last executing test programs: 19.531634812s ago: executing program 2 (id=8738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "58b9230b32f483c0", "20ce5136acfa51ebd9174fdcfa0050cb", "5e83a7f5", "8e31c4301166bed5"}, 0x28) 19.363482332s ago: executing program 2 (id=8741): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000a00000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) 19.212516892s ago: executing program 2 (id=8745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84abb45141a2912f}, 0x0) 19.103263414s ago: executing program 2 (id=8747): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 18.93009757s ago: executing program 2 (id=8750): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) 18.699058816s ago: executing program 2 (id=8754): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001800)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 9.623494567s ago: executing program 1 (id=8826): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x27) 9.465491216s ago: executing program 1 (id=8828): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x81}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) recvmsg(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) 8.502310318s ago: executing program 1 (id=8834): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.755827013s ago: executing program 1 (id=8837): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) 7.58782285s ago: executing program 1 (id=8838): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x5, 0x1}, 0xc) 7.251083674s ago: executing program 1 (id=8840): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.270321492s ago: executing program 4 (id=8890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) socket$kcm(0x2a, 0x2, 0x0) 2.051537222s ago: executing program 4 (id=8892): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) 1.76206738s ago: executing program 4 (id=8896): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) 1.239590269s ago: executing program 3 (id=8900): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x646}, {0x0}], 0x2}, 0x9fc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.108421499s ago: executing program 0 (id=8901): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1.050726622s ago: executing program 3 (id=8902): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @loopback}, 0x5, 0x0, 0x2}}, 0x2e) 908.485542ms ago: executing program 3 (id=8903): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000001a40)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) 886.440269ms ago: executing program 0 (id=8904): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a06000908010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 796.996379ms ago: executing program 4 (id=8905): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 697.396603ms ago: executing program 4 (id=8906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x80) 637.295805ms ago: executing program 3 (id=8907): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0xffffffff, 0x6}, &(0x7f00000014c0)=0xc) 628.873349ms ago: executing program 0 (id=8908): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000002c0)={0x3}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000400)={0x4}, 0x1) 507.539024ms ago: executing program 4 (id=8909): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 382.809235ms ago: executing program 0 (id=8910): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x807) close(r0) 299.285705ms ago: executing program 3 (id=8911): sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6c010}, 0x4048000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 147.642641ms ago: executing program 0 (id=8912): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\v\x00'], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x31) 41.639123ms ago: executing program 3 (id=8913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1707}]}, 0x30}}, 0x0) 0s ago: executing program 0 (id=8914): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) syz_emit_ethernet(0x1b9, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x183, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x9, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f80889"}]}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): ed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.702535][ T9845] netlink: 'syz.2.1921': attribute type 2 has an invalid length. [ 178.710342][ T9845] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1921'. [ 178.940758][ T9853] xt_ecn: cannot match TCP bits for non-tcp packets [ 178.984975][ T9859] openvswitch: netlink: IP tunnel dst address not specified [ 179.069034][ T9861] xt_ecn: cannot match TCP bits for non-tcp packets [ 179.296230][ T9871] netlink: 'syz.3.1934': attribute type 11 has an invalid length. [ 179.341575][ T9875] No such timeout policy "syz0" [ 179.347184][ T9871] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1934'. [ 179.519944][ T9882] x_tables: duplicate underflow at hook 4 [ 179.700027][ T9891] xt_ecn: cannot match TCP bits for non-tcp packets [ 179.717277][ T9893] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 179.908486][ T9899] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.946838][ T9899] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.522578][ T9923] gre1: entered promiscuous mode [ 180.527695][ T9923] gre1: entered allmulticast mode [ 180.979534][ T9949] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 180.986986][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1973'. [ 181.093330][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1975'. [ 181.978540][ T9994] openvswitch: netlink: Message has 4 unknown bytes. [ 182.080330][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 182.285224][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 182.329394][T10012] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2004'. [ 182.361490][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 182.751884][T10032] netlink: 'syz.3.2012': attribute type 2 has an invalid length. [ 182.921227][T10041] netlink: 'syz.0.2018': attribute type 33 has an invalid length. [ 182.971991][T10041] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2018'. [ 183.069874][T10050] xt_socket: unknown flags 0x50 [ 183.194993][T10054] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.2024'. [ 184.082780][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 184.111841][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 184.372122][T10116] netlink: 'syz.3.2054': attribute type 10 has an invalid length. [ 184.711595][T10129] netlink: 'syz.4.2061': attribute type 21 has an invalid length. [ 184.749110][T10129] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.125745][T10152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.441637][T10166] SET target dimension over the limit! [ 186.256224][T10207] netlink: 'syz.1.2097': attribute type 30 has an invalid length. [ 186.282080][T10207] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 186.338778][T10207] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 186.472242][T10215] netlink: 'syz.4.2101': attribute type 5 has an invalid length. [ 186.510576][T10221] __nla_validate_parse: 4 callbacks suppressed [ 186.510597][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 186.970617][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2114'. [ 187.344257][T10261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2124'. [ 187.576303][T10271] xt_TCPMSS: Only works on TCP SYN packets [ 187.664838][T10275] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.034292][T10292] Cannot find del_set index 128 as target [ 188.295476][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 188.671828][T10327] netlink: 'syz.1.2158': attribute type 10 has an invalid length. [ 188.680569][T10327] veth0_vlan: entered allmulticast mode [ 188.788350][T10327] veth0_vlan: left promiscuous mode [ 188.810427][T10327] veth0_vlan: entered promiscuous mode [ 188.845335][T10327] team0: Device veth0_vlan failed to register rx_handler [ 189.189936][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2167'. [ 189.236394][T10347] geneve2: entered promiscuous mode [ 189.357540][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2171'. [ 189.742296][T10369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2178'. [ 189.890310][T10378] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 189.948556][T10380] netlink: 'syz.1.2183': attribute type 4 has an invalid length. [ 190.195714][T10391] x_tables: unsorted underflow at hook 3 [ 190.350514][T10397] tc_dump_action: action bad kind [ 191.361566][T10449] netlink: 'syz.2.2217': attribute type 1 has an invalid length. [ 191.851874][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 192.027567][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'. [ 192.049104][T10482] netlink: 'syz.1.2232': attribute type 12 has an invalid length. [ 192.607414][T10507] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 192.977863][T10523] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 193.394989][T10544] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.872193][T10565] ip6t_srh: unknown srh invflags 4449 [ 194.130539][T10577] openvswitch: netlink: Missing key (keys=40, expected=100) [ 194.480407][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.488433][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.875301][T10616] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 194.875854][ T1161] bond0: (slave bond_slave_0): interface is now down [ 194.959208][ T1161] bond0: (slave bond_slave_1): interface is now down [ 194.985876][ T1161] bond0: now running without any active interface! [ 195.248223][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2308'. [ 195.740526][T10657] openvswitch: netlink: Unknown key attributes 2 [ 196.303839][T10684] netlink: 'syz.1.2333': attribute type 21 has an invalid length. [ 197.288361][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2355'. [ 197.637946][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2366'. [ 197.678316][T10751] netlink: 'syz.2.2365': attribute type 12 has an invalid length. [ 197.696497][T10751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2365'. [ 197.927463][T10762] xt_l2tp: v2 sid > 0xffff: 262144 [ 198.243394][T10778] netlink: 'syz.3.2380': attribute type 9 has an invalid length. [ 198.294824][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 198.689591][T10801] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2392'. [ 199.027557][T10818] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 199.133635][T10821] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2401'. [ 199.316190][T10831] netlink: 'syz.4.2406': attribute type 1 has an invalid length. [ 199.401444][T10837] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2409'. [ 199.409263][T10838] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 199.452106][T10838] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 199.576288][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 199.652348][T10844] netlink: 'syz.4.2413': attribute type 3 has an invalid length. [ 200.417284][T10884] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 200.615296][T10892] netlink: 'syz.3.2436': attribute type 1 has an invalid length. [ 201.061274][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'. [ 201.926011][T10950] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 201.966614][T10952] Driver unsupported XDP return value 0 on prog (id 239) dev N/A, expect packet loss! [ 203.098204][T11003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2491'. [ 203.315727][T11013] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 203.804722][T11036] xfrm1: entered allmulticast mode [ 203.874579][T11042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2510'. [ 203.895546][T11039] netlink: 'syz.2.2509': attribute type 21 has an invalid length. [ 204.495034][T11074] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 