last executing test programs: 6m27.607311826s ago: executing program 1 (id=9478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000200000008500000082000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m26.604798149s ago: executing program 0 (id=9486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) 6m26.308448719s ago: executing program 2 (id=9488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r1, 0x711}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) 6m26.307863132s ago: executing program 1 (id=9489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 6m26.297500283s ago: executing program 0 (id=9491): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x448, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f00000000c0)=""/193}, 0x20) 6m26.057822034s ago: executing program 1 (id=9493): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) 6m26.055168865s ago: executing program 4 (id=9494): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 6m26.041007175s ago: executing program 2 (id=9495): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) 6m25.973138163s ago: executing program 0 (id=9496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x840) 6m25.777735472s ago: executing program 4 (id=9498): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x0) 6m25.742063202s ago: executing program 1 (id=9499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r1}, 0xc) 6m25.717800295s ago: executing program 2 (id=9500): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6m25.693358564s ago: executing program 0 (id=9501): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 6m25.59993533s ago: executing program 3 (id=9502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) close(0x4) 6m25.463683859s ago: executing program 1 (id=9503): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x11000, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 6m25.463191934s ago: executing program 4 (id=9504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) 6m25.377172377s ago: executing program 2 (id=9505): pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) 6m25.33687141s ago: executing program 0 (id=9506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 6m25.276245576s ago: executing program 3 (id=9507): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6m23.967106342s ago: executing program 2 (id=9508): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 6m22.800279634s ago: executing program 1 (id=9509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x4008880) 6m21.917678056s ago: executing program 4 (id=9510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c000480180003000100000005000300000000000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6m20.629478227s ago: executing program 0 (id=9511): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 6m18.459855234s ago: executing program 3 (id=9512): socket(0x28, 0x5, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) 6m17.667840114s ago: executing program 2 (id=9513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0x10001, 0x1b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 6m5.214297335s ago: executing program 3 (id=9514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 6m4.892634224s ago: executing program 4 (id=9515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 6m4.289987957s ago: executing program 32 (id=9511): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 6m1.065746637s ago: executing program 33 (id=9509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x4008880) 5m55.946905404s ago: executing program 34 (id=9513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0x10001, 0x1b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 5m54.618894636s ago: executing program 4 (id=9519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 5m50.818528749s ago: executing program 3 (id=9520): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x20060400) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x2, 'drbg_nopr_sha512\x00'}, 0x58) 5m37.334423856s ago: executing program 35 (id=9519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 5m35.381541135s ago: executing program 3 (id=9522): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m19.89212525s ago: executing program 36 (id=9522): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m12.600310741s ago: executing program 6 (id=9517): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 7 (id=9518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xfffffdca, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xf85a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xa3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xac}}, 0x0) kernel console output (not intermixed with test programs): arsing attributes in process `syz.0.4029'. [ 222.958239][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'. [ 222.981712][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'. [ 223.850597][T14462] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4057'. [ 223.881060][T14462] vlan2: entered allmulticast mode [ 224.381414][T14496] netlink: zone id is out of range [ 224.401147][T14496] netlink: set zone limit has 4 unknown bytes [ 225.218393][T14547] delete_channel: no stack [ 225.340674][T14554] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 225.366304][T14554] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 225.463682][T14560] netlink: 'syz.3.4102': attribute type 1 has an invalid length. [ 226.265670][T14613] __nla_validate_parse: 7 callbacks suppressed [ 226.265689][T14613] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4127'. [ 226.343159][T14617] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 226.392098][T14621] netlink: 'syz.0.4132': attribute type 1 has an invalid length. [ 226.426433][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4132'. [ 226.514943][T14627] netlink: 'syz.4.4135': attribute type 1 has an invalid length. [ 226.573139][T14633] SET target dimension over the limit! [ 226.732942][T14643] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4143'. [ 226.823631][T14647] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4145'. [ 226.967063][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4151'. [ 226.985177][T14661] netlink: 'syz.0.4152': attribute type 12 has an invalid length. [ 227.172105][T14671] netlink: 'syz.3.4158': attribute type 6 has an invalid length. [ 227.184618][T14671] netlink: 'syz.3.4158': attribute type 7 has an invalid length. [ 227.193308][T14671] netlink: 'syz.3.4158': attribute type 8 has an invalid length. [ 227.708582][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 227.903719][T14720] IPv6: sit2: Disabled Multicast RS [ 228.379552][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'. [ 228.432713][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'. [ 228.483312][T14756] xt_time: unknown flags 0x4 [ 228.622684][T14766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4204'. [ 228.686976][T14768] openvswitch: netlink: IP tunnel dst address not specified [ 228.725058][T14772] netlink: 'syz.1.4207': attribute type 21 has an invalid length. [ 228.764792][T14776] netlink: 'syz.3.4208': attribute type 3 has an invalid length. [ 228.769754][T14772] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4207'. [ 228.788799][T14776] netlink: 'syz.3.4208': attribute type 1 has an invalid length. [ 228.855740][T14781] netlink: 'syz.0.4211': attribute type 3 has an invalid length. [ 229.311137][T14806] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 230.738347][T14886] 0: renamed from hsr0 (while UP) [ 230.768415][T14886] 0: entered allmulticast mode [ 230.788230][T14886] hsr_slave_0: entered allmulticast mode [ 230.809006][T14886] hsr_slave_1: entered allmulticast mode [ 230.832253][T14886] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 231.618123][T14936] netlink: zone id is out of range [ 231.642575][T14936] netlink: zone id is out of range [ 231.647755][T14936] netlink: zone id is out of range [ 231.670375][T14936] netlink: zone id is out of range [ 231.698348][T14946] SET target dimension over the limit! [ 232.470894][T14997] SET target dimension over the limit! [ 233.045660][T15036] netlink: 'syz.4.4308': attribute type 2 has an invalid length. [ 233.298475][T15047] __nla_validate_parse: 8 callbacks suppressed [ 233.298492][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4312'. [ 233.333547][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4312'. [ 233.586108][T15065] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4318'. [ 233.634396][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4318'. [ 233.652358][T15065] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4318'. [ 233.667289][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4318'. [ 233.677466][T15065] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4318'. [ 234.129027][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4330'. [ 234.172532][T15103] netlink: 'syz.4.4331': attribute type 1 has an invalid length. [ 234.176193][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4330'. [ 234.180578][T15101] netlink: 'syz.1.4332': attribute type 3 has an invalid length. [ 234.200747][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4333'. [ 234.429132][T15116] ip6gre1: entered allmulticast mode [ 234.914336][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 234.955663][T15141] team0: Port device dummy0 removed [ 235.007123][T15141] bridge_slave_0: left allmulticast mode [ 235.023787][T15141] bridge_slave_0: left promiscuous mode [ 235.035206][T15141] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.078081][T15141] bond0: (slave 2@): Releasing backup interface [ 235.122924][T15141] bond0: (slave bond_slave_1): Releasing backup interface [ 235.184904][T15141] team0: Port device team_slave_0 removed [ 235.237304][T15141] team0: Port device team_slave_1 removed [ 235.268290][T15141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.293461][T15141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.322292][T15141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.346513][T15141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.661504][T15251] netlink: 'syz.4.4391': attribute type 8 has an invalid length. [ 236.899409][T15265] xt_CONNSECMARK: invalid mode: 0 [ 237.045823][T15276] netlink: 'syz.1.4402': attribute type 13 has an invalid length. [ 237.061544][T15276] gretap0: refused to change device tx_queue_len [ 237.101794][T15276] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 237.771284][T15320] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.150054][T15348] netlink: 'syz.0.4438': attribute type 1 has an invalid length. [ 238.172628][T15348] netlink: 'syz.0.4438': attribute type 11 has an invalid length. [ 238.257725][T15354] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 238.640033][T15378] netlink: 'syz.2.4454': attribute type 2 has an invalid length. [ 238.672071][T15381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.776559][ T29] audit: type=1107 audit(1741038396.675:2): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 239.015027][T15406] __nla_validate_parse: 6 callbacks suppressed [ 239.015045][T15406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4469'. [ 239.040587][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4469'. [ 239.604703][T15444] netlink: 'syz.3.4486': attribute type 3 has an invalid length. [ 239.758840][T15455] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 239.951596][T15466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.218447][T15482] openvswitch: netlink: Missing key (keys=40, expected=100) [ 240.414878][T15497] Unknown options in mask 1f4 [ 240.612022][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4519'. [ 240.663344][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4520'. [ 240.663363][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4519'. [ 240.700933][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4522'. [ 240.719357][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4522'. [ 240.742754][T15514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4522'. [ 241.072786][T15537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4531'. [ 241.222565][T15544] x_tables: unsorted entry at hook 3 [ 241.323254][T15552] netlink: 'syz.1.4540': attribute type 9 has an invalid length. [ 241.533781][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4545'. [ 241.578674][T15568] netlink: 'syz.2.4550': attribute type 10 has an invalid length. [ 241.697495][T15568] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 242.072687][T15599] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 242.481195][T15626] xt_policy: output policy not valid in PREROUTING and INPUT [ 243.105274][T15669] netlink: 'syz.0.4598': attribute type 32 has an invalid length. [ 243.128221][T15669] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 243.349810][T15684] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.359101][T15684] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.367893][T15684] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.376702][T15684] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.400223][T15686] netlink: 'syz.2.4605': attribute type 1 has an invalid length. [ 243.452675][T15684] vxlan0: entered promiscuous mode [ 243.457822][T15684] vxlan0: entered allmulticast mode [ 243.475799][T15684] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.484804][T15684] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.493772][T15684] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.502729][T15684] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.070481][T15727] netlink: 'syz.2.4625': attribute type 9 has an invalid length. [ 244.092557][T15727] netlink: 'syz.2.4625': attribute type 6 has an invalid length. [ 244.187525][T15736] bridge0: entered allmulticast mode [ 245.896211][T15828] delete_channel: no stack [ 246.504805][T15870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.541842][T15876] netlink: 'syz.2.4681': attribute type 1 has an invalid length. [ 246.549800][T15876] __nla_validate_parse: 5 callbacks suppressed [ 246.549813][T15876] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4681'. [ 246.960582][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4689'. [ 247.134427][T15916] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4695'. [ 247.226816][T15918] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 247.800676][T15959] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 247.928481][T15967] SET target dimension over the limit! [ 248.012692][T15972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4716'. [ 248.051329][T15976] netlink: 'syz.0.4718': attribute type 9 has an invalid length. [ 248.418685][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4727'. [ 248.467547][T16004] netlink: 'syz.0.4728': attribute type 29 has an invalid length. [ 248.525276][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4728'. [ 248.729484][T16023] openvswitch: