has an invalid length. [ 430.335316][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9399'. [ 430.596336][T25677] bridge0: port 3(dummy0) entered disabled state [ 430.602973][T25677] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.610395][T25677] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.891942][T25677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.923684][T25677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.292822][T25677] veth1_to_hsr: left allmulticast mode [ 431.331379][T25689] tipc: Started in network mode [ 431.336304][T25689] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 431.358420][T25689] tipc: Enabling of bearer rejected, failed to enable media [ 431.383968][ T1150] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.431160][ T1150] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.450448][ T1150] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.483142][ T71] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.513131][T25700] nbd: socks must be embedded in a SOCK_ITEM attr [ 431.537807][T25708] lo speed is unknown, defaulting to 1000 [ 431.599782][T25711] IPVS: Unknown mcast interface: veth0_to_bond [ 432.022368][T25740] netlink: 'syz.1.9423': attribute type 5 has an invalid length. [ 432.332743][T25756] lo speed is unknown, defaulting to 1000 [ 432.350495][T25756] xfrm0 speed is unknown, defaulting to 1000 [ 432.650062][T25776] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0004 [ 432.759258][T25756] virt_wifi0 speed is unknown, defaulting to 1000 [ 433.281548][T25809] net_ratelimit: 393 callbacks suppressed [ 433.281566][T25809] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 433.845079][T25822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.867930][T25822] 8021q: adding VLAN 0 to HW filter on device ` [ 433.894744][T25822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.968323][T25837] __nla_validate_parse: 12 callbacks suppressed [ 433.968344][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9469'. [ 434.022914][T25837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9469'. [ 435.678781][T25905] netlink: 11 bytes leftover after parsing attributes in process `syz.3.9500'. [ 435.786522][T25910] IPVS: Error connecting to the multicast addr [ 436.054251][T25922] macsec1: entered allmulticast mode [ 436.066252][T25922] macsec0: entered allmulticast mode [ 436.715995][T25960] lo speed is unknown, defaulting to 1000 [ 436.729763][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9526'. [ 436.755616][T25960] xfrm0 speed is unknown, defaulting to 1000 [ 437.163582][ T5140] Bluetooth: hci6: command 0x0406 tx timeout [ 437.359867][T25960] virt_wifi0 speed is unknown, defaulting to 1000 [ 437.879046][T26016] netlink: 'syz.3.9551': attribute type 13 has an invalid length. [ 438.006613][T26019] netlink: 112 bytes leftover after parsing attributes in process `syz.7.9552'. [ 438.204704][T26016] macsec0: left allmulticast mode [ 438.804845][T26040] netlink: 'syz.6.9563': attribute type 1 has an invalid length. [ 439.126172][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9573'. [ 439.335607][T26060] syz.1.9573 (26060) used greatest stack depth: 17656 bytes left [ 439.525684][T26083] macsec1: entered promiscuous mode [ 439.530943][T26083] macsec1: entered allmulticast mode [ 439.677312][T26094] netlink: 'syz.3.9589': attribute type 3 has an invalid length. [ 439.715701][T26094] netlink: 'syz.3.9589': attribute type 1 has an invalid length. [ 439.724896][T26094] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9589'. [ 439.739585][T26097] netlink: 504 bytes leftover after parsing attributes in process `syz.6.9591'. [ 439.767739][T26099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9592'. [ 439.918161][T26107] smc: net device hsr0 applied user defined pnetid SYZ2 [ 440.039403][T26117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9601'. [ 440.317553][T26132] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9608'. [ 441.099486][T26175] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9629'. [ 441.287358][T26182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9632'. [ 441.385274][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9634'. [ 441.481558][ T31] INFO: task syz.0.5802:18057 blocked for more than 144 seconds. [ 441.489487][ T31] Not tainted syzkaller #0 [ 441.502350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.514761][ T31] task:syz.0.5802 state:D stack:27104 pid:18057 tgid:18055 ppid:5911 task_flags:0x400040 flags:0x00080002 [ 441.527127][ T31] Call Trace: [ 441.530538][ T31] [ 441.534147][ T31] __schedule+0x14ea/0x5050 [ 441.538876][ T31] ? __pfx___schedule+0x10/0x10 [ 441.543980][ T31] ? schedule+0x90/0x360 [ 441.548364][ T31] schedule+0x164/0x360 [ 441.552947][ T31] schedule_preempt_disabled+0x13/0x30 [ 441.558553][ T31] __mutex_lock+0x7fe/0x1300 [ 441.563550][ T31] ? __mutex_lock+0x5ac/0x1300 [ 