last executing test programs: 7.084929974s ago: executing program 4 (id=7246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtaction={0xeb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x20000000}, 0x8}, [{}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x23d5, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) 7.007860665s ago: executing program 4 (id=7247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xea5e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e00)={r2}, 0xc) 6.825355827s ago: executing program 4 (id=7252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="12000000220000000400000006"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r0, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 6.71718825s ago: executing program 4 (id=7255): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='-', @ANYRESOCT=r1], 0x9) 6.637090906s ago: executing program 4 (id=7256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="6ef63aa41533e91a305f8fedc5fa", 0xe}], 0x1}, 0x3008c011) 5.628890139s ago: executing program 4 (id=7264): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 2.328751571s ago: executing program 0 (id=7321): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x10000000, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x20, r0, 0xa09, 0x100000, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x40810) 2.098722446s ago: executing program 0 (id=7327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r0) 1.767138869s ago: executing program 0 (id=7333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000041}, 0x20004041) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.762161697s ago: executing program 3 (id=7334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlinkprop={0x24, 0x6c, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb08d589af9793fe3, 0x800}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20008080) 1.616848045s ago: executing program 1 (id=7335): r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000180), &(0x7f0000000200)=@tcp6=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000180), 0x0}, 0x20) 1.597151927s ago: executing program 3 (id=7337): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r0, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1.455192091s ago: executing program 1 (id=7338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0xba5a, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) 1.347893504s ago: executing program 3 (id=7340): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a"], 0x44}}, 0x0) 1.229251502s ago: executing program 1 (id=7342): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.133103129s ago: executing program 3 (id=7343): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) ppoll(&(0x7f00000000c0)=[{r0, 0x100}, {r0, 0x210}], 0x2, 0x0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) 1.054989617s ago: executing program 1 (id=7344): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.041486692s ago: executing program 2 (id=7345): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="bdb4", 0x2}], 0x1, 0x0, 0x0, 0x8000}, 0x20040001) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 896.902198ms ago: executing program 2 (id=7346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) 805.099784ms ago: executing program 1 (id=7347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x40050, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0xfffffff8, 0x4) 786.60412ms ago: executing program 0 (id=7348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) 755.489288ms ago: executing program 2 (id=7349): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x30, 'cpu'}]}, 0x5) 677.068545ms ago: executing program 0 (id=7350): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0xa}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x19}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x64}}, 0x40) 595.267839ms ago: executing program 2 (id=7351): unshare(0x2000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000880000014"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x4}, 0x20) 449.373089ms ago: executing program 1 (id=7352): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 417.808963ms ago: executing program 2 (id=7353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xc}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 316.956833ms ago: executing program 2 (id=7354): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x4, 0x8, 0xffff, 0x0, 0x7, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0) 223.421698ms ago: executing program 3 (id=7355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000f0f000000000100000e00"}}}]}, 0x48}}, 0x0) 108.932962ms ago: executing program 0 (id=7356): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000440)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r0, r1, r0, r1]}}], 0x30, 0x4}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000005c0)="a9bb20a37125c3f073e37f27fe49790ec9ba36f43608d1e05fbba8b71924e38cf06ff2596a4109a9740aa18b7f1a9a28b5ddadd3b41837af6c4dd799b330eef1522b9181f343835160a7b8dec9ff36ca5dfe5a64befd3e5ef0", 0x59}, {&(0x7f0000000640)="4f7b75870049d44bf473", 0xa}], 0x2, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0xc0, 0x20000090}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000c00)="26823243a033470226f2bf88e5cbe7e081e289b8cfca8c8dbe12d259dbb077013428e91f69c79941473fab0b7a45d0b9b44860005d7663d3cd7aff166d489d7b7ac9f06198bdcc33bc", 0x49}], 0x1, 0x0, 0x0, 0x88c4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d80)="e41b7192f968169e", 0x8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x20000010}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001180)}], 0x1, &(0x7f00000023c0)=[@cred={{0x1c}}], 0x20, 0x40080}}], 0x5, 0x4000) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 0s ago: executing program 3 (id=7357): socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000150097f07059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca8a308f7abca1b4e7d06a6bd7c493872f7d0375ed08a56041f000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): imeout [ 77.670632][ T5918] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 77.670733][ T54] Bluetooth: hci0: command tx timeout [ 77.681159][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.718311][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.729357][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.739134][ T5830] Bluetooth: hci1: command tx timeout [ 77.760659][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.775689][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.814241][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.815944][ T5830] Bluetooth: hci4: command tx timeout [ 77.828591][ T54] Bluetooth: hci2: command tx timeout [ 77.829975][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.843627][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.852486][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.906341][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.914304][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.922893][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.935751][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.063690][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.102890][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.130500][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.187570][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.239482][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.265669][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.357951][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.395446][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.513085][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.545188][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.718877][ T5942] xt_addrtype: ipv6 does not support BROADCAST matching [ 79.465818][ T6007] netlink: 96 bytes leftover after parsing attributes in process `syz.4.18'. [ 79.736261][ T54] Bluetooth: hci3: command tx timeout [ 79.742171][ T5830] Bluetooth: hci0: command tx timeout [ 79.815835][ T5830] Bluetooth: hci1: command tx timeout [ 79.896201][ T5830] Bluetooth: hci4: command tx timeout [ 79.902255][ T54] Bluetooth: hci2: command tx timeout [ 80.229478][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.623095][ T6031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.822843][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 80.881651][ T6039] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 80.920460][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 81.364477][ T6063] netlink: 184 bytes leftover after parsing attributes in process `syz.1.46'. [ 81.372202][ T6061] netlink: 'syz.3.44': attribute type 9 has an invalid length. [ 81.435023][ T6061] netlink: 'syz.3.44': attribute type 7 has an invalid length. [ 81.442637][ T6061] netlink: 'syz.3.44': attribute type 8 has an invalid length. [ 81.494402][ T6065] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 81.526212][ T6065] netlink: 224 bytes leftover after parsing attributes in process `syz.0.47'. [ 81.540089][ T6069] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 81.745517][ T6078] warning: `syz.4.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.768671][ T6079] openvswitch: netlink: Flow actions attr not present in new flow. [ 82.071417][ T6089] Cannot find add_set index 0 as target [ 82.812345][ T6122] netlink: 68 bytes leftover after parsing attributes in process `syz.3.71'. [ 83.245068][ T6140] netlink: 'syz.2.77': attribute type 10 has an invalid length. [ 83.309845][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.333481][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.356434][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.376817][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.568218][ T6140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.874099][ T6166] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 83.938752][ T6166] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 83.949411][ T6166] gretap1: entered promiscuous mode [ 83.954818][ T6166] gretap1: entered allmulticast mode [ 84.332158][ T6183] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 85.050756][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 85.360195][ T6232] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 85.459268][ T6238] : renamed from bond0 (while UP) [ 85.637382][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 85.789638][ T6253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 85.906875][ T6259] netlink: 292 bytes leftover after parsing attributes in process `syz.3.124'. [ 86.906458][ T46] cfg80211: failed to load regulatory.db [ 86.952040][ T6303] netlink: 40 bytes leftover after parsing attributes in process `syz.4.141'. [ 87.344448][ T6317] netlink: 108 bytes leftover after parsing attributes in process `syz.4.148'. [ 87.371652][ T6317] netlink: 108 bytes leftover after parsing attributes in process `syz.4.148'. [ 87.540315][ T6320] netlink: 'syz.1.150': attribute type 10 has an invalid length. [ 87.701225][ T6320] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 88.278177][ T6348] netlink: 'syz.1.161': attribute type 1 has an invalid length. [ 88.315837][ T6348] netlink: 224 bytes leftover after parsing attributes in process `syz.1.161'. [ 88.623837][ T6356] netlink: 'syz.3.165': attribute type 1 has an invalid length. [ 88.976018][ T6376] veth2: entered allmulticast mode [ 88.999963][ T6379] netlink: 44 bytes leftover after parsing attributes in process `syz.4.175'. [ 89.028899][ T6379] netlink: 'syz.4.175': attribute type 1 has an invalid length. [ 89.055396][ T6382] xt_CONNSECMARK: invalid mode: 0 [ 89.313653][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 89.616303][ T6402] netlink: 'syz.2.187': attribute type 2 has an invalid length. [ 89.738812][ T6402] fþ: entered promiscuous mode [ 90.825644][ T6460] xt_hashlimit: max too large, truncated to 1048576 [ 91.684453][ T6498] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 92.004504][ T6512] delete_channel: no stack [ 92.026855][ T6511] ip6tnl1: entered promiscuous mode [ 92.052356][ T6511] ip6tnl1: entered allmulticast mode [ 92.289842][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 92.508885][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'. [ 94.325122][ T6630] netlink: 'syz.2.273': attribute type 21 has an invalid length. [ 94.355080][ T6630] netlink: 128 bytes leftover after parsing attributes in process `syz.2.273'. [ 94.397641][ T6630] netlink: 'syz.2.273': attribute type 4 has an invalid length. [ 94.445256][ T6630] netlink: 'syz.2.273': attribute type 5 has an invalid length. [ 94.500849][ T6630] netlink: 3 bytes leftover after parsing attributes in process `syz.2.273'. [ 94.817789][ T6647] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 96.448451][ T6712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.306'. [ 96.466412][ T6712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.306'. [ 96.750555][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 97.712065][ T6749] bridge1: entered promiscuous mode [ 97.775095][ T6755] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 97.825210][ T6755] netlink: 224 bytes leftover after parsing attributes in process `syz.0.326'. [ 97.837699][ T6757] netlink: 19 bytes leftover after parsing attributes in process `syz.1.329'. [ 98.925553][ T6805] gre0: entered promiscuous mode [ 99.922295][ T6851] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 100.709905][ T6891] xt_connbytes: Forcing CT accounting to be enabled [ 100.752789][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.391'. [ 100.756005][ T6891] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.778222][ T6895] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 100.815141][ T6895] netlink: 244 bytes leftover after parsing attributes in process `syz.2.390'. [ 100.849452][ T6891] xt_bpf: check failed: parse error [ 101.215067][ T6917] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 101.279961][ T6921] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 101.486426][ T6930] netlink: 92 bytes leftover after parsing attributes in process `syz.3.407'. [ 101.608816][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 101.806545][ T6943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 102.395127][ T6972] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 102.405785][ T6973] xt_recent: hitcount (4294967167) is larger than allowed maximum (65535) [ 102.585369][ T6983] netlink: 3 bytes leftover after parsing attributes in process `syz.4.432'. [ 102.602018][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 102.625193][ T6983] netlink: 3 bytes leftover after parsing attributes in process `syz.4.432'. [ 102.645074][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 102.964671][ T7000] netlink: 'syz.4.439': attribute type 2 has an invalid length. [ 103.042913][ T7000] fþ: entered promiscuous mode [ 103.228608][ T7009] xt_cluster: you have exceeded the maximum number of cluster nodes (261 > 32) [ 103.354108][ T7015] __nla_validate_parse: 1 callbacks suppressed [ 103.354132][ T7015] netlink: 188 bytes leftover after parsing attributes in process `syz.0.447'. [ 103.509168][ T7022] netlink: 'syz.1.451': attribute type 3 has an invalid length. [ 103.528242][ T7022] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.451'. [ 103.854789][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 104.038549][ T7047] openvswitch: netlink: Multiple metadata blocks provided [ 104.307257][ T7061] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 104.594100][ T7076] xt_TCPMSS: Only works on TCP SYN packets [ 104.598954][ T7078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.479'. [ 105.044482][ T7094] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 105.108899][ T7094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.379425][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 105.446683][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.497'. [ 105.733079][ T7133] netlink: 60 bytes leftover after parsing attributes in process `syz.1.503'. [ 105.748378][ T7133] unsupported nlmsg_type 40 [ 105.941908][ T7142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.070402][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 106.641042][ T7176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.693658][ T7182] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.481184][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 107.772542][ T7225] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 107.825454][ T7225] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 107.838533][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 107.923940][ T7228] batadv1: entered promiscuous mode [ 108.909595][ T7282] netlink: 'syz.1.559': attribute type 58 has an invalid length. [ 108.914123][ T7279] bond1: entered allmulticast mode [ 108.923149][ T7279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.944160][ T7282] __nla_validate_parse: 1 callbacks suppressed [ 108.944179][ T7282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'. [ 109.091539][ T7288] xt_CT: No such helper "snmp" [ 109.091542][ T7292] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 109.233973][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.565'. [ 109.530200][ T7311] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 109.575949][ T7311] netlink: 'syz.2.571': attribute type 8 has an invalid length. [ 109.633313][ T7311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.571'. [ 110.070667][ T7338] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 110.155355][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 110.218288][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 110.267830][ T7343] netlink: 'syz.3.586': attribute type 3 has an invalid length. [ 110.797930][ T7367] netlink: 'syz.2.598': attribute type 7 has an invalid length. [ 110.840185][ T7367] netlink: 'syz.2.598': attribute type 8 has an invalid length. [ 111.573182][ T7400] ieee802154 phy1 wpan1: encryption failed: -22 [ 112.107571][ T7416] netlink: 180 bytes leftover after parsing attributes in process `syz.2.621'. [ 112.226183][ T7423] xt_TCPMSS: Only works on TCP SYN packets [ 113.569224][ T7485] xt_TCPMSS: Only works on TCP SYN packets [ 114.423008][ T7521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.618486][ T7531] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.676'. [ 114.784472][ T7530] C: renamed from team_slave_0 (while UP) [ 114.826702][ T7530] netlink: 'syz.0.677': attribute type 1 has an invalid length. [ 114.834552][ T7530] netlink: 152 bytes leftover after parsing attributes in process `syz.0.677'. [ 114.852017][ T7530] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 115.056788][ T7551] netlink: 68 bytes leftover after parsing attributes in process `syz.2.687'. [ 115.075869][ T7550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.686'. [ 115.933412][ T7595] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 116.670835][ T7623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.719'. [ 117.026182][ T7640] netlink: 13 bytes leftover after parsing attributes in process `syz.2.729'. [ 117.441746][ T7659] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 117.641070][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 117.824866][ T7677] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 117.833020][ T7677] netlink: 17 bytes leftover after parsing attributes in process `syz.0.746'. [ 117.947507][ T7680] netlink: zone id is out of range [ 117.966035][ T7680] netlink: zone id is out of range [ 117.971288][ T7680] netlink: zone id is out of range [ 118.006199][ T7680] netlink: zone id is out of range [ 118.526357][ T7706] team_slave_1: entered allmulticast mode [ 118.557197][ T7706] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 118.738333][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 118.790296][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 119.110135][ T7733] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 119.328729][ T7742] netlink: 'syz.1.775': attribute type 1 has an invalid length. [ 120.139914][ T7780] __nla_validate_parse: 4 callbacks suppressed [ 120.139938][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 121.271985][ T7807] infiniband syz1: set active [ 121.288161][ T7807] infiniband syz1: added bond_slave_1 [ 121.347891][ T7807] RDS/IB: syz1: added [ 121.353127][ T7807] smc: adding ib device syz1 with port count 1 [ 121.365305][ T7807] smc: ib device syz1 port 1 has pnetid [ 122.693850][ T7875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.838'. [ 123.066183][ T7887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.844'. [ 123.831326][ T7911] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 124.032683][ T7924] openvswitch: netlink: Actions may not be safe on all matching packets [ 124.873594][ T7962] netlink: 'syz.3.878': attribute type 21 has an invalid length. [ 124.934361][ T7962] netlink: 'syz.3.878': attribute type 6 has an invalid length. [ 125.011689][ T7962] netlink: 156 bytes leftover after parsing attributes in process `syz.3.878'. [ 125.451572][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.891'. [ 125.790416][ T8000] bridge_slave_0: left allmulticast mode [ 125.796721][ T8000] bridge_slave_0: left promiscuous mode [ 125.803907][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.847782][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.896'. [ 125.910924][ T8000] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 126.214150][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 126.217994][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.908'. [ 126.312441][ T8019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.559174][ T8030] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 127.526980][ T8073] bond0: entered allmulticast mode [ 127.620482][ T8080] SET target dimension over the limit! [ 128.465475][ T8118] netlink: 92 bytes leftover after parsing attributes in process `syz.0.952'. [ 128.524618][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.954'. [ 128.567599][ T8126] ip6tnl0: Master is either lo or non-ether device [ 129.735138][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.977'. [ 130.372192][ T8204] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.498301][ T8215] Zero length message leads to an empty skb [ 130.524468][ T8211] tipc: Started in network mode [ 130.530856][ T8211] tipc: Node identity fef331000000000000000000000000aa, cluster identity 4711 [ 130.566717][ T8211] tipc: Enabling of bearer rejected, failed to enable media [ 130.762205][ T8204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.956852][ T8204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.003362][ T8239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.997'. [ 131.041848][ T8242] bridge2: entered promiscuous mode [ 131.078774][ T8242] bridge2: entered allmulticast mode [ 131.321283][ T8204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.538234][ T8204] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.597618][ T8204] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.619863][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1008'. [ 131.646230][ T8204] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.660316][ T8263] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 131.674802][ T8262] netlink: 'syz.0.1009': attribute type 3 has an invalid length. [ 131.698750][ T8204] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.954670][ T8278] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 132.716263][ T8309] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1032'. [ 132.945576][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130664][ T5911] IPVS: starting estimator thread 0... [ 133.235623][ T8328] IPVS: using max 20 ests per chain, 48000 per kthread [ 133.462842][ T8341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.701533][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 133.727450][ T8352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1049'. [ 133.751015][ T8352] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1049'. [ 133.790633][ T8352] vlan2: entered allmulticast mode [ 133.812601][ T8352] gretap0: entered allmulticast mode [ 133.823370][ T8355] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1051'. [ 133.863736][ T8355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.106811][ T8363] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1057'. [ 134.154988][ T8363] netlink: 440 bytes leftover after parsing attributes in process `syz.2.1057'. [ 137.890444][ T8523] netlink: 63 bytes leftover after parsing attributes in process `syz.1.1133'. [ 138.804877][ T8557] netlink: 1292 bytes leftover after parsing attributes in process `syz.4.1150'. [ 139.048444][ T8569] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 139.191237][ T8572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.359226][ T8572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.471518][ T8572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.630683][ T8572] bond0: (slave netdevsim0): Releasing backup interface [ 139.684199][ T8572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.835632][ T8572] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.906222][ T8572] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.920386][ T8602] Bluetooth: MGMT ver 1.23 [ 139.962618][ T8572] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.048156][ T8572] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.511510][ T8625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1183'. [ 141.613680][ T8678] netlink: 'syz.4.1206': attribute type 3 has an invalid length. [ 141.656075][ T8678] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1206'. [ 141.853381][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 142.056713][ T8696] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 142.358297][ T8698] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.552765][ T8698] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.601893][ T8708] netlink: 'syz.4.1221': attribute type 8 has an invalid length. [ 142.629416][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 142.658457][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1222'. [ 142.954582][ T8698] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.047664][ T8715] tipc: Started in network mode [ 143.052730][ T8715] tipc: Node identity , cluster identity 4711 [ 143.217116][ T8698] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.446245][ T8698] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.487134][ T8698] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.496527][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 143.506804][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 143.547835][ T8698] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.598062][ T8698] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.630968][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'. [ 144.673775][ T8785] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1260'. [ 144.683139][ T8785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1260'. [ 144.693520][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1260'. [ 145.463122][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1271'. [ 145.649416][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 146.072026][ T8837] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 147.015935][ T8872] netlink: 'syz.1.1299': attribute type 11 has an invalid length. [ 147.146625][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 147.366421][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'. [ 147.935062][ T8918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.190810][ T8926] x_tables: ip_tables: udp match: only valid for protocol 17 [ 148.505078][ T8928] netlink: 'syz.2.1323': attribute type 142 has an invalid length. [ 149.304560][ T8958] __nla_validate_parse: 4 callbacks suppressed [ 149.304584][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1338'. [ 149.329149][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1338'. [ 149.896861][ T8985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.682836][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 150.793549][ T5911] IPVS: starting estimator thread 0... [ 150.831846][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 150.874458][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 150.910139][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1368'. [ 150.985346][ T9015] IPVS: using max 23 ests per chain, 55200 per kthread [ 151.513347][ T9045] netlink: 'syz.2.1378': attribute type 178 has an invalid length. [ 151.633463][ T9051] netlink: 'syz.1.1380': attribute type 2 has an invalid length. [ 152.065144][ T9065] tipc: Enabling of bearer rejected, failed to enable media [ 152.993088][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 153.017156][ T9104] tipc: Started in network mode [ 153.031085][ T9104] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 153.056871][ T9104] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 153.087977][ T9104] tipc: Enabled bearer , priority 10 [ 153.955183][ T9146] netlink: 'syz.3.1427': attribute type 1 has an invalid length. [ 154.092208][ T9154] tipc: Enabling of bearer rejected, failed to enable media [ 154.283221][ T5911] tipc: Node number set to 1 [ 154.405849][ T9171] netlink: 'syz.2.1439': attribute type 4 has an invalid length. [ 154.757006][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1445'. [ 154.871002][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 154.880350][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 155.209731][ T9200] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1452'. [ 155.789680][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 156.076963][ T9240] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1472'. [ 156.144154][ T9240] gretap0: entered promiscuous mode [ 156.155248][ T9243] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 156.191749][ T9244] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1472'. [ 156.221890][ T9247] dvmrp8: entered allmulticast mode [ 156.245369][ T9244] 0ªX¹¦D: renamed from gretap0 [ 156.267504][ T9244] 0ªX¹¦D: left promiscuous mode [ 156.272612][ T9244] 0ªX¹¦D: entered allmulticast mode [ 156.312396][ T9244] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 156.372051][ T9246] dvmrp8: left allmulticast mode [ 156.380025][ T9244] syz.3.1472 (9244) used greatest stack depth: 19504 bytes left [ 156.592149][ T9264] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1482'. [ 156.898690][ T9276] netlink: 'syz.1.1488': attribute type 29 has an invalid length. [ 157.350672][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'. [ 157.637874][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 159.131474][ T9366] vlan3: entered promiscuous mode [ 159.155251][ T9366] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 