netlink: Message has 2 unknown bytes. [ 248.748455][T16023] openvswitch: netlink: Actions may not be safe on all matching packets [ 248.822837][T16028] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 249.023930][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4742'. [ 249.531342][T16071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4755'. [ 250.522557][T16121] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4771'. [ 250.542662][T16121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.851798][T16137] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 250.880238][T16139] delete_channel: no stack [ 251.266106][T16159] netlink: 'syz.3.4785': attribute type 2 has an invalid length. [ 251.279868][T16159] netlink: 'syz.3.4785': attribute type 8 has an invalid length. [ 251.289361][T16159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4785'. [ 251.406468][T16163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.664630][T16214] netlink: 'syz.3.4811': attribute type 1 has an invalid length. [ 252.672405][T16214] netlink: 'syz.3.4811': attribute type 3 has an invalid length. [ 252.687045][T16214] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4811'. [ 252.702083][T16214] NCSI netlink: No device for ifindex 246 [ 252.964642][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4818'. [ 253.096459][T16231] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 253.205404][T16235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4821'. [ 253.270367][T16237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4823'. [ 254.657889][T16287] netlink: 'syz.3.4848': attribute type 10 has an invalid length. [ 254.670325][T16287] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.4848'. [ 254.681824][T16287] openvswitch: netlink: Flow key attr not present in new flow. [ 254.765412][T16289] netlink: 'syz.3.4849': attribute type 1 has an invalid length. [ 255.796897][T16169] syz.4.4790: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 255.832509][T16169] CPU: 1 UID: 0 PID: 16169 Comm: syz.4.4790 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 255.832543][T16169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.832558][T16169] Call Trace: [ 255.832568][T16169] [ 255.832575][T16169] dump_stack_lvl+0x241/0x360 [ 255.832611][T16169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.832631][T16169] ? __pfx__printk+0x10/0x10 [ 255.832652][T16169] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 255.832673][T16169] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 255.832697][T16169] warn_alloc+0x278/0x410 [ 255.832720][T16169] ? __pfx_warn_alloc+0x10/0x10 [ 255.832743][T16169] ? hash_netnet_create+0x801/0x16a0 [ 255.832768][T16169] ? __get_vm_area_node+0x1c8/0x2d0 [ 255.832789][T16169] ? __get_vm_area_node+0x25c/0x2d0 [ 255.832816][T16169] __vmalloc_node_range_noprof+0x62f/0x1380 [ 255.832865][T16169] ? rcu_is_watching+0x15/0xb0 [ 255.832883][T16169] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 255.832908][T16169] ? rcu_is_watching+0x15/0xb0 [ 255.832925][T16169] ? trace_kmalloc+0x1f/0xd0 [ 255.832943][T16169] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 255.832963][T16169] ? __kvmalloc_node_noprof+0x72/0x190 [ 255.832988][T16169] __kvmalloc_node_noprof+0x142/0x190 [ 255.833011][T16169] ? hash_netnet_create+0x801/0x16a0 [ 255.833035][T16169] hash_netnet_create+0x801/0x16a0 [ 255.833059][T16169] ? __pfx_lock_acquire+0x10/0x10 [ 255.833080][T16169] ? ip_set_create+0x48a/0x1960 [ 255.833102][T16169] ? __pfx_lock_release+0x10/0x10 [ 255.833127][T16169] ? __pfx_hash_netnet_create+0x10/0x10 [ 255.833151][T16169] ? __nla_parse+0x40/0x60 [ 255.833167][T16169] ? __pfx_hash_netnet_create+0x10/0x10 [ 255.833191][T16169] ip_set_create+0xa78/0x1960 [ 255.833216][T16169] ? ip_set_create+0x48a/0x1960 [ 255.833241][T16169] ? __pfx_ip_set_create+0x10/0x10 [ 255.833290][T16169] ? nfnetlink_rcv_msg+0x225/0x1180 [ 255.833313][T16169] nfnetlink_rcv_msg+0xbec/0x1180 [ 255.833334][T16169] ? nfnetlink_rcv_msg+0x225/0x1180 [ 255.833375][T16169] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 255.833439][T16169] netlink_rcv_skb+0x206/0x480 [ 255.833459][T16169] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 255.833482][T16169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.833514][T16169] ? apparmor_capable+0x13b/0x1b0 [ 255.833545][T16169] ? bpf_lsm_capable+0x9/0x10 [ 255.833568][T16169] ? security_capable+0x7e/0x2d0 [ 255.833597][T16169] nfnetlink_rcv+0x297/0x2ab0 [ 255.833619][T16169] ? __pfx_validate_chain+0x10/0x10 [ 255.833649][T16169] ? mark_lock+0x9a/0x360 [ 255.833664][T16169] ? __pfx_validate_chain+0x10/0x10 [ 255.833683][T16169] ? __lock_acquire+0x1397/0x2100 [ 255.833711][T16169] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 255.833737][T16169] ? mark_lock+0x9a/0x360 [ 255.833757][T16169] ? __lock_acquire+0x1397/0x2100 [ 255.833808][T16169] ? __pfx_lock_release+0x10/0x10 [ 255.833831][T16169] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.833850][T16169] ? __pfx_lock_release+0x10/0x10 [ 255.833886][T16169] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.833907][T16169] netlink_unicast+0x7f6/0x990 [ 255.833932][T16169] ? __pfx_netlink_unicast+0x10/0x10 [ 255.833947][T16169] ? __virt_addr_valid+0x45f/0x530 [ 255.833963][T16169] ? __phys_addr_symbol+0x2f/0x70 [ 255.833986][T16169] ? __check_object_size+0x47a/0x730 [ 255.834011][T16169] netlink_sendmsg+0x8de/0xcb0 [ 255.834042][T16169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.834064][T16169] ? aa_sock_msg_perm+0x91/0x160 [ 255.834093][T16169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.834110][T16169] __sock_sendmsg+0x221/0x270 [ 255.834131][T16169] ____sys_sendmsg+0x53a/0x860 [ 255.834164][T16169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.834187][T16169] ? __fget_files+0x2a/0x410 [ 255.834213][T16169] ? __fget_files+0x2a/0x410 [ 255.834243][T16169] __sys_sendmsg+0x269/0x350 [ 255.834272][T16169] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.834338][T16169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.834363][T16169] ? do_syscall_64+0x100/0x230 [ 255.834389][T16169] ? do_syscall_64+0xb6/0x230 [ 255.834415][T16169] do_syscall_64+0xf3/0x230 [ 255.834437][T16169] ? clear_bhb_loop+0x35/0x90 [ 255.834462][T16169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.834483][T16169] RIP: 0033:0x7f4cb638d169 [ 255.834507][T16169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.834521][T16169] RSP: 002b:00007f4cb72c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.834549][T16169] RAX: ffffffffffffffda RBX: 00007f4cb65a5fa0 RCX: 00007f4cb638d169 [ 255.834561][T16169] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 255.834572][T16169] RBP: 00007f4cb640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 255.834583][T16169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.834593][T16169] R13: 0000000000000000 R14: 00007f4cb65a5fa0 R15: 00007ffe31539778 [ 255.834621][T16169] [ 255.834628][T16169] Mem-Info: [ 255.893105][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.072485][T16169] active_anon:4945 inactive_anon:0 isolated_anon:0 [ 256.072485][T16169] active_file:1162 inactive_file:38373 isolated_file:0 [ 256.072485][T16169] unevictable:768 dirty:280 writeback:0 [ 256.072485][T16169] slab_reclaimable:10828 slab_unreclaimable:102966 [ 256.072485][T16169] mapped:28442 shmem:1422 pagetables:867 [ 256.072485][T16169] sec_pagetables:0 bounce:0 [ 256.072485][T16169] kernel_misc_reclaimable:0 [ 256.072485][T16169] free:1325509 free_pcp:511 free_cma:0 [ 256.075711][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.100651][T16169] Node 0 active_anon:19560kB inactive_anon:0kB active_file:4648kB inactive_file:153420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113708kB dirty:1116kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:3388kB sec_pagetables:0kB all_unreclaimable? no [ 256.472600][T16169] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 256.546991][T16169] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.734214][T16169] lowmem_reserve[]: 0 2490 2490 0 0 [ 256.746244][T16169] Node 0 DMA32 free:1376560kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19624kB inactive_anon:0kB active_file:4648kB inactive_file:153112kB unevictable:1536kB writepending:1116kB present:3129332kB managed:2549820kB mlocked:0kB bounce:0kB free_pcp:2472kB local_pcp:1404kB free_cma:0kB [ 256.815514][T16169] lowmem_reserve[]: 0 0 0 0 0 [ 256.824751][T16169] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 256.881367][T16169] lowmem_reserve[]: 0 0 0 0 0 [ 256.897367][T16169] Node 1 Normal free:3910504kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.955401][T16169] lowmem_reserve[]: 0 0 0 0 0 [ 256.964755][T16169] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 256.979814][T16169] Node 0 DMA32: 3*4kB (UME) 52*8kB (UME) 1029*16kB (UME) 536*32kB (UME) 1270*64kB (UME) 833*128kB (UME) 462*256kB (UME) 234*512kB (UM) 107*1024kB (UM) 6*2048kB (UM) 194*4096kB (UM) = 1376508kB [ 257.013105][T16169] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 257.029533][T16169] Node 1 Normal: 232*4kB (UME) 57*8kB (UME) 48*16kB (UME) 188*32kB (UME) 98*64kB (UME) 34*128kB (UME) 12*256kB (UME) 13*512kB (UME) 7*1024kB (UME) 2*2048kB (U) 945*4096kB (M) = 3910504kB [ 257.049740][T16169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.060240][T16169] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.071191][T16169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.082919][T16169] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.093025][T16169] 40960 total pagecache pages [ 257.098735][T16169] 0 pages in swap cache [ 257.104653][T16169] Free swap = 124996kB [ 257.119251][T16169] Total swap = 124996kB [ 257.125858][T16169] 2097051 pages RAM [ 257.131941][T16169] 0 pages HighMem/MovableOnly [ 257.139430][T16169] 427874 pages reserved [ 257.146140][T16169] 0 pages cma reserved [ 257.657747][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4875'. [ 258.312995][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4896'. [ 258.325199][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4895'. [ 258.344303][T16390] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4899'. [ 258.348507][T16387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4895'. [ 258.839697][T16419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4914'. [ 258.849593][T16421] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4913'. [ 258.872651][T16419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4914'. [ 258.937932][T16423] xt_l2tp: invalid flags combination: 4 [ 259.225983][T16436] netlink: 'syz.4.4921': attribute type 13 has an invalid length. [ 259.238075][T16436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4921'. [ 259.252117][T16436] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 259.264152][T16439] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 259.769965][T16462] netlink: 'syz.1.4934': attribute type 2 has an invalid length. [ 259.792371][T16462] Tq: entered promiscuous mode [ 259.802260][T16465] xt_ecn: cannot match TCP bits for non-tcp packets [ 260.425755][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4956'. [ 260.472675][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4956'. [ 260.649818][T16518] : renamed from vlan1 [ 261.003283][T16542] netlink: 'syz.1.4974': attribute type 1 has an invalid length. [ 261.402268][T16568] netlink: 'syz.0.4987': attribute type 3 has an invalid length. [ 261.577138][T16578] netlink: 'syz.4.4993': attribute type 10 has an invalid length. [ 261.721859][T16586] mac80211_hwsim hwsim8 : renamed from wlan1 (while UP) [ 262.188438][T16612] netlink: 'syz.4.5008': attribute type 12 has an invalid length. [ 262.972082][T16669] netlink: 'syz.4.5029': attribute type 1 has an invalid length. [ 263.598912][T16705] __nla_validate_parse: 13 callbacks suppressed [ 263.598931][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5046'. [ 263.708930][T16709] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5048'. [ 263.904256][T16719] netlink: 'syz.3.5053': attribute type 1 has an invalid length. [ 264.030197][T16723] netlink: 'syz.0.5055': attribute type 2 has an invalid length. [ 264.056331][T16723] netlink: 'syz.0.5055': attribute type 1 has an invalid length. [ 264.098078][T16726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.569076][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5066'. [ 264.801662][T16759] IPv6: sit1: Disabled Multicast RS [ 264.992094][T16774] SET target dimension over the limit! [ 265.235173][T16783] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.497237][T16796] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.5091'. [ 265.523609][T16798] netlink: 'syz.3.5092': attribute type 9 has an invalid length. [ 265.539339][T16796] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.5091'. [ 265.558820][T16798] netlink: 'syz.3.5092': attribute type 7 has an invalid length. [ 265.561334][T16800] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5093'. [ 265.592634][T16800] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5093'. [ 265.597953][T16798] netlink: 'syz.3.5092': attribute type 8 has an invalid length. [ 265.630996][T16804] x_tables: duplicate entry at hook 2 [ 265.794934][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5098'. [ 266.358363][T16850] netlink: 'syz.4.5118': attribute type 1 has an invalid length. [ 266.389468][T16850] netlink: 'syz.4.5118': attribute type 1 has an invalid length. [ 266.476001][T16858] lo: left allmulticast mode [ 266.480860][T16858] gre0: left promiscuous mode [ 266.496489][T16858] sit0: left promiscuous mode [ 266.501653][T16858] bond0: left promiscuous mode [ 266.515029][T16858] bond_slave_0: left promiscuous mode [ 266.520562][T16858] bond_slave_1: left promiscuous mode [ 266.530686][T16858] bond0: left allmulticast mode [ 266.554164][T16858] bond_slave_0: left allmulticast mode [ 266.575873][T16858] bond_slave_1: left allmulticast mode [ 266.621244][T16858] vlan0: left promiscuous mode [ 266.641251][T16858] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 266.659616][T16858] ip6gre1: left promiscuous mode [ 266.676834][T16858] bond2: left promiscuous mode [ 266.687906][T16858] bond2: left allmulticast mode [ 266.839564][T16879] netlink: 'syz.3.5130': attribute type 2 has an invalid length. [ 266.854455][T16881] xt_recent: Unsupported userspace flags (00000042) [ 267.189209][T16900] sctp: [Deprecated]: syz.1.5143 (pid 16900) Use of int in max_burst socket option. [ 267.189209][T16900] Use struct sctp_assoc_value instead [ 267.219977][T16904] SET target dimension over the limit! [ 267.350622][T16911] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 267.443836][T16916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5151'. [ 267.736658][T16932] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5159'. [ 267.772070][T16932] netlink: 'syz.2.5159': attribute type 5 has an invalid length. [ 267.801898][T16937] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 