last executing test programs: 2m55.135696574s ago: executing program 1 (id=4405): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x400, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@multiport={{0x50}, {0x1, 0x3, [0x4e23, 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e24, 0x4e21, 0x4e21], [0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1, 0x7a84, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffb37b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x360) 2m54.981483944s ago: executing program 1 (id=4410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x4000050) 2m54.82912469s ago: executing program 1 (id=4416): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000029000000320000000002000000005f8fe5412dadc39e6d0189"], 0x30}}], 0x1, 0x0) 2m54.702112445s ago: executing program 1 (id=4420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000018000904d81f0000000000002d"], 0x1c}}, 0x0) 2m54.535326108s ago: executing program 1 (id=4425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 2m54.337155029s ago: executing program 1 (id=4431): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m41.311096995s ago: executing program 4 (id=4802): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x40, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1c, 0x2, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m41.225450974s ago: executing program 4 (id=4803): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x4) 2m41.03372648s ago: executing program 4 (id=4808): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x0, 0x0, 0x148, 0x1f0, 0x148, 0x3e0, 0x240, 0x240, 0x3e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {}, 0x88, 0x3}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x9, 0x2, 0x5f4a, 0x9, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @inet=@rpfilter={{}, {0xafb93cf778e59e63}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x2, 0x1, 0x5, 0x1], 0x3, 0x2}, {0x1, [0x1, 0x1, 0x7, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x602) 2m40.950961118s ago: executing program 4 (id=4812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x100000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x35075d, 0xf05}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m40.833959548s ago: executing program 4 (id=4816): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m40.565271149s ago: executing program 4 (id=4827): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) 2m39.287327311s ago: executing program 32 (id=4431): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m25.465466112s ago: executing program 33 (id=4827): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) 1m46.978622309s ago: executing program 6 (id=6376): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x40, 0x5a1, 0x0, 0x7}, 0x9c) 1m46.80959089s ago: executing program 6 (id=6381): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) 1m46.679644356s ago: executing program 6 (id=6386): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) 1m46.501548472s ago: executing program 6 (id=6389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m46.416457423s ago: executing program 6 (id=6393): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000000)) 1m46.299860416s ago: executing program 6 (id=6397): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m31.231423174s ago: executing program 34 (id=6397): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1.65042047s ago: executing program 3 (id=9589): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000002440)={'nat\x00', 0x0, [0x632, 0x9, 0x7fff, 0x80008000, 0x4]}, &(0x7f00000003c0)=0x54) 1.608122977s ago: executing program 5 (id=9592): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x28000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) 1.494388671s ago: executing program 5 (id=9594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) 1.421103018s ago: executing program 0 (id=9596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x28, r1, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0xffffffffffffff81, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x24}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 1.348748506s ago: executing program 0 (id=9597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) 1.260333985s ago: executing program 5 (id=9598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x59) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x8001, @local}, 0x1b) 1.249560318s ago: executing program 3 (id=9599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.226928582s ago: executing program 0 (id=9601): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002040)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}], 0x30}}], 0x2, 0x8124) 1.121040737s ago: executing program 3 (id=9604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 1.057901687s ago: executing program 0 (id=9605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="e5ff"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) 1.036462624s ago: executing program 3 (id=9606): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x34, r0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.029731366s ago: executing program 0 (id=9607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x2160) 906.393656ms ago: executing program 0 (id=9611): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) poll(&(0x7f0000002000)=[{r0, 0x93d4}], 0x1, 0x9) 866.29306ms ago: executing program 3 (id=9612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9200000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 738.721328ms ago: executing program 7 (id=9616): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno', 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 693.03091ms ago: executing program 3 (id=9617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xb, 0x100000, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071107d00000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 578.98346ms ago: executing program 7 (id=9619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x1ff, 0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000012c0)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 511.284328ms ago: executing program 2 (id=9620): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) 484.269277ms ago: executing program 7 (id=9621): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x14}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf7bae1050007008100050043", 0x1b}, {&(0x7f00000002c0)="d4654b2ca7b11dadfda26149dffc68", 0xf}], 0x2}, 0x20000800) 447.271045ms ago: executing program 2 (id=9622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) 309.31406ms ago: executing program 7 (id=9623): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000002340)={0xa, 0x4e20, 0xc212, @local, 0x7}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000003080)=0x7a) 307.66456ms ago: executing program 5 (id=9624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000208500000086000000bf91000000000000b7020000020000008500000085000000b7000000a49a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 294.390073ms ago: executing program 2 (id=9625): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 274.495796ms ago: executing program 7 (id=9626): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x16}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 200.135934ms ago: executing program 2 (id=9627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) 149.880765ms ago: executing program 5 (id=9628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 104.302259ms ago: executing program 2 (id=9629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbff, {0x1b}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008810}, 0x30000800) 89.485916ms ago: executing program 5 (id=9630): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1.686593ms ago: executing program 2 (id=9631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=9632): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) close(0x3) kernel console output (not intermixed with test programs): ][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3181'. [ 184.332059][T12475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.413836][T12481] netlink: 'syz.2.3190': attribute type 1 has an invalid length. [ 184.441319][T12481] netlink: 'syz.2.3190': attribute type 2 has an invalid length. [ 184.585622][T12493] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 185.204768][T12548] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3224'. [ 185.228836][T12549] netlink: 'syz.0.3223': attribute type 2 has an invalid length. [ 185.600820][T12574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3236'. [ 185.756504][T12588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3244'. [ 185.757800][T12587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.808795][T12588] netlink: 'syz.3.3244': attribute type 1 has an invalid length. [ 186.071859][T12608] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 186.089439][T12608] bond1 (unregistering): Released all slaves [ 186.237419][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 186.524447][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'. [ 186.577023][T12652] netlink: 'syz.3.3275': attribute type 30 has an invalid length. [ 186.597463][T12652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3275'. [ 186.706001][T12652] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 186.746515][T12666] netlink: 'syz.4.3281': attribute type 2 has an invalid length. [ 186.758070][T12652] bond1 (unregistering): Released all slaves [ 186.840561][T12673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3282'. [ 186.861874][T12673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3282'. [ 187.018539][T12682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3289'. [ 187.132190][T12694] netlink: 'syz.3.3296': attribute type 21 has an invalid length. [ 187.448733][T12718] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 187.760413][T12742] netlink: 'syz.0.3319': attribute type 1 has an invalid length. [ 187.789370][T12742] netlink: 'syz.0.3319': attribute type 1 has an invalid length. [ 187.931362][T12754] openvswitch: netlink: Message has -2 unknown bytes. [ 187.948985][T12756] xt_CONNSECMARK: invalid mode: 0 [ 187.982014][T12754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.248835][T12779] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 189.357254][T12861] SET target dimension over the limit! [ 189.443739][T12867] IPVS: set_ctl: invalid protocol: 90 0.0.0.0:20000 [ 189.507081][T12873] netlink: 'syz.2.3383': attribute type 1 has an invalid length. [ 189.576384][T12877] __nla_validate_parse: 3 callbacks suppressed [ 189.576400][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'. [ 189.698164][T12887] batadv0: entered promiscuous mode [ 190.643249][T12967] xt_cgroup: path and classid specified [ 190.791217][T12979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3435'. [ 190.824640][T12979] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 190.930101][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'. [ 190.984558][T12995] ip6gretap2: entered promiscuous mode [ 191.227979][T13017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3453'. [ 191.528830][T13040] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 191.616656][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 191.654579][T13049] netlink: 'syz.0.3465': attribute type 1 has an invalid length. [ 191.662504][T13049] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3465'. [ 192.194031][T13089] netlink: 'syz.3.3479': attribute type 2 has an invalid length. [ 192.741017][T13127] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.800327][T13134] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.3497'. [ 192.878688][T13138] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3499'. [ 192.894848][T13140] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 192.996327][T13146] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 193.410747][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3518'. [ 193.633204][T13194] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3527'. [ 193.857762][T13211] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 194.038829][T13226] vlan0: entered promiscuous mode [ 194.140665][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.173473][T13235] netlink: 'syz.3.3547': attribute type 3 has an invalid length. [ 194.270534][T13245] xt_hashlimit: size too large, truncated to 1048576 [ 194.278421][T13243] bridge_slave_0: left allmulticast mode [ 194.289320][T13243] bridge_slave_0: left promiscuous mode [ 194.304203][T13243] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.335804][T13245] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.352527][T13243] bridge_slave_1: left allmulticast mode [ 194.357425][T13250] x_tables: unsorted underflow at hook 2 [ 194.368879][T13243] bridge_slave_1: left promiscuous mode [ 194.389284][T13243] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.446192][T13243] bond0: (slave bond_slave_0): Releasing backup interface [ 194.462858][T13243] bond0: (slave bond_slave_1): Releasing backup interface [ 194.496221][T13243] team0: Port device team_slave_0 removed [ 194.506762][T13243] team0: Port device team_slave_1 removed [ 194.521113][T13243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.535499][T13243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.543293][T13243] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.121816][T13305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3581'. [ 195.493473][T13336] netlink: 'syz.1.3597': attribute type 21 has an invalid length. [ 195.506736][T13336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3597'. [ 195.516033][T13336] netlink: 'syz.1.3597': attribute type 1 has an invalid length. [ 195.582184][T13338] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3598'. [ 195.740261][T13351] netlink: 'syz.0.3604': attribute type 10 has an invalid length. [ 195.800919][T13351] team0: Cannot enslave team device to itself [ 195.837690][T13359] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 195.884881][T13359] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 195.896997][T13359] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 196.021573][T13374] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 196.232278][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3621'. [ 196.261588][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3622'. [ 196.274584][T13389] ip6gretap1: entered promiscuous mode [ 196.280246][T13389] ip6gretap1: entered allmulticast mode [ 196.285982][T13391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3622'. [ 196.461343][T13406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.522255][T13413] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 196.544096][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'. [ 196.676582][T13422] netlink: 'syz.2.3637': attribute type 11 has an invalid length. [ 196.713629][T13422] netlink: 'syz.2.3637': attribute type 11 has an invalid length. [ 196.721479][T13422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3637'. [ 197.701700][T13506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3677'. [ 197.751951][T13508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3679'. [ 197.887807][T13516] netlink: 'syz.1.3683': attribute type 2 has an invalid length. [ 198.247464][T13548] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 198.520897][T13568] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 198.556163][T13568] bridge2: entered allmulticast mode [ 199.420691][T13646] netlink: 'syz.2.3744': attribute type 1 has an invalid length. [ 199.430810][T13650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.684143][T13669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.093828][T13695] netlink: 'syz.3.3769': attribute