441.568680][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 441.575030][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 441.580220][ T31] ? __nlmsg_put+0xef/0x1b0 [ 441.585255][ T31] ? genlmsg_put+0x137/0x2e0 [ 441.590044][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 441.596009][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 441.610062][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 441.618561][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 441.624815][ T31] ? __asan_memcpy+0x40/0x70 [ 441.629571][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.636079][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 441.641582][ T31] genl_rcv_msg+0x61c/0x7a0 [ 441.646118][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.651478][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 441.657836][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 441.663305][ T31] ? __skb_clone+0x63/0x7a0 [ 441.667832][ T31] netlink_rcv_skb+0x232/0x4b0 [ 441.672740][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.677792][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.683370][ T31] ? genl_rcv+0x19/0x40 [ 441.687570][ T31] ? down_read+0x272/0x2e0 [ 441.692196][ T31] ? genl_rcv+0xd/0x40 [ 441.696299][ T31] genl_rcv+0x28/0x40 [ 441.700293][ T31] netlink_unicast+0x80f/0x9b0 [ 441.705180][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 441.710478][ T31] ? netlink_sendmsg+0x650/0xb40 [ 441.717334][ T31] ? skb_put+0x11b/0x210 [ 441.722084][ T31] netlink_sendmsg+0x813/0xb40 [ 441.726923][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.732450][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.737417][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.742880][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.748255][ T31] ____sys_sendmsg+0xa68/0xad0 [ 441.753264][ T31] ? __might_fault+0xaf/0x130 [ 441.757990][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.763421][ T31] ? import_iovec+0x73/0xa0 [ 441.767943][ T31] ___sys_sendmsg+0x2a5/0x360 [ 441.772911][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 441.777898][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.783215][ T31] ? futex_wake+0x4ac/0x580 [ 441.787799][ T31] ? __fget_files+0x2a/0x420 [ 441.792629][ T31] ? __fget_files+0x3a0/0x420 [ 441.797352][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.802474][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.808311][ T31] ? rcu_is_watching+0x15/0xb0 [ 441.813342][ T31] do_syscall_64+0xe2/0xf80 [ 441.817963][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.824245][ T31] ? trace_irq_disable+0x37/0x100 [ 441.829299][ T31] ? clear_bhb_loop+0x60/0xb0 [ 441.834156][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.840158][ T31] RIP: 0033:0x7f1d3639aeb9 [ 441.844774][ T31] RSP: 002b:00007f1d3721c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.853385][ T31] RAX: ffffffffffffffda RBX: 00007f1d36615fa0 RCX: 00007f1d3639aeb9 [ 441.861631][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 441.869700][ T31] RBP: 00007f1d36408c1f R08: 0000000000000000 R09: 0000000000000000 [ 441.878143][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.886456][ T31] R13: 00007f1d36616038 R14: 00007f1d36615fa0 R15: 00007fff06640d08 [ 441.894862][ T31] [ 441.898632][ T31] [ 441.898632][ T31] Showing all locks held in the system: [ 441.909482][ T31] 1 lock held by khungtaskd/31: [ 441.914801][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 441.925015][ T31] 2 locks held by getty/5578: [ 441.929704][ T31] #0: ffff88814db690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 441.939896][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 441.953118][ T31] 2 locks held by syz.2.4846/16047: [ 441.958347][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 441.968233][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 441.978909][ T31] 2 locks held by syz.0.5802/18057: [ 441.984460][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 441.993335][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 442.003808][ T31] 2 locks held by syz.5.6080/18647: [ 442.009018][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.017835][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 442.028118][ T31] 2 locks held by syz.3.9639/26198: [ 442.033664][ T31] [ 442.035998][ T31] ============================================= [ 442.035998][ T31] [ 442.044925][ T31] NMI backtrace for cpu 0 [ 442.044940][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 442.044960][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 442.044971][ T31] Call Trace: [ 442.044978][ T31] [ 442.044985][ T31] dump_stack_lvl+0xe8/0x150 [ 442.045011][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 442.045032][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 442.045058][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 442.045080][ T31] sys_info+0x135/0x170 [ 442.045097][ T31] watchdog+0xf90/0xfe0 [ 442.045120][ T31] ? watchdog+0x209/0xfe0 [ 442.045145][ T31] kthread+0x726/0x8b0 [ 442.045168][ T31] ? __pfx_watchdog+0x10/0x10 [ 442.045185][ T31] ? __pfx_kthread+0x10/0x10 [ 442.045206][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.045223][ T31] ? __pfx_kthread+0x10/0x10 [ 442.045240][ T31] ret_from_fork+0x51b/0xa40 [ 442.045267][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 442.045289][ T31] ? __switch_to+0xc82/0x1410 [ 442.045314][ T31] ? __pfx_kthread+0x10/0x10 [ 442.045334][ T31] ret_from_fork_asm+0x1a/0x30 [ 442.045367][ T31] [ 442.045373][ T31] Sending NMI from CPU 0 to CPUs 1: [ 442.167357][ C1] NMI backtrace for cpu 1 [ 442.167375][ C1] CPU: 1 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 442.167393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 442.167403][ C1] RIP: 0010:pick_next_task_fair+0x910/0x19d0 [ 442.167424][ C1] Code: 83 fb 08 0f 83 63 0b 00 00 48 63 c3 48 8d 1c c5 d0 2d f8 8d 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 f0 e6 96 00 <48> 8b 1b 48 c7 c0 88 14 f5 92 48 01 c3 48 89 d8 48 c1 e8 03 42 80 [ 442.167437][ C1] RSP: 0018:ffffc90003daf7b0 EFLAGS: 00000046 [ 442.167452][ C1] RAX: 1ffffffff1bf05bb RBX: ffffffff8df82dd8 RCX: 0000000080000002 [ 442.167463][ C1] RDX: 000000005a44979c RSI: ffffffff8c0739e0 RDI: ffffffff8c0739a0 [ 442.167474][ C1] RBP: ffff8880b873a900 R08: ffffffff8195bb30 R09: ffffffff8e55a360 [ 442.167484][ C1] R10: dffffc0000000000 R11: ffffed10170e7521 R12: dffffc0000000000 [ 442.167495][ C1] R13: ffff8880b873b730 R14: ffffffff8195bb30 R15: ffff8880b873b420 [ 442.167506][ C1] FS: 000055557b697500(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 442.167518][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.167528][ C1] CR2: 00007f10d4fe6358 CR3: 000000007685c000 CR4: 00000000003526f0 [ 442.167542][ C1] Call Trace: [ 442.167549][ C1] [ 442.167562][ C1] ? pick_next_task_fair+0x3d0/0x19d0 [ 442.167590][ C1] __pick_next_task+0xeb/0x480 [ 442.167611][ C1] __schedule+0x7ba/0x5050 [ 442.167628][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 442.167658][ C1] ? __pfx___schedule+0x10/0x10 [ 442.167679][ C1] ? schedule+0x90/0x360 [ 442.167697][ C1] schedule+0x164/0x360 [ 442.167713][ C1] do_nanosleep+0x1c2/0x620 [ 442.167730][ C1] ? do_nanosleep+0x80/0x620 [ 442.167746][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 442.167762][ C1] ? __hrtimer_setup+0x181/0x200 [ 442.167776][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 442.167792][ C1] hrtimer_nanosleep+0x188/0x390 [ 442.167808][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 442.167834][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 442.167849][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 442.167872][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 442.167889][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 442.167909][ C1] do_syscall_64+0xe2/0xf80 [ 442.167928][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.167942][ C1] ? clear_bhb_loop+0x60/0xb0 [ 442.167958][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.167971][ C1] RIP: 0033:0x7ff5219560d7 [ 442.167984][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 442.167996][ C1] RSP: 002b:00007ffd722ad7b0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 442.168010][ C1] RAX: ffffffffffffffda RBX: 000055557b697500 RCX: 00007ff5219560d7 [ 442.168020][ C1] RDX: 00007ffd722ad7f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.168030][ C1] RBP: 00007ffd722adcd0 R08: 0000000000000000 R09: 0000000000000000 [ 442.168039][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 442.168048][ C1] R13: 00007ffd722ad82c R14: 00007ffd722ad8c0 R15: 0000000000000000 [ 442.168066][ C1] [ 442.483012][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 442.489883][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 442.499008][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 442.509083][ T31] Call Trace: [ 442.512421][ T31] [ 442.515352][ T31] vpanic+0x1e0/0x670 [ 442.519342][ T31] panic+0xc5/0xd0 [ 442.523065][ T31] ? __pfx_panic+0x10/0x10 [ 442.527485][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 442.532862][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 442.539021][ T31] watchdog+0xfda/0xfe0 [ 442.543267][ T31] ? watchdog+0x209/0xfe0 [ 442.547613][ T31] kthread+0x726/0x8b0 [ 442.551678][ T31] ? __pfx_watchdog+0x10/0x10 [ 442.556353][ T31] ? __pfx_kthread+0x10/0x10 [ 442.560960][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.566165][ T31] ? __pfx_kthread+0x10/0x10 [ 442.570755][ T31] ret_from_fork+0x51b/0xa40 [ 442.575345][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 442.580463][ T31] ? __switch_to+0xc82/0x1410 [ 442.585237][ T31] ? __pfx_kthread+0x10/0x10 [ 442.589827][ T31] ret_from_fork_asm+0x1a/0x30 [ 442.594630][ T31] [ 442.598046][ T31] Kernel Offset: disabled [ 442.602483][ T31] Rebooting in 86400 seconds..