159.192388][ T9366] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 161.065978][ T9446] __nla_validate_parse: 3 callbacks suppressed [ 161.065999][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'. [ 161.362193][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 161.388792][ T9458] netlink: 'syz.4.1572': attribute type 30 has an invalid length. [ 161.425009][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 162.150098][ T9484] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 162.194704][ T9484] macvlan2: entered promiscuous mode [ 162.273985][ T9484] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 163.588823][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 164.064416][ T9533] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551607) [ 164.075712][ T9533] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 166.816699][ T9602] netlink: 'syz.1.1637': attribute type 15 has an invalid length. [ 168.678123][ T9675] gtp0: entered promiscuous mode [ 168.683274][ T9675] gtp0: entered allmulticast mode [ 169.297196][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'. [ 169.329117][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'. [ 169.608535][ T9703] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 169.627293][ T9701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.832149][ T9710] netlink: 'syz.0.1689': attribute type 1 has an invalid length. [ 169.840483][ T9710] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1689'. [ 170.291188][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'. [ 172.374720][ T9818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.427298][ T9822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1743'. [ 172.443882][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 172.467456][ T9822] netlink: 'syz.4.1743': attribute type 5 has an invalid length. [ 172.561555][ T9825] tipc: Enabled bearer , priority 10 [ 172.742170][ T9833] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1749'. [ 172.909923][ T9839] netlink: 1152 bytes leftover after parsing attributes in process `syz.4.1751'. [ 172.922642][ T9839] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 172.946456][ T9839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.355489][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1760'. [ 173.387516][ T9857] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 173.686050][ T5911] tipc: Node number set to 4277350826 [ 174.804499][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 176.255954][ T9960] netlink: 'syz.3.1809': attribute type 66 has an invalid length. [ 176.368220][ T9963] team0: Device gtp0 is of different type [ 176.978055][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1824'. [ 177.006158][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 177.275416][T10001] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.1828'. [ 177.458295][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1831'. [ 177.839196][T10024] vlan3: entered promiscuous mode [ 177.845579][T10024] macvtap0: entered promiscuous mode [ 178.335481][T10040] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 178.387214][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 178.516450][T10048] x_tables: ip_tables: udp match: only valid for protocol 17 [ 178.744360][T10054] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 178.767405][T10054] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1855'. [ 178.874232][T10060] pim6reg: entered allmulticast mode [ 178.923097][T10063] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.1858'. [ 178.945236][T10062] pim6reg: left allmulticast mode [ 178.951916][T10063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.606791][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1891'. [ 180.984861][T10149] macvlan2: entered promiscuous mode [ 181.003619][T10149] macvlan2: entered allmulticast mode [ 181.275182][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1906'. [ 181.322395][T10164] netlink: 'syz.4.1906': attribute type 3 has an invalid length. [ 181.510234][T10173] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.1912'. [ 182.585291][T10220] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1934'. [ 182.594642][T10220] nbd: illegal input index 16744192 [ 182.624388][T10223] nbd: couldn't find device at index -1 [ 183.712314][T10265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1954'. [ 184.924646][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 184.954710][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'. [ 185.005278][T10315] netlink: 'syz.4.1976': attribute type 14 has an invalid length. [ 185.032735][T10321] lo: entered allmulticast mode [ 185.043904][T10321] lo: left allmulticast mode [ 185.769429][T10343] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 186.307195][T10363] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 186.344284][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 186.420440][T10369] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2001'. [ 186.467637][T10369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2001'. [ 186.525183][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2001'. [ 187.415433][ T5830] Bluetooth: hci4: command tx timeout [ 187.890466][T10424] Bluetooth: MGMT ver 1.23 [ 188.002421][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 188.777330][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 188.805268][T10463] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 189.716159][T10499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2062'. [ 189.866634][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 189.889055][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 189.925136][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2068'. [ 189.950506][T10510] netlink: 'syz.2.2068': attribute type 13 has an invalid length. [ 190.116906][ T9] IPVS: starting estimator thread 0... [ 190.205091][T10516] IPVS: using max 17 ests per chain, 40800 per kthread [ 190.438491][T10528] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 190.780601][T10548] tipc: Enabled bearer , priority 17 [ 190.820658][T10547] : entered promiscuous mode [ 191.151790][T10560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.187716][T10560] sock: sock_timestamping_bind_phc: sock not bind to device [ 191.914709][T10586] __nla_validate_parse: 1 callbacks suppressed [ 191.914729][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 192.128365][T10597] netlink: 'syz.3.2107': attribute type 3 has an invalid length. [ 192.736964][T10623] IPVS: Error joining to the multicast group [ 193.384562][T10658] tipc: MTU too low for tipc bearer [ 193.789525][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2147'. [ 194.141945][T10688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.150963][T10688] team0: Port device bond4 added [ 194.162009][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 194.174702][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'. [ 194.184405][T10693] netlink: 'syz.0.2155': attribute type 7 has an invalid length. [ 194.379290][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.414848][T10703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2160'. [ 194.691935][T10713] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 194.907775][T10724] netlink: 'syz.4.2170': attribute type 4 has an invalid length. [ 196.463329][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 196.470026][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 196.476204][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 196.642791][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 196.683391][T10813] vlan3: entered promiscuous mode [ 196.691542][T10813] xfrm0: entered promiscuous mode [ 196.697759][T10813] vlan3: entered allmulticast mode [ 196.708159][T10813] xfrm0: entered allmulticast mode [ 196.764340][T10819] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2209'. [ 196.959896][T10829] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.2212'. [ 197.160867][T10837] syz.3.2219 uses obsolete (PF_INET,SOCK_PACKET) [ 197.543530][T10851] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 197.585757][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2227'. [ 198.361148][T10886] netlink: 'syz.2.2243': attribute type 10 has an invalid length. [ 199.490992][T10942] bridge0: port 3(ip6gretap0) entered blocking state [ 199.510824][T10942] bridge0: port 3(ip6gretap0) entered disabled state [ 199.524190][T10942] ip6gretap0: entered allmulticast mode [ 199.532454][T10942] ip6gretap0: entered promiscuous mode [ 199.540457][T10942] bridge0: port 3(ip6gretap0) entered blocking state [ 199.547541][T10942] bridge0: port 3(ip6gretap0) entered forwarding state [ 199.979209][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 199.988591][T10964] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2280'. [ 200.369752][T10979] netlink: 'syz.3.2287': attribute type 4 has an invalid length. [ 200.393975][T10979] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2287'. [ 200.830395][T10996] netlink: 'syz.4.2295': attribute type 1 has an invalid length. [ 200.930031][T11000] pimreg3: entered allmulticast mode [ 201.464501][T11019] netlink: 'syz.3.2308': attribute type 7 has an invalid length. [ 201.483946][T11019] netlink: 'syz.3.2308': attribute type 3 has an invalid length. [ 201.502879][T11019] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2308'. [ 201.685831][T11030] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2311'. [ 202.304049][T11052] IPv6: sit1: Disabled Multicast RS [ 202.317142][T11052] sit1: entered allmulticast mode [ 202.341969][T11056] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 202.349931][T11056] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2324'. [ 202.439439][T11063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.778617][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2333'. [ 203.709219][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.958136][T11126] tipc: Enabled bearer , priority 10 [ 204.218715][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 204.229415][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 204.463712][T11147] netlink: 'syz.3.2367': attribute type 2 has an invalid length. [ 204.533618][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 204.533965][T11147] : entered promiscuous mode [ 204.543573][T11154] nbd: must specify a size in bytes for the device [ 204.844174][T11166] lo: entered allmulticast mode [ 205.901072][T11220] RDS: rds_bind could not find a transport for 1400::, load rds_tcp or rds_rdma? [ 205.997974][T11222] syz.2.2404[11222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.238885][T11271] xt_socket: unknown flags 0xd0 [ 208.290164][T11321] netlink: 243 bytes leftover after parsing attributes in process `syz.1.2449'. [ 208.305078][T11321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.769599][T11389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2484'. [ 209.801865][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 210.343950][T11409] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2496'. [ 211.774520][T11448] netpci0: renamed from team0 (while UP) [ 211.844851][T11448] netpci0: Cannot enslave team device to itself [ 211.854657][T11448] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check. [ 212.935568][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'. [ 213.456382][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 213.641439][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2544'. [ 213.650675][T11513] tipc: Enabling of bearer rejected, media not registered [ 214.335002][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 214.361474][T11539] IPVS: Error joining to the multicast group [ 214.670904][T11557] openvswitch: netlink: Missing valid actions attribute. [ 214.678190][T11557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.302952][T11592] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2583'. [ 215.336137][T11585] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.2580'. [ 215.804607][T11613] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 215.997098][T11618] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 216.013203][T11618] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2594'. [ 216.688902][T11638] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.2604'. [ 216.719594][T11638] openvswitch: netlink: Message has 7 unknown bytes. [ 216.974007][T11646] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.2607'. [ 217.796509][T11675] netlink: 'syz.0.2622': attribute type 10 has an invalid length. [ 218.152573][T11675] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 218.231433][T11674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.387534][T11692] netlink: 'syz.4.2631': attribute type 11 has an invalid length. [ 218.469919][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 218.556855][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 219.045767][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2639'. [ 220.305677][T11748] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2652'. [ 220.341490][T11746] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2652'. [ 220.934678][T11766] sit0: entered promiscuous mode [ 221.022347][T11766] netlink: 'syz.2.2661': attribute type 1 has an invalid length. [ 221.069371][T11766] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2661'. [ 221.726599][T11783] gtp0: entered promiscuous mode [ 221.731635][T11783] gtp0: entered allmulticast mode [ 222.712459][T11808] netlink: 'syz.4.2681': attribute type 1 has an invalid length. [ 222.768199][T11808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.504785][T11847] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 224.533401][T11847] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 224.558610][T11854] netlink: 'syz.0.2702': attribute type 11 has an invalid length. [ 224.576512][T11854] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2702'. [ 224.740465][T11859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.012753][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2711'. [ 225.862281][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2730'. [ 225.948111][T11906] netlink: 'syz.2.2730': attribute type 19 has an invalid length. [ 225.982453][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'. [ 226.230974][T11927] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2740'. [ 226.303729][T11932] gtp1: entered promiscuous mode [ 226.308967][T11932] gtp1: entered allmulticast mode [ 227.078189][T11959] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 227.124644][T11962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2752'. [ 227.337719][T11968] bridge1: entered promiscuous mode [ 227.368956][T11968] bridge1: entered allmulticast mode [ 227.419796][T11968] team0: Port device bridge1 added [ 227.722446][T11986] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.2765'. [ 227.738145][T11986] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 227.738569][T11989] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.2767'. [ 227.756787][T11989] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 228.162504][T12003] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.2774'. [ 228.215220][T12003] openvswitch: netlink: Message has 10 unknown bytes. [ 