204.659687][T11082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2528'. [ 204.674295][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'. [ 204.733069][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2530'. [ 204.911593][T11093] xt_l2tp: v2 doesn't support IP mode [ 205.655977][T11126] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.677755][T11129] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 205.702046][T11129] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2554'. [ 206.376269][T11161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.736659][T11179] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2579'. [ 206.792269][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 206.796825][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 206.800221][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 206.805444][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 207.190455][T11202] netlink: 'syz.3.2590': attribute type 21 has an invalid length. [ 207.245219][T11202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2590'. [ 207.354391][T11208] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 208.058212][T11243] netlink: zone id is out of range [ 208.068933][T11243] netlink: del zone limit has 4 unknown bytes [ 208.510971][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 208.717703][T11274] netlink: 'syz.0.2625': attribute type 7 has an invalid length. [ 208.809528][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 209.099309][T11296] netlink: 'syz.0.2636': attribute type 24 has an invalid length. [ 209.215091][T11301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2639'. [ 209.265234][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2639'. [ 209.581916][T11319] netlink: 'syz.3.2649': attribute type 1 has an invalid length. [ 209.589719][T11319] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2649'. [ 209.828298][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2654'. [ 209.854492][T11329] netlink: 'syz.3.2653': attribute type 10 has an invalid length. [ 209.936848][T11329] team0: Device hsr_slave_0 failed to register rx_handler [ 210.337732][T11352] netlink: 'syz.4.2665': attribute type 10 has an invalid length. [ 210.397743][T11352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.445071][T11352] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 210.917134][T11377] netlink: 'syz.0.2677': attribute type 21 has an invalid length. [ 211.164448][T11386] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2683'. [ 211.204500][T11390] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2684'. [ 212.247936][T11442] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2707'. [ 212.527964][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'. [ 212.587279][T11454] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 212.652482][T11458] macvlan0: entered promiscuous mode [ 212.657854][T11458] macvlan0: entered allmulticast mode [ 212.931726][T11477] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 212.938390][T11477] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 212.977707][ T5898] IPVS: starting estimator thread 0... [ 213.092006][T11480] IPVS: using max 27 ests per chain, 64800 per kthread [ 213.171102][T11492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.291470][T11492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.838644][T11522] netlink: 'syz.2.2745': attribute type 8 has an invalid length. [ 213.887364][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 213.937155][T11524] tc_dump_action: action bad kind [ 214.117828][T11538] netlink: 'syz.4.2754': attribute type 39 has an invalid length. [ 214.288994][T11545] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 214.403967][T11553] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2762'. [ 215.011967][T11579] netlink: 'syz.4.2773': attribute type 3 has an invalid length. [ 215.325520][T11595] netlink: 'syz.0.2780': attribute type 12 has an invalid length. [ 215.399683][T11595] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 216.107137][T11622] erspan0: entered allmulticast mode [ 216.177115][T11627] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2794'. [ 216.614714][T11647] netlink: 'syz.4.2802': attribute type 1 has an invalid length. [ 216.778024][T11653] netlink: 'syz.2.2804': attribute type 4 has an invalid length. [ 217.014660][T11664] nftables ruleset with unbound set [ 217.097223][T11671] netlink: 'syz.2.2811': attribute type 1 has an invalid length. [ 217.785369][T11696] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2821'. [ 218.014156][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'. [ 218.032321][T11707] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 218.870041][T11744] netlink: 'syz.2.2841': attribute type 1 has an invalid length. [ 218.912438][T11744] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2841'. [ 218.923327][T11748] xfrm0: entered promiscuous mode [ 218.928429][T11748] xfrm0: entered allmulticast mode [ 219.375863][T11769] netlink: 'syz.0.2851': attribute type 5 has an invalid length. [ 219.625512][T11784] bond0: Removing last arp target with arp_interval on [ 220.100710][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 220.361626][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'. [ 220.411310][T11819] lo: entered promiscuous mode [ 220.439798][T11819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.780415][T11835] geneve2: entered promiscuous mode [ 220.792664][T11835] geneve2: entered allmulticast mode [ 220.812475][T11834] netlink: 'syz.4.2879': attribute type 29 has an invalid length. [ 220.821030][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 220.835300][T11837] xt_TPROXY: Can be used only with -p tcp or -p udp [ 221.247274][T11852] netlink: 'syz.0.2888': attribute type 2 has an invalid length. [ 221.346279][T11861] netlink: 'syz.1.2890': attribute type 6 has an invalid length. [ 222.107771][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 222.205004][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2909'. [ 222.253726][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2909'. [ 223.239936][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'. [ 224.628133][T12028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.972624][T12048] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 225.145522][T12055] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 225.163085][T12055] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2982'. [ 225.331993][T12064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2985'. [ 225.435061][T12072] netlink: 'syz.1.2990': attribute type 33 has an invalid length. [ 225.749156][T12088] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.758699][T12087] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 226.019686][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3001'. [ 226.054349][T12095] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3001'. [ 226.273654][T12112] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3010'. [ 226.418598][T12118] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3014'. [ 226.555609][T12127] netlink: 'syz.2.3018': attribute type 2 has an invalid length. [ 226.938622][T12146] sctp: [Deprecated]: syz.4.3027 (pid 12146) Use of int in maxseg socket option. [ 226.938622][T12146] Use struct sctp_assoc_value instead [ 227.603719][T12178] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3042'. [ 227.696854][T12185] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 227.729487][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3047'. [ 228.164062][T12209] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.302179][T12216] netlink: 'syz.3.3061': attribute type 1 has an invalid length. [ 228.311599][T12216] netlink: 'syz.3.3061': attribute type 1 has an invalid length. [ 229.296861][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3078'. [ 229.364560][T12260] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3080'. [ 229.740554][T12278] netlink: 'syz.2.3090': attribute type 2 has an invalid length. [ 230.298984][T12310] __nla_validate_parse: 1 callbacks suppressed [ 230.299006][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3104'. [ 230.380589][T12313] netlink: 'syz.4.3106': attribute type 10 has an invalid length. [ 230.403466][T12313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3106'. [ 230.421329][T12313] batadv0: entered promiscuous mode [ 230.431638][T12313] batadv0: entered allmulticast mode [ 230.465863][T12313] bond0: (slave batadv0): Releasing backup interface [ 230.496025][T12313] bridge0: port 3(batadv0) entered blocking state [ 230.503260][T12313] bridge0: port 3(batadv0) entered disabled state [ 230.590604][T12320] netlink: 808 bytes leftover after parsing attributes in process `syz.3.3111'. [ 230.994396][ T1161] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 231.004240][ T1161] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 231.192909][T12351] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3124'. [ 231.214999][T12351] netlink: zone id is out of range [ 231.220204][T12351] netlink: get zone limit has 8 unknown bytes [ 231.296328][T12355] netlink: 'syz.3.3127': attribute type 11 has an invalid length. [ 231.320236][T12355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3127'. [ 231.563352][T12369] openvswitch: netlink: EtherType 0 is less than min 600 [ 231.815811][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 231.868097][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3139'. [ 231.930277][T12381] geneve2: entered promiscuous mode [ 231.941821][T12381] geneve2: entered allmulticast mode [ 232.505345][T12417] Unknown options in mask 1f4 [ 233.188362][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3172'. [ 233.330689][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 233.508908][T12469] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 233.717106][T12477] xt_time: unknown flags 0x4 [ 233.848592][T12484] netlink: 'syz.3.3186': attribute type 1 has an invalid length. [ 233.870024][T12484] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3186'. [ 234.247141][T12502] netlink: 'syz.3.3194': attribute type 2 has an invalid length. [ 234.276912][T12502] netlink: 'syz.3.3194': attribute type 1 has an invalid length. [ 234.470291][T12508] bridge2: entered promiscuous mode [ 234.481302][T12508] bridge2: entered allmulticast mode [ 234.484549][T12512] delete_channel: no stack [ 234.994147][T12539] delete_channel: no stack [ 235.549110][T12567] __nla_validate_parse: 3 callbacks suppressed [ 235.549130][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 235.709426][T12573] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 235.988908][T12587] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3234'. [ 236.018738][T12587] 8021q: VLANs not supported on gre0 [ 236.289282][T12603] IPVS: length: 157 != 24 [ 237.393967][T12661] xt_cgroup: path and classid specified [ 237.970570][T12685] netlink: zone id is out of range [ 237.995192][T12691] netlink: 'syz.1.3278': attribute type 16 has an invalid length. [ 238.008729][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3276'. [ 238.022496][T12691] netlink: 'syz.1.3278': attribute type 17 has an invalid length. [ 238.220603][T12699] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.289290][T12701] netlink: 'syz.3.3282': attribute type 1 has an invalid length. [ 238.319321][T12701] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3282'. [ 238.787648][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 239.162130][T12741] vxcan1 speed is unknown, defaulting to 1000 [ 239.184406][T12741] vxcan1 speed is unknown, defaulting to 1000 [ 239.191615][T12741] vxcan1 speed is unknown, defaulting to 1000 [ 239.635470][T12763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3313'. [ 239.725705][T12765] xt_socket: unknown flags 0x2 [ 239.794963][T12741] infiniband syz2: set