268.111989][T16957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.642744][T16989] __nla_validate_parse: 3 callbacks suppressed [ 268.642763][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5180'. [ 268.687486][T16994] netlink: 'syz.4.5181': attribute type 3 has an invalid length. [ 268.715400][T16994] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5181'. [ 268.753048][T16998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5184'. [ 268.801237][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5184'. [ 269.036504][T17015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5191'. [ 269.161968][T17023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.442704][T17040] veth1_vlan: left allmulticast mode [ 269.499440][T17040] bond0: (slave macvlan0): Releasing backup interface [ 270.553499][T17086] netlink: 'syz.2.5218': attribute type 1 has an invalid length. [ 270.784853][T17093] netlink: 'syz.1.5219': attribute type 11 has an invalid length. [ 271.695975][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5234'. [ 271.732574][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5234'. [ 272.338174][T17180] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 272.350265][T17181] netlink: 'syz.4.5251': attribute type 3 has an invalid length. [ 272.392848][T17184] netlink: 412 bytes leftover after parsing attributes in process `syz.2.5253'. [ 272.791991][T17210] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5264'. [ 272.869628][T17215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.000351][T17222] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5271'. [ 273.316900][T17239] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 273.767443][T17270] netlink: 'syz.3.5295': attribute type 2 has an invalid length. [ 273.782624][T17270] __nla_validate_parse: 1 callbacks suppressed [ 273.782640][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5295'. [ 274.462710][T17307] openvswitch: netlink: IP tunnel dst address not specified [ 274.830832][T17334] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5320'. [ 274.879497][T17334] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5320'. [ 274.930995][T17334] netlink: 'syz.2.5320': attribute type 6 has an invalid length. [ 274.959849][T17334] netlink: 'syz.2.5320': attribute type 5 has an invalid length. [ 274.995892][T17334] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5320'. [ 276.111950][T17401] netlink: 'syz.4.5344': attribute type 7 has an invalid length. [ 276.353555][T17414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5349'. [ 276.404719][T17416] xt_TCPMSS: Only works on TCP SYN packets [ 276.454712][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5351'. [ 276.755463][T17436] delete_channel: no stack [ 276.898554][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5361'. [ 277.284095][T17468] wg1: entered promiscuous mode [ 277.322612][T17468] wg1: entered allmulticast mode [ 277.979088][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5380'. [ 278.000442][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5380'. [ 278.017179][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5380'. [ 278.629218][T17520] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 279.264534][T17546] __nla_validate_parse: 3 callbacks suppressed [ 279.264551][T17546] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5403'. [ 279.281984][T17546] 0: renamed from hsr_slave_1 (while UP) [ 279.290461][T17546] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 279.683528][T17565] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 279.952720][T17584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5421'. [ 280.085052][T17592] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 280.374807][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5432'. [ 280.724933][T17629] net veth1_virt_wifi : renamed from virt_wifi0 [ 281.782912][T17694] netlink: 'syz.4.5475': attribute type 11 has an invalid length. [ 281.960519][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5481'. [ 282.001407][T17708] netlink: 'syz.4.5481': attribute type 1 has an invalid length. [ 282.112710][ T5842] Bluetooth: hci0: command tx timeout [ 282.163073][T17718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.421402][T17734] warn_alloc: 1 callbacks suppressed [ 282.421420][T17734] syz.2.5494: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 282.430402][T17738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5497'. [ 282.462679][T17734] ,cpuset=/,mems_allowed=0-1 [ 282.470055][T17734] CPU: 1 UID: 0 PID: 17734 Comm: syz.2.5494 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 282.470079][T17734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.470089][T17734] Call Trace: [ 282.470096][T17734] [ 282.470103][T17734] dump_stack_lvl+0x241/0x360 [ 282.470131][T17734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.470150][T17734] ? __pfx__printk+0x10/0x10 [ 282.470171][T17734] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 282.470192][T17734] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 282.470214][T17734] warn_alloc+0x278/0x410 [ 282.470234][T17734] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 282.470260][T17734] ? __pfx_warn_alloc+0x10/0x10 [ 282.470277][T17734] ? kasan_save_track+0x3f/0x80 [ 282.470293][T17734] ? __kasan_kmalloc+0x98/0xb0 [ 282.470311][T17734] ? xsk_setsockopt+0x4aa/0x810 [ 282.470328][T17734] ? do_sock_setsockopt+0x3af/0x720 [ 282.470349][T17734] ? __x64_sys_setsockopt+0x1ee/0x280 [ 282.470371][T17734] ? do_syscall_64+0xf3/0x230 [ 282.470392][T17734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.470422][T17734] __vmalloc_node_range_noprof+0x126/0x1380 [ 282.470474][T17734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.470502][T17734] ? __kasan_kmalloc+0x98/0xb0 [ 282.470525][T17734] vmalloc_user_noprof+0x74/0x80 [ 282.470542][T17734] ? xskq_create+0xb6/0x170 [ 282.470559][T17734] xskq_create+0xb6/0x170 [ 282.470580][T17734] xsk_init_queue+0xa1/0x100 [ 282.470601][T17734] xsk_setsockopt+0x4aa/0x810 [ 282.470621][T17734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.470640][T17734] ? __pfx_aa_sk_perm+0x10/0x10 [ 282.470665][T17734] ? aa_sock_opt_perm+0x79/0x120 [ 282.470694][T17734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.470713][T17734] do_sock_setsockopt+0x3af/0x720 [ 282.470742][T17734] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 282.470771][T17734] ? __fget_files+0x395/0x410 [ 282.470792][T17734] ? __fget_files+0x2a/0x410 [ 282.470831][T17734] __x64_sys_setsockopt+0x1ee/0x280 [ 282.470862][T17734] do_syscall_64+0xf3/0x230 [ 282.470885][T17734] ? clear_bhb_loop+0x35/0x90 [ 282.470909][T17734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.470930][T17734] RIP: 0033:0x7f141418d169 [ 282.470945][T17734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.470958][T17734] RSP: 002b:00007f14150b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.470976][T17734] RAX: ffffffffffffffda RBX: 00007f14143a5fa0 RCX: 00007f141418d169 [ 282.470988][T17734] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 282.470999][T17734] RBP: 00007f141420e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 282.471009][T17734] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.471020][T17734] R13: 0000000000000000 R14: 00007f14143a5fa0 R15: 00007ffdabbda4f8 [ 282.471047][T17734] [ 282.471053][T17734] Mem-Info: [ 282.777570][T17734] active_anon:4998 inactive_anon:0 isolated_anon:0 [ 282.777570][T17734] active_file:1162 inactive_file:38383 isolated_file:0 [ 282.777570][T17734] unevictable:768 dirty:256 writeback:0 [ 282.777570][T17734] slab_reclaimable:10883 slab_unreclaimable:104041 [ 282.777570][T17734] mapped:28445 shmem:1435 pagetables:950 [ 282.777570][T17734] sec_pagetables:0 bounce:0 [ 282.777570][T17734] kernel_misc_reclaimable:0 [ 282.777570][T17734] free:1324105 free_pcp:343 free_cma:0 [ 282.872052][T17750] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5503'. [ 282.879750][T17734] Node 0 active_anon:19892kB inactive_anon:0kB active_file:4648kB inactive_file:153460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113680kB dirty:1020kB writeback:0kB shmem:4204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11396kB pagetables:3300kB sec_pagetables:0kB all_unreclaimable? no [ 282.931199][T17755] netlink: 'syz.3.5506': attribute type 5 has an invalid length. [ 282.945364][T17754] netlink: 'syz.0.5504': attribute type 11 has an invalid length. [ 282.955723][T17734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 282.970408][T17755] : entered promiscuous mode [ 282.991410][T17754] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5504'. [ 283.037834][T17734] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.101778][T17734] lowmem_reserve[]: 0 2490 2490 0 0 [ 283.127353][T17734] Node 0 DMA32 free:1368248kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:20020kB inactive_anon:0kB active_file:4648kB inactive_file:153152kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2549820kB mlocked:0kB bounce:0kB free_pcp:2728kB local_pcp:1004kB free_cma:0kB [ 283.204174][T17734] lowmem_reserve[]: 0 0 0 0 0 [ 283.219292][T17734] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 283.274272][T17734] lowmem_reserve[]: 0 0 0 0 0 [ 283.279050][T17734] Node 1 Normal free:3910504kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.339095][T17734] lowmem_reserve[]: 0 0 0 0 0 [ 283.365316][T17734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.399432][T17734] Node 0 DMA32: 4*4kB (UME) 46*8kB (UME) 917*16kB (UME) 330*32kB (UM) 1307*64kB (UM) 851*128kB (UME) 476*256kB (UM) 241*512kB (UM) 115*1024kB (UM) 6*2048kB (UM) 189*4096kB (UM) = 1367632kB [ 283.419209][T17775] netlink: 'syz.1.5513': attribute type 4 has an invalid length. [ 283.451268][T17734] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 283.495133][T17734] Node 1 Normal: 232*4kB (UME) 57*8kB (UME) 48*16kB (UME) 188*32kB (UME) 98*64kB (UME) 34*128kB (UME) 12*256kB (UME) 13*512kB (UME) 7*1024kB (UME) 2*2048kB (U) 945*4096kB (M) = 3910504kB [ 283.555020][T17734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.601902][T17734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.644515][T17734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.692551][T17734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.714186][T17734] 40982 total pagecache pages [ 283.732360][T17734] 0 pages in swap cache [ 283.765176][T17734] Free swap = 124996kB [ 283.779452][T17734] Total swap = 124996kB [ 283.789377][T17734] 2097051 pages RAM [ 283.814328][T17734] 0 pages HighMem/MovableOnly [ 283.825749][T17734] 427874 pages reserved [ 283.836691][T17734] 0 pages cma reserved [ 284.023011][T17811] nftables ruleset with unbound chain [ 284.051753][T17813] gre2: entered promiscuous mode [ 284.310143][T17831] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.5531'. [ 284.350964][T17831] openvswitch: netlink: Missing key (keys=40, expected=80) [ 284.371758][T17836] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5532'. [ 284.544539][T17848] ieee802154 phy1 wpan1: encryption failed: -90 [ 284.662648][T17855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5539'. [ 285.119804][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5550'. [ 285.247425][T17892] netlink: 'syz.0.5557': attribute type 3 has an invalid length. [ 285.794859][T17928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.866103][T17935] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 286.963737][T18008] netlink: 'syz.3.5609': attribute type 3 has an invalid length. [ 287.314968][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5619'. [ 287.368617][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5619'. [ 287.481430][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5624'. [ 287.595749][T18045] netlink: 'syz.2.5627': attribute type 30 has an invalid length. [ 287.618374][T18045] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 287.960363][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5639'. [ 288.810503][T18128] openvswitch: netlink: Invalid VLAN frame [ 288.831236][T18130] bridge9: entered promiscuous mode [ 288.851774][T18130] bridge9: entered allmulticast mode [ 289.222797][T18153] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 289.808444][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5692'. [ 290.268379][T18224] netlink: 'syz.0.5706': attribute type 3 has an invalid length. [ 290.298134][T18224] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5706'. [ 290.492220][T18237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5713'. [ 290.821674][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5724'. [ 291.234742][T18283] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.441775][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5739'. [ 292.427969][T18358] hsr0: entered promiscuous mode [ 292.451082][T18358] hsr0: entered allmulticast mode [ 292.477788][T18358] hsr_slave_0: entered allmulticast mode [ 292.501882][T18358] hsr_slave_1: entered allmulticast mode [ 292.766250][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5772'. [ 292.892625][T18388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5774'. [ 293.044489][T18396] netlink: 'syz.1.5777': attribute type 3 has an invalid length. [ 293.067266][T18396] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5777'. [ 293.113567][T18401] netlink: 'syz.2.5778': attribute type 1 has an invalid length. [ 293.121331][T18401] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5778'. [ 293.159411][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5778'. [ 294.161354][T18455] sctp: [Deprecated]: syz.2.5799 (pid 18455) Use of int in maxseg socket option. [ 294.161354][T18455] Use struct sctp_assoc_value instead [ 294.415146][T18449] syz_tun: left promiscuous mode [ 294.520902][T18449] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.528388][T18449] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.927290][T18449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.959170][T18449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.041514][T18449] hsr0: left promiscuous mode [ 295.052124][T18449] hsr0: left allmulticast mode [ 295.057045][T18449] hsr_slave_0: left allmulticast mode [ 295.062987][T18449] hsr_slave_1: left allmulticast mode [ 295.211245][T18449] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.229586][T18449] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.239249][T18449] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.248214][T18449] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.337200][T18449] ip6erspan0: left promiscuous mode [ 295.374549][T18449] ip6gre1: left allmulticast mode [ 295.518175][T18450] gretap1: entered promiscuous mode [ 295.527205][T18450] gretap1: entered allmulticast mode [ 295.554118][T18453] bridge8: entered promiscuous mode [ 295.564572][T18453] bridge8: entered allmulticast mode [ 295.679769][T18472] netlink: 'syz.1.5807': attribute type 2 has an invalid length. [ 295.703450][T18472] __nla_validate_parse: 