228.397693][T12014] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.407123][T12014] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.415994][T12014] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.424734][T12014] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.431523][T12016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2780'. [ 229.080362][T12040] raw_sendmsg: syz.1.2792 forgot to set AF_INET. Fix it! [ 229.420891][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 229.642735][T12056] netlink: 'syz.2.2800': attribute type 10 has an invalid length. [ 229.732043][T12056] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 229.758779][T12055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.356535][T12093] __nla_validate_parse: 3 callbacks suppressed [ 230.356555][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2814'. [ 230.951780][T12123] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 232.079975][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 232.090926][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 232.459004][T12182] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.2856'. [ 232.482738][T12182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.823024][T12194] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2862'. [ 232.854259][T12194] openvswitch: netlink: Actions may not be safe on all matching packets [ 232.997014][T12199] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 233.228834][T12209] netlink: 'syz.4.2869': attribute type 5 has an invalid length. [ 233.618142][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 233.634352][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 233.695084][T12229] netlink: 'syz.1.2880': attribute type 12 has an invalid length. [ 233.758813][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2882'. [ 233.811693][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'. [ 233.852658][T12239] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 233.861881][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2882'. [ 233.884591][ T5988] tipc: Resetting bearer [ 234.133217][T12249] netlink: 'syz.0.2891': attribute type 8 has an invalid length. [ 234.154441][T12247] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 234.576150][T12267] sctp: [Deprecated]: syz.4.2898 (pid 12267) Use of int in max_burst socket option deprecated. [ 234.576150][T12267] Use struct sctp_assoc_value instead [ 235.417818][T12311] __nla_validate_parse: 2 callbacks suppressed [ 235.417838][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2917'. [ 235.467958][T12311] netlink: 'syz.0.2917': attribute type 7 has an invalid length. [ 235.810616][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 236.082617][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 236.449228][T12355] bridge0: entered promiscuous mode [ 236.465445][T12355] macvlan2: entered promiscuous mode [ 236.499698][T12355] bridge0: port 1(macvlan2) entered blocking state [ 236.526837][T12355] bridge0: port 1(macvlan2) entered disabled state [ 236.545288][T12355] macvlan2: entered allmulticast mode [ 236.563638][T12355] bridge0: entered allmulticast mode [ 236.603670][T12355] macvlan2: left allmulticast mode [ 236.613070][T12355] bridge0: left allmulticast mode [ 236.636317][T12355] bridge0: left promiscuous mode [ 236.737928][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 236.749020][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 237.288364][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2961'. [ 237.297564][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2961'. [ 237.446118][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 237.482652][T12397] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.2960'. [ 237.822561][T12420] dvmrp0: entered allmulticast mode [ 237.832672][T12420] dvmrp0: left allmulticast mode [ 238.670980][T12444] tipc: Started in network mode [ 238.677198][T12444] tipc: Node identity 7, cluster identity 1 [ 238.687849][T12444] tipc: Node number set to 7 [ 239.071479][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.830882][T12497] netlink: 'syz.1.3009': attribute type 14 has an invalid length. [ 239.865155][T12497] netlink: 'syz.1.3009': attribute type 13 has an invalid length. [ 242.383210][T12602] syz.2.3058 (12602) used obsolete PPPIOCDETACH ioctl [ 242.485524][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 243.022716][T12618] tipc: Enabling of bearer rejected, failed to enable media [ 243.645118][T12649] __nla_validate_parse: 3 callbacks suppressed [ 243.645139][T12649] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3076'. [ 243.896947][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'. [ 243.915104][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3082'. [ 243.935000][T12657] netlink: 'syz.0.3082': attribute type 14 has an invalid length. [ 243.945042][T12657] netlink: 'syz.0.3082': attribute type 11 has an invalid length. [ 244.216604][T12673] tipc: Enabling of bearer rejected, failed to enable media [ 244.310130][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 244.319860][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3093'. [ 244.329676][T12678] netlink: 'syz.0.3093': attribute type 25 has an invalid length. [ 244.464709][T12683] tipc: Enabling of bearer rejected, failed to enable media [ 245.221170][T12716] vlan3: entered promiscuous mode [ 245.226853][T12716] macvtap0: entered promiscuous mode [ 245.586565][T12740] nbd: must specify at least one socket [ 246.504010][T12772] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$Í˲8£ÃÂxxÏÜ£ûÌÌULÙvy¸ÚØ¢ [ 246.829286][T12783] netlink: 'syz.4.3141': attribute type 2 has an invalid length. [ 246.875821][T12783] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3141'. [ 247.505781][T12815] bond0: Unable to set up delay as MII monitoring is disabled [ 248.909828][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 249.171091][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'. [ 249.208613][ T5982] bond0: (slave bond_slave_0): interface is now down [ 249.218695][ T5982] bond0: (slave bond_slave_1): interface is now down [ 249.238598][ T5982] bond0: now running without any active interface! [ 249.841778][T12925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3192'. [ 250.959489][T12989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3217'. [ 251.710950][ T9] IPVS: starting estimator thread 0... [ 251.767049][T13031] netlink: 'syz.2.3234': attribute type 7 has an invalid length. [ 251.824976][T13031] netlink: 'syz.2.3234': attribute type 8 has an invalid length. [ 251.841990][T13028] IPVS: using max 20 ests per chain, 48000 per kthread [ 251.865095][T13031] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3234'. [ 252.257832][ T5982] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 252.267875][ T5982] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 252.278105][ T5982] bond0: active interface up! [ 252.542886][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'. [ 252.552124][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3253'. [ 252.568891][T13071] netlink: 'syz.3.3253': attribute type 5 has an invalid length. [ 252.589047][T13071] netlink: 'syz.3.3253': attribute type 6 has an invalid length. [ 253.056477][T13094] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 253.223033][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 253.326926][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'. [ 253.351363][T13098] nbd: socks must be embedded in a SOCK_ITEM attr [ 253.916384][T13128] netlink: 'syz.2.3282': attribute type 4 has an invalid length. [ 254.293593][T13147] netlink: 'syz.2.3288': attribute type 12 has an invalid length. [ 254.375512][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 254.865891][T13169] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3300'. [ 255.827903][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.632512][T13243] IPVS: Error connecting to the multicast addr [ 256.721555][T13245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3327'. [ 257.092200][T13261] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 257.649884][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3341'. [ 257.881931][T13293] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 257.915335][T13293] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 258.625511][T13323] tipc: Started in network mode [ 258.645043][T13323] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 258.663001][T13323] tipc: Enabling of bearer rejected, failed to enable media [ 260.506414][T13387] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3379'. [ 260.660767][T13386] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3379'. [ 260.958482][T13396] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3385'. [ 261.498871][T13409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.581071][T13412] nbd: must specify a size in bytes for the device [ 262.702473][T13453] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3411'. [ 262.711674][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3411'. [ 262.720725][T13453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3411'. [ 262.729787][T13453] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3411'. [ 263.906678][T13514] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 264.600951][T13545] netlink: 'syz.1.3449': attribute type 1 has an invalid length. [ 264.838335][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3451'. [ 265.117750][T13568] tipc: Enabled bearer , priority 1 [ 265.814940][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 265.946210][T13607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3477'. [ 266.360014][T13620] netlink: 'syz.4.3483': attribute type 1 has an invalid length. [ 266.856466][T13636] ipvlan2: entered promiscuous mode [ 267.036240][T13647] netlink: 'syz.1.3496': attribute type 18 has an invalid length. [ 267.180173][T13656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.471409][T13670] netlink: 'syz.2.3506': attribute type 1 has an invalid length. [ 267.500569][T13670] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3506'. [ 267.633432][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 267.833300][T13690] netlink: 'syz.0.3516': attribute type 1 has an invalid length. [ 267.843549][T13690] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3516'. [ 267.905620][T13690] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3516'. [ 268.761708][T13730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3536'. [ 268.792595][T13731] netlink: 'syz.3.3534': attribute type 3 has an invalid length. [ 268.835718][T13731] netlink: 'syz.3.3534': attribute type 1 has an invalid length. [ 269.200280][T13749] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3546'. [ 269.311073][T13752] pim6reg9: entered allmulticast mode [ 269.379897][T13759] IPVS: Error connecting to the multicast addr [ 271.654144][T13858] team0: Device gtp0 is of different type [ 271.997949][T13874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3606'. [ 272.013003][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 272.682803][T13906] IPVS: length: 118 != 24 [ 274.528126][T13974] tipc: Enabled bearer , priority 1 [ 274.928410][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3655'. [ 275.051678][T14000] netlink: 'syz.4.3660': attribute type 8 has an invalid length. [ 275.059842][T14000] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3660'. [ 275.218278][T14008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3664'. [ 275.656481][ T46] tipc: Node number set to 11521 [ 276.566605][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 277.519138][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3706'. [ 279.803464][T14191] xt_CT: No such helper "snmp" [ 280.430070][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3766'. [ 281.653826][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'. [ 281.664616][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3791'. [ 281.757477][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3793'. [ 282.287996][T14312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3807'. [ 282.461138][T14319] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3812'. [ 282.478931][T14321] netlink: 'syz.2.3813': attribute type 1 has an invalid length. [ 282.543835][T14324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.073863][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 283.079234][T14351] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3826'. [ 283.102537][T14351] netlink: 'syz.0.3826': attribute type 3 has an invalid length. [ 283.113196][T14351] netlink: 'syz.0.3826': attribute type 3 has an invalid length. [ 283.424451][T14365] netlink: 'syz.3.3834': attribute type 27 has an invalid length. [ 284.166642][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 284.570926][T14421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3858'. [ 285.312115][T14456] netlink: 'syz.0.3877': attribute type 1 has an invalid length. [ 285.613601][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'. [ 286.061092][T14493] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.3894'. [ 286.099067][T14493] openvswitch: netlink: Message has 2 unknown bytes. [ 286.514532][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3903'. [ 286.585054][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3903'. [ 287.261672][T14546] netlink: 'syz.2.3919': attribute type 7 has an invalid length. [ 287.276827][T14546] netlink: 'syz.2.3919': attribute type 8 has an invalid length. [ 287.938520][T14573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3933'. [ 287.950805][T14573] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3933'. [ 287.961252][T14573] tipc: Invalid UDP bearer configuration [ 287.961297][T14573] tipc: Enabling of bearer rejected, failed to enable media [ 287.977380][T14580] netlink: 'syz.2.3935': attribute type 1 has an invalid length. [ 288.225224][T14591] __nla_validate_parse: 3 callbacks suppressed [ 288.225245][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3939'. [ 288.915360][T14621] Bluetooth: MGMT ver 1.23 [ 288.940070][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3956'. [ 288.951587][T14623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3956'. [ 288.965114][T14623] gretap0: entered promiscuous mode [ 288.970591][T14623] macvlan2: entered promiscuous mode [ 288.976037][T14623] macvlan2: entered allmulticast mode [ 289.324644][T14639] IPVS: Scheduler module ip_vs_sip not found [ 289.466118][T14645] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.023033][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3980'. [ 290.032502][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3980'. [ 290.930588][T14718] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4000'. [ 291.307288][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4011'. [ 291.322949][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4011'. [ 291.362484][T14740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4012'. [ 291.389779][T14740] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 291.413868][T14740] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 291.423067][T14740] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 291.432369][T14740] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 291.441654][T14740] geneve2: entered allmulticast mode [ 291.449522][T14738] netlink: 'syz.2.4011': attribute type 18 has an invalid length. [ 291.910312][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'. [ 292.475637][T14791] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 