active [ 239.799800][T12741] infiniband syz2: added vxcan1 [ 239.816656][ T5947] vxcan1 speed is unknown, defaulting to 1000 [ 239.862979][T12772] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 239.866698][T12741] RDS/IB: syz2: added [ 239.874798][T12741] smc: adding ib device syz2 with port count 1 [ 239.888024][T12741] smc: ib device syz2 port 1 has pnetid [ 239.895119][ T5947] vxcan1 speed is unknown, defaulting to 1000 [ 239.903260][T12741] vxcan1 speed is unknown, defaulting to 1000 [ 240.237292][T12785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.279497][T12789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3326'. [ 240.476244][T12797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.490287][T12796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.773599][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3335'. [ 240.858817][T12813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3338'. [ 240.937646][T12741] vxcan1 speed is unknown, defaulting to 1000 [ 241.787649][T12845] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3353'. [ 242.038001][T12741] vxcan1 speed is unknown, defaulting to 1000 [ 242.307476][T12868] IPVS: Unknown mcast interface: pim6reg1 [ 243.358079][T12741] vxcan1 speed is unknown, defaulting to 1000 [ 243.637311][T12922] x_tables: unsorted underflow at hook 1 [ 243.806850][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 243.850507][T12932] netlink: 'syz.1.3383': attribute type 2 has an invalid length. [ 244.366310][T12950] dvmrp0: entered allmulticast mode [ 244.397666][T12741] vxcan1 speed is unknown, defaulting to 1000 [ 245.055051][T12981] x_tables: duplicate entry at hook 3 [ 245.445232][T12995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.778323][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3414'. [ 245.982313][T13019] siw: device registration error -23 [ 246.564535][T13050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.569769][T13053] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 246.615498][ T5898] lo speed is unknown, defaulting to 1000 [ 246.621342][ T5898] syz0: Port: 1 Link DOWN [ 246.628407][T13053] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 246.633669][ T24] lo speed is unknown, defaulting to 1000 [ 246.847612][T13067] netlink: 'syz.2.3442': attribute type 1 has an invalid length. [ 246.860289][T13067] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3442'. [ 246.883327][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 246.919336][T13069] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3445'. [ 246.936798][T13069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.992508][T13072] IPv6: Can't replace route, no match found [ 247.445125][T13095] ip6t_srh: unknown srh match flags 4001 [ 247.510576][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3458'. [ 247.614391][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3459'. [ 247.694755][T13104] x_tables: duplicate entry at hook 1 [ 248.784111][T13156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3484'. [ 248.811611][T13156] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3484'. [ 249.204965][T13166] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3490'. [ 249.264030][T13172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3493'. [ 249.488781][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3498'. [ 249.511255][T13186] Cannot find del_set index 17 as target [ 250.550287][T13222] xt_CT: No such helper "syz1" [ 250.924030][T13248] openvswitch: netlink: Missing key (keys=40, expected=80) [ 251.052842][T13254] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 251.474673][T13274] bridge_slave_0: left allmulticast mode [ 251.481427][T13274] bridge_slave_0: left promiscuous mode [ 251.505700][T13274] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.525781][T13279] raw_sendmsg: syz.3.3543 forgot to set AF_INET. Fix it! [ 251.541271][T13274] bridge_slave_1: left allmulticast mode [ 251.572076][T13274] bridge_slave_1: left promiscuous mode [ 251.590804][T13274] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.624507][T13274] bond0: (slave bond_slave_0): Releasing backup interface [ 251.641473][T13274] bond0: (slave bond_slave_1): Releasing backup interface [ 251.694495][T13274] team0: Port device team_slave_0 removed [ 251.717482][T13274] team0: Port device team_slave_1 removed [ 251.734097][T13274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.772384][T13274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.838937][ T5898] vxcan1 speed is unknown, defaulting to 1000 [ 253.031570][T13338] netlink: 'syz.2.3572': attribute type 11 has an invalid length. [ 253.048494][T13338] __nla_validate_parse: 2 callbacks suppressed [ 253.048515][T13338] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3572'. [ 253.533407][T13354] netlink: 'syz.3.3579': attribute type 11 has an invalid length. [ 253.541301][T13354] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3579'. [ 254.017788][T13379] netlink: 'syz.3.3589': attribute type 21 has an invalid length. [ 254.078340][T13379] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3589'. [ 254.459691][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3596'. [ 254.782184][T13417] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 254.842299][T13417] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 254.877896][T13419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3605'. [ 255.972629][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.979034][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.025973][T13468] netlink: 'syz.4.3627': attribute type 11 has an invalid length. [ 256.041922][T13468] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3627'. [ 257.065588][T13518] netlink: 'syz.1.3647': attribute type 28 has an invalid length. [ 257.112590][T13518] netlink: 'syz.1.3647': attribute type 3 has an invalid length. [ 257.167313][T13518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3647'. [ 257.442000][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3656'. [ 257.452221][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3656'. [ 257.461230][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3656'. [ 257.787049][T13552] netlink: 'syz.3.3662': attribute type 64 has an invalid length. [ 258.058849][T13567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.710375][T13599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.892529][T13606] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 259.522123][T13639] __nla_validate_parse: 3 callbacks suppressed [ 259.522144][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3703'. [ 259.628753][T13645] netlink: 'syz.3.3708': attribute type 11 has an invalid length. [ 259.654118][T13645] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3708'. [ 259.810623][T13651] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 260.391572][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3720'. [ 260.675504][T13693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 261.607740][T13741] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 261.726883][T13751] netlink: 'syz.3.3753': attribute type 32 has an invalid length. [ 261.913351][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3754'. [ 262.608764][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3769'. [ 262.776142][T13801] netlink: 'syz.2.3774': attribute type 3 has an invalid length. [ 262.796469][T13801] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3774'. [ 263.164960][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3783'. [ 263.371847][T13831] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3788'. [ 263.775521][T13855] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 263.829332][T13855] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 264.040581][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3807'. [ 264.082229][T13868] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 264.119417][T13868] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 264.121298][T13872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.128619][T13868] gretap2: entered promiscuous mode [ 264.185328][T13868] gretap2: entered allmulticast mode [ 264.532682][T13889] __nla_validate_parse: 1 callbacks suppressed [ 264.532703][T13889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3818'. [ 264.721481][T13896] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 264.749359][T13900] xt_nfacct: accounting object `syz1' does not exists [ 264.756716][T13896] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 264.767942][T13896] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 264.789422][T13899] geneve3: entered promiscuous mode [ 264.810083][T13899] geneve3: entered allmulticast mode [ 265.315833][T13926] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3836'. [ 265.408128][T13931] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 265.641001][T13942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.731997][T13946] netlink: 'syz.3.3845': attribute type 10 has an invalid length. [ 265.739909][T13946] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 265.800683][T13946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.924844][T13954] xt_cgroup: invalid path, errno=-2 [ 265.958222][T13956] netlink: 'syz.4.3851': attribute type 13 has an invalid length. [ 265.958550][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3852'. [ 266.035280][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3854'. [ 266.717775][T13994] netlink: 'syz.0.3869': attribute type 13 has an invalid length. [ 266.761823][T13994] lo: entered promiscuous mode [ 266.767186][T13994] lo: entered allmulticast mode [ 266.813823][T13994] tunl0: entered promiscuous mode [ 266.818945][T13994] tunl0: entered allmulticast mode [ 266.848246][T13994] gre0: entered promiscuous mode [ 266.856840][T13994] gre0: entered allmulticast mode [ 266.876582][T13994] gretap0: entered promiscuous mode [ 266.882149][T13994] gretap0: entered allmulticast mode [ 266.893786][T13994] gretap0: refused to change device tx_queue_len [ 266.900246][T13994] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 266.918201][T14002] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 266.937675][T14002] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 267.125575][T14014] netlink: 'syz.0.3880': attribute type 1 has an invalid length. [ 267.151840][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3880'. [ 267.431979][T14027] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.160883][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'. [ 268.618349][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3918'. [ 268.691954][T14095] openvswitch: netlink: Flow key attribute not present in set flow. [ 269.031971][T14114] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 269.293119][T14127] sctp: [Deprecated]: syz.1.3933 (pid 14127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.293119][T14127] Use struct sctp_sack_info instead [ 269.753199][T14148] xt_TCPMSS: Only works on TCP SYN packets [ 269.803769][T14150] batadv1: entered allmulticast mode [ 269.984664][T14161] openvswitch: netlink: Message has -1 unknown bytes. [ 270.261937][T14172] netlink: 'syz.0.3951': attribute type 4 has an invalid length. [ 270.792608][T14201] netlink: 'syz.2.3965': attribute type 1 has an invalid length. [ 271.590894][T14239] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3984'. [ 271.867462][T14249] netlink: 'syz.2.3989': attribute type 11 has an invalid length. [ 271.951175][T14254] SET target dimension over the limit! [ 272.313010][T14257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.543661][T14268] netlink: 'syz.3.3998': attribute type 10 has an invalid length. [ 272.590992][T14268] dummy0: entered allmulticast mode [ 272.599427][T14272] netlink: 'syz.2.4000': attribute type 32 has an invalid length. [ 272.624084][T14268] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 