3 callbacks suppressed [ 295.703465][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5807'. [ 296.112761][T18500] netlink: 'syz.3.5819': attribute type 25 has an invalid length. [ 296.200848][T18486] infiniband syz1: set active [ 296.205909][T18486] infiniband syz1: added team_slave_0 [ 296.283926][T18486] RDS/IB: syz1: added [ 296.302366][T18486] smc: adding ib device syz1 with port count 1 [ 296.364081][T18486] smc: ib device syz1 port 1 has pnetid [ 296.487108][T18519] netlink: 'syz.2.5823': attribute type 2 has an invalid length. [ 296.550616][T18519] netlink: 'syz.2.5823': attribute type 1 has an invalid length. [ 296.589476][T18519] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5823'. [ 296.961781][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5833'. [ 297.371951][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5844'. [ 297.462657][T18570] netlink: 'syz.1.5846': attribute type 13 has an invalid length. [ 297.533828][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5848'. [ 297.619971][T18577] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 297.921769][T18593] netlink: 'syz.4.5857': attribute type 5 has an invalid length. [ 297.976279][T18593] : entered promiscuous mode [ 298.929997][T18660] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 299.265339][T18684] netlink: 'syz.2.5903': attribute type 3 has an invalid length. [ 299.390645][T18690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5907'. [ 299.561553][T18700] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5911'. [ 299.786311][T18719] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5918'. [ 299.826924][T18719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5918'. [ 299.846619][T18719] netlink: 'syz.3.5918': attribute type 2 has an invalid length. [ 300.875689][T18783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.884461][T18783] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.902982][T18783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.056904][ T5884] IPVS: starting estimator thread 0... [ 301.161577][T18798] IPVS: using max 21 ests per chain, 50400 per kthread [ 301.939782][T18838] netlink: 'syz.2.5974': attribute type 1 has an invalid length. [ 302.070194][T18842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5976'. [ 302.455009][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5982'. [ 302.488625][T18858] netlink: 'syz.0.5983': attribute type 5 has an invalid length. [ 302.496543][T18856] netlink: 'syz.3.5982': attribute type 2 has an invalid length. [ 302.512758][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5983'. [ 302.537106][T18861] Cannot find del_set index 1 as target [ 303.383027][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6001'. [ 303.857817][T18922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6012'. [ 303.872247][T18924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6014'. [ 303.913670][T18924] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6014'. [ 304.399605][T18957] netlink: 'syz.0.6030': attribute type 10 has an invalid length. [ 304.426041][T18957] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 304.586870][T18965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6035'. [ 304.640231][T18965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6035'. [ 304.652091][T18969] netlink: 'syz.4.6039': attribute type 21 has an invalid length. [ 304.667418][T18969] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6039'. [ 304.702925][T18969] netlink: 'syz.4.6039': attribute type 4 has an invalid length. [ 304.732910][T18969] netlink: 'syz.4.6039': attribute type 3 has an invalid length. [ 304.808380][T18977] netlink: 'syz.0.6043': attribute type 10 has an invalid length. [ 304.853993][T18977] 0: entered promiscuous mode [ 304.859209][T18977] 0: left allmulticast mode [ 304.878782][T18977] hsr_slave_0: left allmulticast mode [ 304.890045][T18977] bond0: (slave 70): The slave device specified does not support setting the MAC address [ 304.925485][T18977] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 304.942138][T18977] bond0: (slave 70): Error -22 calling dev_set_mtu [ 305.632357][T19035] netlink: 'syz.2.6066': attribute type 1 has an invalid length. [ 305.894932][T19051] netlink: 'syz.0.6077': attribute type 8 has an invalid length. [ 306.227473][T19073] tc_dump_action: action bad kind [ 306.652010][T19103] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.905577][T19118] openvswitch: netlink: IPv4 tunnel dst address is zero [ 307.025008][T19122] delete_channel: no stack [ 307.210904][T19136] __nla_validate_parse: 7 callbacks suppressed [ 307.210923][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6119'. [ 307.492578][T19156] netlink: 'syz.1.6128': attribute type 5 has an invalid length. [ 307.615390][T19161] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6131'. [ 307.632754][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6131'. [ 307.632872][T19163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6132'. [ 307.641697][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6131'. [ 308.031443][T19179] netlink: 'syz.0.6139': attribute type 10 has an invalid length. [ 308.067172][T19180] bridge0: port 1(netdevsim2) entered blocking state [ 308.081375][T19180] bridge0: port 1(netdevsim2) entered disabled state [ 308.098580][T19180] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 308.140124][T19180] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 308.152563][T19179] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 308.195435][T19179] team0: Port device netdevsim0 added [ 308.351687][T19195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6148'. [ 308.387502][T19200] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 308.402322][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6150'. [ 308.418697][T19199] netlink: 'syz.3.6150': attribute type 1 has an invalid length. [ 308.426653][T19199] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6150'. [ 309.129240][T19243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6168'. [ 309.641471][T19280] xt_limit: Overflow, try lower: 0/0 [ 310.032735][T19307] validate_nla: 2 callbacks suppressed [ 310.032754][T19307] netlink: 'syz.3.6196': attribute type 21 has an invalid length. [ 310.120503][T19307] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6196'. [ 310.329229][T19319] netlink: 'syz.0.6202': attribute type 1 has an invalid length. [ 310.451760][T19329] netlink: 'syz.2.6206': attribute type 1 has an invalid length. [ 310.590004][T19339] raw_sendmsg: syz.1.6210 forgot to set AF_INET. Fix it! [ 310.780072][T19352] netlink: zone id is out of range [ 310.795884][T19352] netlink: zone id is out of range [ 310.801037][T19352] netlink: zone id is out of range [ 310.832774][T19352] netlink: zone id is out of range [ 310.837924][T19352] netlink: zone id is out of range [ 310.857372][T19352] netlink: zone id is out of range [ 310.876552][T19352] netlink: zone id is out of range [ 310.896464][T19352] netlink: zone id is out of range [ 311.293375][T19384] IPv6: sit1: Disabled Multicast RS [ 311.437917][T19392] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 311.944347][T19424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.964413][T19424] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.983575][T19424] net_ratelimit: 10 callbacks suppressed [ 311.983586][T19424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.929406][T19488] netlink: 'syz.4.6276': attribute type 10 has an invalid length. [ 313.498124][T19526] __nla_validate_parse: 4 callbacks suppressed [ 313.498143][T19526] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6289'. [ 313.827221][T19547] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 313.889733][T19547] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 313.936101][T19552] netlink: 'syz.4.6300': attribute type 15 has an invalid length. [ 314.177738][T19571] netlink: 'syz.4.6306': attribute type 10 has an invalid length. [ 314.249534][T19571] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.286012][T19571] bond0: (slave team0): Enslaving as an active interface with an up link [ 315.578311][T19668] netlink: 'syz.2.6343': attribute type 6 has an invalid length. [ 316.164219][T19705] ipt_REJECT: TCP_RESET invalid for non-tcp [ 316.198831][T19708] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.539680][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6371'. [ 316.582528][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6371'. [ 316.626276][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6371'. [ 316.721952][T19738] xt_connbytes: Forcing CT accounting to be enabled [ 316.728883][T19738] --map-set only usable from mangle table [ 316.831523][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6378'. [ 317.017821][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6384'. [ 317.176743][T19757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6386'. [ 317.245021][T19761] netlink: 'syz.3.6387': attribute type 3 has an invalid length. [ 317.264585][T19761] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6387'. [ 317.329143][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.955024][T19800] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.6406'. [ 318.022524][T19800] openvswitch: netlink: Missing key (keys=40, expected=80) [ 318.068312][T19805] netlink: 'syz.2.6410': attribute type 1 has an invalid length. [ 318.190061][T19811] netlink: 'syz.4.6411': attribute type 1 has an invalid length. [ 318.232599][T19811] netlink: 'syz.4.6411': attribute type 3 has an invalid length. [ 318.262514][T19811] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6411'. [ 318.585787][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6421'. [ 318.802650][T19847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6428'. [ 319.237216][T19873] xt_CT: No such helper "pptp" [ 319.680535][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6452'. [ 320.034476][T19920] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 320.090759][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6467'. [ 320.235396][T19936] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6471'. [ 320.260665][T19938] netlink: 'syz.4.6473': attribute type 1 has an invalid length. [ 320.302640][T19936] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6471'. [ 320.695744][ T5882] IPVS: starting estimator thread 0... [ 320.802778][T19964] IPVS: using max 26 ests per chain, 62400 per kthread [ 320.856542][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6490'. [ 321.158057][T19987] bond5: entered promiscuous mode [ 321.193421][T19987] bond5: entered allmulticast mode [ 321.197960][T19995] netlink: 'syz.3.6500': attribute type 16 has an invalid length. [ 321.207278][T19995] netlink: 'syz.3.6500': attribute type 3 has an invalid length. [ 321.215678][T19995] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6500'. [ 321.224248][T19987] 8021q: adding VLAN 0 to HW filter on device bond5 [ 321.457383][T20010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6505'. [ 321.640102][T20024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6514'. [ 322.016070][T20047] netlink: 'syz.4.6523': attribute type 6 has an invalid length. [ 322.850726][T20102] openvswitch: netlink: Actions may not be safe on all matching packets [ 322.989663][T20113] @: renamed from veth0_vlan (while UP) [ 322.996865][T20114] nbd: couldn't find a device at index 1255035857 [ 324.244933][ T3019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.264103][ T3019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.502748][T20206] netlink: 'syz.0.6601': attribute type 1 has an invalid length. [ 324.532116][T20206] netlink: 'syz.0.6601': attribute type 3 has an invalid length. [ 324.541189][T20206] __nla_validate_parse: 5 callbacks suppressed [ 324.541204][T20206] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6601'. [ 324.557117][T20206] NCSI netlink: No device for ifindex 0 [ 324.755662][T20220] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6609'. [ 324.781963][T20220] netlink: 'syz.3.6609': attribute type 1 has an invalid length. [ 324.938862][T20230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6614'. [ 325.422696][T20260] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6630'. [ 325.451628][T20260] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6630'. [ 326.618052][T20343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6666'. [ 326.684864][T20351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6670'. [ 326.719565][T20351] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 326.822603][T20357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6671'. [ 326.858759][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6674'. [ 326.914059][T20365] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.010012][T20371] netlink: 'syz.2.6677': attribute type 1 has an invalid length. [ 327.038712][T20371] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6677'. [ 327.052270][T20373] netlink: 'syz.3.6679': attribute type 1 has an invalid length. [ 327.288885][T20389] gretap1: left promiscuous mode [ 327.302721][T20389] gretap1: left allmulticast mode [ 327.344450][T20389] bond5: left promiscuous mode [ 327.349256][T20389] bond5: left allmulticast mode [ 327.600315][T20408] netlink: 'syz.0.6694': attribute type 9 has an invalid length. [ 327.621965][T20409] No such timeout policy "syz0" [ 327.628602][T20408] netlink: 'syz.0.6694': attribute type 7 has an invalid length. [ 327.642259][T20408] netlink: 'syz.0.6694': attribute type 8 has an invalid length. [ 327.844121][T20422] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 327.970653][T20428] netlink: 'syz.1.6703': attribute type 16 has an invalid length. [ 328.235907][T20447] netlink: 'syz.4.6714': attribute type 1 has an invalid length. [ 328.380741][T20458] ieee802154 phy1 wpan1: encryption failed: -90 [ 328.831966][T20488] netlink: 'syz.2.6734': attribute type 7 has an invalid length. [ 329.457479][T20525] netlink: 'syz.4.6753': attribute type 2 has an invalid length. [ 329.465744][T20525] netlink: 'syz.4.6753': attribute type 1 has an invalid length. [ 329.565582][T20531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.675583][T20538] __nla_validate_parse: 6 callbacks suppressed [ 329.675601][T20538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6756'. [ 329.702732][T20538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6756'. [ 329.844996][T20547] netlink: 308 bytes leftover after parsing attributes in process `syz.2.6762'. [ 330.329520][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6778'. [ 331.381114][T20602] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6791'. [ 332.011383][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6808'. [ 332.050830][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6808'. [ 332.433086][T20667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6819'. [ 332.495514][T20672] validate_nla: 1 callbacks suppressed [ 