type 2 has an invalid length. [ 200.114575][T13697] æÿîÿ: entered promiscuous mode [ 200.139194][T13699] __nla_validate_parse: 6 callbacks suppressed [ 200.139210][T13699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3772'. [ 200.290924][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3776'. [ 200.476428][ T3423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.486190][ T3423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.703175][T13744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.737756][T13746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3795'. [ 201.146168][T13776] netlink: 'syz.3.3809': attribute type 32 has an invalid length. [ 201.335040][T13633] Bluetooth: hci0: command 0x0406 tx timeout [ 201.341253][T13632] Bluetooth: hci2: command 0x0406 tx timeout [ 201.353733][T13633] Bluetooth: hci1: command 0x0406 tx timeout [ 201.359757][T13633] Bluetooth: hci3: command 0x0406 tx timeout [ 201.365787][T13632] Bluetooth: hci4: command 0x0406 tx timeout [ 201.387297][T13792] bridge_slave_0: left allmulticast mode [ 201.393207][T13792] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.430451][T13795] netlink: 'syz.0.3819': attribute type 10 has an invalid length. [ 201.440102][T13792] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 201.513765][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3821'. [ 201.522652][T13802] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3821'. [ 201.551697][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3821'. [ 201.562187][T13802] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3821'. [ 201.571655][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3821'. [ 201.762856][T13819] netlink: 'syz.3.3829': attribute type 146 has an invalid length. [ 201.805611][T13822] xt_TCPMSS: Only works on TCP SYN packets [ 201.929199][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 202.455772][T13874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.463106][T13874] IPv6: NLM_F_CREATE should be set when creating new route [ 202.470385][T13874] IPv6: NLM_F_CREATE should be set when creating new route [ 202.489762][T13876] xt_addrtype: ipv6 does not support BROADCAST matching [ 202.494061][T13873] openvswitch: netlink: IP tunnel dst address not specified [ 202.915145][T13908] netlink: 'syz.2.3873': attribute type 5 has an invalid length. [ 203.088442][T13926] netlink: 'syz.0.3882': attribute type 146 has an invalid length. [ 203.134864][T13926] netlink: 'syz.0.3882': attribute type 201 has an invalid length. [ 203.764852][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3908'. [ 204.521562][T14018] netlink: 'syz.2.3927': attribute type 2 has an invalid length. [ 204.803258][T14034] netlink: 'syz.0.3935': attribute type 21 has an invalid length. [ 205.147632][T14059] sctp: [Deprecated]: syz.1.3947 (pid 14059) Use of int in maxseg socket option. [ 205.147632][T14059] Use struct sctp_assoc_value instead [ 205.183393][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3949'. [ 205.425644][T14082] netlink: 'syz.4.3960': attribute type 1 has an invalid length. [ 205.587633][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3966'. [ 205.818742][T14109] SET target dimension over the limit! [ 206.573335][T14167] netlink: 'syz.3.4000': attribute type 1 has an invalid length. [ 206.720778][T14175] netlink: 'syz.0.4002': attribute type 5 has an invalid length. [ 206.876471][T14189] netlink: 'syz.2.4012': attribute type 1 has an invalid length. [ 206.896954][T14189] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4012'. [ 206.970460][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4014'. [ 207.098908][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 207.220001][T14212] delete_channel: no stack [ 207.391793][T14229] xt_TCPMSS: Only works on TCP SYN packets [ 208.419190][T14308] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 208.473344][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'. [ 208.495021][T14314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.761789][T14335] netlink: 'syz.3.4083': attribute type 15 has an invalid length. [ 208.780136][T14335] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4083'. [ 208.856394][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 208.887954][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4087'. [ 208.904335][T14346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.998655][T14351] delete_channel: no stack [ 209.069339][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4095'. [ 209.081433][T14354] bond1 (unregistering): Released all slaves [ 209.246702][T14369] netlink: 'syz.3.4100': attribute type 6 has an invalid length. [ 209.357514][T14379] netlink: 'syz.4.4106': attribute type 1 has an invalid length. [ 209.623620][T14397] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4113'. [ 209.928523][T14423] xt_TCPMSS: Only works on TCP SYN packets [ 210.028870][T14433] netlink: 'syz.3.4134': attribute type 1 has an invalid length. [ 210.387286][T14461] netlink: 'syz.2.4146': attribute type 16 has an invalid length. [ 210.395292][T14461] __nla_validate_parse: 1 callbacks suppressed [ 210.395308][T14461] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4146'. [ 210.494188][T14471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4152'. [ 210.531148][T14473] xt_SECMARK: invalid mode: 0 [ 210.719459][T14488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4159'. [ 210.893792][T14499] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 210.947447][T14501] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4166'. [ 211.097611][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4170'. [ 211.217905][T14515] netlink: 'syz.0.4173': attribute type 21 has an invalid length. [ 211.228922][T14515] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4173'. [ 211.241998][T14501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.257797][T14501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.284725][T14501] bond0 (unregistering): Released all slaves [ 211.314168][T14515] netlink: 'syz.0.4173': attribute type 4 has an invalid length. [ 211.322127][T14515] netlink: 'syz.0.4173': attribute type 5 has an invalid length. [ 211.331149][T14515] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4173'. [ 211.363632][T14523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4177'. [ 211.623684][T14542] netlink: 'syz.1.4186': attribute type 10 has an invalid length. [ 211.793471][T14542] bridge0: port 3(macsec0) entered blocking state [ 211.803445][T14542] bridge0: port 3(macsec0) entered disabled state [ 211.810987][T14542] macsec0: entered allmulticast mode [ 211.816706][T14542] veth1_macvtap: entered allmulticast mode [ 211.833401][T14542] macsec0: entered promiscuous mode [ 212.075099][T11743] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 212.124576][T14572] netlink: 'syz.4.4200': attribute type 1 has an invalid length. [ 212.142258][T14572] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4200'. [ 212.180626][T14578] xt_bpf: check failed: parse error [ 212.264286][T14583] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 212.460624][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4215'. [ 212.787206][ T3668] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 212.796870][T14626] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 212.843799][T14630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.880528][T14632] NCSI netlink: No device for ifindex 0 [ 213.019861][T11743] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.141085][T14652] ip6gre1: entered promiscuous mode [ 213.549049][T14684] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 213.813964][ T2138] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.833091][ T2138] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.841246][T14705] validate_nla: 4 callbacks suppressed [ 213.841262][T14705] netlink: 'syz.3.4268': attribute type 1 has an invalid length. [ 213.997025][T14714] netlink: 'syz.4.4272': attribute type 10 has an invalid length. [ 213.997864][T14717] netlink: 'syz.0.4274': attribute type 1 has an invalid length. [ 214.614623][T11410] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 214.624243][T14752] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 214.786289][T14750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.798613][T14750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.818453][T14750] bond0 (unregistering): Released all slaves [ 214.869515][T14761] .70·: renamed from hsr0 [ 214.888225][T14761] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.923592][T14761] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.985267][T14761] .70·: entered allmulticast mode [ 215.017308][T14761] hsr_slave_0: entered allmulticast mode [ 215.022999][T14761] hsr_slave_1: entered allmulticast mode [ 215.030663][T14761] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 215.467324][T14810] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 215.663771][T14816] batadv0: left promiscuous mode [ 215.683117][T14819] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 216.230530][T14865] __nla_validate_parse: 13 callbacks suppressed [ 216.230548][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4332'. [ 216.391491][T14819] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.412988][T14819] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 216.478515][T14819] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.505543][T14819] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 216.546852][T14819] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.558966][T14819] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 216.609911][T14819] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.612369][T14892] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4342'. [ 216.638782][T14819] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 216.644365][T14892] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4342'. [ 216.669305][T14819] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.695694][T14819] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 217.255211][T14929] xt_CT: No such helper "snmp_trap" [ 217.362151][T14942] openvswitch: netlink: EtherType 50a is less than min 600 [ 217.485792][T14945] batadv1: entered allmulticast mode [ 217.504631][T14945] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 217.761273][T14964] netlink: 'syz.4.4369': attribute type 3 has an invalid length. [ 217.813748][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 217.853624][T14964] netlink: 'syz.4.4369': attribute type 1 has an invalid length. [ 217.883768][T14964] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4369'. [ 218.581181][T15004] Zero length message leads to an empty skb [ 219.243105][T15037] bridge1: entered promiscuous mode [ 220.027488][T15098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4424'. [ 221.162377][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4451'. [ 221.230757][T15177] Cannot find del_set index 2 as target [ 221.663291][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4465'. [ 221.864897][T15224] SET target dimension over the limit! [ 222.081130][T15238] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 222.121173][T15238] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 222.265580][T15253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4480'. [ 222.384195][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4482'. [ 222.412814][T15264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4483'. [ 222.520473][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4485'. [ 222.571953][T15272] geneve2: entered promiscuous mode [ 222.584120][T15272] geneve2: entered allmulticast mode [ 222.881768][T15296] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 222.891984][T15296] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 222.993896][T15303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.531873][T15336] netlink: 'syz.0.4518': attribute type 1 has an invalid length. [ 224.542791][T15372] netlink: 'syz.3.4536': attribute type 28 has an invalid length. [ 224.561437][T15372] netlink: 'syz.3.4536': attribute type 3 has an invalid length. [ 224.584403][T15372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4536'. [ 224.639889][T15380] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4540'. [ 225.200366][T15426] netlink: 'syz.2.4563': attribute type 39 has an invalid length. [ 225.228600][T15426] veth0_macvtap: left promiscuous mode [ 225.585484][T15457] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4579'. [ 225.671618][T15464] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 225.714443][T15469] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 225.867995][T15480] tc_dump_action: action bad kind [ 225.884590][T15483] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4592'. [ 225.915260][T15484] sctp: [Deprecated]: syz.0.4591 (pid 15484) Use of int in max_burst socket option. [ 225.915260][T15484] Use struct sctp_assoc_value instead [ 226.069838][T15494] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4597'. [ 226.110694][T15498] netlink: 'syz.2.4600': attribute type 21 has an invalid length. [ 226.133684][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 226.270064][T15512] openvswitch: netlink: IP tunnel dst address not specified [ 226.315575][T15506] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.334437][T15506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.460037][T15538] veth3: entered promiscuous mode [ 228.812793][T15579] netlink: 'syz.3.4641': attribute type 2 has an invalid length. [ 228.952191][T15590] __nla_validate_parse: 2 callbacks suppressed [ 228.952208][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4645'. [ 228.970277][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4645'. [ 228.981894][T15593] netlink: 'syz.0.4646': attribute type 62 has an invalid length. [ 229.150156][T15605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4650'. [ 229.303729][T15615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4657'. [ 229.636605][T15643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4670'. [ 229.702661][T15646] netlink: 'syz.0.4673': attribute type 2 has an invalid length. [ 229.729769][T15646] netlink: 'syz.0.4673': attribute type 1 has an invalid length. [ 229.919414][T15663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4682'. [ 229.941958][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4682'. [ 230.547586][T15714] netlink: 'syz.2.4703': attribute type 1 has an invalid length. [ 230.785170][T15734] netlink: 'syz.2.4711': attribute type 8 has an invalid length. [ 230.992156][T15751] netlink: 'syz.3.4720': attribute type 21 has an invalid length. [ 231.280051][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4729'. [ 231.344285][T15769] ip6gretap2: left promiscuous mode [ 231.350452][T15769] batadv1: left allmulticast mode [ 231.367343][T15769] bridge1: left promiscuous mode [ 231.394602][T15769] geneve2: left promiscuous mode [ 231.399651][T15769] geneve2: left allmulticast mode [ 231.456520][T15776] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 232.053781][T15824] netlink: 'syz.0.4755': attribute type 21 has an invalid length. [ 232.071982][T15824] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4755'. [ 232.182143][T15836] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 232.407144][T15848] netlink: 'syz.3.4768': attribute type 1 has an invalid length. [ 232.596975][T15862] netlink: 'syz.0.4775': attribute type 1 has an invalid length. [ 232.634240][T15862] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4775'. [ 232.728286][T15872] Unsupported ieee802154 address type: 0 [ 233.167057][T15904] bond0: option resend_igmp: invalid value (2878) [ 233.178469][T15904] bond0: option resend_igmp: allowed values 0 - 255 [ 233.188200][T15904] bond0 (unregistering): Released all slaves [ 