272.886895][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4004'. [ 272.928004][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4004'. [ 273.310757][T14306] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4015'. [ 274.408996][T14364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.676305][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4047'. [ 274.710582][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4047'. [ 274.888210][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4053'. [ 275.143818][T14398] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 275.711984][T14431] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4073'. [ 275.902138][T14439] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4079'. [ 275.946206][T14443] ipt_REJECT: TCP_RESET invalid for non-tcp [ 276.306181][T14462] netlink: 'syz.0.4090': attribute type 27 has an invalid length. [ 276.560269][T14475] delete_channel: no stack [ 276.639920][T14478] netlink: 'syz.1.4098': attribute type 10 has an invalid length. [ 276.668355][T14478] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.676402][T14478] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.699285][T14478] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.706623][T14478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.714287][T14478] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.721555][T14478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.739821][T14478] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 277.068619][T14497] netlink: 'syz.4.4107': attribute type 1 has an invalid length. [ 277.096764][T14497] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4107'. [ 277.351521][T14514] xt_TCPMSS: Only works on TCP SYN packets [ 277.372290][T14513] netlink: 'syz.3.4115': attribute type 64 has an invalid length. [ 277.380181][T14513] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4115'. [ 277.848098][T14538] macvlan0: left allmulticast mode [ 278.021967][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 278.028255][T14548] netlink: 'syz.1.4132': attribute type 7 has an invalid length. [ 278.050201][T14548] netlink: 'syz.1.4132': attribute type 8 has an invalid length. [ 278.058904][T14552] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 278.269504][T14563] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4139'. [ 278.467137][T14573] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4145'. [ 279.087799][T14602] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4158'. [ 280.450599][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4188'. [ 280.776039][T14687] netlink: 'syz.3.4195': attribute type 1 has an invalid length. [ 281.171928][T14707] netlink: 'syz.0.4206': attribute type 1 has an invalid length. [ 281.179737][T14707] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4206'. [ 281.230757][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'. [ 281.325574][T14719] openvswitch: netlink: Missing key (keys=40, expected=100) [ 281.344371][T14717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4210'. [ 282.362807][T14769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4235'. [ 282.416185][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4235'. [ 282.601503][T14783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4243'. [ 282.641828][T14783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4243'. [ 282.673760][T14787] No such timeout policy "syz0" [ 282.767883][T14792] netlink: 'syz.3.4247': attribute type 1 has an invalid length. [ 282.789208][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4247'. [ 283.076046][T14801] bond2: entered promiscuous mode [ 283.081243][T14801] bond2: entered allmulticast mode [ 283.092327][T14801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.691578][T14840] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 283.817582][T14845] syz.1.4274 uses old SIOCAX25GETINFO [ 283.840418][T14848] netlink: 'syz.4.4275': attribute type 5 has an invalid length. [ 284.163144][T14861] netlink: 'syz.3.4281': attribute type 4 has an invalid length. [ 284.185647][T14861] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4281'. [ 284.263007][T14861] : renamed from bond0 (while UP) [ 284.389627][T14832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.509008][T14874] netlink: 'syz.1.4287': attribute type 11 has an invalid length. [ 284.586024][T14874] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4287'. [ 284.895234][T14893] netlink: 'syz.0.4296': attribute type 11 has an invalid length. [ 284.921773][T14893] netlink: 'syz.0.4296': attribute type 11 has an invalid length. [ 284.929741][T14893] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4296'. [ 285.759121][T14934] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 287.091039][T14997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4338'. [ 287.544447][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4350'. [ 287.644621][T15022] netlink: 'syz.1.4349': attribute type 8 has an invalid length. [ 288.013618][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4358'. [ 288.533723][T15070] netlink: 'syz.4.4369': attribute type 7 has an invalid length. [ 288.742750][T15079] netlink: 'syz.0.4373': attribute type 3 has an invalid length. [ 288.979440][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4379'. [ 289.453496][T15114] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4389'. [ 289.736649][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4396'. [ 289.792002][T15132] netlink: 'syz.0.4397': attribute type 11 has an invalid length. [ 290.346839][T15152] netlink: 'syz.0.4405': attribute type 10 has an invalid length. [ 290.362487][T15152] veth1_vlan: entered allmulticast mode [ 290.399488][T15152] team0: Device veth1_vlan failed to register rx_handler [ 290.439652][T15156] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4407'. [ 290.568479][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'. [ 290.600223][T15159] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4408'. [ 290.640453][T15159] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4408'. [ 291.015670][T15176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4416'. [ 291.368838][T15192] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 292.230959][T15238] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 293.047528][T15280] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 293.425547][T15301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.576239][T15309] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4482'. [ 293.913393][T15330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.056854][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4495'. [ 294.754358][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4515'. [ 295.071914][T15394] openvswitch: netlink: Missing key (keys=40, expected=80) [ 295.280896][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4528'. [ 295.630035][T15421] lo: entered promiscuous mode [ 295.653154][T15421] tunl0: entered promiscuous mode [ 295.675097][T15421] gre0: entered promiscuous mode [ 295.748717][T15421] gretap0: entered promiscuous mode [ 295.794389][T15421] erspan0: entered promiscuous mode [ 295.822606][T15421] ip_vti0: entered promiscuous mode [ 296.095974][T15438] netlink: 'syz.1.4544': attribute type 2 has an invalid length. [ 296.995021][T15486] netlink: 'syz.4.4569': attribute type 2 has an invalid length. [ 297.061839][T15490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4570'. [ 297.193690][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4572'. [ 297.353879][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 297.391807][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 297.416151][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4580'. [ 297.624678][T15516] netlink: 'syz.1.4583': attribute type 1 has an invalid length. [ 297.651755][T15516] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4583'. [ 297.661032][T15516] netlink: 'syz.1.4583': attribute type 1 has an invalid length. [ 297.688584][T15516] netlink: 'syz.1.4583': attribute type 2 has an invalid length. [ 298.361403][T15554] Bluetooth: MGMT ver 1.23 [ 298.622342][T15568] netlink: 'syz.4.4608': attribute type 13 has an invalid length. [ 298.841361][T15582] netlink: 'syz.3.4612': attribute type 1 has an invalid length. [ 298.857029][T15582] lo speed is unknown, defaulting to 1000 [ 298.878459][T15576] netlink: 'syz.3.4612': attribute type 1 has an invalid length. [ 298.905089][T15584] __nla_validate_parse: 1 callbacks suppressed [ 298.905107][T15584] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4615'. [ 298.967788][T15581] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4615'. [ 299.367218][T15607] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4623'. [ 299.528665][T15614] Bluetooth: MGMT ver 1.23 [ 299.702027][T15622] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 299.853249][T15628] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4634'. [ 299.983769][T15637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.103075][T15643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4641'. [ 300.271365][T15651] IPVS: Error connecting to the multicast addr [ 300.436294][T15657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.108629][T15691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.403756][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4670'. [ 301.847462][T15727] netlink: 'syz.0.4678': attribute type 2 has an invalid length. [ 302.601380][ T30] audit: type=1107 audit(1750934149.763:2): pid=15762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 302.974353][T15778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4700'. [ 303.579648][T15805] tipc: Started in network mode [ 303.629859][T15805] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 303.656255][T15805] tipc: Enabling of bearer rejected, failed to enable media [ 304.668461][T15857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4737'. [ 305.487623][T15895] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4754'. [ 305.581957][T15901] netlink: 'syz.3.4757': attribute type 3 has an invalid length. [ 305.670624][ T30] audit: type=1800 audit(1750934152.843:3): pid=15903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4758" name="memory.events" dev="tmpfs" ino=4879 res=0 errno=0 [ 305.733875][ T30] audit: type=1804 audit(1750934152.873:4): pid=15903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4758" name="/newroot/971/memory.events" dev="tmpfs" ino=4879 res=1 errno=0 [ 305.944830][T15915] pimreg: entered allmulticast mode [ 305.962085][T15918] netlink: 'syz.0.4766': attribute type 3 has an invalid length. [ 306.579235][T15944] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 307.683020][T16000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4805'. [ 307.707902][T16000] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4805'. [ 307.720194][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4805'. [ 307.898455][T16012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4811'. [ 307.953750][T16013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4811'. [ 307.991526][T16013] Zero length message leads to an empty skb [ 308.637666][T16048] netlink: 'syz.4.4829': attribute type 4 has an invalid length. [ 308.670776][T16049] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 308.693327][T16048] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4829'. [ 308.711154][T16049] team0: Device macvtap1 is already an upper device of the team interface [ 309.477781][T16091] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 309.623133][T16098] netlink: 'syz.0.4852': attribute type 1 has an invalid length. [ 309.656388][T16098] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4852'. [ 309.712015][T16098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4852'. [ 309.938486][T16115] ip6gre1: entered allmulticast mode [ 310.040128][T16117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4861'. [ 