332.495532][T20672] netlink: 'syz.0.6823': attribute type 10 has an invalid length. [ 332.614637][T20672] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.639500][ T745] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 332.639879][T20672] bond0: (slave team0): Enslaving as an active interface with an up link [ 332.976085][T20698] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6836'. [ 333.115671][T20708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.353912][T20724] x_tables: ip_tables: osf match: only valid for protocol 6 [ 333.429690][T20726] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 333.881874][T20756] xt_l2tp: v2 sid > 0xffff: 262144 [ 333.971181][T20763] netlink: 'syz.4.6867': attribute type 7 has an invalid length. [ 334.112059][T20770] netlink: 'syz.3.6871': attribute type 2 has an invalid length. [ 334.412619][T20792] IPv6: NLM_F_CREATE should be specified when creating new route [ 334.637167][T20804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6888'. [ 335.011707][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6900'. [ 335.028698][T20833] netlink: 'syz.3.6902': attribute type 11 has an invalid length. [ 335.037462][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6900'. [ 335.852622][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6927'. [ 336.080616][T20901] netlink: 'syz.3.6935': attribute type 12 has an invalid length. [ 336.103141][T20901] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6935'. [ 336.223040][T20907] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 336.269530][T20912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6942'. [ 336.442272][T20923] geneve4: entered promiscuous mode [ 336.458129][T20923] geneve4: entered allmulticast mode [ 336.545812][T20925] netlink: 'syz.0.6944': attribute type 26 has an invalid length. [ 336.719361][T20939] netlink: 'syz.1.6954': attribute type 3 has an invalid length. [ 336.732616][T20939] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6954'. [ 336.872676][T20947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6958'. [ 336.881675][T20947] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6958'. [ 337.080671][T20961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.131074][T20967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6966'. [ 337.381727][T20981] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 337.495555][T20985] vlan0: entered promiscuous mode [ 337.561288][T20992] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 337.582205][T20992] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 337.895311][T21013] netlink: 'syz.0.6990': attribute type 21 has an invalid length. [ 338.172893][T21030] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.292688][T21041] netlink: 'syz.4.7005': attribute type 14 has an invalid length. [ 338.553882][T21057] netlink: 196 bytes leftover after parsing attributes in process `syz.0.7012'. [ 338.904748][T21079] netlink: 'syz.2.7023': attribute type 2 has an invalid length. [ 338.920549][T21079] netlink: 'syz.2.7023': attribute type 9 has an invalid length. [ 340.040656][T21155] __nla_validate_parse: 4 callbacks suppressed [ 340.040675][T21155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7056'. [ 340.072619][T21155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7056'. [ 340.342100][T21169] lo: entered allmulticast mode [ 340.358849][T21169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.628464][T21189] xt_TCPMSS: Only works on TCP SYN packets [ 340.764206][T21195] netlink: 'syz.1.7078': attribute type 1 has an invalid length. [ 340.771980][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7078'. [ 341.210730][T21226] ipt_ECN: cannot use operation on non-tcp rule [ 342.521648][T21280] netlink: 'syz.4.7119': attribute type 10 has an invalid length. [ 343.517867][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7146'. [ 343.534862][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7146'. [ 343.548410][T21340] geneve3: entered promiscuous mode [ 343.562641][T21340] geneve3: entered allmulticast mode [ 344.110409][T21366] ip6t_REJECT: ECHOREPLY is not supported [ 344.189250][T21362] SET target dimension over the limit! [ 344.494907][T21381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7168'. [ 344.810720][T21393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.818048][T21393] IPv6: NLM_F_CREATE should be set when creating new route [ 344.825326][T21393] IPv6: NLM_F_CREATE should be set when creating new route [ 345.033963][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7175'. [ 345.076981][T21398] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7175'. [ 345.618406][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7185'. [ 346.568215][T21478] xt_hashlimit: max too large, truncated to 1048576 [ 347.220703][T21508] netlink: 'syz.3.7228': attribute type 4 has an invalid length. [ 347.287581][T21508] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7228'. [ 347.325637][T21508] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 347.651439][T21535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7239'. [ 347.687739][T21535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7239'. [ 347.934019][T21552] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 348.908961][T21617] bridge0: entered promiscuous mode [ 348.938329][T21617] bridge0: left allmulticast mode [ 348.963173][T21619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7278'. [ 348.993812][T21619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7278'. [ 349.035902][T21619] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7278'. [ 349.094694][T21628] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 349.166554][T21634] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7283'. [ 349.548158][T21657] xt_cluster: you have exceeded the maximum number of cluster nodes (261 > 32) [ 349.644378][T21662] netlink: 'syz.4.7295': attribute type 10 has an invalid length. [ 349.679316][T21662] team0: Device hsr_slave_0 failed to register rx_handler [ 349.957506][T21683] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7303'. [ 350.110612][T21690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7306'. [ 350.643281][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7318'. [ 350.695784][T21726] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 350.842599][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7324'. [ 350.891808][T21739] batadv1: entered promiscuous mode [ 351.072596][T21757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7331'. [ 351.084461][T21756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7330'. [ 351.108448][T21757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7331'. [ 351.153759][T21757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7331'. [ 351.375462][T21774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7337'. [ 351.504946][T21782] netlink: 'syz.4.7340': attribute type 15 has an invalid length. [ 351.543871][T21782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7340'. [ 351.692993][T21795] netlink: 'syz.4.7346': attribute type 6 has an invalid length. [ 351.734335][T21795] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7346'. [ 352.149339][T21826] batadv1: entered promiscuous mode [ 352.173895][T21826] batadv1: entered allmulticast mode [ 352.180036][T21826] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 352.397531][T21840] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 352.497296][T21840] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 352.509045][T21840] gretap2: entered promiscuous mode [ 352.522528][T21840] gretap2: entered allmulticast mode [ 352.530166][T21849] netlink: 'syz.2.7365': attribute type 13 has an invalid length. [ 352.533349][T21851] netlink: 'syz.4.7367': attribute type 1 has an invalid length. [ 352.811088][T21866] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 352.877494][T21858] batadv1: left promiscuous mode [ 352.883266][T21858] batadv1: left allmulticast mode [ 352.891051][T21858] gretap2: left promiscuous mode [ 352.896144][T21858] gretap2: left allmulticast mode [ 353.252643][T21887] netlink: 'syz.4.7384': attribute type 11 has an invalid length. [ 353.585765][T21910] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 354.170801][T21945] netlink: 'syz.4.7411': attribute type 1 has an invalid length. [ 354.548715][T21970] tipc: Enabling of bearer rejected, media not registered [ 355.062081][T22002] netlink: 'syz.3.7440': attribute type 6 has an invalid length. [ 355.404562][T22022] __nla_validate_parse: 104 callbacks suppressed [ 355.404581][T22022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7449'. [ 355.589464][T22034] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.7455'. [ 356.175440][T22062] netlink: 'syz.2.7469': attribute type 10 has an invalid length. [ 356.194651][T22062] netlink: 1252 bytes leftover after parsing attributes in process `syz.2.7469'. [ 356.225213][T22062] openvswitch: netlink: Message has 5 unknown bytes. [ 356.279673][T22068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7472'. [ 356.436881][T22076] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.7476'. [ 356.723563][T22094] lo: left allmulticast mode [ 356.798048][T22098] netlink: 'syz.2.7486': attribute type 1 has an invalid length. [ 356.812952][T22098] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.7486'. [ 356.886079][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7489'. [ 357.176983][T22113] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.7494'. [ 357.393418][T22094] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.400747][T22094] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.750293][T22094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.790752][T22094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.854968][T22094] 0: left allmulticast mode [ 357.865540][T22094] 0: left promiscuous mode [ 357.942166][T22094] ipvlan1: left promiscuous mode [ 358.066114][T22094] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.087620][T22094] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.098149][T22094] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.108876][T22094] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.189744][T22094] bond1: left promiscuous mode [ 358.199614][T22094] bond1: left allmulticast mode [ 358.225630][T22094] veth3: left promiscuous mode [ 358.230402][T22094] veth3: left allmulticast mode [ 358.242182][T22094] ip6erspan0: left promiscuous mode [ 358.259537][T22094] ip6tnl1: left promiscuous mode [ 358.264722][T22094] ip6tnl1: left allmulticast mode [ 358.333764][T22094] bridge9: left promiscuous mode [ 358.339006][T22094] bridge9: left allmulticast mode [ 358.354593][T22107] tipc: Started in network mode [ 358.369864][T22107] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 358.402828][T22107] tipc: Enabling of bearer rejected, failed to enable media [ 358.573380][T22134] x_tables: ip_tables: udp match: only valid for protocol 17 [ 358.964284][T22158] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7511'. [ 358.986905][T22151] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7511'. [ 359.029649][T22164] netlink: 'syz.4.7516': attribute type 1 has an invalid length. [ 359.551337][T22191] Bluetooth: MGMT ver 1.23 [ 359.776776][T22205] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 359.810537][T22206] Bluetooth: MGMT ver 1.23 [ 359.879697][T22212] netlink: 'syz.2.7538': attribute type 29 has an invalid length. [ 359.908337][T22212] netlink: 'syz.2.7538': attribute type 29 has an invalid length. [ 359.943840][T22212] netlink: 'syz.2.7538': attribute type 29 has an invalid length. [ 359.972608][T22212] netlink: 'syz.2.7538': attribute type 29 has an invalid length. [ 359.981965][T22216] netlink: 'syz.1.7540': attribute type 12 has an invalid length. [ 360.016817][T22216] netlink: 'syz.1.7540': attribute type 11 has an invalid length. [ 360.020353][T22212] netlink: 'syz.2.7538': attribute type 29 has an invalid length. [ 360.041265][T22220] Bluetooth: MGMT ver 1.23 [ 360.062799][T22212] netlink: 'syz.2.7538': attribute type 29 has an invalid length. [ 360.079215][T22212] netlink: 'syz.2.7538': attribute type 29 has an invalid length. [ 360.203745][T22229] nbd: illegal input index -381222912 [ 360.363880][T22238] openvswitch: netlink: Unknown key attributes 20 [ 360.523658][T22248] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 360.708043][T22260] syz_tun: MTU too low for tipc bearer [ 360.751185][T22260] tipc: Enabling of bearer rejected, failed to enable media [ 361.114665][T22280] __nla_validate_parse: 4 callbacks suppressed [ 361.114685][T22280] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7571'. [ 362.104925][T22315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7588'. [ 362.122541][T22315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7588'. [ 362.383059][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7597'. [ 362.413595][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7597'. [ 362.528214][T22340] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 363.138682][T22377] nbd: must specify at least one socket [ 363.325201][T22391] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7626'. [ 363.342961][T22391] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7626'. [ 363.362711][T22391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7626'. [ 364.417804][T22453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7651'. [ 364.498311][T22458] bridge0: port 2(hsr0) entered blocking state [ 364.530878][T22458] bridge0: port 2(hsr0) entered disabled state [ 364.541590][T22458] hsr0: entered allmulticast mode [ 364.551417][T22458] hsr_slave_0: entered allmulticast mode [ 364.563742][T22458] hsr_slave_1: entered allmulticast mode [ 364.582127][T22458] hsr0: entered promiscuous mode [ 365.165663][T22493] validate_nla: 31 callbacks suppressed [ 365.165682][T22493] netlink: 'syz.3.7667': attribute type 1 has an invalid length. [ 365.293126][T22499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7671'. [ 365.622494][T22517] nbd: must specify a size in bytes for the device [ 366.022675][T22534] vlan2: entered promiscuous mode [ 366.038027][T22534] hsr0: entered promiscuous mode [ 366.183730][T22543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7692'. [ 366.547321][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7702'. [ 366.572606][T22566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7702'. [ 366.592469][T22566] netlink: 'syz.3.7702': attribute type 20 has an invalid length. [ 366.783390][T22575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7707'. [ 367.016170][T22589] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 367.177264][T22596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7717'. [ 367.260266][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7720'. [ 367.479208][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7724'. [ 367.521611][T22613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7724'. [ 