233.261359][T15915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.381255][T15917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.390441][T15922] sctp: [Deprecated]: syz.4.4803 (pid 15922) Use of int in max_burst socket option. [ 233.390441][T15922] Use struct sctp_assoc_value instead [ 233.392400][T15917] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.416092][T15924] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.426431][T15917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.828103][T15954] openvswitch: netlink: IP tunnel dst address not specified [ 234.018558][T15965] sit0: entered promiscuous mode [ 234.036258][T15968] __nla_validate_parse: 1 callbacks suppressed [ 234.036274][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4828'. [ 234.039468][T15965] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4824'. [ 234.151822][T15975] netlink: 34 bytes leftover after parsing attributes in process `syz.2.4831'. [ 234.167720][T15975] netlink: 34 bytes leftover after parsing attributes in process `syz.2.4831'. [ 234.618453][T16012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4849'. [ 234.639998][T16016] validate_nla: 1 callbacks suppressed [ 234.640013][T16016] netlink: 'syz.3.4851': attribute type 1 has an invalid length. [ 234.654410][T16016] netlink: 'syz.3.4851': attribute type 11 has an invalid length. [ 234.665301][T16016] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4851'. [ 234.849510][T16028] netlink: 'syz.2.4857': attribute type 1 has an invalid length. [ 234.863080][T16028] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4857'. [ 234.917456][T16034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.988801][T16040] syz.0.4863: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 235.006253][T16040] CPU: 1 UID: 0 PID: 16040 Comm: syz.0.4863 Not tainted syzkaller #0 PREEMPT(full) [ 235.006277][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.006295][T16040] Call Trace: [ 235.006303][T16040] [ 235.006311][T16040] dump_stack_lvl+0xe8/0x150 [ 235.006349][T16040] warn_alloc+0x214/0x310 [ 235.006370][T16040] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 235.006394][T16040] ? __pfx_warn_alloc+0x10/0x10 [ 235.006418][T16040] ? kasan_save_track+0x4f/0x80 [ 235.006435][T16040] ? kasan_save_track+0x3e/0x80 [ 235.006451][T16040] ? __kasan_kmalloc+0x93/0xb0 [ 235.006467][T16040] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 235.006483][T16040] ? xskq_create+0x56/0x170 [ 235.006499][T16040] ? xsk_setsockopt+0x4dc/0x8d0 [ 235.006514][T16040] ? do_sock_setsockopt+0x17c/0x1b0 [ 235.006534][T16040] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 235.006553][T16040] ? do_syscall_64+0xec/0xf80 [ 235.006576][T16040] __vmalloc_node_range_noprof+0x134/0x16a0 [ 235.006626][T16040] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.006651][T16040] ? __kasan_kmalloc+0x93/0xb0 [ 235.006675][T16040] vmalloc_user_noprof+0xad/0xf0 [ 235.006692][T16040] ? xskq_create+0xbf/0x170 [ 235.006711][T16040] xskq_create+0xbf/0x170 [ 235.006732][T16040] xsk_init_queue+0xb0/0x110 [ 235.006752][T16040] xsk_setsockopt+0x4dc/0x8d0 [ 235.006771][T16040] ? __pfx_xsk_setsockopt+0x10/0x10 [ 235.006788][T16040] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.006813][T16040] ? aa_sock_opt_perm+0xff/0x1a0 [ 235.006838][T16040] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 235.006855][T16040] ? __pfx_xsk_setsockopt+0x10/0x10 [ 235.006873][T16040] do_sock_setsockopt+0x17c/0x1b0 [ 235.006898][T16040] __x64_sys_setsockopt+0x13f/0x1b0 [ 235.006924][T16040] do_syscall_64+0xec/0xf80 [ 235.006943][T16040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.006960][T16040] ? trace_irq_disable+0x37/0x100 [ 235.006981][T16040] ? clear_bhb_loop+0x60/0xb0 [ 235.007002][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.007019][T16040] RIP: 0033:0x7f02d7b8f749 [ 235.007040][T16040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.007055][T16040] RSP: 002b:00007f02d8a6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.007075][T16040] RAX: ffffffffffffffda RBX: 00007f02d7de5fa0 RCX: 00007f02d7b8f749 [ 235.007089][T16040] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 235.007100][T16040] RBP: 00007f02d7c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 235.007111][T16040] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.007123][T16040] R13: 00007f02d7de6038 R14: 00007f02d7de5fa0 R15: 00007ffdebb84c38 [ 235.007154][T16040] [ 235.007165][T16040] Mem-Info: [ 235.104613][T16046] netlink: 'syz.3.4866': attribute type 3 has an invalid length. [ 235.116447][T16040] active_anon:5078 inactive_anon:0 isolated_anon:0 [ 235.116447][T16040] active_file:3018 inactive_file:39940 isolated_file:0 [ 235.116447][T16040] unevictable:768 dirty:297 writeback:0 [ 235.116447][T16040] slab_reclaimable:11208 slab_unreclaimable:102016 [ 235.116447][T16040] mapped:29124 shmem:1352 pagetables:1200 [ 235.116447][T16040] sec_pagetables:0 bounce:0 [ 235.116447][T16040] kernel_misc_reclaimable:0 [ 235.116447][T16040] free:1325296 free_pcp:13563 free_cma:0 [ 235.118708][T16046] netlink: 'syz.3.4866': attribute type 2 has an invalid length. [ 235.124578][T16040] Node 0 active_anon:20312kB inactive_anon:0kB active_file:12072kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116496kB dirty:1188kB writeback:0kB shmem:3872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12448kB pagetables:4676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.127290][T16046] netlink: 'syz.3.4866': attribute type 2 has an invalid length. [ 235.132630][T16040] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.423604][T16040] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.460904][T16040] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 235.467383][T16040] Node 0 DMA32 free:1382956kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21612kB inactive_anon:0kB active_file:12072kB inactive_file:159556kB unevictable:1536kB writepending:1188kB zspages:0kB present:3129332kB managed:2559468kB mlocked:0kB bounce:0kB free_pcp:35032kB local_pcp:17536kB free_cma:0kB [ 235.532479][T16040] lowmem_reserve[]: 0 0 1 1 1 [ 235.537460][T16040] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.567438][T16040] lowmem_reserve[]: 0 0 0 0 0 [ 235.598152][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.606663][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.614603][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.628607][T16040] Node 1 Normal free:3893920kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17760kB local_pcp:6516kB free_cma:0kB [ 235.669048][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.677371][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.684974][T16040] lowmem_reserve[]: 0 0 0 0 0 [ 235.689935][T16040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 235.702961][T16040] Node 0 DMA32: 2518*4kB (UE) 1803*8kB (UME) 776*16kB (UME) 1826*32kB (UM) 667*64kB (UME) 70*128kB (UME) 25*256kB (UME) 101*512kB (UME) 94*1024kB (UM) 26*2048kB (UM) 243*4096kB (M) = 1349936kB [ 235.722236][T16040] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 235.735904][T16040] Node 1 Normal: 164*4kB (UE) 40*8kB (UME) 41*16kB (UME) 58*32kB (UME) 16*64kB (UME) 4*128kB (UM) 3*256kB (UM) 6*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3893920kB [ 235.753985][T16040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.763704][T16040] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.769762][T13631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.772988][T16040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.773008][T16040] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.773024][T16040] 44307 total pagecache pages [ 235.773044][T16040] 0 pages in swap cache [ 235.781408][T13631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.799851][T16040] Free swap = 124996kB [ 235.804731][T13631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.808234][T16040] Total swap = 124996kB [ 235.816964][T13631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.838560][T13631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.843569][T16040] 2097051 pages RAM [ 235.853779][T16040] 0 pages HighMem/MovableOnly [ 235.920473][T16040] 425094 pages reserved [ 235.935426][T16040] 0 pages cma reserved [ 236.108362][T16075] bond0: option ad_select: invalid value (34) [ 236.118876][T16075] bond0 (unregistering): Released all slaves [ 236.260384][T16057] chnl_net:caif_netlink_parms(): no params data found [ 236.486387][T16057] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.494016][T16057] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.501369][T16057] bridge_slave_0: entered allmulticast mode [ 236.509852][T16057] bridge_slave_0: entered promiscuous mode [ 236.518556][T16057] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.526221][T16057] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.533410][T16057] bridge_slave_1: entered allmulticast mode [ 236.547074][T16057] bridge_slave_1: entered promiscuous mode [ 236.600822][T16057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.617012][T16057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.677098][T16057] team0: Port device team_slave_0 added [ 236.696485][T16057] team0: Port device team_slave_1 added [ 236.811109][T16057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.827911][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.875578][T16057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.906328][T16057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.913309][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.960932][T16057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.100560][T16057] hsr_slave_0: entered promiscuous mode [ 237.124663][T16057] hsr_slave_1: entered promiscuous mode [ 237.134537][T16057] debugfs: 'hsr0' already exists in 'hsr' [ 237.140305][T16057] Cannot create hsr debugfs directory [ 237.512025][T16057] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.527707][T16057] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.542128][T16057] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.549843][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4916'. [ 237.570278][T16057] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.577741][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4916'. [ 237.739552][T16057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.794111][T16057] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.810051][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.817236][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.852079][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.859276][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.895689][ T52] Bluetooth: hci5: command tx timeout [ 237.922919][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4924'. [ 238.177479][T16182] infiniband syz1: set down [ 238.195710][T16182] infiniband syz1: added bond0 [ 238.295279][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.350676][T16182] RDS/IB: syz1: added [ 238.355428][T16182] smc: adding ib device syz1 with port count 1 [ 238.361788][T16182] smc: ib device syz1 port 1 has no pnetid [ 238.832015][T16057] veth0_vlan: entered promiscuous mode [ 238.859364][T16057] veth1_vlan: entered promiscuous mode [ 238.937702][T16057] veth0_macvtap: entered promiscuous mode [ 238.959680][T16057] veth1_macvtap: entered promiscuous mode [ 238.996920][T16057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.027143][T16057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.058384][ T7915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.079268][ T7915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.121504][ T7915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.221036][ T7915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.350053][ T3668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.363981][ T3668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.402884][ T7915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.426299][ T7915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.620397][T16251] openvswitch: netlink: IPv4 tun info is not correct [ 239.699619][T16255] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 239.807602][T16259] netlink: 'syz.5.4950': attribute type 6 has an invalid length. [ 239.973650][ T52] Bluetooth: hci5: command tx timeout [ 240.399308][ T30] audit: type=1107 audit(1768851649.767:2): pid=16281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 240.635928][T16290] __nla_validate_parse: 2 callbacks suppressed [ 240.635945][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4965'. [ 240.924839][T16302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4971'. [ 241.361817][T16327] netlink: 'syz.2.4983': attribute type 1 has an invalid length. [ 241.378441][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'. [ 241.514311][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4985'. [ 241.633899][T16343] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 241.743283][T16350] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 241.848436][T16358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4997'. [ 242.054689][ T52] Bluetooth: hci5: command tx timeout [ 242.133681][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 242.464195][T16398] netlink: 'syz.3.5017': attribute type 1 has an invalid length. [ 242.467186][T16402] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 242.493903][T16398] netlink: 'syz.3.5017': attribute type 3 has an invalid length. [ 242.525288][T16398] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5017'. [ 242.686611][T16414] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5025'. [ 242.766535][T16419] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 242.777609][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5027'. [ 243.017483][T16436] openvswitch: netlink: IP tunnel TTL not specified. [ 243.158782][T16447] netlink: 'syz.2.5041': attribute type 2 has an invalid length. [ 243.167797][T16447] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5041'. [ 243.246300][T16450] netlink: 'syz.0.5043': attribute type 7 has an invalid length. [ 243.284865][T16454] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 243.512028][T16471] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5053'. [ 243.818224][T16494] netlink: 'syz.2.5065': attribute type 39 has an invalid length. [ 243.952508][T16497] xt_CT: No such helper "syz0" [ 244.143625][ T52] Bluetooth: hci5: command tx timeout [ 244.286809][T16522] netlink: 'syz.0.5079': attribute type 13 has an invalid length. [ 244.439784][T16532] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 244.478334][T16532] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 244.888793][T16562] netlink: 'syz.2.5097': attribute type 15 has an invalid length. [ 245.116293][T16579] netlink: 'syz.5.5106': attribute type 10 has an invalid length. [ 245.152290][T16579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.161728][T16579] team0: Port device bond0 added [ 245.247963][T16583] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 245.262305][T16583] bond0 (unregistering): Released all slaves [ 245.350962][T16586] m1Ie5nè‹Ò: entered promiscuous mode [ 245.358126][T16592] netlink: 'syz.5.5112': attribute type 5 has an invalid length. [ 245.481774][ T30] audit: type=1800 audit(1768851654.847:3): pid=16598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5115" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5274 res=0 errno=0 [ 245.670692][T16610] __nla_validate_parse: 5 callbacks suppressed [ 245.670708][T16610] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5120'. [ 245.844536][T16620] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.990254][T16626] xt_TCPMSS: Only works on TCP SYN packets [ 246.142410][T16639] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 246.795734][T16673] netlink: 