310.619345][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4876'. [ 310.649449][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4876'. [ 311.023230][T16171] Bluetooth: MGMT ver 1.23 [ 311.163292][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4891'. [ 311.172244][T16175] netlink: 'syz.2.4890': attribute type 1 has an invalid length. [ 311.172288][T16175] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4890'. [ 311.172304][T16175] netlink: 'syz.2.4890': attribute type 1 has an invalid length. [ 311.981165][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4910'. [ 312.059908][T16225] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4912'. [ 312.177989][T16228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4916'. [ 312.612361][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4923'. [ 313.267878][T16277] netlink: 'syz.0.4936': attribute type 14 has an invalid length. [ 314.384055][T16325] netlink: 'syz.2.4959': attribute type 18 has an invalid length. [ 314.432709][T16325] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.441906][T16325] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.450644][T16325] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.459498][T16325] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.767982][T16344] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 315.140590][T16364] netlink: 'syz.0.4977': attribute type 1 has an invalid length. [ 315.379801][T16372] sit1: entered promiscuous mode [ 315.385927][T16372] sit1: entered allmulticast mode [ 316.518592][T16422] __nla_validate_parse: 6 callbacks suppressed [ 316.518611][T16422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5005'. [ 316.524416][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5004'. [ 316.751357][T16434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5011'. [ 317.015916][T16450] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 317.039434][T16450] batman_adv: batadv0: Adding interface: netdevsim0 [ 317.065820][T16450] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.116233][T16450] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 317.375988][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.382606][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.669935][T16481] openvswitch: netlink: IPv6 tunnel dst address is zero [ 317.793525][T16488] netlink: 'syz.1.5038': attribute type 1 has an invalid length. [ 317.801328][T16488] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5038'. [ 319.142881][T16554] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5069'. [ 319.349024][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5075'. [ 320.047830][T16597] bridge0: port 1(veth0_to_bridge) entered blocking state [ 320.078785][T16597] bridge0: port 1(veth0_to_bridge) entered disabled state [ 320.088943][T16597] veth0_to_bridge: entered allmulticast mode [ 320.103788][T16597] veth0_to_bridge: entered promiscuous mode [ 320.111174][T16597] bridge0: port 1(veth0_to_bridge) entered blocking state [ 320.118805][T16597] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 320.295630][T16614] openvswitch: netlink: IPv6 tunnel dst address is zero [ 320.918840][T16649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5113'. [ 321.066633][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5118'. [ 321.196807][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5122'. [ 321.216270][T16664] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5122'. [ 321.645717][T16684] lo speed is unknown, defaulting to 1000 [ 322.146918][ T5947] IPVS: starting estimator thread 0... [ 322.150904][T16684] vxcan1 speed is unknown, defaulting to 1000 [ 322.252317][T16708] IPVS: using max 27 ests per chain, 64800 per kthread [ 322.740355][T16730] : entered promiscuous mode [ 322.970067][ T49] tipc: Subscription rejected, illegal request [ 323.173201][T16750] __nla_validate_parse: 2 callbacks suppressed [ 323.173221][T16750] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5163'. [ 324.077634][T16792] tipc: Started in network mode [ 324.078523][T16780] "syz.2.5177" (16780) uses obsolete ecb(arc4) skcipher [ 324.105818][T16792] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 324.134264][T16792] tipc: Enabling of bearer rejected, failed to enable media [ 324.366163][T16804] netlink: 'syz.0.5186': attribute type 62 has an invalid length. [ 324.559887][T16812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5190'. [ 325.166772][T16841] smc: net device erspan0 applied user defined pnetid SYZ0 [ 325.334757][T16851] tipc: Enabling not permitted [ 325.340554][T16851] tipc: Enabling of bearer rejected, failed to enable media [ 325.405242][T16853] netlink: 'syz.2.5210': attribute type 10 has an invalid length. [ 325.738563][T16874] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3261 [ 326.325914][T16906] netlink: 'syz.4.5235': attribute type 3 has an invalid length. [ 326.853943][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5248'. [ 326.856899][T16932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.918165][T16936] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 327.767654][T16983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5273'. [ 327.912704][ T5885] IPVS: starting estimator thread 0... [ 328.031982][T16990] IPVS: using max 23 ests per chain, 55200 per kthread [ 328.064329][T16996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5279'. [ 328.112736][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5279'. [ 328.145764][T17000] tipc: Enabled bearer , priority 10 [ 328.938301][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5300'. [ 329.247767][T17058] sock: sock_timestamping_bind_phc: sock not bind to device [ 329.264918][ T5947] tipc: Node number set to 4269801491 [ 329.692406][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5321'. [ 329.706579][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5321'. [ 329.718994][T17082] netlink: 'syz.0.5321': attribute type 11 has an invalid length. [ 329.924493][T17093] nbd: couldn't find device at index 587202560 [ 330.038984][T17098] IPVS: Error joining to the multicast group [ 330.271939][T17113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5336'. [ 330.589966][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5345'. [ 330.625784][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5346'. [ 330.638012][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5347'. [ 330.870208][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5351'. [ 330.892008][T17144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5351'. [ 330.901212][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5351'. [ 331.326816][T17171] netlink: 'syz.4.5365': attribute type 1 has an invalid length. [ 331.645951][T17192] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 331.773031][T17195] netlink: 'syz.4.5377': attribute type 3 has an invalid length. [ 332.914770][T17239] atomic_op ffff888052c05198 conn xmit_atomic 0000000000000000 [ 332.976335][T17242] tipc: MTU too low for tipc bearer [ 333.960047][T17283] sock: sock_set_timeout: `syz.3.5419' (pid 17283) tries to set negative timeout [ 334.258447][T17301] __nla_validate_parse: 4 callbacks suppressed [ 334.258471][T17301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5428'. [ 334.355982][T17305] net veth1_virt_wifi .: renamed from virt_wifi0 [ 334.763439][T17328] tipc: Enabling of bearer rejected, failed to enable media [ 335.083563][T17333] team0 (unregistering): Port device C removed [ 335.097715][T17333] team0 (unregistering): Port device team_slave_1 removed [ 335.199580][T17348] lo: entered allmulticast mode [ 335.206187][T17348] lo: left allmulticast mode [ 335.847762][T17375] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.5461'. [ 335.866366][T17375] openvswitch: netlink: Message has 5 unknown bytes. [ 336.353793][T17398] netlink: 'syz.1.5471': attribute type 1 has an invalid length. [ 336.389228][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5471'. [ 336.553507][T17409] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5478'. [ 336.636973][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5480'. [ 336.798369][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5486'. [ 336.815611][T17422] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 336.826585][T17422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.021138][T17434] netlink: 'syz.0.5490': attribute type 3 has an invalid length. [ 337.030126][T17435] tipc: Invalid UDP bearer configuration [ 337.030190][T17435] tipc: Enabling of bearer rejected, failed to enable media [ 337.410526][T17453] nbd: must specify an index to disconnect [ 337.814125][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5510'. [ 338.532343][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5530'. [ 338.907476][T17538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5539'. [ 339.089204][T17549] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 339.529697][T17565] tipc: Failed to obtain node identity [ 339.540649][T17565] tipc: Enabling of bearer rejected, failed to enable media [ 340.087580][T17596] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 340.100063][T17596] team0: Device ipvlan2 is already an upper device of the team interface [ 340.338582][T17605] netlink: 'syz.4.5574': attribute type 10 has an invalid length. [ 340.382871][T17605] bridge0: port 4(team0) entered blocking state [ 340.407467][T17605] bridge0: port 4(team0) entered disabled state [ 340.426738][T17605] team0: entered allmulticast mode [ 340.432501][T17605] team_slave_1: entered allmulticast mode [ 340.459225][T17605] team0: left allmulticast mode [ 340.465138][T17605] team_slave_1: left allmulticast mode [ 340.603075][T17617] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5577'. [ 340.718023][T17627] tipc: Started in network mode [ 340.728171][T17627] tipc: Node identity , cluster identity 4711 [ 340.866027][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'. [ 341.014726][T17643] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5590'. [ 341.045189][T17643] netlink: zone id is out of range [ 341.060698][T17643] netlink: get zone limit has 8 unknown bytes [ 341.073059][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5593'. [ 342.111917][T17693] netlink: 'syz.4.5613': attribute type 2 has an invalid length. [ 342.141968][T17693] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.5613'. [ 342.440914][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5621'. [ 342.685082][T17723] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 343.221505][T17751] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5642'. [ 343.565642][T17769] netlink: 'syz.1.5649': attribute type 83 has an invalid length. [ 344.174706][T17803] netlink: 'syz.4.5668': attribute type 2 has an invalid length. [ 344.202774][T17803] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5668'. [ 344.220894][T17808] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5669'. [ 344.251016][T17805] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5669'. [ 345.117661][T17847] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.125705][T17847] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.151344][T17847] : left allmulticast mode [ 345.160677][T17847] bond_slave_0: left allmulticast mode [ 345.183665][T17847] bond_slave_1: left allmulticast mode [ 345.201770][T17847] dummy0: left allmulticast mode [ 345.374459][T17863] nbd: must specify at least one socket [ 345.461300][T17847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.486288][T17847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.677661][T17847] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.693522][T17847] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.705915][T17847] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.716912][T17847] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.736744][T17847] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 