292.557928][T14791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.271396][T14903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4083'. [ 295.823350][T14929] openvswitch: netlink: Actions may not be safe on all matching packets [ 296.474148][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4099'. [ 299.625567][T15101] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 299.655215][T15105] netlink: 'syz.1.4166': attribute type 2 has an invalid length. [ 299.727624][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 300.246735][T15136] netlink: 'syz.3.4181': attribute type 4 has an invalid length. [ 300.288774][T15136] netlink: 'syz.3.4181': attribute type 4 has an invalid length. [ 300.444766][T15146] lo speed is unknown, defaulting to 1000 [ 300.461873][T15146] lo speed is unknown, defaulting to 1000 [ 300.470241][T15146] lo speed is unknown, defaulting to 1000 [ 300.734188][T15146] infiniband syz0: set active [ 300.739261][ T9] lo speed is unknown, defaulting to 1000 [ 300.751355][T15146] infiniband syz0: added lo [ 300.872265][T15146] RDS/IB: syz0: added [ 300.895163][T15146] smc: adding ib device syz0 with port count 1 [ 300.914351][T15146] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 300.930699][T15146] lo speed is unknown, defaulting to 1000 [ 300.941662][T15166] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.4194'. [ 301.011432][ T46] lo speed is unknown, defaulting to 1000 [ 301.127248][T15146] lo speed is unknown, defaulting to 1000 [ 301.202201][T15175] nbd: illegal input index -1 [ 301.247309][T15146] lo speed is unknown, defaulting to 1000 [ 301.596936][T15191] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4208'. [ 301.855014][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4207'. [ 301.998874][T15146] lo speed is unknown, defaulting to 1000 [ 302.064920][T15207] bond0: left allmulticast mode [ 302.079935][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 302.364688][T15213] geneve2: entered promiscuous mode [ 302.408487][T15213] geneve2: entered allmulticast mode [ 302.498834][T15146] lo speed is unknown, defaulting to 1000 [ 302.901925][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4230'. [ 303.483470][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4243'. [ 304.021913][T15289] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.031379][T15289] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.040270][T15289] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.049074][T15289] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.123660][T15293] RDS: rds_bind could not find a transport for ::4000:20:0:0, load rds_tcp or rds_rdma? [ 306.092940][T15390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4302'. [ 306.148201][T15398] netlink: 'syz.0.4305': attribute type 29 has an invalid length. [ 306.157590][T15397] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4304'. [ 306.187311][T15398] netlink: 'syz.0.4305': attribute type 29 has an invalid length. [ 306.591381][T15415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.751246][T15421] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4317'. [ 307.120187][T15440] netlink: 'syz.3.4325': attribute type 322 has an invalid length. [ 307.547860][T15460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.834044][T15474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4342'. [ 307.861171][T15473] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4343'. [ 307.880626][T15473] netlink: 'syz.3.4343': attribute type 9 has an invalid length. [ 308.007691][T15483] netlink: 'syz.2.4346': attribute type 62 has an invalid length. [ 308.375475][T15505] netlink: 'syz.2.4356': attribute type 7 has an invalid length. [ 308.405337][T15505] netlink: 'syz.2.4356': attribute type 8 has an invalid length. [ 308.413116][T15505] netlink: 'syz.2.4356': attribute type 13 has an invalid length. [ 308.838954][T15532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4370'. [ 308.982322][T15537] sock: sock_set_timeout: `syz.1.4374' (pid 15537) tries to set negative timeout [ 309.013090][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4377'. [ 309.203992][T15552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4379'. [ 309.215225][T15548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4379'. [ 309.384319][T15562] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4386'. [ 309.408489][T15562] NCSI netlink: No device for ifindex 0 [ 309.916550][T15578] netlink: 'syz.2.4394': attribute type 2 has an invalid length. [ 310.178754][T15588] tipc: Enabled bearer , priority 1 [ 310.377502][T15596] pimreg: entered allmulticast mode [ 310.401953][T15596] pimreg: left allmulticast mode [ 310.415432][T15596] lo: left allmulticast mode [ 311.712127][T15663] __nla_validate_parse: 2 callbacks suppressed [ 311.712147][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4433'. [ 311.744961][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4433'. [ 311.924141][T15675] netlink: 'syz.0.4441': attribute type 1 has an invalid length. [ 311.934935][T15675] netlink: 'syz.0.4441': attribute type 3 has an invalid length. [ 311.970732][T15675] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4441'. [ 311.980906][T15667] ebtables: ebtables: counters copy to user failed while replacing table [ 312.563839][T15707] netlink: 'syz.2.4456': attribute type 6 has an invalid length. [ 312.586036][T15707] netlink: 'syz.2.4456': attribute type 7 has an invalid length. [ 312.593958][T15707] netlink: 'syz.2.4456': attribute type 8 has an invalid length. [ 313.215440][T15737] atomic_op ffff888079675998 conn xmit_atomic 0000000000000000 [ 313.822929][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4488'. [ 314.170794][T15787] netlink: 'syz.3.4495': attribute type 15 has an invalid length. [ 314.184010][T15787] netlink: 'syz.3.4495': attribute type 1 has an invalid length. [ 314.200311][T15790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.209700][T15787] netlink: 654 bytes leftover after parsing attributes in process `syz.3.4495'. [ 314.575839][T15805] netlink: 'syz.3.4503': attribute type 1 has an invalid length. [ 314.585115][T15805] netlink: 'syz.3.4503': attribute type 8 has an invalid length. [ 314.592918][T15805] netlink: 109544 bytes leftover after parsing attributes in process `syz.3.4503'. [ 315.073452][T15841] netlink: 'syz.3.4521': attribute type 21 has an invalid length. [ 315.994425][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4540'. [ 316.141961][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4543'. [ 317.263010][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.173722][T16000] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 318.450518][T16011] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 318.479538][T16011] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 318.510436][T16015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4598'. [ 319.035256][T16041] IPv6: syztnl0: Disabled Multicast RS [ 321.640775][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4679'. [ 321.813523][T16197] netlink: 211456 bytes leftover after parsing attributes in process `syz.2.4683'. [ 321.833192][T16197] netlink: zone id is out of range [ 321.839194][T16197] netlink: zone id is out of range [ 321.844470][T16197] netlink: get zone limit has 8 unknown bytes [ 322.320469][T16225] netlink: 'syz.1.4696': attribute type 1 has an invalid length. [ 322.374187][T16227] nbd: must specify an index to disconnect [ 322.872441][T16253] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4710'. [ 323.043616][T16268] tipc: Enabling of bearer rejected, failed to enable media [ 323.912003][T16310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4737'. [ 324.409520][T16327] veth1_macvtap: left promiscuous mode [ 324.421774][T16327] macsec0: entered promiscuous mode [ 324.471321][T16332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4748'. [ 324.615162][T16340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4749'. [ 325.014722][T16367] netlink: 'syz.1.4764': attribute type 28 has an invalid length. [ 325.032569][T16365] netlink: 'syz.4.4763': attribute type 3 has an invalid length. [ 325.049430][T16369] netlink: zone id is out of range [ 325.106217][T16369] netlink: zone id is out of range [ 325.111658][T16369] netlink: zone id is out of range [ 325.123727][T16369] netlink: zone id is out of range [ 325.129731][T16369] netlink: zone id is out of range [ 325.140908][T16369] netlink: zone id is out of range [ 325.146687][T16369] netlink: zone id is out of range [ 325.548928][T16392] netlink: 91 bytes leftover after parsing attributes in process `syz.3.4776'. [ 325.917927][T16412] netlink: 'syz.3.4786': attribute type 27 has an invalid length. [ 326.102390][T16424] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.367069][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4797'. [ 327.270008][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4816'. [ 328.564694][T16516] netlink: 'syz.3.4835': attribute type 8 has an invalid length. [ 328.700798][T16523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4838'. [ 328.830663][T16525] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4839'. [ 328.903667][T16532] netlink: 'syz.3.4842': attribute type 3 has an invalid length. [ 329.024127][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4846'. [ 329.053720][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4846'. [ 329.075686][T16540] netlink: 'syz.1.4846': attribute type 19 has an invalid length. [ 329.236417][T16548] netlink: 'syz.1.4850': attribute type 27 has an invalid length. [ 329.448587][T16560] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4856'. [ 329.494481][T16562] tipc: Enabled bearer , priority 1 [ 329.526047][T16564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4858'. [ 329.576826][T16564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4858'. [ 330.139185][T16589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4869'. [ 331.906396][T16668] veth0_to_batadv: entered promiscuous mode [ 331.934997][T16668] veth0_to_batadv: entered allmulticast mode [ 332.124359][T16683] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 332.475505][T16697] vxcan1: entered allmulticast mode [ 332.481768][T16699] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4922'. [ 332.501582][T16699] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4922'. [ 332.528982][T16702] tipc: Enabling of bearer rejected, already enabled [ 333.496613][T16740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4941'. [ 333.543875][T16737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4941'. [ 334.785218][T16808] net_ratelimit: 7 callbacks suppressed [ 334.785240][T16808] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 334.965845][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4981'. [ 335.065939][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4984'. [ 335.074703][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4983'. [ 335.114214][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4983'. [ 335.485444][T16846] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4993'. [ 336.121646][T16879] IPVS: Unknown mcast interface: veth°ñ [ 336.293385][T16887] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 336.498352][T16896] netlink: 'syz.3.5018': attribute type 11 has an invalid length. [ 336.694203][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5025'. [ 336.730571][T16910] netlink: 'syz.2.5026': attribute type 1 has an invalid length. [ 337.152093][T16931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5036'. [ 337.182813][T16931] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5036'. [ 337.213417][T16931] netlink: 'syz.2.5036': attribute type 6 has an invalid length. [ 337.243242][T16931] netlink: 'syz.2.5036': attribute type 5 has an invalid length. [ 337.266373][T16931] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5036'. [ 337.785944][T16953] syz.3.5047: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 337.834983][T16953] CPU: 0 UID: 0 PID: 16953 Comm: syz.3.5047 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 337.845826][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 337.855934][T16953] Call Trace: [ 337.859257][T16953] [ 337.862233][T16953] dump_stack_lvl+0x241/0x360 [ 337.866992][T16953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.872269][T16953] ? __pfx__printk+0x10/0x10 [ 337.872752][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5048'. [ 337.877004][T16953] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 337.892383][T16953] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 337.898943][T16953] warn_alloc+0x278/0x410 [ 337.903330][T16953] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 337.909443][T16953] ? __pfx_warn_alloc+0x10/0x10 [ 337.914334][T16953] ? kasan_save_track+0x3f/0x80 [ 337.919227][T16953] ? __kasan_kmalloc+0x98/0xb0 [ 337.924045][T16953] ? xsk_setsockopt+0x4ea/0x950 [ 337.928938][T16953] ? do_sock_setsockopt+0x3af/0x720 [ 337.934177][T16953] ? __x64_sys_setsockopt+0x1ee/0x280 [ 337.939593][T16953] ? do_syscall_64+0xf3/0x230 [ 337.944321][T16953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.950449][T16953] __vmalloc_node_range_noprof+0x126/0x1380 [ 337.956429][T16953] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.962800][T16953] ? __kasan_kmalloc+0x98/0xb0 [ 337.967620][T16953] vmalloc_user_noprof+0x74/0x80 [ 337.972600][T16953] ? xskq_create+0xb6/0x170 [ 337.977151][T16953] xskq_create+0xb6/0x170 [ 337.981527][T16953] xsk_init_queue+0xa1/0x100 [ 337.986200][T16953] xsk_setsockopt+0x4ea/0x950 [ 337.990919][T16953] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.996161][T16953] ? __pfx_aa_sk_perm+0x10/0x10 [ 338.001067][T16953] ? aa_sock_opt_perm+0x79/0x120 [ 338.006057][T16953] ? __pfx_xsk_setsockopt+0x10/0x10 [ 338.011305][T16953] do_sock_setsockopt+0x3af/0x720 [ 338.016384][T16953] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 338.021981][T16953] ? __fget_files+0x395/0x410 [ 338.026706][T16953] ? __fget_files+0x2a/0x410 [ 338.031358][T16953] __x64_sys_setsockopt+0x1ee/0x280 [ 338.036619][T16953] do_syscall_64+0xf3/0x230 [ 338.041169][T16953] ? clear_bhb_loop+0x35/0x90 [ 338.045900][T16953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.049871][T16963] rdma_op ffff888021f7d1f0 conn xmit_rdma 0000000000000000 [ 338.051829][T16953] RIP: 0033:0x7f4d3eb85d29 [ 338.051861][T16953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.083123][T16953] RSP: 002b:00007f4d3f8e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.091604][T16953] RAX: ffffffffffffffda RBX: 00007f4d3ed75fa0 RCX: 00007f4d3eb85d29 [ 338.099611][T16953] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 338.107621][T16953] RBP: 00007f4d3ec01b08 R08: 0000000000000004 R09: 0000000000000000 [ 338.115634][T16953] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.123648][T16953] R13: 0000000000000000 R14: 00007f4d3ed75fa0 R15: 00007ffed8039f28 [ 338.131672][T16953] [ 338.165241][T16953] Mem-Info: [ 338.173468][T16953] active_anon:3924 inactive_anon:0 isolated_anon:0 [ 338.173468][T16953] active_file:1228 inactive_file:38351 isolated_file:0 [ 338.173468][T16953] unevictable:768 dirty:269 writeback:0 [ 338.173468][T16953] slab_reclaimable:11054 slab_unreclaimable:104000 [ 338.173468][T16953] mapped:28351 shmem:1422 pagetables:644 [ 338.173468][T16953] sec_pagetables:0 bounce:0 [ 338.173468][T16953] kernel_misc_reclaimable:0 [ 338.173468][T16953] free:1328621 free_pcp:4387 free_cma:0 [ 338.249939][T16953] Node 0 active_anon:15496kB inactive_anon:0kB active_file:4912kB