'syz.2.5151': attribute type 4 has an invalid length. [ 246.935469][T16683] netlink: 1100 bytes leftover after parsing attributes in process `syz.2.5155'. [ 247.615944][T16729] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5179'. [ 247.649884][T16733] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 247.899966][T16747] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 247.901610][T16750] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 248.063011][T16761] lo speed is unknown, defaulting to 1000 [ 248.075023][T16761] lo speed is unknown, defaulting to 1000 [ 248.084464][T16761] lo speed is unknown, defaulting to 1000 [ 248.529039][T16761] infiniband syz0: set down [ 248.534762][T11413] lo speed is unknown, defaulting to 1000 [ 248.556533][T16761] infiniband syz0: added lo [ 248.709636][T16761] RDS/IB: syz0: added [ 248.724396][T16761] smc: adding ib device syz0 with port count 1 [ 248.730597][T16761] smc: ib device syz0 port 1 has no pnetid [ 248.764451][T11413] lo speed is unknown, defaulting to 1000 [ 248.771469][T16761] lo speed is unknown, defaulting to 1000 [ 248.954806][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5217'. [ 249.172937][T16761] lo speed is unknown, defaulting to 1000 [ 249.279482][T16824] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5224'. [ 249.375535][T13631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.384362][T13631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.391964][T13631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.401642][T13631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.413842][T13631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.754597][T16845] delete_channel: no stack [ 249.874445][T16850] netlink: 'syz.5.5236': attribute type 1 has an invalid length. [ 249.889787][T16852] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5237'. [ 249.894406][T16761] lo speed is unknown, defaulting to 1000 [ 250.135900][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5242'. [ 250.156317][T16864] netlink: zone id is out of range [ 250.161465][T16864] netlink: zone id is out of range [ 250.223613][T16864] netlink: zone id is out of range [ 250.245890][T16864] netlink: zone id is out of range [ 250.275745][T16864] netlink: zone id is out of range [ 250.280905][T16864] netlink: zone id is out of range [ 250.288993][T16864] netlink: zone id is out of range [ 250.296277][T16864] netlink: zone id is out of range [ 250.317968][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5246'. [ 250.414807][T16761] lo speed is unknown, defaulting to 1000 [ 250.879869][T16899] netlink: 'syz.2.5260': attribute type 7 has an invalid length. [ 250.924273][T16899] netlink: 'syz.2.5260': attribute type 8 has an invalid length. [ 250.952267][T16827] lo speed is unknown, defaulting to 1000 [ 251.278916][T16919] netlink: 'syz.2.5270': attribute type 1 has an invalid length. [ 251.287629][T16919] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.5270'. [ 251.296062][T16761] lo speed is unknown, defaulting to 1000 [ 251.494493][ T52] Bluetooth: hci6: command tx timeout [ 251.771492][T16827] chnl_net:caif_netlink_parms(): no params data found [ 251.867964][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5283'. [ 251.890990][T16946] IPv6: sit1: Disabled Multicast RS [ 251.904818][T16946] sit1: entered promiscuous mode [ 251.909814][T16946] sit1: entered allmulticast mode [ 251.970206][T16761] lo speed is unknown, defaulting to 1000 [ 252.060715][T16957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.197165][T16965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.239512][T16827] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.250651][T16827] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.262873][T16827] bridge_slave_0: entered allmulticast mode [ 252.276726][T16827] bridge_slave_0: entered promiscuous mode [ 252.294950][T16969] netlink: 'syz.5.5291': attribute type 7 has an invalid length. [ 252.296413][T16827] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.333854][T16827] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.341105][T16827] bridge_slave_1: entered allmulticast mode [ 252.367271][T16827] bridge_slave_1: entered promiscuous mode [ 252.492576][T16827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.556670][T16827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.691262][T16987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5301'. [ 252.715679][T16827] team0: Port device team_slave_0 added [ 252.718553][T16987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5301'. [ 252.741561][T16827] team0: Port device team_slave_1 added [ 252.864576][T16827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.881777][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.947814][T16827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.961875][T16827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.970085][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.010755][T16827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.180525][T16827] hsr_slave_0: entered promiscuous mode [ 253.188686][T16827] hsr_slave_1: entered promiscuous mode [ 253.195955][T16827] debugfs: 'hsr0' already exists in 'hsr' [ 253.201690][T16827] Cannot create hsr debugfs directory [ 253.461136][T17025] xt_CONNSECMARK: invalid mode: 66 [ 253.573946][ T52] Bluetooth: hci6: command tx timeout [ 253.636199][T16827] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.649055][T17038] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5326'. [ 253.675778][T17039] netlink: 'syz.2.5327': attribute type 4 has an invalid length. [ 253.682939][T17038] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5326'. [ 253.706197][T17041] netlink: 'syz.0.5328': attribute type 61 has an invalid length. [ 253.714760][T17038] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5326'. [ 253.724726][T16827] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.737855][T16827] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.806409][T16827] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.950340][T16827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.997933][T16827] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.011477][T17062] netlink: 'syz.5.5336': attribute type 10 has an invalid length. [ 254.043629][T17062] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5336'. [ 254.056178][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.063327][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.083179][T17062] team0: Device geneve0 is up. Set it down before adding it as a team port [ 254.097437][T17062] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 254.151033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.158252][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.269277][T17075] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5342'. [ 254.690037][T16827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.819672][T17112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.044393][T17122] bond1: option fail_over_mac: invalid value (127) [ 255.055114][T17122] bond1 (unregistering): Released all slaves [ 255.358178][T16827] veth0_vlan: entered promiscuous mode [ 255.383344][T16827] veth1_vlan: entered promiscuous mode [ 255.481300][T16827] veth0_macvtap: entered promiscuous mode [ 255.516460][T16827] veth1_macvtap: entered promiscuous mode [ 255.549079][T16827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.581228][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.591812][T16827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.652457][ T3423] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.663953][ T52] Bluetooth: hci6: command tx timeout [ 255.696698][ T3423] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.736045][ T3423] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.767521][ T3423] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.797432][T17152] netlink: 'syz.2.5375': attribute type 29 has an invalid length. [ 255.822481][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5375'. [ 255.850600][T17155] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 256.054204][ T3423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.062072][ T3423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.159692][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.193644][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.247638][T17233] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5414'. [ 257.497937][T17246] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.695685][T17257] netlink: 'syz.6.5426': attribute type 21 has an invalid length. [ 257.741574][ T52] Bluetooth: hci6: command tx timeout [ 257.814192][T17266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.116591][T17282] geneve2: entered allmulticast mode [ 258.239885][T17293] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 258.260480][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5444'. [ 258.307643][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5444'. [ 258.331112][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5444'. [ 258.343981][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5444'. [ 258.354479][T17296] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5444'. [ 259.045350][T17351] xt_hashlimit: max too large, truncated to 1048576 [ 259.380939][T17375] netlink: 'syz.6.5484': attribute type 21 has an invalid length. [ 259.421802][T17375] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5484'. [ 259.449613][T17375] netlink: 'syz.6.5484': attribute type 4 has an invalid length. [ 259.473585][T17375] netlink: 'syz.6.5484': attribute type 3 has an invalid length. [ 259.501894][T17375] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5484'. [ 259.522580][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5489'. [ 259.609572][T17389] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5490'. [ 259.637628][T17389] unsupported nlmsg_type 40 [ 259.750669][T17398] unsupported nla_type 540 [ 260.212827][T17427] openvswitch: netlink: Message has 4 unknown bytes. [ 260.225064][T17426] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 260.699020][T17451] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 260.846194][T17457] netlink: 'syz.6.5523': attribute type 10 has an invalid length. [ 260.884405][T17459] netlink: 'syz.2.5524': attribute type 1 has an invalid length. [ 260.902721][T17457] veth0_vlan: left promiscuous mode [ 260.921308][T17457] veth0_vlan: entered promiscuous mode [ 260.943677][T17459] netlink: 'syz.2.5524': attribute type 1 has an invalid length. [ 260.946202][T17457] team0: Device veth0_vlan failed to register rx_handler [ 261.502322][T17499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.232380][T17538] netlink: 'syz.5.5563': attribute type 2 has an invalid length. [ 262.275680][T17513] infiniband syû: set down [ 262.281561][T17513] infiniband syû: added bond_slave_0 [ 262.367759][T17513] RDS/IB: syû: added [ 262.371806][T17513] smc: adding ib device syû with port count 1 [ 262.378157][T17513] smc: ib device syû port 1 has no pnetid [ 262.933944][T17562] __nla_validate_parse: 4 callbacks suppressed [ 262.933962][T17562] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5574'. [ 263.358617][T17579] netlink: 'syz.2.5584': attribute type 4 has an invalid length. [ 263.389228][T17580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5582'. [ 263.431446][T17580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5582'. [ 263.489925][T17584] SET target dimension over the limit! [ 263.853633][T17602] netlink: 'syz.6.5593': attribute type 1 has an invalid length. [ 263.861446][T17602] netlink: 'syz.6.5593': attribute type 2 has an invalid length. [ 263.908517][T17604] netlink: 'syz.5.5596': attribute type 61 has an invalid length. [ 263.926634][T17604] netlink: 'syz.5.5596': attribute type 62 has an invalid length. [ 264.168065][T17615] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5601'. [ 264.351179][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5604'. [ 264.383645][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5604'. [ 265.054780][T17654] netlink: 'syz.6.5619': attribute type 61 has an invalid length. [ 265.122265][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5622'. [ 265.201506][T17661] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 265.221425][T17661] bond1 (unregistering): Released all slaves [ 265.267249][T17670] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 4, id = 0 [ 265.583594][T17687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5635'. [ 265.812159][T17690] netlink: set zone limit has 4 unknown bytes [ 266.035662][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5645'. [ 266.227839][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5650'. [ 266.395179][T17725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.353726][T17796] netlink: 'syz.2.5689': attribute type 22 has an invalid length. [ 267.427572][T17800] netlink: 'syz.6.5690': attribute type 29 has an invalid length. [ 267.462630][T17801] geneve3: entered promiscuous mode [ 267.474459][ T997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.498562][ T997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.523088][ T997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.543597][ T997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.837829][T17832] openvswitch: netlink: Actions may not be safe on all matching packets [ 267.931188][T17837] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 267.977657][T17837] bond0 (unregistering): Released all slaves [ 268.141871][T17850] netlink: 'syz.0.5714': attribute type 2 has an invalid length. [ 268.487605][T17878] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 268.507656][T17878] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 268.610328][T17886] __nla_validate_parse: 3 callbacks suppressed [ 268.610345][T17886] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5732'. [ 268.665417][T17886] netlink: 245 bytes leftover after parsing attributes in process `syz.5.5732'. [ 268.764962][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5737'. [ 268.913820][T17910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5745'. [ 269.122865][T17926] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 269.603701][T17950] netlink: 'syz.6.5764': attribute type 11 has an invalid length. [ 269.875929][T17961] netlink: 'syz.0.5768': attribute type 1 has an invalid length. [ 269.897766][T17961] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5768'. [ 270.061569][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5775'. [ 270.187409][T17980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5777'. [ 270.205897][T17982] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5778'. [ 270.216013][T17981] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.700495][T18018] netlink: 'syz.5.5798': attribute type 2 has an invalid length. [ 271.053341][T18049] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5814'. [ 271.114726][T18051] netlink: 'syz.2.5813': attribute type 1 has an invalid length. [ 271.523832][T18085] openvswitch: netlink: Tunnel attr 92 out of range max 16 [ 271.660829][T18094] netlink: 'syz.6.5835': attribute type 3 has an invalid length. [ 271.692409][T18101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5839'. [ 271.776602][T18104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.035979][T18127] openvswitch: netlink: IP tunnel dst address not specified [ 272.098444][T18129] netlink: 'syz.6.5855': attribute type 23 has an invalid length. [ 272.126207][T18131] netlink: 'syz.2.5853': attribute type 11 has an invalid length. [ 272.374695][T18150] xt_policy: output policy not valid in PREROUTING and INPUT [ 272.485718][T18158] netlink: 'syz.6.5867': attribute type 3 has an invalid length. [ 272.734570][T18179] netlink: 'syz.0.5878': attribute type 1 has an invalid length. [ 