345.800652][T17847] gretap1: left promiscuous mode [ 345.805839][T17847] gretap1: left allmulticast mode [ 345.817291][T17847] ip6gre1: left allmulticast mode [ 345.825121][T17847] xfrm1: left allmulticast mode [ 346.147830][T17889] __nla_validate_parse: 1 callbacks suppressed [ 346.147850][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5707'. [ 346.195257][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5707'. [ 346.228588][T17889] netlink: 'syz.4.5707': attribute type 12 has an invalid length. [ 346.246238][T17889] netlink: 'syz.4.5707': attribute type 11 has an invalid length. [ 347.153878][T17937] xt_CT: No such helper "pptp" [ 347.417870][T17957] smc: net device erspan0 erased user defined pnetid SYZ0 [ 348.255771][T18000] Bluetooth: MGMT ver 1.23 [ 348.458817][T18013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.811986][T18032] netlink: 'syz.3.5774': attribute type 2 has an invalid length. [ 348.836394][T18036] netlink: 'syz.2.5776': attribute type 23 has an invalid length. [ 348.937769][T18040] netlink: 'syz.4.5777': attribute type 1 has an invalid length. [ 348.961957][T18040] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5777'. [ 348.988845][T18040] netlink: 'syz.4.5777': attribute type 1 has an invalid length. [ 349.001996][T18040] netlink: 'syz.4.5777': attribute type 2 has an invalid length. [ 349.041420][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 349.182864][T18052] netlink: 'syz.4.5781': attribute type 1 has an invalid length. [ 349.422630][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5790'. [ 349.795429][T18089] netlink: 'syz.1.5800': attribute type 29 has an invalid length. [ 349.813813][T18089] netlink: 'syz.1.5800': attribute type 29 has an invalid length. [ 349.990742][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5805'. [ 350.183094][T18110] nbd: must specify a size in bytes for the device [ 350.272254][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5813'. [ 350.369443][T18121] nbd: socks must be embedded in a SOCK_ITEM attr [ 350.595715][T18132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.658489][T18188] netlink: 'syz.3.5848': attribute type 29 has an invalid length. [ 352.041408][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5859'. [ 352.053174][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5859'. [ 352.858266][T18254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5880'. [ 352.950181][T18258] tipc: Started in network mode [ 352.982836][T18258] tipc: Node identity , cluster identity 4711 [ 353.001721][T18258] tipc: Failed to obtain node identity [ 353.014147][T18258] tipc: Enabling of bearer rejected, failed to enable media [ 353.549138][T18290] netlink: 'syz.4.5897': attribute type 13 has an invalid length. [ 353.602350][T18290] veth0_macvtap: left promiscuous mode [ 353.631736][T18290] macvtap0: entered allmulticast mode [ 353.659930][T18296] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5899'. [ 353.664374][T18290] macvtap0: refused to change device tx_queue_len [ 353.686560][T18296] NCSI netlink: No device for ifindex 131080 [ 353.894509][T18305] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5904'. [ 354.225207][T18321] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5911'. [ 354.352077][T18326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.726875][T18342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5922'. [ 354.759994][T18350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5926'. [ 354.977622][T18359] tipc: Enabling of bearer rejected, failed to enable media [ 355.172105][T18369] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5935'. [ 355.191999][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5937'. [ 355.201431][T18369] unsupported nlmsg_type 40 [ 355.825637][T18408] tipc: Enabling of bearer rejected, media not registered [ 356.073770][T18420] validate_nla: 2 callbacks suppressed [ 356.073792][T18420] netlink: 'syz.0.5960': attribute type 1 has an invalid length. [ 356.227967][T18431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.944851][T18465] netlink: 'syz.2.5981': attribute type 21 has an invalid length. [ 357.038939][T18472] netlink: 'syz.4.5983': attribute type 2 has an invalid length. [ 357.053360][T18472] netlink: 'syz.4.5983': attribute type 2 has an invalid length. [ 357.157623][T18479] __nla_validate_parse: 9 callbacks suppressed [ 357.157644][T18479] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5987'. [ 357.177763][T18479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5987'. [ 357.197312][T18479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5987'. [ 357.366152][T18491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.373538][T18491] IPv6: NLM_F_CREATE should be set when creating new route [ 357.380826][T18491] IPv6: NLM_F_CREATE should be set when creating new route [ 357.388151][T18491] IPv6: NLM_F_CREATE should be set when creating new route [ 357.414565][T18491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.627606][T18504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6000'. [ 357.685516][T18506] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 357.980899][T18525] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 358.337655][T18546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6021'. [ 358.368819][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6021'. [ 358.923938][T18572] vlan2: entered promiscuous mode [ 358.929038][T18572] bridge0: entered promiscuous mode [ 358.978443][T18578] pim6reg527: entered allmulticast mode [ 361.210571][T18690] netlink: 'syz.4.6090': attribute type 3 has an invalid length. [ 362.178227][T18740] netlink: 'syz.3.6114': attribute type 2 has an invalid length. [ 363.181502][T18789] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 363.526065][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6146'. [ 363.572907][T18804] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6146'. [ 363.603784][T18804] netlink: 'syz.0.6146': attribute type 5 has an invalid length. [ 364.692760][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6174'. [ 364.718998][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6174'. [ 364.806840][T18869] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 365.463294][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6192'. [ 365.807568][T18921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6201'. [ 366.766852][T18976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6228'. [ 367.099023][T18998] tipc: Enabling of bearer rejected, failed to enable media [ 367.530842][T19022] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 367.694177][T19032] pim6reg: entered allmulticast mode [ 367.725242][T19032] pim6reg: left allmulticast mode [ 368.184407][T19059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6266'. [ 368.268876][T19064] netlink: 'syz.3.6267': attribute type 2 has an invalid length. [ 368.658179][T19076] syz.1.6273 (19076) used greatest stack depth: 16760 bytes left [ 368.925287][T19095] netlink: 'syz.2.6283': attribute type 1 has an invalid length. [ 368.948030][T19095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.191580][T19201] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 371.402091][T19207] netlink: 'syz.4.6334': attribute type 1 has an invalid length. [ 372.329461][T19248] tipc: Enabling of bearer rejected, failed to enable media [ 372.360504][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6358'. [ 372.392458][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6358'. [ 372.412785][T19251] netlink: 'syz.2.6358': attribute type 7 has an invalid length. [ 372.432013][T19253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6359'. [ 372.441021][T19253] tipc: Invalid UDP bearer configuration [ 372.441087][T19253] tipc: Enabling of bearer rejected, failed to enable media [ 372.726443][T19264] team0: Device vti0 is of different type [ 372.927587][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6368'. [ 372.969572][T19276] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6370'. [ 373.035638][T19276] vlan3: entered allmulticast mode [ 373.040834][T19276] gretap0: entered allmulticast mode [ 373.101567][T19279] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 374.118682][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6402'. [ 374.482679][T19360] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 374.904284][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6417'. [ 375.308588][T19389] netlink: 212404 bytes leftover after parsing attributes in process `syz.2.6425'. [ 375.483331][T19395] IPVS: length: 8 != 1152 [ 376.415173][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6447'. [ 376.621817][T19450] Bluetooth: MGMT ver 1.23 [ 377.255076][T19489] netlink: 'syz.0.6470': attribute type 1 has an invalid length. [ 377.279629][T19489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.816339][T19519] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 378.543171][T19558] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 378.804183][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.810600][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.005005][ T24] IPVS: starting estimator thread 0... [ 379.020377][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6516'. [ 379.057382][T19588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6516'. [ 379.092293][T19586] IPVS: using max 23 ests per chain, 55200 per kthread [ 379.352893][T19606] netlink: 'syz.3.6523': attribute type 1 has an invalid length. [ 379.372833][T19606] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6523'. [ 379.396469][T19606] netlink: 'syz.3.6523': attribute type 1 has an invalid length. [ 380.145297][T19648] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6542'. [ 380.851798][T19683] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 380.871756][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 381.310101][T19707] netlink: 'syz.0.6572': attribute type 1 has an invalid length. [ 381.331827][T19707] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6572'. [ 382.178216][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6591'. [ 382.187780][T19746] netlink: 'syz.2.6590': attribute type 2 has an invalid length. [ 382.359727][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6594'. [ 382.420613][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6594'. [ 382.433339][T19751] IPVS: Scheduler module ip_vs_sip not found [ 382.436599][T19754] netlink: 'syz.2.6594': attribute type 15 has an invalid length. [ 382.702115][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6601'. [ 382.753752][T19772] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 382.860022][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6605'. [ 382.875392][T19778] netlink: 'syz.4.6606': attribute type 29 has an invalid length. [ 383.885044][T19833] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 384.450301][T19857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.908920][T19882] __nla_validate_parse: 2 callbacks suppressed [ 384.908942][T19882] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6658'. [ 385.242510][T19899] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6668'. [ 385.389037][T19905] pim6reg: entered allmulticast mode [ 385.799201][T19933] bridge0: Device is already in use. [ 385.811499][T19931] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6681'. [ 388.011520][T20056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6735'. [ 388.044888][T20056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6735'. [ 388.623895][T20091] netlink: 'syz.0.6753': attribute type 3 has an invalid length. [ 388.871111][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6760'. [ 389.350708][T20129] netlink: 'syz.2.6771': attribute type 1 has an invalid length. [ 389.369376][T20129] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6771'. [ 