inactive_file:153332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113404kB dirty:1076kB writeback:0kB shmem:4152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11484kB pagetables:2576kB sec_pagetables:0kB all_unreclaimable? no [ 338.314493][T16953] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 338.351342][T16953] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.381211][T16973] netlink: 'syz.2.5057': attribute type 298 has an invalid length. [ 338.429535][T16953] lowmem_reserve[]: 0 2465 2466 0 0 [ 338.443537][T16953] Node 0 DMA32 free:1391876kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:15556kB inactive_anon:0kB active_file:4912kB inactive_file:152504kB unevictable:1536kB writepending:1076kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:18068kB local_pcp:16704kB free_cma:0kB [ 338.492951][T16977] sctp: [Deprecated]: syz.0.5058 (pid 16977) Use of int in maxseg socket option. [ 338.492951][T16977] Use struct sctp_assoc_value instead [ 338.529851][T16953] lowmem_reserve[]: 0 0 0 0 0 [ 338.534678][T16953] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 338.567257][T16953] lowmem_reserve[]: 0 0 0 0 0 [ 338.594957][T16953] Node 1 Normal free:3907048kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.650856][T16953] lowmem_reserve[]: 0 0 0 0 0 [ 338.665079][T16953] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.745445][T16953] Node 0 DMA32: 86*4kB (UME) 171*8kB (UE) 41*16kB (UE) 516*32kB (UE) 539*64kB (UE) 392*128kB (UME) 363*256kB (UM) 327*512kB (UM) 264*1024kB (UME) 10*2048kB (UME) 180*4096kB (UM) = 1392000kB [ 338.798428][T16953] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 338.844969][T16953] Node 1 Normal: 212*4kB (UM) 45*8kB (UME) 53*16kB (UME) 209*32kB (UME) 101*64kB (UME) 29*128kB (UME) 16*256kB (UM) 8*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 946*4096kB (ME) = 3907048kB [ 338.887470][T16953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.905091][T16953] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.935100][T16953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.944710][T16953] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.998379][T16953] 41003 total pagecache pages [ 339.003216][T16953] 0 pages in swap cache [ 339.016912][T16953] Free swap = 124996kB [ 339.045013][T16953] Total swap = 124996kB [ 339.049294][T16953] 2097051 pages RAM [ 339.091997][T16953] 0 pages HighMem/MovableOnly [ 339.112498][T16953] 427013 pages reserved [ 339.132754][T16953] 0 pages cma reserved [ 339.163912][T17007] netlink: 'syz.4.5075': attribute type 16 has an invalid length. [ 339.172140][T17007] netlink: 'syz.4.5075': attribute type 3 has an invalid length. [ 340.665583][T17084] __nla_validate_parse: 4 callbacks suppressed [ 340.665606][T17084] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5110'. [ 341.414168][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5128'. [ 342.288261][T17165] netlink: 'syz.3.5148': attribute type 3 has an invalid length. [ 342.327558][T17165] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5148'. [ 342.581595][T17183] netlink: 'syz.0.5157': attribute type 1 has an invalid length. [ 342.693627][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5159'. [ 343.209994][T17215] nbd: must specify a device to reconfigure [ 343.313086][T17219] gre0: left promiscuous mode [ 343.384410][T17219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.404146][T17225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5177'. [ 343.551446][T17219] syz.1.5174 (17219) used greatest stack depth: 19216 bytes left [ 344.181337][T17262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5195'. [ 345.049212][T17308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5216'. [ 345.669417][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5232'. [ 345.828097][T17348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5236'. [ 346.288022][T17373] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 346.998902][T17419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5269'. [ 347.231504][T17430] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 347.612622][T17452] tipc: Started in network mode [ 347.648622][T17452] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 347.683790][T17452] tipc: Enabling of bearer rejected, failed to enable media [ 348.066054][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5297'. [ 348.819369][T17517] netlink: 'syz.1.5318': attribute type 3 has an invalid length. [ 348.836530][T17521] netlink: 'syz.4.5319': attribute type 16 has an invalid length. [ 349.370004][T17548] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5331'. [ 350.148922][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5347'. [ 350.414796][T17596] netlink: 'syz.3.5356': attribute type 7 has an invalid length. [ 350.422820][T17596] netlink: 'syz.3.5356': attribute type 3 has an invalid length. [ 350.431214][T17596] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5356'. [ 350.836197][T17615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5363'. [ 350.857170][T17615] smc: net device bond0 applied user defined pnetid S [ 351.049753][T17628] ieee802154 phy1 wpan1: encryption failed: -22 [ 351.283565][T17642] macsec0: left promiscuous mode [ 351.289941][T17642] macsec0: entered allmulticast mode [ 351.301275][T17642] veth1_macvtap: entered promiscuous mode [ 351.309714][T17642] veth1_macvtap: entered allmulticast mode [ 351.341849][T17642] macsec0: left allmulticast mode [ 351.355350][T17642] veth1_macvtap: left allmulticast mode [ 351.835608][T17669] netlink: 'syz.0.5391': attribute type 11 has an invalid length. [ 352.049357][T17682] batadv_slave_1: entered promiscuous mode [ 352.076288][T17679] batadv_slave_1: left promiscuous mode [ 352.618150][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5413'. [ 352.820713][T17720] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.934404][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5419'. [ 352.956112][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5419'. [ 353.375810][T17747] tap0: tun_chr_ioctl cmd 1074025677 [ 353.381355][T17747] tap0: linktype set to 774 [ 353.926478][T17774] netlink: 'syz.2.5440': attribute type 29 has an invalid length. [ 353.953055][T17778] netlink: 'syz.3.5443': attribute type 1 has an invalid length. [ 353.962125][T17774] netlink: 'syz.2.5440': attribute type 29 has an invalid length. [ 354.045060][T17779] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5442'. [ 354.184255][T17791] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.5447'. [ 354.196672][T17789] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 354.203023][T17791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.289655][T17796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5451'. [ 354.351630][T17796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5451'. [ 354.696091][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5459'. [ 354.710502][T17813] netlink: 39 bytes leftover after parsing attributes in process `syz.1.5459'. [ 354.959206][T17827] syz.1.5465[17827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.959311][T17827] syz.1.5465[17827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.978027][T17827] syz.1.5465[17827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.001139][T17825] macvlan3: entered promiscuous mode [ 355.052415][T17825] macvlan3: entered allmulticast mode [ 355.069403][T17825] bond0: entered allmulticast mode [ 355.075576][T17825] bond_slave_0: entered allmulticast mode [ 355.081359][T17825] bond_slave_1: entered allmulticast mode [ 355.096313][T17825] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 355.817530][T17862] netlink: 'syz.3.5486': attribute type 2 has an invalid length. [ 355.825973][T17862] netlink: 'syz.3.5486': attribute type 9 has an invalid length. [ 356.088645][T17873] __nla_validate_parse: 5 callbacks suppressed [ 356.088666][T17873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5489'. [ 356.135830][T17873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5489'. [ 356.692731][T17909] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5503'. [ 356.726736][T17910] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5504'. [ 356.921910][T17918] netem: unknown loss type 0 [ 356.968030][T17917] tap0: tun_chr_ioctl cmd 2147767506 [ 357.077813][T17925] netlink: 'syz.2.5511': attribute type 1 has an invalid length. [ 357.093179][T17925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5511'. [ 357.363148][T17936] sctp: [Deprecated]: syz.2.5515 (pid 17936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.363148][T17936] Use struct sctp_sack_info instead [ 357.563034][T17942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.595854][T17942] batadv_slave_0: entered promiscuous mode [ 357.601736][T17942] batadv_slave_0: entered allmulticast mode [ 357.669585][T17949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5523'. [ 357.804431][T17957] netlink: 'syz.1.5527': attribute type 2 has an invalid length. [ 357.825759][T17957] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5527'. [ 358.455925][T17990] netlink: 'syz.1.5541': attribute type 1 has an invalid length. [ 358.475200][T17990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5541'. [ 358.586175][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5543'. [ 358.684425][T17996] bridge0: entered promiscuous mode [ 358.696392][T17996] macvlan2: entered promiscuous mode [ 358.703529][T17996] bridge0: port 4(macvlan2) entered blocking state [ 358.716898][T17996] bridge0: port 4(macvlan2) entered disabled state [ 358.724146][T17996] macvlan2: entered allmulticast mode [ 358.730993][T17996] bridge0: entered allmulticast mode [ 358.738789][T17996] macvlan2: left allmulticast mode [ 358.744029][T17996] bridge0: left allmulticast mode [ 358.750260][T17996] bridge0: left promiscuous mode [ 359.827029][T18041] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5565'. [ 359.922946][T18043] vlan4: entered promiscuous mode [ 359.932063][T18043] vlan4: entered allmulticast mode [ 360.530879][T18067] gre0: MTU too low for tipc bearer [ 360.536774][T18067] tipc: Enabling of bearer rejected, failed to enable media [ 360.604511][T18070] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 360.900166][T18086] tap0: tun_chr_ioctl cmd 2147767520 [ 361.137222][T18095] tun0: tun_chr_ioctl cmd 2148553947 [ 361.555904][T18120] __nla_validate_parse: 3 callbacks suppressed [ 361.555928][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5604'. [ 361.571904][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5604'. [ 362.360699][T18164] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5623'. [ 362.820932][T18185] bridge0: port 4(vlan3) entered blocking state [ 362.848526][T18185] bridge0: port 4(vlan3) entered disabled state [ 362.870844][T18185] vlan3: entered allmulticast mode [ 362.899922][T18185] gretap0: entered allmulticast mode [ 362.921352][T18185] vlan3: entered promiscuous mode [ 362.949622][T18185] gretap0: entered promiscuous mode [ 362.966378][T18185] bridge0: port 4(vlan3) entered blocking state [ 362.973071][T18185] bridge0: port 4(vlan3) entered forwarding state [ 362.990695][T18199] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 363.015767][ T5924] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.263495][ T5924] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 364.441145][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5672'. [ 364.450401][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5672'. [ 364.835097][T18292] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5680'. [ 365.777773][T18327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.786143][T18327] bridge0: port 3(bond2) entered blocking state [ 365.792640][T18327] bridge0: port 3(bond2) entered disabled state [ 365.799789][T18327] bond2: entered allmulticast mode [ 365.807186][T18327] bond2: entered promiscuous mode [ 365.812937][T18327] bridge0: port 3(bond2) entered blocking state [ 365.819434][T18327] bridge0: port 3(bond2) entered forwarding state [ 365.854389][ T5982] bridge0: port 3(bond2) entered disabled state [ 366.593843][T18359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.619606][T18359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.636071][T18359] bond0 (unregistering): Released all slaves [ 367.755803][T18422] : entered promiscuous mode [ 367.950633][T18432] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.993833][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5743'. [ 368.740837][T18467] netlink: 'syz.2.5759': attribute type 3 has an invalid length. [ 368.801858][T18469] netlink: 'syz.3.5760': attribute type 1 has an invalid length. [ 370.648295][T18547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5796'. [ 370.827151][T18556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5800'. [ 371.046023][T18568] xt_bpf: check failed: parse error [ 371.313758][T18582] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5809'. [ 372.251032][T18603] lo speed is unknown, defaulting to 1000 [ 373.001476][T18656] sch_tbf: burst 3631 is lower than device lo mtu (39799) ! [ 373.015423][T18654] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5844'. [ 373.060263][T18655] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5842'. [ 373.342684][T18661] bridge0: port 3(ipvlan3) entered blocking state [ 373.373246][T18661] bridge0: port 3(ipvlan3) entered disabled state [ 373.385330][T18661] ipvlan3: entered allmulticast mode [ 373.390749][T18661] bridge0: entered allmulticast mode [ 373.409195][T18661] ipvlan3: left allmulticast mode [ 373.419222][T18661] bridge0: left allmulticast mode [ 373.575273][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 373.692008][T18678] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5855'. [ 374.154423][T18695] geneve1: entered promiscuous mode [ 374.190891][T18695] macvlan2: entered allmulticast mode [ 374.210883][T18695] geneve1: entered allmulticast mode [ 374.246159][T18695] geneve1: left promiscuous mode [ 374.575059][T18710] Â: renamed from pim6reg1 [ 375.483537][T18735] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 376.160185][T18767] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 376.172520][T18767] syzkaller1: linktype set to 780 [ 377.108276][T18814] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 377.756758][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5931'. [ 378.076066][T18861] vlan6: entered promiscuous mode [ 378.752208][T18889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5954'. [ 378.774568][T18887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5953'. [ 379.029530][T18887] nbd: socks must be embedded in a SOCK_ITEM attr [ 379.625186][T18924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5969'. [ 380.385674][T18960] netlink: 'syz.2.5987': attribute type 1 has an invalid length. [ 380.435138][T18960] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5987'. [ 380.659376][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5991'. [ 380.708009][T18970] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5990'. [ 380.728740][T18970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5990'. [ 380.792262][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5991'. [ 381.023073][T18987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5998'. [ 381.032458][T18987] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5998'. [ 383.484297][T19094] netlink: 'syz.0.6049': attribute type 1 has an invalid length. [ 