272.758270][T18179] netlink: 'syz.0.5878': attribute type 2 has an invalid length. [ 273.493665][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 273.900875][T18246] netlink: 'syz.3.5907': attribute type 2 has an invalid length. [ 274.047260][T18262] netlink: 'syz.6.5915': attribute type 2 has an invalid length. [ 274.142794][T18267] Cannot find add_set index 2 as target [ 274.175936][T18272] __nla_validate_parse: 5 callbacks suppressed [ 274.175952][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5920'. [ 274.621567][T18309] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 274.731702][T18316] No such timeout policy "syz1" [ 275.413732][T18370] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 275.731295][T18394] netlink: 'syz.5.5978': attribute type 62 has an invalid length. [ 275.868943][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5981'. [ 275.914010][T18401] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5981'. [ 275.923662][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5981'. [ 276.055071][T18414] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 276.264329][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5991'. [ 276.306918][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5991'. [ 276.345969][T18429] netlink: 'syz.5.5991': attribute type 3 has an invalid length. [ 276.477752][T18445] netlink: 'syz.6.5998': attribute type 61 has an invalid length. [ 276.643800][T18454] netlink: 'syz.0.6002': attribute type 1 has an invalid length. [ 276.670146][T18459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6004'. [ 276.851953][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6013'. [ 276.963662][T18481] netlink: 'syz.5.6016': attribute type 2 has an invalid length. [ 277.130813][T18494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6021'. [ 277.512154][T18525] netlink: 'syz.6.6038': attribute type 1 has an invalid length. [ 277.692721][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6041'. [ 277.771697][T18543] netlink: 'syz.6.6047': attribute type 2 has an invalid length. [ 278.015585][T18561] IPv6: Can't replace route, no match found [ 278.405587][T18593] netlink: 'syz.0.6070': attribute type 13 has an invalid length. [ 278.699633][T18616] ip6gre1: entered promiscuous mode [ 279.097983][T18639] xt_CT: No such helper "netbios-ns" [ 279.227604][T18657] netlink: zone id is out of range [ 279.236681][T18658] netlink: 'syz.2.6103': attribute type 1 has an invalid length. [ 279.251890][T18657] netlink: zone id is out of range [ 279.719357][T18686] xt_CT: No such helper "netbios-ns" [ 280.074035][T18721] __nla_validate_parse: 2 callbacks suppressed [ 280.074052][T18721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6134'. [ 280.237433][T18731] bridge4: entered promiscuous mode [ 280.532805][T18757] openvswitch: netlink: Message has 8 unknown bytes. [ 281.076229][T18800] xt_TCPMSS: Only works on TCP SYN packets [ 281.096463][T18803] SET target dimension over the limit! [ 281.102123][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6173'. [ 281.243964][T18812] netlink: 424 bytes leftover after parsing attributes in process `syz.0.6179'. [ 281.253049][T18812] netlink: 'syz.0.6179': attribute type 1 has an invalid length. [ 281.528455][T18835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6190'. [ 281.562306][T18841] netlink: 'syz.5.6191': attribute type 2 has an invalid length. [ 281.590490][T18841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6191'. [ 281.695552][T18849] netlink: 'syz.3.6194': attribute type 28 has an invalid length. [ 281.789412][T18854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6197'. [ 281.823347][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6199'. [ 282.660022][T18922] openvswitch: netlink: IP tunnel dst address not specified [ 283.045703][T18945] siw: device registration error -23 [ 283.055990][T18946] netlink: 'syz.0.6239': attribute type 21 has an invalid length. [ 283.159808][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6243'. [ 283.228998][T18955] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6245'. [ 283.262312][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6245'. [ 283.279916][T18955] tc_dump_action: action bad kind [ 283.354344][T18963] netlink: 'syz.0.6249': attribute type 1 has an invalid length. [ 283.626344][T18978] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 284.266760][T19017] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 284.387663][T19027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.507690][T19036] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 284.767796][T19055] bond1 (unregistering): Released all slaves [ 285.231495][T19084] __nla_validate_parse: 3 callbacks suppressed [ 285.231514][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6307'. [ 285.346845][T19094] netlink: 'syz.6.6312': attribute type 3 has an invalid length. [ 285.929411][T19130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6328'. [ 286.340449][T19130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6328'. [ 286.363195][T19130] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 286.697220][T19160] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 286.797872][T19167] netlink: 'syz.3.6345': attribute type 4 has an invalid length. [ 286.901677][T19179] nftables ruleset with unbound chain [ 286.905373][T19170] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 287.121159][T19193] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6357'. [ 287.153649][T19193] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6357'. [ 287.198986][T19201] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 287.387516][T19213] netlink: 'syz.0.6368': attribute type 11 has an invalid length. [ 287.419961][T19216] netlink: 'syz.6.6369': attribute type 1 has an invalid length. [ 287.462423][T19216] netlink: 'syz.6.6369': attribute type 2 has an invalid length. [ 287.571114][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6374'. [ 287.649825][T19230] netlink: 'syz.2.6377': attribute type 2 has an invalid length. [ 287.679677][T19233] IPv6: Can't replace route, no match found [ 287.919443][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6385'. [ 288.158981][T19262] netlink: 'syz.2.6392': attribute type 21 has an invalid length. [ 288.170070][T19262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6392'. [ 288.179494][T19263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6391'. [ 288.200132][T19263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6391'. [ 289.345531][T19339] xt_bpf: check failed: parse error [ 289.364830][T19341] netlink: zone id is out of range [ 289.369972][T19341] netlink: zone id is out of range [ 289.923714][T19363] netlink: 'syz.2.6441': attribute type 5 has an invalid length. [ 290.143163][T19381] sock: sock_timestamping_bind_phc: sock not bind to device [ 290.248811][T19389] __nla_validate_parse: 2 callbacks suppressed [ 290.248828][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6455'. [ 290.439482][T19405] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 290.547041][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6467'. [ 290.548559][T19415] netlink: 'syz.2.6465': attribute type 1 has an invalid length. [ 290.593053][T19413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6467'. [ 290.634430][T19419] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 290.962650][T19444] IPVS: set_ctl: invalid protocol: 4 172.20.20.27:20004 [ 291.048867][T19449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6483'. [ 291.212471][T19464] netlink: 'syz.5.6491': attribute type 9 has an invalid length. [ 291.322016][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6495'. [ 291.365953][T19474] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6496'. [ 291.607542][T19494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.660614][T19500] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 291.783722][T19508] netlink: 'syz.3.6513': attribute type 21 has an invalid length. [ 291.810456][T19508] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6513'. [ 292.063366][T19532] netlink: 292 bytes leftover after parsing attributes in process `syz.5.6525'. [ 292.127399][T19536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'. [ 292.158513][T19540] netlink: 'syz.2.6529': attribute type 3 has an invalid length. [ 292.167021][T19540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6529'. [ 292.357963][T19553] netlink: 'syz.0.6536': attribute type 17 has an invalid length. [ 292.782771][T19588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.967586][T19602] netlink: 'syz.5.6560': attribute type 1 has an invalid length. [ 292.985977][T19602] netlink: 'syz.5.6560': attribute type 2 has an invalid length. [ 293.444663][T19638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.861988][T19674] netlink: 'syz.3.6596': attribute type 1 has an invalid length. [ 293.928164][T19680] netlink: 'syz.5.6598': attribute type 1 has an invalid length. [ 294.165787][T19693] bond2: option min_links: invalid value (18446744073709551612) [ 294.177073][T19693] bond2: option min_links: allowed values 0 - 2147483647 [ 294.189898][T19693] bond2 (unregistering): Released all slaves [ 294.239757][T19702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.405898][T19707] netlink: 'syz.2.6610': attribute type 6 has an invalid length. [ 294.428072][T19707] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.084523][T19755] netlink: 'syz.3.6630': attribute type 1 has an invalid length. [ 295.338367][T19772] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 295.526129][T19783] __nla_validate_parse: 8 callbacks suppressed [ 295.526149][T19783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6646'. [ 295.675889][T19797] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 295.836393][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6657'. [ 296.224447][T19837] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 296.246481][T19841] netlink: 'syz.5.6675': attribute type 1 has an invalid length. [ 296.311631][T19845] netlink: 'syz.2.6676': attribute type 41 has an invalid length. [ 296.568483][T19867] x_tables: ip_tables: ah match: only valid for protocol 51 [ 296.643093][T19873] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6690'. [ 296.801574][T19886] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6695'. [ 297.296293][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6713'. [ 297.586453][T19948] validate_nla: 1 callbacks suppressed [ 297.586471][T19948] netlink: 'syz.0.6726': attribute type 21 has an invalid length. [ 297.611649][T19948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6726'. [ 297.702004][T19959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.801383][T19965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6734'. [ 298.353022][T20008] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6755'. [ 298.396723][T20015] batadv0: entered promiscuous mode [ 298.412305][T20015] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 298.491124][T20020] netlink: 'syz.2.6760': attribute type 1 has an invalid length. [ 298.511123][T20019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.512706][T20020] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6760'. [ 298.680007][T20033] netlink: 'syz.0.6766': attribute type 21 has an invalid length. [ 298.705351][T20033] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6766'. [ 298.730122][T20033] netlink: 'syz.0.6766': attribute type 4 has an invalid length. [ 298.754685][T20033] netlink: 'syz.0.6766': attribute type 5 has an invalid length. [ 298.882140][T20049] netlink: 'syz.5.6774': attribute type 16 has an invalid length. [ 298.978034][T20054] netlink: 'syz.5.6778': attribute type 10 has an invalid length. [ 298.990226][ T30] audit: type=1107 audit(1768851708.357:4): pid=20051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 299.012662][T20054] team0: entered promiscuous mode [ 299.028205][T20054] team_slave_0: entered promiscuous mode [ 299.038502][T20054] team_slave_1: entered promiscuous mode [ 299.058211][T20054] bond0: entered promiscuous mode [ 299.063261][T20054] bond_slave_0: entered promiscuous mode [ 299.074798][T20054] bond_slave_1: entered promiscuous mode [ 299.081140][T20054] bridge0: port 3(team0) entered blocking state [ 299.087795][T20054] bridge0: port 3(team0) entered disabled state [ 299.097320][T20054] team0: entered allmulticast mode [ 299.102626][T20054] team_slave_0: entered allmulticast mode [ 299.117367][T20054] team_slave_1: entered allmulticast mode [ 299.125178][T20054] bond0: entered allmulticast mode [ 299.130441][T20054] bond_slave_0: entered allmulticast mode [ 299.138018][T20054] bond_slave_1: entered allmulticast mode [ 299.151334][T20054] bridge0: port 3(team0) entered blocking state [ 299.157764][T20054] bridge0: port 3(team0) entered listening state [ 299.168200][T20060] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 299.195532][T20060] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 299.233649][T20060] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 299.499628][T20092] netlink: 'syz.5.6795': attribute type 49 has an invalid length. [ 299.601719][T20100] netlink: 'syz.5.6798': attribute type 1 has an invalid length. [ 300.067225][T20119] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 300.165649][T20125] openvswitch: netlink: Missing key (keys=40, expected=100) [ 300.226441][T20128] netlink: 'syz.5.6813': attribute type 2 has an invalid length. [ 301.052067][T20189] openvswitch: netlink: IP tunnel dst address not specified [ 301.147738][T20197] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 301.227743][T20201] xt_TCPMSS: Only works on TCP SYN packets [ 301.281038][T20206] team0: Device veth1_macvtap failed to register rx_handler [ 301.397388][T11743] IPVS: starting estimator thread 0... [ 301.486215][T20223] __nla_validate_parse: 5 callbacks suppressed [ 301.486232][T20223] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6858'. [ 301.501679][T20216] IPVS: using max 33 ests per chain, 79200 per kthread [ 301.510890][T20223] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6858'. [ 301.818989][T20246] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 301.830953][T20246] bond2 (unregistering): Released all slaves [ 302.008027][T20261] xfrm0: entered promiscuous mode [ 302.013210][T20261] xfrm0: entered allmulticast mode [ 302.791408][T20325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6909'. [ 302.852380][T20325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6909'. [ 302.867788][T20330] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6911'. [ 303.551539][T13631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.560660][T13631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.568394][T13631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.576479][T13631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.585465][T13631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.660445][T20387] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6935'. [ 303.700701][T20387] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6935'. [ 303.943178][T20402] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 303.988012][T20378] lo speed is unknown, defaulting to 1000 [ 304.204998][T20414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.247402][T20417] validate_nla: 4 callbacks suppressed [ 304.247422][T20417] netlink: 'syz.3.6953': attribute type 21 has an invalid length. [ 304.273648][T20417] netlink: 'syz.3.6953': attribute type 1 has an invalid length. [ 304.290236][T20417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6953'. [ 304.469092][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'. [ 304.494949][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'. [ 