389.506373][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6776'. [ 389.533153][T20137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6776'. [ 391.682271][T20241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6827'. [ 391.862837][T20248] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.999551][T20248] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.109733][T20248] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.343306][T20273] netlink: zone id is out of range [ 392.350010][T20273] netlink: zone id is out of range [ 392.363943][T20273] netlink: zone id is out of range [ 392.370251][T20273] netlink: zone id is out of range [ 392.384616][T20248] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.385988][T20273] netlink: zone id is out of range [ 392.403155][T20277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6845'. [ 392.406467][T20273] netlink: zone id is out of range [ 392.421532][T20273] netlink: zone id is out of range [ 392.426873][T20248] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.436932][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6845'. [ 392.439262][T20273] netlink: zone id is out of range [ 392.456190][T20277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6845'. [ 392.460966][T20248] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.469289][T20273] netlink: zone id is out of range [ 392.479787][T20273] netlink: zone id is out of range [ 392.493028][T20248] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.916545][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6853'. [ 393.123437][T20307] netlink: 'syz.4.6860': attribute type 4 has an invalid length. [ 393.370093][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6865'. [ 393.445496][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 393.801415][T20339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6874'. [ 393.826851][T20341] tipc: New replicast peer: 255.255.255.255 [ 393.848585][T20341] tipc: Enabled bearer , priority 10 [ 393.881218][T20347] netlink: 'syz.3.6878': attribute type 58 has an invalid length. [ 393.921701][T20347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6878'. [ 394.128759][T20359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.962241][ T5947] tipc: Node number set to 1593835521 [ 395.146001][T20400] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6906'. [ 395.169087][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6906'. [ 396.928423][T20486] netlink: 'syz.0.6943': attribute type 18 has an invalid length. [ 397.535900][T20516] __nla_validate_parse: 1 callbacks suppressed [ 397.535922][T20516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6957'. [ 398.028155][T20529] lo: entered allmulticast mode [ 398.364755][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6972'. [ 398.543722][T20550] netlink: 'syz.4.6975': attribute type 9 has an invalid length. [ 398.580168][T20552] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6976'. [ 398.973110][T20573] net_ratelimit: 3 callbacks suppressed [ 398.973132][T20573] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 399.009715][T20577] netlink: 'syz.0.6984': attribute type 10 has an invalid length. [ 399.012006][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6986'. [ 399.183335][T20584] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6991'. [ 399.647684][T20607] bridge5: entered promiscuous mode [ 399.662304][T20607] bridge5: entered allmulticast mode [ 399.868113][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7007'. [ 400.324244][T20645] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7019'. [ 401.051117][T20678] netlink: 'syz.2.7033': attribute type 2 has an invalid length. [ 401.174317][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7037'. [ 401.327047][T20695] netlink: 'syz.2.7041': attribute type 1 has an invalid length. [ 401.353864][T20695] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7041'. [ 401.372362][T20695] netlink: 'syz.2.7041': attribute type 1 has an invalid length. [ 401.851870][T20719] netlink: 'syz.0.7052': attribute type 1 has an invalid length. [ 401.992017][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 402.272718][T20742] netlink: 'syz.3.7063': attribute type 6 has an invalid length. [ 402.600182][T20760] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7071'. [ 402.712489][T20765] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.162827][T20791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7086'. [ 403.891120][T20819] netlink: 'syz.4.7099': attribute type 29 has an invalid length. [ 403.899693][T20823] netlink: 'syz.4.7099': attribute type 29 has an invalid length. [ 403.931144][T20828] netlink: 'syz.4.7099': attribute type 29 has an invalid length. [ 403.957264][T20828] netlink: 'syz.4.7099': attribute type 29 has an invalid length. [ 405.222438][T20888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7126'. [ 405.369169][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7128'. [ 405.517949][T20904] netlink: 'syz.4.7132': attribute type 4 has an invalid length. [ 405.614018][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7135'. [ 405.715284][T20915] netlink: 'syz.0.7139': attribute type 4 has an invalid length. [ 406.351056][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7157'. [ 406.376434][T20952] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7156'. [ 406.405453][T20952] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7156'. [ 406.882642][T20978] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7168'. [ 407.117673][T20990] gtp0: entered promiscuous mode [ 407.126136][T20990] gtp0: entered allmulticast mode [ 407.238780][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7176'. [ 409.267062][T21091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7218'. [ 409.661559][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7225'. [ 409.702781][T21114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7228'. [ 410.531930][T21163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7249'. [ 411.074716][T21187] veth0: entered promiscuous mode [ 411.089095][T21185] veth0: left promiscuous mode [ 411.647199][T21220] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7276'. [ 412.281344][T21260] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7294'. [ 412.636683][T21273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7300'. [ 412.673518][T21275] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.7302'. [ 412.869498][T21279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7304'. [ 413.413464][T21291] IPVS: persistence engine module ip_vs_pe_À not found [ 413.667684][T21312] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7318'. [ 414.981573][T21373] __nla_validate_parse: 1 callbacks suppressed [ 414.991918][T21373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7347'. [ 415.405286][T21395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.531109][T21399] xt_CT: No such helper "snmp" [ 416.517207][T21455] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7386'. [ 416.759635][T21471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7390'. [ 417.186662][T21494] netlink: 'syz.2.7404': attribute type 83 has an invalid length. [ 418.868094][T21581] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 419.387768][ T65] tipc: Subscription rejected, illegal request [ 420.122986][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7470'. [ 420.148752][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7470'. [ 420.190894][T21639] veth1_macvtap: left promiscuous mode [ 420.513514][T21617] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 421.216215][T21671] macvtap1: entered promiscuous mode [ 421.249528][T21671] vlan0: entered promiscuous mode [ 421.260491][T21671] macvtap1: entered allmulticast mode [ 421.296446][T21671] vlan0: entered allmulticast mode [ 421.314696][T21671] veth0_vlan: entered allmulticast mode [ 421.354053][T21680] netlink: 'syz.4.7489': attribute type 2 has an invalid length. [ 421.383939][T21680] netlink: 'syz.4.7489': attribute type 8 has an invalid length. [ 421.404189][T21680] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.7489'. [ 422.041395][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7504'. [ 422.503617][T21738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7515'. [ 422.531410][T21745] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7518'. [ 422.749990][T21754] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 422.928467][T21766] veth0: entered promiscuous mode [ 422.946414][T21762] veth0: left promiscuous mode [ 422.960509][T21767] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7528'. [ 423.567686][T21795] netlink: 'syz.4.7540': attribute type 2 has an invalid length. [ 424.116563][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7550'. [ 424.531723][T21834] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 424.949085][T21857] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7567'. [ 425.046831][T21862] sch_fq: defrate 0 ignored. [ 425.330802][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7576'. [ 425.367746][T21877] netlink: 'syz.2.7577': attribute type 10 has an invalid length. [ 425.481024][T21883] openvswitch: netlink: Multiple metadata blocks provided [ 425.683102][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7584'. [ 425.720389][T21896] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7586'. [ 425.746891][T21898] netlink: 'syz.4.7587': attribute type 8 has an invalid length. [ 426.085517][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7596'. [ 426.181238][T21922] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7598'. [ 426.948604][T21955] netlink: 'syz.4.7614': attribute type 1 has an invalid length. [ 426.977639][T21957] netlink: 'syz.1.7615': attribute type 28 has an invalid length. [ 427.001652][T21955] netlink: 'syz.4.7614': attribute type 2 has an invalid length. [ 427.061717][T21955] netlink: 'syz.4.7614': attribute type 1 has an invalid length. [ 427.070821][T21955] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.7614'. [ 427.411722][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7626'. [ 428.351483][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7649'. [ 428.384862][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7649'. [ 428.414194][T22028] bridge0: port 3(vlan3) entered blocking state [ 428.420837][T22028] bridge0: port 3(vlan3) entered disabled state [ 428.432867][T22028] vlan3: entered allmulticast mode [ 428.438656][T22028] bridge0: entered allmulticast mode [ 428.457198][T22028] vlan3: left allmulticast mode [ 428.471499][T22028] bridge0: left allmulticast mode [ 429.001525][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7668'. [ 429.018113][T22067] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 429.025895][T22067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.599256][T22097] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 430.590543][T22129] bridge0: port 1(veth0_to_bridge) entered disabled state [ 430.663136][T22129] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 430.969322][T22181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7709'. [ 430.989389][T22185] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7711'. [ 432.196073][T22240] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7735'. [ 432.646333][T22265] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.7747'. [ 432.659425][T22265] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 432.669222][T22265] openvswitch: netlink: Duplicate key (type 0). [ 433.199008][T22286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.256429][T22286] bond0: (slave bond2): Enslaving as an active interface with an up link [ 433.450360][T22302] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7763'. [ 434.007756][T22331] netlink: 340 bytes leftover after parsing attributes in process `syz.0.7777'. [ 434.114047][T22335] siw: device registration error -23 [ 