384.101623][T19122] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 384.161329][T19124] __nla_validate_parse: 2 callbacks suppressed [ 384.161351][T19124] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6064'. [ 386.442910][T19207] tun0: tun_chr_ioctl cmd 35108 [ 386.606433][T19216] netlink: 'syz.3.6102': attribute type 10 has an invalid length. [ 386.667446][T19216] : (slave syz_tun): Enslaving as an active interface with an up link [ 386.873960][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6107'. [ 386.889816][T19230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6107'. [ 386.901474][T19230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6107'. [ 386.929293][T19234] tipc: New replicast peer: 255.255.255.255 [ 386.939752][T19234] tipc: Enabled bearer , priority 1 [ 386.965499][T19230] vlan4: entered allmulticast mode [ 386.973697][T19230] macvlan1: entered allmulticast mode [ 387.030113][T19230] veth1_vlan: entered allmulticast mode [ 387.660611][T19240] bridge_slave_0: default FDB implementation only supports local addresses [ 387.843037][T19257] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6118'. [ 388.524661][T19292] tun0: tun_chr_ioctl cmd 1074025675 [ 388.532782][T19292] tun0: persist disabled [ 389.116262][T19323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6147'. [ 389.187103][T19325] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6149'. [ 389.626291][T19347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6160'. [ 389.955576][T19364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6168'. [ 390.895274][T19404] hsr_slave_0: left promiscuous mode [ 390.934198][T19404] hsr_slave_1: left promiscuous mode [ 391.255924][T19422] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.263115][T19422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.923934][T19461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6212'. [ 392.119851][T19470] vlan4: entered promiscuous mode [ 392.132271][T19470] macvtap0: entered promiscuous mode [ 392.142550][T19470] team0: Device vlan4 is up. Set it down before adding it as a team port [ 392.159053][T19470] macvtap0: left promiscuous mode [ 392.470871][T19487] Bluetooth: MGMT ver 1.23 [ 392.812105][T19480] lo speed is unknown, defaulting to 1000 [ 393.505068][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 393.916868][T19520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6236'. [ 395.409779][T19555] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6252'. [ 395.435187][T19555] netem: unknown loss type 13 [ 395.451603][T19555] netem: change failed [ 395.680658][ T5911] hid-generic 0005:0B57:0008.0001: item fetching failed at offset 0/4 [ 395.716096][ T5911] hid-generic 0005:0B57:0008.0001: probe with driver hid-generic failed with error -22 [ 396.963746][T19613] netlink: 'syz.1.6280': attribute type 2 has an invalid length. [ 397.424076][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6286'. [ 397.457209][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6286'. [ 397.689957][T19644] batadv_slave_1: entered promiscuous mode [ 397.719837][T19644] batadv_slave_1: left promiscuous mode [ 397.748562][T19645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6291'. [ 397.945962][T19657] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 398.920586][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6320'. [ 399.722625][T19738] bond0: peer notification delay (6) is not a multiple of miimon (8), value rounded to 0 ms [ 400.015307][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6341'. [ 400.561692][ T5911] IPVS: starting estimator thread 0... [ 400.667460][T19775] IPVS: using max 20 ests per chain, 48000 per kthread [ 400.914013][T19787] team0: No ports can be present during mode change [ 401.495408][T19811] netlink: 94 bytes leftover after parsing attributes in process `syz.2.6371'. [ 402.262780][T19839] tun0: tun_chr_ioctl cmd 1074812117 [ 402.977108][T19863] ebtables: ebtables: counters copy to user failed while replacing table [ 403.079295][T19871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6391'. [ 403.275069][T19884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6401'. [ 404.991007][T19973] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6440'. [ 405.108139][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 405.190095][T19983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6446'. [ 405.213741][T19987] tun0: tun_chr_ioctl cmd 1074025677 [ 405.237060][T19987] tun0: linktype set to 823 [ 405.466511][T20003] dvmrp8: entered allmulticast mode [ 405.495570][T20003] dvmrp8: left allmulticast mode [ 405.891235][T20021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6463'. [ 406.021998][T20025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6467'. [ 407.403478][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6495'. [ 407.634382][T20102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.651334][T20102] bond2: entered allmulticast mode [ 407.660121][T20102] bond0: (slave bond2): Enslaving as an active interface with a down link [ 407.865786][T20115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.021412][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6509'. [ 408.313025][T20135] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6514'. [ 408.620629][T20155] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.6523'. [ 408.793127][T20163] tap0: tun_chr_ioctl cmd 1074812118 [ 408.935173][ T35] wlan0: Trigger new scan to find an IBSS to join [ 409.722619][T20206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6546'. [ 409.768672][T20206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6546'. [ 411.081159][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6571'. [ 411.094201][T20258] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6571'. [ 411.988115][ T35] wlan0: Trigger new scan to find an IBSS to join [ 412.120165][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6581'. [ 412.166710][T20293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6581'. [ 412.755480][T20326] __nla_validate_parse: 1 callbacks suppressed [ 412.755504][T20326] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.6603'. [ 412.942161][T20335] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6605'. [ 412.963591][ T3489] wlan0: Creating new IBSS network, BSSID c2:32:5c:5d:e4:2f [ 412.983946][T20336] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6607'. [ 413.045539][T20338] netlink: 340 bytes leftover after parsing attributes in process `syz.1.6608'. [ 413.135356][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6610'. [ 413.149172][T20344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6611'. [ 413.228064][T20344] bond2: entered promiscuous mode [ 413.233580][T20344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.352357][T20353] netlink: 'syz.2.6614': attribute type 1 has an invalid length. [ 413.361985][T20353] netlink: 'syz.2.6614': attribute type 3 has an invalid length. [ 413.371581][T20353] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6614'. [ 413.381898][T20353] NCSI netlink: No device for ifindex 813332851 [ 413.620320][T20344] bond2 (unregistering): Released all slaves [ 415.171171][T20406] lo speed is unknown, defaulting to 1000 [ 415.434566][T20439] netlink: 47 bytes leftover after parsing attributes in process `syz.1.6654'. [ 417.269493][T20506] netlink: 'syz.3.6686': attribute type 1 has an invalid length. [ 418.107168][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6698'. [ 418.463458][T20553] netlink: 'syz.1.6708': attribute type 21 has an invalid length. [ 418.493075][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6708'. [ 419.398046][T20593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.408471][T20593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.416976][T20593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.428485][T20592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.438404][T20592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.666236][T20603] netlink: 'syz.3.6732': attribute type 9 has an invalid length. [ 420.230471][T20615] lo speed is unknown, defaulting to 1000 [ 420.517741][T20642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6748'. [ 421.203762][T20658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.319222][T20670] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6762'. [ 421.476723][T20675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6764'. [ 421.639822][T20681] ax25_connect(): syz.4.6768 uses autobind, please contact jreuter@yaina.de [ 421.654991][T20672] lo speed is unknown, defaulting to 1000 [ 421.831927][T20687] team0: Device gtp0 is of different type [ 422.393394][T20713] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 422.415102][T20713] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 422.479702][T20717] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6784'. [ 423.820846][T20766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.829849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.272427][T20786] tun0: tun_chr_ioctl cmd 1074025677 [ 424.278782][T20786] tun0: linktype set to 1 [ 424.552036][T20799] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6823'. [ 424.576609][T20799] netlink: 'syz.4.6823': attribute type 1 has an invalid length. [ 425.196048][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6840'. [ 425.217907][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6840'. [ 425.257470][T20836] gtp2: entered promiscuous mode [ 425.262481][T20836] gtp2: entered allmulticast mode [ 425.722217][T20853] netlink: 'syz.3.6848': attribute type 1 has an invalid length. [ 425.730499][T20853] netlink: 'syz.3.6848': attribute type 8 has an invalid length. [ 425.738428][T20853] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6848'. [ 426.311646][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6864'. [ 426.343774][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6862'. [ 426.381932][T20890] netlink: 'syz.2.6865': attribute type 1 has an invalid length. [ 426.581423][T20897] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6868'. [ 426.784501][T20912] netlink: 'syz.2.6876': attribute type 11 has an invalid length. [ 426.792830][T20912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6876'. [ 426.922210][T20916] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 427.081150][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6884'. [ 427.087570][T20928] tipc: Resetting bearer [ 427.497151][T20950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6897'. [ 429.292676][T21053] tap0: tun_chr_ioctl cmd 1074025677 [ 429.315635][T21053] tap0: linktype set to 804 [ 429.885791][T21085] __nla_validate_parse: 7 callbacks suppressed [ 429.885812][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6957'. [ 430.026686][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6957'. [ 430.274171][T21098] xt_ipcomp: unknown flags 12 [ 430.421919][T21104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6967'. [ 430.846696][T21121] xt_hashlimit: size too large, truncated to 1048576 [ 431.279741][T21123] lo speed is unknown, defaulting to 1000 [ 431.360356][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6982'. [ 432.015211][T21143] lo speed is unknown, defaulting to 1000 [ 432.317914][T21153] smc: removing ib device syz0 [ 432.742954][T21173] netlink: 'syz.3.6995': attribute type 8 has an invalid length. [ 432.753777][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6995'. [ 432.790541][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 433.526509][T21193] tipc: New replicast peer: 255.255.255.255 [ 433.533353][T21193] tipc: Enabled bearer , priority 1 [ 433.718129][T21199] netlink: 'syz.4.7008': attribute type 11 has an invalid length. [ 433.823235][T21201] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7009'. [ 434.088364][T21211] sch_tbf: burst 0 is lower than device lo mtu (84) ! [ 434.172763][T21213] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7015'. [ 434.625569][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7022'. [ 435.186224][T21247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7029'. [ 436.919272][T21298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7055'. [ 437.171946][T21312] netlink: 45 bytes leftover after parsing attributes in process `syz.4.7062'. [ 437.627428][T21337] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.7071'. [ 437.645624][T21337] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 437.655478][T21332] netlink: 'syz.1.7070': attribute type 8 has an invalid length. [ 438.515970][T21372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.042116][T21398] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7103'. [ 439.061773][T21398] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7103'. [ 439.874475][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7114'. [ 439.883928][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7114'. [ 439.893840][T21434] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7114'. [ 440.163523][T21447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7121'. [ 440.778295][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7136'. [ 440.992864][T21492] gretap2: entered promiscuous mode [ 441.230233][T21504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7144'. [ 441.328709][T21508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.337984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.398007][T21515] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7147'. [ 441.645242][T21525] netlink: 'syz.3.7155': attribute type 8 has an invalid length. [ 441.655609][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 441.718506][T21525] netlink: 'syz.3.7155': attribute type 4 has an invalid length. [ 441.727027][T21525] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7155'. [ 442.946428][T21581] netlink: 'syz.4.7181': attribute type 1 has an invalid length. [ 443.131991][T21595] netlink: 'syz.3.7186': attribute type 4 has an invalid length. [ 443.510716][T21615] vxcan3: entered allmulticast mode [ 443.795272][T21627] tap0: tun_chr_ioctl cmd 2148553947 [ 444.675541][T21661] netlink: 'syz.3.7218': attribute type 15 has an invalid length. [ 444.875956][T21672] netem: incorrect ge model size [ 444.881407][T21672] netem: change failed [ 445.263829][ T81] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 445.285230][T21694] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7232'. [ 446.347148][ T5826] cgroup: fork rejected by pids controller in /syz4 [ 446.570405][T21740] gretap0: left allmulticast mode [ 446.579658][T21740] gretap0: left promiscuous mode [ 446.596101][T21740] bridge0: port 4(vlan3) entered disabled state [ 446.910957][T21740] bridge0: port 3(ip6gretap0) entered disabled state [ 446.935732][T21740] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.943154][T21740] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.101522][T21740] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 447.138160][T21740] syz.1.7253 (21740) used greatest stack depth: 18800 bytes left [ 447.457340][T21770] netlink: 900 bytes leftover after parsing attributes in process `syz.2.7266'. [ 447.948447][T21787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7273'. [ 447.960337][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.970990][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.983922][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.005666][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.020264][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 