304.543772][T20431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.747723][T20446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.908192][T20455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.240180][T20378] chnl_net:caif_netlink_parms(): no params data found [ 305.540150][T20501] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 305.544855][T20378] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.594109][T20378] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.601348][T20378] bridge_slave_0: entered allmulticast mode [ 305.625700][T20378] bridge_slave_0: entered promiscuous mode [ 305.634978][T20378] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.642281][T20378] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.653826][T13631] Bluetooth: hci7: command tx timeout [ 305.678384][T20378] bridge_slave_1: entered allmulticast mode [ 305.702738][T20378] bridge_slave_1: entered promiscuous mode [ 305.862878][T20378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.888180][T20378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.985467][T20378] team0: Port device team_slave_0 added [ 306.001827][T20378] team0: Port device team_slave_1 added [ 306.113575][T20378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.130733][T20378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.193810][T20378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.222369][T20378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.235974][T20378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.262475][T20378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.846850][T20566] __nla_validate_parse: 21 callbacks suppressed [ 306.846868][T20566] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7020'. [ 306.885169][T20378] hsr_slave_0: entered promiscuous mode [ 306.891819][T20378] hsr_slave_1: entered promiscuous mode [ 306.913727][T20566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7020'. [ 306.924030][T20566] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7020'. [ 306.929077][T20378] debugfs: 'hsr0' already exists in 'hsr' [ 306.963625][T20378] Cannot create hsr debugfs directory [ 307.306288][T20590] ipt_REJECT: TCP_RESET invalid for non-tcp [ 307.468553][T20378] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 307.514535][T20378] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 307.537631][T20605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7041'. [ 307.541176][T20378] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 307.571214][T20378] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 307.736707][T13631] Bluetooth: hci7: command tx timeout [ 307.800332][T20627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7049'. [ 307.809849][T20627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7049'. [ 307.864421][T20378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.921591][T20635] bridge3: entered allmulticast mode [ 307.947102][T20378] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.990482][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.997676][ T7915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.037626][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.044828][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.418325][T20663] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 308.527773][T20378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.029345][T20378] veth0_vlan: entered promiscuous mode [ 309.036692][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7082'. [ 309.112493][T20378] veth1_vlan: entered promiscuous mode [ 309.138608][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7085'. [ 309.200414][T20378] veth0_macvtap: entered promiscuous mode [ 309.231832][T20378] veth1_macvtap: entered promiscuous mode [ 309.293057][T20378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.294075][T20725] xt_NFQUEUE: number of total queues is 0 [ 309.345066][T20378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.371524][ T3423] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.399386][ T3423] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.432605][ T3423] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.454632][T20730] pim6reg: entered allmulticast mode [ 309.461977][ T3423] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.561350][T20737] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7096'. [ 309.576456][T20734] bond3 (unregistering): Released all slaves [ 309.630662][ T3423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.663619][ T3423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.752255][ T3423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.761537][ T3423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.804072][T20750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7103'. [ 309.814121][T13631] Bluetooth: hci7: command tx timeout [ 310.657882][T20786] wg1: entered promiscuous mode [ 310.662786][T20786] wg1: entered allmulticast mode [ 310.927627][T20800] IPv6: Can't replace route, no match found [ 310.965483][T20802] netlink: 'syz.3.7127': attribute type 4 has an invalid length. [ 311.556960][T20832] bond3: option xmit_hash_policy: invalid value (10) [ 311.675961][T20832] bond3 (unregistering): Released all slaves [ 311.894433][T13631] Bluetooth: hci7: command tx timeout [ 312.391043][T20888] __nla_validate_parse: 4 callbacks suppressed [ 312.391062][T20888] netlink: 1132 bytes leftover after parsing attributes in process `syz.7.7167'. [ 312.434376][T20888] netlink: 1132 bytes leftover after parsing attributes in process `syz.7.7167'. [ 312.447023][T20893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7171'. [ 312.593760][T20900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.615934][T20904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7177'. [ 312.699902][T20908] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7178'. [ 312.721271][T20908] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 312.932758][T20924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.017332][T20931] netlink: 'syz.2.7191': attribute type 1 has an invalid length. [ 313.163666][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7194'. [ 313.745968][T20978] netlink: 'syz.2.7213': attribute type 13 has an invalid length. [ 313.862292][T20978] bridge0: port 3(erspan0) entered disabled state [ 313.907140][T20990] netlink: 'syz.5.7220': attribute type 1 has an invalid length. [ 313.917113][T20990] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7220'. [ 313.967996][T20978] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.975738][T20978] bridge0: port 1(1¾x9ÿ) entered disabled state [ 314.100017][T20978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.119397][T20978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.328317][T20983] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 314.453800][ C1] bridge0: port 3(team0) entered learning state [ 314.462962][ T2138] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.516540][ T2138] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.558229][ T2138] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.585690][ T2138] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.669051][T21005] ip6t_rpfilter: unknown options [ 314.791442][T21010] Cannot find map_set index 135 as target [ 314.860081][T21018] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 314.945743][T21024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.389160][T21052] ip6gre4: entered promiscuous mode [ 315.531015][T21060] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7253'. [ 315.571071][T21066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7255'. [ 315.736950][T21077] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 315.941484][T21091] openvswitch: netlink: Unknown key attributes 2 [ 315.997915][T21098] netlink: 'syz.2.7272': attribute type 3 has an invalid length. [ 316.032834][T21098] netlink: 'syz.2.7272': attribute type 3 has an invalid length. [ 316.062771][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7272'. [ 316.265799][T21120] xt_hashlimit: max too large, truncated to 1048576 [ 316.286314][T21120] xt_bpf: check failed: parse error [ 316.630161][T21148] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 316.675468][T21153] netlink: 'syz.0.7299': attribute type 1 has an invalid length. [ 317.233300][T21192] siw: device registration error -23 [ 317.458594][T21211] __nla_validate_parse: 5 callbacks suppressed [ 317.458613][T21211] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7325'. [ 317.616610][T21222] netlink: 'syz.2.7332': attribute type 3 has an invalid length. [ 317.891104][T21240] bond1: entered promiscuous mode [ 317.911397][T21240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.923040][T21243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7342'. [ 317.933137][T21243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7342'. [ 317.947361][T21247] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7343'. [ 317.970906][T21251] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 318.029685][T21253] xt_TCPMSS: Only works on TCP SYN packets [ 318.590369][T21291] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 318.653303][T21293] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 318.692300][T21293] bridge1: entered allmulticast mode [ 318.845709][T21309] netlink: 276 bytes leftover after parsing attributes in process `syz.2.7374'. [ 318.848050][T21305] netlink: 'syz.7.7373': attribute type 1 has an invalid length. [ 318.883771][T21305] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7373'. [ 319.250101][T21334] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.7387'. [ 319.714218][T21362] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7402'. [ 319.863895][T21372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.177386][T21398] netlink: 'syz.0.7420': attribute type 1 has an invalid length. [ 320.218105][T21402] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7421'. [ 320.419432][T21416] netlink: 'syz.3.7428': attribute type 9 has an invalid length. [ 320.445283][T21416] netlink: 'syz.3.7428': attribute type 7 has an invalid length. [ 320.462726][T21416] netlink: 'syz.3.7428': attribute type 8 has an invalid length. [ 320.463013][T21419] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7429'. [ 320.574651][T21426] netlink: 'syz.2.7433': attribute type 11 has an invalid length. [ 320.974693][T21458] netlink: 'syz.0.7449': attribute type 1 has an invalid length. [ 320.998996][T21460] team0: Device veth1_macvtap failed to register rx_handler [ 321.064010][T21462] validate_nla: 1 callbacks suppressed [ 321.064027][T21462] netlink: 'syz.7.7451': attribute type 3 has an invalid length. [ 322.340105][T21561] vlan0: entered promiscuous mode [ 322.355833][T21561] geneve1: entered promiscuous mode [ 322.368116][T21561] vlan0: entered allmulticast mode [ 322.390514][T21561] geneve1: entered allmulticast mode [ 322.403806][T21568] netlink: 'syz.7.7503': attribute type 2 has an invalid length. [ 322.633793][T21584] gretap0: entered promiscuous mode [ 322.649513][T21584] vlan2: entered promiscuous mode [ 322.720551][ T7915] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.738110][ T7915] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.749957][ T7915] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.759315][ T7915] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.838212][T21595] __nla_validate_parse: 7 callbacks suppressed [ 322.838231][T21595] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7516'. [ 322.866270][T21595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7516'. [ 323.008268][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7520'. [ 323.507820][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7536'. [ 323.532734][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7536'. [ 323.613146][T21644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7540'. [ 324.048234][T21676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7557'. [ 324.280000][T21695] netlink: 'syz.5.7565': attribute type 16 has an invalid length. [ 324.426195][T21705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7568'. [ 324.596951][T21714] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 324.923673][T21734] macsec1: entered promiscuous mode [ 324.930296][T21734] macvlan0: entered promiscuous mode [ 325.048956][T21734] macvlan0: left promiscuous mode [ 325.268989][T21742] ipvlan2: entered promiscuous mode [ 325.275398][T21742] ipvlan2: entered allmulticast mode [ 325.281461][T21742] geneve1: entered allmulticast mode [ 325.341948][T21746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7590'. [ 325.425569][T21748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7591'. [ 325.896323][T21778] netlink: 'syz.0.7605': attribute type 1 has an invalid length. [ 325.906489][T21778] netlink: 'syz.0.7605': attribute type 3 has an invalid length. [ 325.914911][T21778] NCSI netlink: No device for ifindex 813332851 [ 326.412341][T21815] sctp: [Deprecated]: syz.2.7620 (pid 21815) Use of int in max_burst socket option deprecated. [ 326.412341][T21815] Use struct sctp_assoc_value instead [ 326.495838][T21823] netlink: 'syz.7.7626': attribute type 14 has an invalid length. [ 326.510401][T21823] netlink: 'syz.7.7626': attribute type 12 has an invalid length. [ 326.570497][T21827] xt_socket: unknown flags 0x50 [ 327.007856][T21848] netlink: 'syz.0.7638': attribute type 9 has an invalid length. [ 327.706815][T21890] ªªªªª9: renamed from lo (while UP) [ 327.926667][T21902] __nla_validate_parse: 13 callbacks suppressed [ 327.926687][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7665'. [ 328.095701][T21913] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 328.501004][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 328.572392][T21942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7681'. [ 328.623524][T21942] netlink: 'syz.0.7681': attribute type 18 has an invalid length. [ 328.994830][T21967] netlink: 'syz.3.7694': attribute type 3 has an invalid length. [ 329.036763][T21969] Bluetooth: MGMT ver 1.23 [ 329.058760][T20991] IPVS: starting estimator thread 0... [ 329.174902][T21972] IPVS: using max 33 ests per chain, 79200 per kthread [ 329.444452][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7704'. [ 329.499097][T21989] macsec1: entered promiscuous mode [ 329.514054][T21989] macsec1: entered allmulticast mode [ 329.764440][T22010] Bluetooth: MGMT ver 1.23 [ 329.814159][ C1] bridge0: port 3(team0) entered forwarding state [ 329.820640][ C1] bridge0: topology change detected, propagating [ 329.912763][T22023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7723'. [ 330.082158][T22039] netlink: 120 bytes leftover after parsing attributes in process `syz.5.7727'. [ 330.094588][T22039] netlink: 'syz.5.7727': attribute type 1 has an invalid length. [ 330.094912][T22040] netlink: 'syz.0.7728': attribute type 3 has an invalid length. [ 330.102398][T22039] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7727'. [ 330.181965][T22044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.314196][T22052] netlink: 252 bytes leftover after parsing attributes in process `syz.0.7734'. [ 330.859506][T22075] netlink: 'syz.7.7746': attribute type 2 has an invalid length. [ 330.874468][T22075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7746'. [ 330.909236][T22079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7747'. [ 330.938578][T22079] bridge_slave_0: default FDB implementation only supports local addresses [ 331.098731][T22089] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 331.289776][T22098] Bluetooth: MGMT ver 1.23 [ 331.406287][T22105] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 331.675087][T22128] tipc: Failed to obtain node identity [ 331.682678][T22128] tipc: Enabling of bearer rejected, failed to enable media [ 332.502392][T22191] IPVS: Error connecting to the multicast addr [ 332.798914][T22215] tc_dump_action: action bad kind [ 