367.544209][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7727'. [ 367.735665][T22628] netlink: 'syz.4.7733': attribute type 12 has an invalid length. [ 367.791598][T22634] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.801761][T22634] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.810727][T22634] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.819863][T22634] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.882219][T22634] Zero length message leads to an empty skb [ 367.904970][T22633] bridge13: entered promiscuous mode [ 367.910289][T22633] bridge13: entered allmulticast mode [ 367.963768][T22633] team0: Device bridge13 is up. Set it down before adding it as a team port [ 368.051684][T22642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7739'. [ 368.721745][T22677] netlink: 'syz.4.7756': attribute type 1 has an invalid length. [ 369.178710][T22701] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 369.476476][T22713] gretap0: entered promiscuous mode [ 369.503501][T22713] gretap0: left promiscuous mode [ 370.521473][T22771] netlink: 'syz.0.7802': attribute type 18 has an invalid length. [ 371.016737][T22793] netlink: 'syz.2.7814': attribute type 3 has an invalid length. [ 371.125395][T22800] netlink: 'syz.1.7817': attribute type 2 has an invalid length. [ 371.544079][T22824] __nla_validate_parse: 9 callbacks suppressed [ 371.544098][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7827'. [ 371.573905][T22827] pim6reg: entered allmulticast mode [ 371.703784][T22831] netlink: 19 bytes leftover after parsing attributes in process `syz.3.7832'. [ 373.249699][T22926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7877'. [ 373.351799][T22923] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7876'. [ 375.320325][T23019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7919'. [ 375.402942][T23026] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.850213][T23056] vxcan1: entered allmulticast mode [ 376.793877][T23099] netlink: 'syz.2.7950': attribute type 1 has an invalid length. [ 376.961478][T23107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7954'. [ 377.566018][T23134] "syz.3.7967" (23134) uses obsolete ecb(arc4) skcipher [ 378.422599][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7983'. [ 378.465543][T23166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7983'. [ 378.812518][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7992'. [ 379.266167][T23201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8001'. [ 379.295486][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8001'. [ 379.543017][T23214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.496931][T23253] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8024'. [ 380.513308][T23253] netlink: 'syz.4.8024': attribute type 1 has an invalid length. [ 380.532709][T23253] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8024'. [ 380.821956][T23270] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8033'. [ 380.832606][T23270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8033'. [ 382.442846][ T5842] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 383.230972][T23356] __nla_validate_parse: 3 callbacks suppressed [ 383.230991][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8075'. [ 383.276045][T23356] netlink: 'syz.4.8075': attribute type 1 has an invalid length. [ 384.363208][T23412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8101'. [ 384.470769][T23416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8104'. [ 384.896656][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8113'. [ 384.929276][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8113'. [ 386.302672][T23479] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.8133'. [ 386.878423][T23503] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8145'. [ 386.887756][T23503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.591914][T23531] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 389.021714][T23607] netlink: 312 bytes leftover after parsing attributes in process `syz.3.8196'. [ 389.075153][T23612] netlink: set zone limit has 8 unknown bytes [ 389.548985][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8210'. [ 390.329095][T23685] sock: sock_set_timeout: `syz.3.8234' (pid 23685) tries to set negative timeout [ 390.438621][T23693] netlink: 'syz.4.8238': attribute type 7 has an invalid length. [ 390.446681][T23693] netlink: 'syz.4.8238': attribute type 3 has an invalid length. [ 390.455031][T23693] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8238'. [ 390.555708][T23695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8239'. [ 391.068800][T23730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8256'. [ 391.097661][T23730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8256'. [ 391.925573][T23778] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 391.947951][T23778] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 391.969105][T23780] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8277'. [ 391.979999][T23778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8280'. [ 391.992649][T23774] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8277'. [ 392.008006][T23778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8280'. [ 392.023172][T23778] netlink: 'syz.1.8280': attribute type 19 has an invalid length. [ 392.423226][T23797] netlink: 'syz.0.8286': attribute type 29 has an invalid length. [ 392.443854][T23797] netlink: 'syz.0.8286': attribute type 29 has an invalid length. [ 393.388832][T23836] netlink: 'syz.3.8306': attribute type 3 has an invalid length. [ 395.149277][T23929] Bluetooth: MGMT ver 1.23 [ 395.196849][T23933] __nla_validate_parse: 1 callbacks suppressed [ 395.196867][T23933] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8353'. [ 395.222214][T23933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8353'. [ 395.504101][T23953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8360'. [ 395.529753][T23953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8360'. [ 395.606658][T23956] netlink: 'syz.2.8361': attribute type 29 has an invalid length. [ 396.548450][T24011] batadv0: entered promiscuous mode [ 396.557789][T24011] macvtap1: entered allmulticast mode [ 396.570973][T24011] batadv0: entered allmulticast mode [ 396.606739][T24011] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 396.658813][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8391'. [ 397.123467][T24050] gretap0: entered promiscuous mode [ 397.139354][T24050] macsec1: entered promiscuous mode [ 397.171053][T24050] gretap0: left promiscuous mode [ 397.252976][T24054] netlink: 'syz.0.8408': attribute type 1 has an invalid length. [ 397.261177][T24054] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8408'. [ 397.281869][T24054] netlink: 'syz.0.8408': attribute type 1 has an invalid length. [ 397.300491][T24054] netlink: 'syz.0.8408': attribute type 2 has an invalid length. [ 397.893824][T24097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.433035][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 398.660421][T24142] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8444'. [ 399.008634][T24156] macvtap1: entered allmulticast mode [ 399.022520][T24156] batadv0: entered allmulticast mode [ 399.052227][T24156] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 399.277083][T24168] sock: sock_set_timeout: `syz.4.8457' (pid 24168) tries to set negative timeout [ 400.024229][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8470'. [ 400.214052][T24204] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8474'. [ 400.607681][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 401.227597][T24263] netlink: 'syz.0.8501': attribute type 27 has an invalid length. [ 401.744884][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8518'. [ 403.182841][T24359] vlan3: entered allmulticast mode [ 403.190343][T24359] bond0: entered allmulticast mode [ 403.202564][T24359] bond_slave_0: entered allmulticast mode [ 403.218857][T24359] bond_slave_1: entered allmulticast mode [ 403.233631][T24366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8550'. [ 403.239934][T24359] team0: entered allmulticast mode [ 403.250982][T24359] team_slave_0: entered allmulticast mode [ 403.268174][T24359] team_slave_1: entered allmulticast mode [ 403.819759][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8566'. [ 404.219036][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8581'. [ 404.291543][T24434] netlink: 332 bytes leftover after parsing attributes in process `syz.4.8582'. [ 404.491726][T24442] tc_dump_action: action bad kind [ 405.825557][T24510] IPVS: ip_vs_add_dest(): server weight less than zero [ 406.484558][T24549] netlink: 'syz.1.8635': attribute type 1 has an invalid length. [ 406.880683][T24573] netlink: 'syz.4.8646': attribute type 1 has an invalid length. [ 407.297435][T24595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8658'. [ 407.322308][T24595] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8658'. [ 407.665730][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8668'. [ 407.698603][T24616] nbd: socks must be embedded in a SOCK_ITEM attr [ 408.096902][T24645] sctp: [Deprecated]: syz.3.8679 (pid 24645) Use of int in max_burst socket option deprecated. [ 408.096902][T24645] Use struct sctp_assoc_value instead [ 408.195525][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8684'. [ 408.747828][T24679] dvmrp5: entered allmulticast mode [ 408.849859][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 408.917536][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8703'. [ 408.926623][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8703'. [ 410.066690][T24749] netlink: 'syz.2.8731': attribute type 1 has an invalid length. [ 410.091594][T24749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.388644][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8739'. [ 410.417479][T24766] macvlan2: entered promiscuous mode [ 410.452618][T24766] macvlan2: entered allmulticast mode [ 410.458172][T24766] erspan0: entered allmulticast mode [ 410.556882][T24772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8742'. [ 410.586358][T24772] netlink: 'syz.2.8742': attribute type 1 has an invalid length. [ 411.789240][T24826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8768'. [ 412.028765][T24838] netlink: 'syz.2.8774': attribute type 29 has an invalid length. [ 412.202942][T24848] netlink: 'syz.2.8776': attribute type 1 has an invalid length. [ 412.238615][T24848] netlink: 'syz.2.8776': attribute type 2 has an invalid length. [ 412.698426][T24875] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8785'. [ 412.721216][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8785'. [ 412.878846][T24885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8790'. [ 412.941517][T24885] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 413.341106][T24913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8804'. [ 413.423625][T24915] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.432525][T24915] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.441304][T24915] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.450066][T24915] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.622261][T24929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8812'. [ 413.714034][T24925] batadv0 speed is unknown, defaulting to 1000 [ 413.765861][T24933] tipc: New replicast peer: 255.255.255.255 [ 413.793591][T24933] tipc: Enabled bearer , priority 10 [ 414.375336][T24968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8828'. [ 414.751914][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8837'. [ 414.774465][ T8] tipc: Node number set to 4278255617 [ 415.026259][T24995] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8843'. [ 415.158540][T25004] netlink: 'syz.4.8847': attribute type 5 has an invalid length. [ 415.450817][T25016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 415.484654][T25016] team0: Port device bond7 added [ 415.811270][T25045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8867'. [ 415.847037][T25045] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 417.082923][T25120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8904'. [ 417.109390][T25125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.707716][T25164] netlink: 'syz.0.8919': attribute type 1 has an invalid length. [ 417.764515][T25165] __nla_validate_parse: 5 callbacks suppressed [ 417.764531][T25165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8918'. [ 417.917413][T25174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8922'. [ 418.055132][T25183] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 418.357206][T25208] macsec0: entered allmulticast mode [ 418.399064][T25208] veth1_macvtap: entered allmulticast mode [ 418.419174][T25208] macsec0: left allmulticast mode [ 418.432578][T25208] veth1_macvtap: left allmulticast mode [ 418.445709][T25213] netlink: 'syz.1.8937': attribute type 7 has an invalid length. [ 418.462691][T25213] netlink: 'syz.1.8937': attribute type 8 has an invalid length. [ 418.721168][T25227] tipc: Started in network mode [ 418.732934][T25227] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 418.752193][T25227] tipc: Enabling of bearer rejected, failed to enable media [ 419.038877][T25244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8947'. [ 419.083476][T25248] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 420.014400][T25294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8965'. [ 420.032037][T25294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8965'. [ 420.043280][T25294] netlink: 'syz.1.8965': attribute type 19 has an invalid length. [ 420.295659][T25303] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8972'. [ 420.527920][T25316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8977'. [ 420.567214][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8977'. [ 420.951644][T25339] netlink: 'syz.3.8988': attribute type 11 has an invalid length. [ 421.264901][T25353] netlink: 'syz.1.8995': attribute type 1 has an invalid length. [ 421.278717][T25353] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8995'. [ 421.288661][T25353] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8995'. [ 421.323060][T25361] netlink: 'syz.3.8997': attribute type 27 has an invalid length. [ 422.138059][T25407] tipc: Enabling of bearer rejected, failed to enable media [ 424.716934][T25514] sctp: [Deprecated]: syz.1.9072 (pid 25514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.716934][T25514] Use struct sctp_sack_info instead [ 424.790122][T25518] sctp: [Deprecated]: syz.1.9072 (pid 25518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.790122][T25518] Use struct sctp_sack_info instead [ 425.618217][T25541] __nla_validate_parse: 1 callbacks suppressed [ 425.618235][T25541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9085'. [ 425.698611][T25541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9085'. [ 