448.027705][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.091870][T21792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7276'. [ 448.237950][T21795] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.7274'. [ 448.248118][T21795] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 448.373145][T21788] chnl_net:caif_netlink_parms(): no params data found [ 448.615353][T21788] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.622689][T21788] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.644183][T21788] bridge_slave_0: entered allmulticast mode [ 448.677844][T21788] bridge_slave_0: entered promiscuous mode [ 448.717611][T21788] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.724937][T21788] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.732221][T21788] bridge_slave_1: entered allmulticast mode [ 448.766266][T21788] bridge_slave_1: entered promiscuous mode [ 448.874612][T21788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.886964][T21788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.014654][T21829] bridge_slave_0: left allmulticast mode [ 449.030235][T21829] bridge_slave_0: left promiscuous mode [ 449.036793][T21829] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.058482][T21829] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 449.111279][T21788] team0: Port device team_slave_0 added [ 449.129118][T21788] team0: Port device team_slave_1 added [ 449.165316][T21829] syz.1.7290 (21829) used greatest stack depth: 18704 bytes left [ 449.246769][T21788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.253824][T21788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.280253][T21788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.294290][T21788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.302324][T21788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.328896][T21788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.340497][T21837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7293'. [ 449.520508][T21788] hsr_slave_0: entered promiscuous mode [ 449.527558][T21788] hsr_slave_1: entered promiscuous mode [ 449.533719][T21788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.543958][T21788] Cannot create hsr debugfs directory [ 449.945907][T21865] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7302'. [ 450.066813][ T5830] Bluetooth: hci0: command tx timeout [ 450.088950][T21788] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.268542][T21788] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.286220][T21877] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.354407][T21788] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.476140][T21788] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.799541][T21788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 450.820180][T21788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 450.909106][T21788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.005325][T21788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.192393][T21788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.211210][T21788] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.246934][T21788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.257589][T21788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.273252][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.280419][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.292566][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.299737][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.591431][T21788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.832967][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7342'. [ 451.851943][T21948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7342'. [ 452.036233][T21788] veth0_vlan: entered promiscuous mode [ 452.049752][T21788] veth1_vlan: entered promiscuous mode [ 452.083287][T21788] veth0_macvtap: entered promiscuous mode [ 452.093185][T21788] veth1_macvtap: entered promiscuous mode [ 452.125313][T21788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.145655][ T5830] Bluetooth: hci0: command tx timeout [ 452.181841][T21788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.213233][T21788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.247761][T21788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.275280][T21788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.298193][T21788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.319896][T21788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.345825][T21788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.375579][T21788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.401947][T21788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.429833][T21788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.447287][T21788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.464147][T21788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.482080][T21788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.493124][T21788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.513460][T21788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.534502][T21788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.573528][T21788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.583277][T21788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.592337][T21788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.623628][T21971] team0: Device ip6tnl2 is of different type [ 452.975124][T21974] ------------[ cut here ]------------ [ 452.980673][T21974] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 452.985948][T21974] WARNING: CPU: 1 PID: 21974 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 453.001562][T21974] Modules linked in: [ 453.005848][T21974] CPU: 1 UID: 0 PID: 21974 Comm: syz.1.7352 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 453.017110][T21974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 453.027306][T21974] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 453.032645][T21974] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 453.052746][T21974] RSP: 0018:ffffc900051e70e0 EFLAGS: 00010246 [ 453.058931][T21974] RAX: 45ef213c61923f00 RBX: ffff888034098cb0 RCX: 0000000000080000 [ 453.067056][T21974] RDX: ffffc9000ba79000 RSI: 0000000000019444 RDI: 0000000000019445 [ 453.075139][T21974] RBP: ffffc900051e7270 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 453.083150][T21974] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 453.091276][T21974] R13: 0000000000000000 R14: 1ffff92000a3ce30 R15: dffffc0000000000 [ 453.099699][T21974] FS: 00007f7052deb6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 453.108778][T21974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.115520][T21974] CR2: 0000555557296588 CR3: 00000000856ec000 CR4: 00000000003526f0 [ 453.123527][T21974] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 453.131581][T21974] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 453.139996][T21974] Call Trace: [ 453.143309][T21974] [ 453.146363][T21974] ? __warn+0x165/0x4d0 [ 453.150565][T21974] ? __mutex_lock+0xdac/0xee0 [ 453.155327][T21974] ? report_bug+0x2b3/0x500 [ 453.159899][T21974] ? __mutex_lock+0xdac/0xee0 [ 453.164709][T21974] ? handle_bug+0x60/0x90 [ 453.169130][T21974] ? exc_invalid_op+0x1a/0x50 [ 453.173874][T21974] ? asm_exc_invalid_op+0x1a/0x20 [ 453.179462][T21974] ? __warn_printk+0x292/0x360 [ 453.184284][T21974] ? __mutex_lock+0xdac/0xee0 [ 453.189085][T21974] ? free_netdev+0x2d9/0x610 [ 453.193721][T21974] ? __pfx___mutex_lock+0x10/0x10 [ 453.199011][T21974] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 453.204347][T21974] ? dev_addr_check+0x6f/0x240 [ 453.209211][T21974] ? dev_addr_flush+0x192/0x210 [ 453.214102][T21974] free_netdev+0x2d9/0x610 [ 453.218695][T21974] netdev_run_todo+0xf21/0x10d0 [ 453.223597][T21974] ? __pfx_netdev_run_todo+0x10/0x10 [ 453.228995][T21974] ? rcu_is_watching+0x15/0xb0 [ 453.233807][T21974] nl80211_post_doit+0x202/0x310 [ 453.238869][T21974] ? __pfx_nl80211_post_doit+0x10/0x10 [ 453.244378][T21974] genl_rcv_msg+0xb60/0xec0 [ 453.249007][T21974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.254086][T21974] ? __pfx_lock_acquire+0x10/0x10 [ 453.259262][T21974] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 453.264682][T21974] ? __pfx_nl80211_del_interface+0x10/0x10 [ 453.270653][T21974] ? __pfx_nl80211_post_doit+0x10/0x10 [ 453.276200][T21974] ? __pfx___might_resched+0x10/0x10 [ 453.281523][T21974] netlink_rcv_skb+0x1e3/0x430 [ 453.286389][T21974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.291454][T21974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.296892][T21974] genl_rcv+0x28/0x40 [ 453.301098][T21974] netlink_unicast+0x7f6/0x990 [ 453.305960][T21974] ? __pfx_netlink_unicast+0x10/0x10 [ 453.311284][T21974] ? __virt_addr_valid+0x45f/0x530 [ 453.316505][T21974] ? __phys_addr_symbol+0x2f/0x70 [ 453.321566][T21974] ? __check_object_size+0x47a/0x730 [ 453.327048][T21974] netlink_sendmsg+0x8e4/0xcb0 [ 453.331858][T21974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.337483][T21974] ? aa_sock_msg_perm+0x91/0x160 [ 453.342517][T21974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.347889][T21974] __sock_sendmsg+0x221/0x270 [ 453.352600][T21974] ____sys_sendmsg+0x52a/0x7e0 [ 453.357488][T21974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.362865][T21974] ? __fget_files+0x2a/0x410 [ 453.367531][T21974] ? __fget_files+0x2a/0x410 [ 453.372235][T21974] __sys_sendmsg+0x269/0x350 [ 453.376890][T21974] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.382053][T21974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 453.388458][T21974] ? do_syscall_64+0x100/0x230 [ 453.393259][T21974] ? do_syscall_64+0xb6/0x230 [ 453.398021][T21974] do_syscall_64+0xf3/0x230 [ 453.402706][T21974] ? clear_bhb_loop+0x35/0x90 [ 453.407457][T21974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.413386][T21974] RIP: 0033:0x7f7051f85d29 [ 453.418340][T21974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.438168][T21974] RSP: 002b:00007f7052deb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.446763][T21974] RAX: ffffffffffffffda RBX: 00007f7052175fa0 RCX: 00007f7051f85d29 [ 453.454837][T21974] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 453.462835][T21974] RBP: 00007f7052001b08 R08: 0000000000000000 R09: 0000000000000000 [ 453.470901][T21974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.479051][T21974] R13: 0000000000000000 R14: 00007f7052175fa0 R15: 00007fffde536c68 [ 453.487110][T21974] [ 453.490167][T21974] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 453.497485][T21974] CPU: 1 UID: 0 PID: 21974 Comm: syz.1.7352 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 453.508378][T21974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 453.518474][T21974] Call Trace: [ 453.521781][T21974] [ 453.524736][T21974] dump_stack_lvl+0x241/0x360 [ 453.529459][T21974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.534716][T21974] ? __pfx__printk+0x10/0x10 [ 453.539349][T21974] ? _printk+0xd5/0x120 [ 453.543556][T21974] ? __init_begin+0x41000/0x41000 [ 453.548630][T21974] ? vscnprintf+0x5d/0x90 [ 453.553004][T21974] panic+0x349/0x880 [ 453.556939][T21974] ? __warn+0x174/0x4d0 [ 453.561130][T21974] ? __pfx_panic+0x10/0x10 [ 453.565568][T21974] __warn+0x344/0x4d0 [ 453.569598][T21974] ? __mutex_lock+0xdac/0xee0 [ 453.574308][T21974] report_bug+0x2b3/0x500 [ 453.578650][T21974] ? __mutex_lock+0xdac/0xee0 [ 453.583346][T21974] handle_bug+0x60/0x90 [ 453.587531][T21974] exc_invalid_op+0x1a/0x50 [ 453.592062][T21974] asm_exc_invalid_op+0x1a/0x20 [ 453.596934][T21974] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 453.602237][T21974] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 453.621955][T21974] RSP: 0018:ffffc900051e70e0 EFLAGS: 00010246 [ 453.628043][T21974] RAX: 45ef213c61923f00 RBX: ffff888034098cb0 RCX: 0000000000080000 [ 453.636025][T21974] RDX: ffffc9000ba79000 RSI: 0000000000019444 RDI: 0000000000019445 [ 453.644011][T21974] RBP: ffffc900051e7270 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 453.652021][T21974] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 453.660031][T21974] R13: 0000000000000000 R14: 1ffff92000a3ce30 R15: dffffc0000000000 [ 453.668037][T21974] ? __warn_printk+0x292/0x360 [ 453.672838][T21974] ? free_netdev+0x2d9/0x610 [ 453.677521][T21974] ? __pfx___mutex_lock+0x10/0x10 [ 453.682580][T21974] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 453.687894][T21974] ? dev_addr_check+0x6f/0x240 [ 453.692675][T21974] ? dev_addr_flush+0x192/0x210 [ 453.697541][T21974] free_netdev+0x2d9/0x610 [ 453.701976][T21974] netdev_run_todo+0xf21/0x10d0 [ 453.706853][T21974] ? __pfx_netdev_run_todo+0x10/0x10 [ 453.712165][T21974] ? rcu_is_watching+0x15/0xb0 [ 453.716943][T21974] nl80211_post_doit+0x202/0x310 [ 453.721887][T21974] ? __pfx_nl80211_post_doit+0x10/0x10 [ 453.727347][T21974] genl_rcv_msg+0xb60/0xec0 [ 453.731855][T21974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.736892][T21974] ? __pfx_lock_acquire+0x10/0x10 [ 453.741939][T21974] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 453.747314][T21974] ? __pfx_nl80211_del_interface+0x10/0x10 [ 453.753132][T21974] ? __pfx_nl80211_post_doit+0x10/0x10 [ 453.758596][T21974] ? __pfx___might_resched+0x10/0x10 [ 453.763891][T21974] netlink_rcv_skb+0x1e3/0x430 [ 453.768668][T21974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.773702][T21974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.779010][T21974] genl_rcv+0x28/0x40 [ 453.782989][T21974] netlink_unicast+0x7f6/0x990 [ 453.787762][T21974] ? __pfx_netlink_unicast+0x10/0x10 [ 453.793052][T21974] ? __virt_addr_valid+0x45f/0x530 [ 453.798173][T21974] ? __phys_addr_symbol+0x2f/0x70 [ 453.803202][T21974] ? __check_object_size+0x47a/0x730 [ 453.808494][T21974] netlink_sendmsg+0x8e4/0xcb0 [ 453.813274][T21974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.818571][T21974] ? aa_sock_msg_perm+0x91/0x160 [ 453.823516][T21974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.828811][T21974] __sock_sendmsg+0x221/0x270 [ 453.833523][T21974] ____sys_sendmsg+0x52a/0x7e0 [ 453.838301][T21974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.843594][T21974] ? __fget_files+0x2a/0x410 [ 453.848197][T21974] ? __fget_files+0x2a/0x410 [ 453.852802][T21974] __sys_sendmsg+0x269/0x350 [ 453.857400][T21974] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.862549][T21974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 453.868911][T21974] ? do_syscall_64+0x100/0x230 [ 453.873684][T21974] ? do_syscall_64+0xb6/0x230 [ 453.878375][T21974] do_syscall_64+0xf3/0x230 [ 453.882892][T21974] ? clear_bhb_loop+0x35/0x90 [ 453.887573][T21974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.893480][T21974] RIP: 0033:0x7f7051f85d29 [ 453.897902][T21974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.917542][T21974] RSP: 002b:00007f7052deb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.925978][T21974] RAX: ffffffffffffffda RBX: 00007f7052175fa0 RCX: 00007f7051f85d29 [ 453.933962][T21974] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 453.941963][T21974] RBP: 00007f7052001b08 R08: 0000000000000000 R09: 0000000000000000 [ 453.949951][T21974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.957943][T21974] R13: 0000000000000000 R14: 00007f7052175fa0 R15: 00007fffde536c68 [ 453.965934][T21974] [ 453.969295][T21974] Kernel Offset: disabled [ 453.973623][T21974] Rebooting in 86400 seconds..