332.912720][T22221] netlink: 'syz.0.7817': attribute type 4 has an invalid length. [ 333.274840][T22251] __nla_validate_parse: 4 callbacks suppressed [ 333.274857][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7830'. [ 333.299457][T22251] veth0_to_bond: entered allmulticast mode [ 333.308039][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7831'. [ 333.308648][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7830'. [ 333.452815][T22261] gtp0: entered promiscuous mode [ 333.458682][T22261] gtp0: entered allmulticast mode [ 333.520040][T22268] netlink: 'syz.0.7839': attribute type 8 has an invalid length. [ 333.908904][T22277] udevd[22277]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 334.100512][T22304] pimreg3: entered allmulticast mode [ 334.124154][T22310] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 335.350703][T22400] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7902'. [ 335.535462][T22410] xt_hashlimit: max too large, truncated to 1048576 [ 335.644636][T22414] macsec1: entered promiscuous mode [ 335.665494][T22414] macsec1: entered allmulticast mode [ 336.207420][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7920'. [ 337.010923][T22492] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1509 [ 337.176490][T22502] gretap2: entered promiscuous mode [ 337.223236][T22505] bridge0: entered promiscuous mode [ 337.251773][T22505] macvtap1: entered promiscuous mode [ 337.271649][T22505] macvtap1: entered allmulticast mode [ 337.287585][T22505] bridge0: entered allmulticast mode [ 337.300185][T22505] bridge0: port 4(macvtap1) entered blocking state [ 337.308313][T22505] bridge0: port 4(macvtap1) entered disabled state [ 337.337161][T22505] bridge0: left allmulticast mode [ 337.348285][T22505] bridge0: left promiscuous mode [ 337.433010][T22514] bond2: invalid ARP target 0.0.0.0 specified for addition [ 337.446608][T22514] bond2: option arp_ip_target: invalid value (0) [ 337.472101][T22514] bond2 (unregistering): Released all slaves [ 339.126722][T22600] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 339.554559][T22620] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.8005'. [ 339.579012][T22620] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 339.852302][T22638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8014'. [ 340.093241][T22654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8022'. [ 340.119927][T22654] nbd: illegal input index -1113835520 [ 340.128220][T22659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8025'. [ 340.284843][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8028'. [ 340.444224][T22682] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8035'. [ 340.471018][T22684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8036'. [ 340.902713][T22713] netlink: 296 bytes leftover after parsing attributes in process `syz.3.8051'. [ 340.915312][T22712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8049'. [ 341.043077][T22723] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8055'. [ 341.250468][T22738] ipvlan1: entered promiscuous mode [ 341.684162][T22773] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 341.711843][T22770] macvtap0: entered promiscuous mode [ 341.719057][T22770] veth1_to_hsr: entered promiscuous mode [ 341.728249][T22770] macvtap0: entered allmulticast mode [ 341.735406][ T3668] wlan1: Trigger new scan to find an IBSS to join [ 341.748682][T22770] veth1_to_hsr: entered allmulticast mode [ 342.106976][T22796] nbd: illegal input index 65508 [ 342.571697][T22824] bridge0: entered promiscuous mode [ 342.591703][T22824] macvtap1: entered promiscuous mode [ 342.597807][T22824] macvtap1: entered allmulticast mode [ 342.599631][T22826] netlink: zone id is out of range [ 342.604066][T22824] bridge0: entered allmulticast mode [ 342.611924][T22826] netlink: zone id is out of range [ 342.614940][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 342.622029][T22824] bridge0: port 1(macvtap1) entered blocking state [ 342.637859][T22824] bridge0: port 1(macvtap1) entered disabled state [ 342.642799][T22826] netlink: zone id is out of range [ 342.650376][T22826] netlink: zone id is out of range [ 342.653258][T22824] bridge0: left allmulticast mode [ 342.666969][T22826] netlink: zone id is out of range [ 342.684375][T22824] bridge0: left promiscuous mode [ 342.692701][T22826] netlink: zone id is out of range [ 342.722845][T22826] netlink: zone id is out of range [ 342.743816][T22826] netlink: zone id is out of range [ 342.756898][T22826] netlink: zone id is out of range [ 342.763400][T22826] netlink: zone id is out of range [ 343.016145][T22840] netlink: 'syz.5.8111': attribute type 1 has an invalid length. [ 343.678976][T22890] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 343.699677][T22890] bond1 (unregistering): Released all slaves [ 345.466684][T22998] __nla_validate_parse: 7 callbacks suppressed [ 345.466702][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8183'. [ 345.971526][T23030] netlink: 'syz.2.8200': attribute type 27 has an invalid length. [ 346.821829][T23085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8225'. [ 347.104311][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8231'. [ 347.119659][T23106] netlink: 'syz.2.8233': attribute type 36 has an invalid length. [ 347.202220][T22914] udevd[22914]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 347.375633][T23120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8241'. [ 347.973346][T23166] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 348.005871][T23166] batman_adv: batadv0: Adding interface: gretap1 [ 348.017831][T23166] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.049872][T23166] batman_adv: batadv0: Interface activated: gretap1 [ 348.335696][T23193] net_ratelimit: 44 callbacks suppressed [ 348.335715][T23193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.063345][T23245] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8301'. [ 349.790859][T23281] tipc: Started in network mode [ 349.817801][T23281] tipc: Node identity 2001, cluster identity 4711 [ 349.843547][T23281] tipc: Enabling of bearer rejected, failed to enable media [ 350.217163][T23304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8330'. [ 350.462372][T23317] bridge0: port 3(team0) entered disabled state [ 350.498092][T23317] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 350.656365][T23334] xt_l2tp: v2 tid > 0xffff: 37482740 [ 350.877600][T23351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8349'. [ 351.065201][T23366] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8357'. [ 351.098550][T23366] vlan2: entered promiscuous mode [ 351.105988][T23366] gretap0: entered promiscuous mode [ 351.152940][T23371] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8360'. [ 351.381976][T23384] IPVS: Error connecting to the multicast addr [ 351.495052][T23394] batadv0: entered allmulticast mode [ 351.722503][T23410] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8380'. [ 351.746244][T23410] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8380'. [ 351.772062][T23414] tipc: New replicast peer: 0.0.0.0 [ 351.812717][T23414] tipc: Enabled bearer , priority 10 [ 352.281502][T23453] netlink: 'syz.0.8400': attribute type 3 has an invalid length. [ 352.549726][T23472] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8408'. [ 352.572498][T23474] tipc: Enabling of bearer rejected, failed to enable media [ 352.719336][T23480] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8413'. [ 352.927900][ T10] tipc: Node number set to 536936448 [ 353.045188][T23506] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8426'. [ 353.057295][T23506] ksmbd: Unknown IPC event: 1, ignore. [ 353.118150][T23510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8428'. [ 353.284550][T23523] xt_time: unknown flags 0xf4 [ 353.342831][T23527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8436'. [ 353.384597][T23527] netlink: 'syz.5.8436': attribute type 18 has an invalid length. [ 353.924187][T23561] netlink: 'syz.7.8452': attribute type 11 has an invalid length. [ 354.247438][T23574] netlink: 'syz.7.8457': attribute type 1 has an invalid length. [ 354.470180][T23583] batadv0: left allmulticast mode [ 354.480262][T23583] pim6reg: left allmulticast mode [ 354.557767][T23588] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 356.022177][T23684] pimreg: entered allmulticast mode [ 356.031206][T23684] pimreg: left allmulticast mode [ 356.330645][T23693] "syz.7.8513" (23693) uses obsolete ecb(arc4) skcipher [ 356.357714][T23702] netlink: 'syz.3.8516': attribute type 1 has an invalid length. [ 356.370739][T23702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.821595][T23738] __nla_validate_parse: 2 callbacks suppressed [ 356.821613][T23738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8533'. [ 356.853547][T23738] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8533'. [ 357.406318][T23763] netlink: 165 bytes leftover after parsing attributes in process `syz.2.8544'. [ 358.889137][T23865] sctp: [Deprecated]: syz.7.8593 (pid 23865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.889137][T23865] Use struct sctp_sack_info instead [ 358.918603][T23865] sctp: [Deprecated]: syz.7.8593 (pid 23865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.918603][T23865] Use struct sctp_sack_info instead [ 359.051486][T23879] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8598'. [ 359.293677][T23893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8605'. [ 360.054283][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 360.218637][T23945] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8630'. [ 360.972283][T23989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.173668][T24002] syz.0.8657 (24002) used obsolete PPPIOCDETACH ioctl [ 361.188220][T24004] netlink: 'syz.3.8656': attribute type 2 has an invalid length. [ 361.824733][T24052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8681'. [ 362.118497][T24076] netlink: 'syz.7.8692': attribute type 6 has an invalid length. [ 362.137900][T24076] netlink: 'syz.7.8692': attribute type 7 has an invalid length. [ 362.155843][T24076] netlink: 'syz.7.8692': attribute type 8 has an invalid length. [ 362.164772][T24076] netlink: 'syz.7.8692': attribute type 13 has an invalid length. [ 362.186048][T24080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8695'. [ 362.305740][T24087] netlink: 'syz.2.8698': attribute type 7 has an invalid length. [ 362.318733][T24087] netlink: 'syz.2.8698': attribute type 8 has an invalid length. [ 362.652512][T24111] netlink: 744 bytes leftover after parsing attributes in process `syz.2.8710'. [ 362.813893][T24125] netlink: 'syz.3.8716': attribute type 8 has an invalid length. [ 363.517889][T24177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8742'. [ 364.001374][T24210] macsec1: entered allmulticast mode [ 364.014436][T24210] macsec0: entered allmulticast mode [ 364.019764][T24210] veth1_macvtap: entered allmulticast mode [ 364.188786][T24224] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8765'. [ 364.212908][T24228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8767'. [ 364.838912][T24275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8789'. [ 364.853845][T24274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8788'. [ 365.071346][T24291] nbd: must specify a device to reconfigure [ 365.305943][T24302] netlink: 'syz.3.8801': attribute type 62 has an invalid length. [ 365.563115][T24317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8809'. [ 365.592570][T24320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8810'. [ 365.705424][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 365.713473][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 365.733917][ T5896] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.119277][T24352] netlink: 'syz.3.8828': attribute type 1 has an invalid length. [ 366.235163][ T5896] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.381651][T24372] validate_nla: 1 callbacks suppressed [ 366.381669][T24372] netlink: 'syz.7.8835': attribute type 13 has an invalid length. [ 366.405568][T24372] netlink: 'syz.7.8835': attribute type 12 has an invalid length. [ 366.458813][ T5896] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.846623][T24408] __nla_validate_parse: 10 callbacks suppressed [ 366.846641][T24408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8853'. [ 367.517253][T24436] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8867'. [ 367.716888][T24443] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8870'. [ 368.386711][T24480] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8887'. [ 368.577764][T24491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8893'. [ 368.594018][T24491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8893'. [ 368.602991][T24491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8893'. [ 368.623515][T24491] netlink: 'syz.0.8893': attribute type 5 has an invalid length. [ 369.287929][T24526] tipc: Started in network mode [ 369.295769][T24526] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 369.313116][T24526] tipc: Enabling of bearer rejected, failed to enable media [ 369.666649][T24550] netlink: 47 bytes leftover after parsing attributes in process `syz.3.8922'. [ 369.733652][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 369.776207][T24556] netlink: 'syz.0.8925': attribute type 3 has an invalid length. [ 369.909597][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8930'. [ 369.948055][T24566] tipc: Enabling of bearer rejected, failed to enable media [ 370.306867][T24599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8946'. [ 370.617687][T24624] netlink: 'syz.7.8958': attribute type 1 has an invalid length. [ 371.001739][T24649] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 371.227878][T24663] xt_HMARK: spi-set and port-set can't be combined [ 371.436696][T24676] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 371.473632][T24676] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 372.762211][T24746] __nla_validate_parse: 2 callbacks suppressed [ 372.762228][T24746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9016'. [ 373.632259][T24803] lo speed is unknown, defaulting to 1000 [ 373.640267][T24803] lo speed is unknown, defaulting to 1000 [ 373.659558][T24803] lo speed is unknown, defaulting to 1000 [ 373.686896][T24803] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 373.728483][T24803] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 373.784578][T24803] lo speed is unknown, defaulting to 1000 [ 373.796175][T24811] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 373.820160][T24803] lo speed is unknown, defaulting to 1000 [ 373.832691][T24803] lo speed is unknown, defaulting to 1000 [ 373.842729][T24803] lo speed is unknown, defaulting to 1000 [ 373.853112][T24803] lo speed is unknown, defaulting to 1000 [ 373.861482][T24803] lo speed is unknown, defaulting to 1000 [ 373.870054][T24803] lo speed is unknown, defaulting to 1000 [ 373.878530][T24803] lo speed is unknown, defaulting to 1000 [ 374.144368][T24825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9054'. [ 374.374385][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9060'. [ 374.391275][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9060'. [ 374.998025][T24882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9081'. [ 375.140592][T24892] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9086'. [ 375.175296][T24892] netlink: 170 bytes leftover after parsing attributes in process `syz.0.9086'. [ 375.306971][T24902] dummy0: entered allmulticast mode [ 375.418617][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 376.246253][T24961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9117'. [ 376.677658][T24988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9133'. [ 