425.746221][T25541] netlink: 'syz.3.9085': attribute type 5 has an invalid length. [ 426.231317][T25557] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 426.540648][T25563] tipc: Started in network mode [ 426.553675][T25563] tipc: Node identity , cluster identity 4711 [ 426.561221][T25563] tipc: Failed to set node id, please configure manually [ 426.576404][T25563] tipc: Enabling of bearer rejected, failed to enable media [ 428.132361][ C1] sched: DL replenish lagged too much [ 428.405870][T25572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9101'. [ 428.733858][T25586] ax25_connect(): syz.1.9107 uses autobind, please contact jreuter@yaina.de [ 428.810960][T25588] openvswitch: netlink: Message has 1247 unknown bytes. [ 428.846147][T25588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.202558][T25601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9114'. [ 430.084686][ T29] audit: type=1800 audit(1741038587.985:3): pid=25635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9130" name="memory.events" dev="tmpfs" ino=9229 res=0 errno=0 [ 430.209148][ T29] audit: type=1800 audit(1741038588.045:4): pid=25635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9130" name="memory.events" dev="tmpfs" ino=9229 res=0 errno=0 [ 431.089511][T25665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9145'. [ 431.379293][T25674] macsec0: entered promiscuous mode [ 431.426320][T25674] macsec0: left promiscuous mode [ 431.575879][T25680] netlink: 'syz.0.9154': attribute type 2 has an invalid length. [ 431.622567][T25680] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9154'. [ 431.688426][T25685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9155'. [ 431.884289][T25690] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.9158'. [ 432.163538][T25699] netlink: 'syz.2.9162': attribute type 1 has an invalid length. [ 432.182223][T25701] netlink: 'syz.0.9164': attribute type 2 has an invalid length. [ 432.238158][T25699] netlink: 240 bytes leftover after parsing attributes in process `syz.2.9162'. [ 432.247594][T25701] netlink: 'syz.0.9164': attribute type 9 has an invalid length. [ 432.258976][T25703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9163'. [ 433.255083][T25719] netlink: 'syz.4.9173': attribute type 27 has an invalid length. [ 433.290837][T25721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9171'. [ 433.350956][T25721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9171'. [ 433.368357][T25721] netlink: 'syz.0.9171': attribute type 13 has an invalid length. [ 433.434377][T25721] netlink: 'syz.0.9171': attribute type 12 has an invalid length. [ 433.976697][T25735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9177'. [ 435.010264][T25760] rdma_op ffff8880345199f0 conn xmit_rdma 0000000000000000 [ 435.185890][T25764] team0: entered promiscuous mode [ 435.190970][T25764] team_slave_0: entered promiscuous mode [ 435.206208][T25764] team_slave_1: entered promiscuous mode [ 435.212060][T25764] team0: entered allmulticast mode [ 435.227576][T25764] team_slave_0: entered allmulticast mode [ 435.250053][T25764] team_slave_1: entered allmulticast mode [ 435.260567][T25764] team0: Cannot enslave team device to itself [ 435.462978][T25769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9196'. [ 436.963329][T25817] __nla_validate_parse: 1 callbacks suppressed [ 436.963347][T25817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9217'. [ 437.010792][T25817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9217'. [ 437.034703][T25820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9218'. [ 439.792804][T25876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9244'. [ 440.628949][T25895] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 440.670859][T25895] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 441.044121][T25903] netlink: 'syz.3.9255': attribute type 4 has an invalid length. [ 441.076882][T25903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9255'. [ 441.194408][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9257'. [ 441.362738][T25911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9258'. [ 442.165183][T25931] tipc: Enabling of bearer rejected, failed to enable media [ 443.608439][T25960] netlink: 332 bytes leftover after parsing attributes in process `syz.4.9282'. [ 443.637038][T25960] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9282'. [ 443.667428][T25960] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9282'. [ 444.912794][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 445.034225][T25991] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 445.074803][T25998] xt_socket: unknown flags 0xd0 [ 445.432923][T26011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.683985][T26047] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9319'. [ 448.299967][T26085] openvswitch: netlink: Actions may not be safe on all matching packets [ 448.630113][T26094] tipc: Started in network mode [ 448.662701][T26094] tipc: Node identity ac14140f, cluster identity 4711 [ 448.703278][T26094] tipc: New replicast peer: 255.0.0.255 [ 448.737237][T26094] tipc: Enabled bearer , priority 10 [ 449.916856][ T5909] tipc: Node number set to 2886997007 [ 450.061873][T26123] netlink: 'syz.2.9356': attribute type 4 has an invalid length. [ 450.127923][T26123] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9356'. [ 450.312052][T26128] batadv0 speed is unknown, defaulting to 1000 [ 450.878250][T26147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9367'. [ 452.953921][T26192] tipc: Started in network mode [ 452.982868][T26192] tipc: Node identity e0000002, cluster identity 4711 [ 452.989706][T26192] tipc: Enabling of bearer rejected, failed to enable media [ 453.319383][T26202] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9394'. [ 453.377685][T26202] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9394'. [ 453.417684][T26202] netlink: 'syz.3.9394': attribute type 5 has an invalid length. [ 453.458325][T26202] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9394'. [ 454.813143][T26234] dvmrp0: left allmulticast mode [ 455.911748][T26262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9423'. [ 455.953305][T26262] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 456.658283][T26274] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 457.261706][T26294] lo: entered allmulticast mode [ 457.295381][T26294] lo: left allmulticast mode [ 457.575803][T26304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9442'. [ 457.592980][T26303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9444'. [ 458.306933][T26325] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9453'. [ 458.896633][T26338] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9459'. [ 459.469902][T26350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9466'. [ 460.187643][T26368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9475'. [ 460.254437][T26367] delete_channel: no stack [ 462.056223][ T65] tipc: Subscription rejected, illegal request [ 462.453964][ T5885] IPVS: starting estimator thread 0... [ 462.565080][T26428] IPVS: using max 20 ests per chain, 48000 per kthread [ 464.982579][T26438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9507'. [ 465.122501][T26438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9507'. [ 472.528082][T26447] netlink: 'syz.4.9510': attribute type 3 has an invalid length. [ 494.219544][T26468] netlink: 277 bytes leftover after parsing attributes in process `syz.3.9514'. [ 517.555813][T26480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 517.691890][T26480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 517.734755][T26480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 518.077617][T26480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 518.137085][T26480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 518.151495][T26480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 519.681817][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.718041][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.949233][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 520.066264][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 520.101549][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 520.122246][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 520.538001][ T5833] Bluetooth: hci0: command tx timeout [ 522.438475][ T5833] Bluetooth: hci2: command tx timeout [ 522.681974][ T5833] Bluetooth: hci0: command tx timeout [ 523.205749][T26480] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 523.252045][T26480] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 523.266188][T26480] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 523.281232][T26480] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 523.295476][T26480] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 523.316655][T26480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 525.143210][T26480] Bluetooth: hci2: command tx timeout [ 525.172126][T26480] Bluetooth: hci0: command tx timeout [ 526.289574][T26480] Bluetooth: hci3: command tx timeout [ 527.245110][T26480] Bluetooth: hci0: command tx timeout [ 527.248129][ T5833] Bluetooth: hci2: command tx timeout [ 528.366234][ T5833] Bluetooth: hci3: command tx timeout [ 529.383069][ T5833] Bluetooth: hci2: command tx timeout [ 530.450550][ T5833] Bluetooth: hci3: command tx timeout [ 531.374735][T26480] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 531.595837][T26480] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 531.843040][T26480] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 532.050159][T26480] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 532.069512][T26480] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 532.086878][T26480] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 532.553477][ T5833] Bluetooth: hci3: command tx timeout [ 535.043542][T26480] Bluetooth: hci5: command tx timeout [ 537.084124][ T5833] Bluetooth: hci5: command tx timeout [ 539.306156][ T5833] Bluetooth: hci5: command tx timeout [ 540.419222][T26480] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 540.438707][T26480] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 540.748624][T26480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 540.768811][T26480] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 540.958509][T26480] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 540.985552][T26480] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 541.404624][T26480] Bluetooth: hci5: command tx timeout [ 543.305395][T26480] Bluetooth: hci6: command tx timeout [ 545.406955][T26480] Bluetooth: hci6: command tx timeout [ 547.506511][T26480] Bluetooth: hci6: command tx timeout [ 549.568898][T26480] Bluetooth: hci6: command tx timeout [ 558.488011][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 558.562147][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 558.576290][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 558.591182][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 558.669573][ T5833] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 558.683607][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 561.909698][ T5833] Bluetooth: hci7: command tx timeout [ 564.493853][T26480] Bluetooth: hci7: command tx timeout [ 566.543741][T26480] Bluetooth: hci7: command tx timeout [ 568.714360][T26480] Bluetooth: hci7: command tx timeout [ 569.868651][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 570.024384][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 570.041759][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 570.056972][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 570.071109][ T5833] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 570.084940][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 571.882242][T26480] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 571.999594][T26480] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 572.060517][T26480] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 572.076556][T26480] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 572.100816][T26480] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 572.116447][T26480] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 572.615364][T26480] Bluetooth: hci8: command tx timeout [ 574.394186][T26480] Bluetooth: hci9: command tx timeout [ 575.027327][T26480] Bluetooth: hci8: command tx timeout [ 576.567470][T26480] Bluetooth: hci9: command tx timeout [ 577.258484][T26480] Bluetooth: hci8: command tx timeout [ 578.934271][T26480] Bluetooth: hci9: command tx timeout [ 579.457010][T26480] Bluetooth: hci8: command tx timeout [ 581.126329][T26480] Bluetooth: hci9: command tx timeout [ 595.841130][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.880247][T26480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.961933][T26480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 602.132124][T26480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 602.388549][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 602.421527][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 602.435549][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 605.662466][ T5842] Bluetooth: hci1: command tx timeout [ 607.731604][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.889645][ T5842] Bluetooth: hci1: command tx timeout [ 610.045439][ T5842] Bluetooth: hci1: command tx timeout [ 612.141892][ T5842] Bluetooth: hci1: command tx timeout [ 616.730843][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 616.760314][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 616.957923][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.471473][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.498259][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 617.525699][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.077942][T26484] bond0: (slave syz_tun): Releasing backup interface [ 620.207359][ T5833] Bluetooth: hci0: command tx timeout [ 622.519384][ T5833] Bluetooth: hci0: command tx timeout [ 624.637764][ T5833] Bluetooth: hci0: command tx timeout [ 627.335272][ T5833] Bluetooth: hci0: command tx timeout [ 633.318467][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.086858][T26518] batadv0 speed is unknown, defaulting to 1000 [ 636.349297][T26514] batadv0 speed is unknown, defaulting to 1000 [ 638.080420][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 638.119649][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 638.143654][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 638.293816][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 638.417138][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 638.430960][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 639.144559][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 641.027573][ T5842] Bluetooth: hci2: command tx timeout [ 643.101336][ T5842] Bluetooth: hci2: command tx timeout [ 645.164972][ T5842] Bluetooth: hci2: command