376.747438][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9135'. [ 376.821809][T24995] delete_channel: no stack [ 376.975096][T25008] netlink: 'syz.0.9142': attribute type 9 has an invalid length. [ 377.151207][T25020] tipc: Invalid UDP bearer configuration [ 377.151259][T25020] tipc: Enabling of bearer rejected, failed to enable media [ 377.813616][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 377.927338][T25055] __nla_validate_parse: 4 callbacks suppressed [ 377.927354][T25055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9165'. [ 377.957165][T25055] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9165'. [ 379.326087][T25133] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 379.530421][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9207'. [ 379.539522][T25142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9207'. [ 379.563574][T25142] netlink: 'syz.2.9207': attribute type 15 has an invalid length. [ 380.504399][T25208] netlink: 'syz.3.9237': attribute type 1 has an invalid length. [ 380.773269][T25221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9246'. [ 380.810239][T25221] vlan2: entered promiscuous mode [ 380.842296][T25221] macvtap0: entered promiscuous mode [ 381.454459][T25271] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9268'. [ 382.086643][ T5971] IPVS: starting estimator thread 0... [ 382.154412][T25326] tipc: Enabling of bearer rejected, failed to enable media [ 382.175938][T25323] IPVS: using max 32 ests per chain, 76800 per kthread [ 382.300279][T25336] tipc: MTU too low for tipc bearer [ 382.436384][T25348] netlink: 504 bytes leftover after parsing attributes in process `syz.0.9303'. [ 382.462518][T25350] netlink: 240 bytes leftover after parsing attributes in process `syz.5.9306'. [ 382.542707][T25353] tipc: Enabling of bearer rejected, media not registered [ 382.614266][T25361] netlink: 'syz.5.9311': attribute type 9 has an invalid length. [ 382.800776][T25372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9317'. [ 383.302637][T25411] netlink: 'syz.3.9336': attribute type 46 has an invalid length. [ 383.343032][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9337'. [ 383.448244][T25423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9342'. [ 384.806964][T25506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9384'. [ 384.866004][T25508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9383'. [ 385.411271][T25534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9396'. [ 385.473797][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9396'. [ 385.496148][T25534] netlink: 'syz.2.9396': attribute type 11 has an invalid length. [ 385.737056][T25555] nbd: must specify a size in bytes for the device [ 385.789009][T25557] netlink: 'syz.0.9406': attribute type 32 has an invalid length. [ 385.813903][T25557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9406'. [ 385.870426][T25557] bond3: option coupled_control: invalid value (12) [ 385.891694][T25557] bond3 (unregistering): Released all slaves [ 386.132039][T25582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9418'. [ 386.268642][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9421'. [ 386.629375][T25608] IPVS: Error connecting to the multicast addr [ 386.728880][T25617] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9435'. [ 387.082240][T25642] ip6gretap0: entered promiscuous mode [ 387.095278][T25642] ip6gretap0: left promiscuous mode [ 387.452238][T25656] nbd: socks must be embedded in a SOCK_ITEM attr [ 387.966915][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 388.365405][T25697] __nla_validate_parse: 1 callbacks suppressed [ 388.365423][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9475'. [ 388.440330][T25697] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9475'. [ 388.556071][T25710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9481'. [ 388.563989][T25711] netlink: 332 bytes leftover after parsing attributes in process `syz.2.9479'. [ 388.599270][T25711] netlink: 'syz.2.9479': attribute type 9 has an invalid length. [ 388.616881][T25711] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9479'. [ 388.636356][T25711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9479'. [ 388.826286][T25726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9487'. [ 388.858257][T25729] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9489'. [ 388.919184][T25726] veth3: entered allmulticast mode [ 389.017565][T25735] tipc: Enabling of bearer rejected, failed to enable media [ 389.088920][T25741] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9496'. [ 389.127753][T25741] netlink: 19 bytes leftover after parsing attributes in process `syz.2.9496'. [ 389.165430][T25741] netlink: 'syz.2.9496': attribute type 6 has an invalid length. [ 389.185556][T25741] netlink: 'syz.2.9496': attribute type 4 has an invalid length. [ 389.216140][T25745] pim6reg99999999: entered allmulticast mode [ 389.510333][T25767] netlink: 'syz.0.9508': attribute type 10 has an invalid length. [ 389.564676][T25771] netlink: 'syz.0.9508': attribute type 10 has an invalid length. [ 389.586538][T25767] team0: Port device dummy0 added [ 389.630484][T25771] team0: Port device dummy0 removed [ 389.643020][T25771] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 392.053688][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 392.385243][T25909] netlink: 'syz.0.9576': attribute type 5 has an invalid length. [ 392.526359][T25916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.536362][T25913] syz.2.9579 (25913) used greatest stack depth: 17688 bytes left [ 392.823014][T25921] netlink: set zone limit has 4 unknown bytes [ 393.168892][T25948] : entered promiscuous mode [ 393.173620][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.399489][T25963] vlan1: entered promiscuous mode [ 393.405150][T25963] gretap0: entered promiscuous mode [ 393.617154][T25978] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 394.102068][T26006] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 394.310533][T26015] netlink: 'syz.7.9626': attribute type 1 has an invalid length. [ 394.359400][T26015] __nla_validate_parse: 6 callbacks suppressed [ 394.359416][T26015] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9626'. [ 394.398568][T26015] netlink: 1 bytes leftover after parsing attributes in process `syz.7.9626'. [ 394.464576][ T31] INFO: task syz.4.4827:15970 blocked for more than 143 seconds. [ 394.479367][ T31] Not tainted syzkaller #0 [ 394.484966][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.536417][ T31] task:syz.4.4827 state:D stack:27264 pid:15970 tgid:15969 ppid:5843 task_flags:0x400040 flags:0x00080002 [ 394.584431][ T31] Call Trace: [ 394.598264][ T31] [ 394.611265][ T31] __schedule+0x149b/0x4fd0 [ 394.624457][ T31] ? __pfx___schedule+0x10/0x10 [ 394.643497][ T31] ? schedule+0x91/0x360 [ 394.656651][ T31] schedule+0x165/0x360 [ 394.666427][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.683519][ T31] __mutex_lock+0x7e6/0x1350 [ 394.699260][ T31] ? __mutex_lock+0x5bb/0x1350 [ 394.713550][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 394.721590][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.733362][ T31] ? __nlmsg_put+0xef/0x1b0 [ 394.742408][ T31] ? genlmsg_put+0x137/0x2e0 [ 394.756215][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 394.767385][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 394.781198][ T31] ? dev_hard_start_xmit+0x793/0x800 [ 394.792172][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 394.803356][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 394.815305][ T31] ? __dev_queue_xmit+0x280/0x3100 [ 394.826217][ T31] genl_rcv_msg+0x60e/0x790 [ 394.835265][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.844165][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 394.860104][ T31] ? __asan_memcpy+0x40/0x70 [ 394.874196][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 394.879675][ T31] ? __skb_clone+0x63/0x7a0 [ 394.885265][ T31] netlink_rcv_skb+0x208/0x470 [ 394.890167][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.895637][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.900998][ T31] ? genl_rcv+0x19/0x40 [ 394.905687][ T31] ? down_read+0x274/0x2e0 [ 394.910179][ T31] ? genl_rcv+0xd/0x40 [ 394.915437][ T31] genl_rcv+0x28/0x40 [ 394.919512][ T31] netlink_unicast+0x82f/0x9e0 [ 394.924858][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 394.930257][ T31] ? netlink_sendmsg+0x642/0xb30 [ 394.936205][ T31] ? skb_put+0x11b/0x210 [ 394.940532][ T31] netlink_sendmsg+0x805/0xb30 [ 394.945744][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.951114][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.956457][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.961815][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.967674][ T31] __sock_sendmsg+0x21c/0x270 [ 394.972435][ T31] ____sys_sendmsg+0x505/0x820 [ 394.978935][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.984442][ T31] ? import_iovec+0x74/0xa0 [ 394.988958][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 394.993737][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.998942][ T31] ? futex_wait+0x285/0x360 [ 395.003555][ T31] ? __fget_files+0x2a/0x420 [ 395.008150][ T31] ? __fget_files+0x3a0/0x420 [ 395.012816][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 395.018243][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.023861][ T31] ? rcu_is_watching+0x15/0xb0 [ 395.028647][ T31] do_syscall_64+0xec/0xf80 [ 395.033157][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.039331][ T31] ? trace_irq_disable+0x37/0x100 [ 395.044431][ T31] ? clear_bhb_loop+0x60/0xb0 [ 395.049117][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.055071][ T31] RIP: 0033:0x7f2ea898f749 [ 395.059485][ T31] RSP: 002b:00007f2ea9914038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.067973][ T31] RAX: ffffffffffffffda RBX: 00007f2ea8be5fa0 RCX: 00007f2ea898f749 [ 395.076088][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 395.084182][ T31] RBP: 00007f2ea8a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 395.092156][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.100193][ T31] R13: 00007f2ea8be6038 R14: 00007f2ea8be5fa0 R15: 00007ffd190849d8 [ 395.108230][ T31] [ 395.111294][ T31] [ 395.111294][ T31] Showing all locks held in the system: [ 395.119362][ T31] 2 locks held by rcu_tasks_trace/29: [ 395.124774][ T31] #0: ffffffff8df427f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 395.137214][ T31] #1: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 395.147226][ T31] 1 lock held by khungtaskd/31: [ 395.152081][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 395.162023][ T31] 2 locks held by getty/5585: [ 395.166764][ T31] #0: ffff88814d6e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 395.176618][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 395.186942][ T31] 5 locks held by kworker/u8:16/7516: [ 395.192316][ T31] 3 locks held by kworker/u9:5/13631: [ 395.197820][ T31] #0: ffff8880476ab148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 395.208703][ T31] #1: ffffc900034d7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 395.221278][ T31] #2: ffff888059f7cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 395.231190][ T31] 2 locks held by syz.1.4431/15116: [ 395.236414][ T31] #0: ffffffff8f379eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.244615][ T31] #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 395.255741][ T31] 2 locks held by syz.4.4827/15970: [ 395.260945][ T31] #0: ffffffff8f379eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.269188][ T31] #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 395.279359][ T31] 2 locks held by syz.6.6397/19273: [ 395.284610][ T31] #0: ffffffff8f379eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.292804][ T31] #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc2/0x770 [ 395.302961][ T31] [ 395.307437][ T31] ============================================= [ 395.307437][ T31] [ 395.318352][ T31] NMI backtrace for cpu 0 [ 395.318373][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 395.318392][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.318403][ T31] Call Trace: [ 395.318410][ T31] [ 395.318418][ T31] dump_stack_lvl+0xe8/0x150 [ 395.318442][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 395.318467][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.318494][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 395.318527][ T31] sys_info+0x135/0x170 [ 395.318548][ T31] watchdog+0xf95/0xfe0 [ 395.318574][ T31] ? watchdog+0x20a/0xfe0 [ 395.318602][ T31] kthread+0x711/0x8a0 [ 395.318626][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.318646][ T31] ? __pfx_kthread+0x10/0x10 [ 395.318669][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.318685][ T31] ? __pfx_kthread+0x10/0x10 [ 395.318705][ T31] ret_from_fork+0x510/0xa50 [ 395.318724][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.318739][ T31] ? __switch_to+0xc9e/0x1480 [ 395.318760][ T31] ? __pfx_kthread+0x10/0x10 [ 395.318777][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.318805][ T31] [ 395.318814][ T31] Sending NMI from CPU 0 to CPUs 1: [ 395.441280][ C1] NMI backtrace for cpu 1 [ 395.441295][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 395.441312][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.441321][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 395.441343][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 11 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 395.441356][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c6 [ 395.441370][ C1] RAX: 0000000000054f61 RBX: ffffffff8197149e RCX: 0000000080000001 [ 395.441382][ C1] RDX: 0000000000000001 RSI: ffffffff8d793c19 RDI: ffffffff8bc086e0 [ 395.441393][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 395.441404][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822d70 [ 395.441415][ C1] R13: 1ffff11003950b70 R14: 0000000000000001 R15: 0000000000000001 [ 395.441425][ C1] FS: 0000000000000000(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000 [ 395.441437][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.441448][ C1] CR2: 00007fda4e3b9358 CR3: 000000007e264000 CR4: 00000000003526f0 [ 395.441462][ C1] Call Trace: [ 395.441468][ C1] [ 395.441473][ C1] default_idle+0x13/0x20 [ 395.441491][ C1] default_idle_call+0x73/0xb0 [ 395.441510][ C1] do_idle+0x1be/0x4d0 [ 395.441525][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 395.441543][ C1] ? __pfx_do_idle+0x10/0x10 [ 395.441563][ C1] cpu_startup_entry+0x44/0x60 [ 395.441579][ C1] start_secondary+0x101/0x110 [ 395.441598][ C1] common_startup_64+0x13e/0x147 [ 395.441624][ C1] [ 395.612040][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 395.618873][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 395.627960][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.637996][ T31] Call Trace: [ 395.641260][ T31] [ 395.644180][ T31] vpanic+0x1e0/0x670 [ 395.648174][ T31] panic+0xb9/0xc0 [ 395.651880][ T31] ? __pfx_panic+0x10/0x10 [ 395.656330][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 395.661693][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 395.667838][ T31] watchdog+0xfdf/0xfe0 [ 395.671987][ T31] ? watchdog+0x20a/0xfe0 [ 395.676308][ T31] kthread+0x711/0x8a0 [ 395.680375][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.685039][ T31] ? __pfx_kthread+0x10/0x10 [ 395.689623][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.694806][ T31] ? __pfx_kthread+0x10/0x10 [ 395.699386][ T31] ret_from_fork+0x510/0xa50 [ 395.703963][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.709055][ T31] ? __switch_to+0xc9e/0x1480 [ 395.713724][ T31] ? __pfx_kthread+0x10/0x10 [ 395.718302][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.723069][ T31] [ 395.726421][ T31] Kernel Offset: disabled [ 395.730728][ T31] Rebooting in 86400 seconds..