tx timeout [ 646.200106][ T65] team0: Port device netdevsim0 removed [ 647.280104][ T5833] Bluetooth: hci2: command tx timeout [ 647.525247][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.761084][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 647.830713][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 648.126920][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 648.147662][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 648.165235][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 648.200414][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 650.400185][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 650.420569][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 650.440609][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 650.491469][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 650.510440][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 650.527665][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 650.743947][ T5842] Bluetooth: hci3: command tx timeout [ 652.901104][ T5842] Bluetooth: hci3: command tx timeout [ 653.823080][ T5842] Bluetooth: hci4: command tx timeout [ 655.089674][ T5842] Bluetooth: hci3: command tx timeout [ 655.920279][ T5842] Bluetooth: hci4: command tx timeout [ 656.409622][T26555] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 656.564954][T26555] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 656.655332][T26555] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 656.824667][T26555] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 656.879538][T26555] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 656.898854][T26555] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 657.298850][T26555] Bluetooth: hci3: command tx timeout [ 657.991736][T26555] Bluetooth: hci4: command tx timeout [ 659.494762][T26555] Bluetooth: hci5: command tx timeout [ 659.735874][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 659.955403][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 660.037319][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 660.099393][T26480] Bluetooth: hci4: command tx timeout [ 660.117573][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 660.217930][ T5842] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 660.237341][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 661.617453][T26555] Bluetooth: hci5: command tx timeout [ 662.448625][T26555] Bluetooth: hci6: command tx timeout [ 663.947234][T26555] Bluetooth: hci5: command tx timeout [ 664.527766][T26555] Bluetooth: hci6: command tx timeout [ 666.042196][T26555] Bluetooth: hci5: command tx timeout [ 666.617997][T26555] Bluetooth: hci6: command tx timeout [ 668.865386][T26555] Bluetooth: hci6: command tx timeout [ 677.379265][T26540] batadv0 speed is unknown, defaulting to 1000 [ 678.049778][T26480] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 678.198720][T26480] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 678.301650][T26480] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 678.750689][T26480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 678.774982][T26480] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 678.916267][T26480] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 679.165516][T26528] batadv0 speed is unknown, defaulting to 1000 [ 681.136998][T26480] Bluetooth: hci7: command tx timeout [ 681.698933][T26556] batadv0 speed is unknown, defaulting to 1000 [ 682.917714][T26559] batadv0 speed is unknown, defaulting to 1000 [ 683.363512][T26480] Bluetooth: hci7: command tx timeout [ 685.679443][T26480] Bluetooth: hci7: command tx timeout [ 688.197656][T26480] Bluetooth: hci7: command tx timeout [ 693.281087][T26555] Bluetooth: hci8: command 0x0406 tx timeout [ 698.437065][T26555] Bluetooth: hci9: command 0x0406 tx timeout [ 706.933985][T26555] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 711.323008][T26555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.331073][T26581] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 713.939526][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 713.961361][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 714.050982][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 714.269932][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 714.591223][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 714.624228][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 715.426084][T26563] batadv0 speed is unknown, defaulting to 1000 [ 716.951355][T26567] batadv0 speed is unknown, defaulting to 1000 [ 717.208400][T26480] Bluetooth: hci3: command tx timeout [ 719.599533][T26480] Bluetooth: hci3: command tx timeout [ 721.715130][T26480] Bluetooth: hci3: command tx timeout [ 723.819035][T26480] Bluetooth: hci3: command tx timeout [ 727.534427][T26585] batadv0 speed is unknown, defaulting to 1000 [ 728.080280][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 728.409201][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 728.445871][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 728.465028][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 728.484036][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 728.515651][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 729.164009][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 730.729988][ T5833] Bluetooth: hci2: command tx timeout [ 732.782479][ T5833] Bluetooth: hci2: command tx timeout [ 734.898028][ T5833] Bluetooth: hci2: command tx timeout [ 735.191011][T26594] batadv0 speed is unknown, defaulting to 1000 [ 737.244627][T26480] Bluetooth: hci2: command tx timeout [ 743.540773][ T5842] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 743.575779][ T5842] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 743.706390][ T5842] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 743.762660][ T5842] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 743.797184][ T5842] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 744.349176][ T5842] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 745.044494][T26480] Bluetooth: hci0: command 0x0406 tx timeout [ 748.486379][T26480] Bluetooth: hci10: command tx timeout [ 750.618150][ T5833] Bluetooth: hci10: command tx timeout [ 752.790404][ T5833] Bluetooth: hci10: command tx timeout [ 754.913106][ T5833] Bluetooth: hci10: command tx timeout [ 764.400388][T26480] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 764.887913][T26480] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 764.959752][T26480] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 765.045966][T26480] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 765.165249][T26480] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 765.178985][T26480] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 767.023835][T26480] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 767.129962][T26480] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 767.180091][T26480] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 767.967145][T26480] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 768.052808][T26555] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 768.108431][T26480] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 770.641078][T26480] Bluetooth: hci11: command tx timeout [ 772.871864][T26555] Bluetooth: hci11: command tx timeout [ 773.380770][ T5833] Bluetooth: hci12: command tx timeout [ 774.968163][ T5833] Bluetooth: hci11: command tx timeout [ 775.092063][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 775.491427][ T5833] Bluetooth: hci12: command tx timeout [ 777.015617][ T5833] Bluetooth: hci11: command tx timeout [ 777.559816][ T5833] Bluetooth: hci12: command tx timeout [ 779.681131][ T5833] Bluetooth: hci12: command tx timeout [ 780.956995][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 785.780048][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 788.599387][ T5833] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 788.905783][ T5833] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 789.079660][ T5833] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 789.129938][ T5833] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 789.903642][ T5833] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 789.955840][ T5833] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 792.323974][T26555] Bluetooth: hci13: command tx timeout [ 794.389446][T26555] Bluetooth: hci13: command tx timeout [ 796.150126][ T5833] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 796.177590][ T5833] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 796.220865][ T5833] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 796.314989][ T5833] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 796.383654][ T5833] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 796.391116][ T5833] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 796.610764][T26555] Bluetooth: hci13: command tx timeout [ 798.862863][T26555] Bluetooth: hci13: command tx timeout [ 799.771742][T26555] Bluetooth: hci14: command tx timeout [ 801.917302][T26555] Bluetooth: hci14: command tx timeout [ 804.280387][T26555] Bluetooth: hci14: command tx timeout [ 806.082655][T26555] Bluetooth: hci7: command 0x0406 tx timeout [ 806.367623][T26480] Bluetooth: hci14: command tx timeout [ 808.670644][T26480] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 808.817107][T26480] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 808.831464][T26480] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 808.846299][T26480] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 808.876816][T26480] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 809.516898][T26480] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 816.845552][ T5833] Bluetooth: hci15: command tx timeout [ 819.203428][ T5833] Bluetooth: hci15: command tx timeout [ 821.293969][T26480] Bluetooth: hci15: command tx timeout [ 821.316348][T26480] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 821.557390][T26480] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 821.697991][T26555] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 821.857137][T26480] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 821.878712][T26480] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 821.899244][T26480] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 823.394769][T26480] Bluetooth: hci15: command tx timeout [ 824.245654][ T5833] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 824.283600][ T5833] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 824.307731][ T5833] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 824.408724][ T5833] Bluetooth: hci16: command tx timeout [ 824.428466][ T5833] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 824.451815][ T5833] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 824.482699][ T5833] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 826.678371][T26480] Bluetooth: hci16: command tx timeout [ 827.948758][T26480] Bluetooth: hci17: command tx timeout [ 829.212373][T26480] Bluetooth: hci16: command tx timeout [ 830.146498][T26480] Bluetooth: hci17: command tx timeout [ 831.239112][ T5833] Bluetooth: hci16: command tx timeout [ 832.377800][ T5833] Bluetooth: hci17: command tx timeout [ 834.463479][ T5833] Bluetooth: hci17: command tx timeout [ 841.880295][T26651] Bluetooth: hci3: command 0x0406 tx timeout [ 843.243287][T26480] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 843.699492][T26651] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 845.438250][T26649] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 845.736021][T26651] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 852.174894][T26480] Bluetooth: hci2: command 0x0406 tx timeout [ 868.500339][T26480] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 868.571831][T26480] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 869.000132][T26480] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 869.038717][T26480] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 869.056518][T26480] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 869.077650][T26480] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 872.633636][T26480] Bluetooth: hci10: command tx timeout [ 874.779734][ T30] INFO: task syz-executor:26585 blocked for more than 143 seconds. [ 874.800323][ T30] Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 874.863954][ T5833] Bluetooth: hci10: command tx timeout [ 875.117149][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 876.174583][ T30] task:syz-executor state:D stack:24832 pid:26585 tgid:26585 ppid:1 task_flags:0x400140 flags:0x00004006 [ 876.582905][ T30] Call Trace: [ 876.586238][ T30] [ 876.589188][ T30] __schedule+0x190e/0x4c90 [ 876.845213][T26480] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 876.904015][T26480] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 876.912071][T26480] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 876.933895][T26651] Bluetooth: hci10: command tx timeout [ 876.941791][T26480] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 876.965162][T26480] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 876.985935][T26480] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 877.235545][ T30] ? __pfx___schedule+0x10/0x10 [ 877.240455][ T30] ? __pfx_lock_release+0x10/0x10 [ 879.052054][ T5833] Bluetooth: hci10: command tx timeout [ 879.119419][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 879.137573][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 879.437060][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 879.875047][ T30] ? schedule+0x90/0x320 [ 879.879351][ T30] schedule+0x14b/0x320 [ 879.895977][ T30] schedule_preempt_disabled+0x13/0x30 [ 879.901469][ T30] __mutex_lock+0x817/0x1010 [ 880.531958][ T30] ? __mutex_lock+0x602/0x1010 [ 880.863174][ T30] ? add_one_compat_dev+0x10d/0x710 [ 880.868437][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 881.067182][ T5833] Bluetooth: hci11: command tx timeout [ 881.215328][ T30] ? xa_find_after+0x648/0x700 [ 881.220145][ T30] ? xa_find_after+0x1b1/0x700 [ 881.237193][ T30] ? __pfx_down_read+0x10/0x10 [ 881.242001][ T30] add_one_compat_dev+0x10d/0x710 [ 882.090735][ T30] rdma_dev_init_net+0x1f1/0x280 [ 882.576509][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 882.582038][ T30] ops_init+0x349/0x5b0 [ 882.816505][ T30] setup_net+0x287/0x9e0 [ 882.820806][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 883.276729][ T5833] Bluetooth: hci11: command tx timeout [ 883.773237][ T30] ? __pfx_setup_net+0x10/0x10 [ 883.778075][ T30] ? debug_mutex_init+0x38/0x70 [ 884.156583][ T30] copy_net_ns+0x33f/0x570 [ 884.161069][ T30] create_new_namespaces+0x425/0x7b0 [ 884.358613][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 884.544046][ T30] ksys_unshare+0x57d/0xa70 [ 884.548623][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 884.634490][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 884.640868][ T30] ? do_syscall_64+0x100/0x230