434.288693][T22346] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.7784'. [ 434.346811][T22347] netlink: 'syz.2.7785': attribute type 83 has an invalid length. [ 434.354520][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7788'. [ 434.392592][T22353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7788'. [ 434.435988][T22356] netlink: 'syz.4.7789': attribute type 6 has an invalid length. [ 435.048482][T22390] netlink: 'syz.3.7805': attribute type 4 has an invalid length. [ 435.383533][T22408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7815'. [ 436.286771][T22458] netlink: 81 bytes leftover after parsing attributes in process `syz.1.7836'. [ 437.022509][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7858'. [ 437.167641][T22506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7861'. [ 438.123747][T22549] block nbd0: server does not support multiple connections per device. [ 438.152216][T22549] block nbd0: shutting down sockets [ 438.690362][T22585] netlink: 'syz.1.7900': attribute type 39 has an invalid length. [ 439.364546][T22615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7913'. [ 439.552852][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7917'. [ 440.238582][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.245078][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.253964][T22653] lo: left promiscuous mode [ 440.276134][T22653] tunl0: left promiscuous mode [ 440.301058][T22653] gre0: left promiscuous mode [ 440.331351][T22653] gretap0: left promiscuous mode [ 440.360580][T22653] erspan0: left promiscuous mode [ 440.371715][T22653] ip_vti0: left promiscuous mode [ 440.558487][T22653] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.566353][T22653] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.645675][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7936'. [ 440.671197][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7936'. [ 440.706907][T22653] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 440.772121][T22667] netlink: 'syz.3.7937': attribute type 25 has an invalid length. [ 440.800383][T22667] netlink: 'syz.3.7937': attribute type 7 has an invalid length. [ 440.916620][T22672] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 440.933197][T22673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7940'. [ 442.377316][T22754] netlink: 284 bytes leftover after parsing attributes in process `syz.1.7979'. [ 442.438424][T22758] veth0: entered promiscuous mode [ 442.450444][T22758] veth0: left promiscuous mode [ 442.672782][T22768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7986'. [ 442.734041][T22771] tap0: tun_chr_ioctl cmd 1074025677 [ 442.740469][T22771] tap0: linktype set to 65534 [ 443.169987][T22792] sctp: [Deprecated]: syz.0.7997 (pid 22792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.169987][T22792] Use struct sctp_sack_info instead [ 443.341812][T22804] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.557056][T22819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8010'. [ 443.795923][T22830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8015'. [ 444.284588][T22851] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 444.553481][T22867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8032'. [ 444.905727][T22880] batman_adv: batadv0: Adding interface: ipvlan2 [ 444.913855][T22880] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.007613][T22880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.051989][T22880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.078208][T22880] batman_adv: batadv0: Interface activated: ipvlan2 [ 445.374863][T22895] macvtap1: entered promiscuous mode [ 445.381976][T22895] vlan0: entered promiscuous mode [ 445.395757][T22895] macvtap1: entered allmulticast mode [ 445.401820][T22895] vlan0: entered allmulticast mode [ 445.407421][T22895] veth0_vlan: entered allmulticast mode [ 445.452411][T22895] vlan0: left allmulticast mode [ 445.464882][T22895] veth0_vlan: left allmulticast mode [ 445.478589][T22895] vlan0: left promiscuous mode [ 445.832032][T22922] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8056'. [ 445.991506][T22927] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8060'. [ 446.023954][T22931] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8061'. [ 446.042601][T22931] netem: invalid attributes len -24 [ 446.056810][T22931] netem: change failed [ 446.173462][T22939] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 446.654026][T22967] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8077'. [ 446.941874][T22975] xt_CT: No such helper "snmp" [ 447.109009][T22995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8087'. [ 448.587341][T23068] __nla_validate_parse: 1 callbacks suppressed [ 448.587361][T23068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8121'. [ 449.248398][T23101] macvtap2: entered allmulticast mode [ 449.260900][T23101] veth0_macvtap: entered allmulticast mode [ 449.356572][T23106] netlink: 152064 bytes leftover after parsing attributes in process `syz.0.8139'. [ 449.377734][T23106] netlink: zone id is out of range [ 449.388970][T23106] netlink: zone id is out of range [ 449.405614][T23106] netlink: zone id is out of range [ 449.424112][T23106] netlink: zone id is out of range [ 449.431235][T23106] netlink: zone id is out of range [ 449.450853][T23111] netlink: 'syz.2.8141': attribute type 83 has an invalid length. [ 449.451851][T23106] netlink: zone id is out of range [ 449.489500][T23106] netlink: zone id is out of range [ 449.503804][T23106] netlink: zone id is out of range [ 449.520567][T23106] netlink: zone id is out of range [ 449.530681][T23106] netlink: zone id is out of range [ 450.044022][T23142] netlink: 'syz.2.8157': attribute type 83 has an invalid length. [ 450.723324][T23178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8174'. [ 451.242803][T23208] netlink: 'syz.4.8188': attribute type 8 has an invalid length. [ 451.282308][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8188'. [ 451.303010][T23208] bridge0: entered allmulticast mode [ 451.675715][T23232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8199'. [ 451.987834][T23250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8208'. [ 452.526802][T23279] netlink: 71 bytes leftover after parsing attributes in process `syz.3.8221'. [ 452.737683][T23291] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8226'. [ 453.081539][T23311] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8237'. [ 453.479298][T23332] syz.3.8247: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 453.528628][T23332] CPU: 1 UID: 0 PID: 23332 Comm: syz.3.8247 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 453.528669][T23332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.528681][T23332] Call Trace: [ 453.528690][T23332] [ 453.528698][T23332] dump_stack_lvl+0x189/0x250 [ 453.528741][T23332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.528772][T23332] ? __pfx__printk+0x10/0x10 [ 453.528795][T23332] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 453.528817][T23332] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 453.528841][T23332] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 453.528867][T23332] warn_alloc+0x214/0x310 [ 453.528889][T23332] ? stack_depot_save_flags+0x40/0x900 [ 453.528917][T23332] ? __pfx_warn_alloc+0x10/0x10 [ 453.528943][T23332] ? kasan_save_track+0x4f/0x80 [ 453.528974][T23332] ? xskq_create+0x56/0x170 [ 453.529002][T23332] ? xsk_init_queue+0xb0/0x110 [ 453.529027][T23332] ? xsk_setsockopt+0x43f/0x710 [ 453.529049][T23332] ? do_sock_setsockopt+0x257/0x3e0 [ 453.529069][T23332] ? __x64_sys_setsockopt+0x18b/0x220 [ 453.529089][T23332] ? do_syscall_64+0xfa/0x3b0 [ 453.529105][T23332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.529140][T23332] __vmalloc_node_range_noprof+0x125/0x12f0 [ 453.529198][T23332] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.529222][T23332] ? xskq_create+0x56/0x170 [ 453.529253][T23332] ? __kasan_kmalloc+0x93/0xb0 [ 453.529276][T23332] vmalloc_user_noprof+0xad/0xf0 [ 453.529298][T23332] ? xskq_create+0xbf/0x170 [ 453.529328][T23332] xskq_create+0xbf/0x170 [ 453.529359][T23332] xsk_init_queue+0xb0/0x110 [ 453.529390][T23332] xsk_setsockopt+0x43f/0x710 [ 453.529422][T23332] ? __pfx_xsk_setsockopt+0x10/0x10 [ 453.529446][T23332] ? __lock_acquire+0xab9/0xd20 [ 453.529486][T23332] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 453.529510][T23332] ? __pfx_xsk_setsockopt+0x10/0x10 [ 453.529539][T23332] do_sock_setsockopt+0x257/0x3e0 [ 453.529566][T23332] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 453.529596][T23332] ? __fget_files+0x2a/0x420 [ 453.529625][T23332] __x64_sys_setsockopt+0x18b/0x220 [ 453.529664][T23332] do_syscall_64+0xfa/0x3b0 [ 453.529681][T23332] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.529709][T23332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.529728][T23332] ? clear_bhb_loop+0x60/0xb0 [ 453.529752][T23332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.529769][T23332] RIP: 0033:0x7ff0b9d8e929 [ 453.529788][T23332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.529805][T23332] RSP: 002b:00007ff0bacd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 453.529828][T23332] RAX: ffffffffffffffda RBX: 00007ff0b9fb5fa0 RCX: 00007ff0b9d8e929 [ 453.529842][T23332] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 453.529855][T23332] RBP: 00007ff0b9e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 453.529867][T23332] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.529878][T23332] R13: 0000000000000000 R14: 00007ff0b9fb5fa0 R15: 00007fffe2126ee8 [ 453.529911][T23332] [ 453.840580][T23332] Mem-Info: [ 453.843933][T23332] active_anon:5199 inactive_anon:0 isolated_anon:0 [ 453.843933][T23332] active_file:1142 inactive_file:39971 isolated_file:0 [ 453.843933][T23332] unevictable:768 dirty:271 writeback:0 [ 453.843933][T23332] slab_reclaimable:11178 slab_unreclaimable:106036 [ 453.843933][T23332] mapped:29043 shmem:1379 pagetables:1083 [ 453.843933][T23332] sec_pagetables:0 bounce:0 [ 453.843933][T23332] kernel_misc_reclaimable:0 [ 453.843933][T23332] free:1325287 free_pcp:12332 free_cma:0 [ 453.859537][T23337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8249'. [ 453.889827][T23332] Node 0 active_anon:20796kB inactive_anon:0kB active_file:4568kB inactive_file:159680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116172kB dirty:1084kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12484kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.889933][T23332] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.889984][T23332] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.890042][T23332] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 453.890091][T23332] Node 0 DMA32 free:1377112kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20748kB inactive_anon:0kB active_file:4568kB inactive_file:157852kB unevictable:1536kB writepending:1084kB present:3129332kB managed:2561016kB mlocked:0kB bounce:0kB free_pcp:34432kB local_pcp:16296kB free_cma:0kB [ 453.890148][T23332] lowmem_reserve[]: 0 0 1 1 1 [ 453.947797][T23337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8249'. [ 453.964766][T23332] [ 453.964781][T23332] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 453.964844][T23332] lowmem_reserve[]: 0 0 0 0 0 [ 454.084494][T23332] Node 1 Normal free:3908660kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14816kB local_pcp:7360kB free_cma:0kB [ 454.116230][T23332] lowmem_reserve[]: 0 0 0 0 0 [ 454.121015][T23332] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 454.134348][T23332] Node 0 DMA32: 724*4kB (UME) 657*8kB (UM) 404*16kB (UME) 256*32kB (UME) 265*64kB (UM) 202*128kB (UM) 119*256kB (UME) 38*512kB (UM) 28*1024kB (UME) 4*2048kB (ME) 299*4096kB (UM) = 1377112kB [ 454.153821][T23332] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 454.169785][T23332] Node 1 Normal: 203*4kB (UME) 43*8kB (UME) 43*16kB (UME) 138*32kB (UME) 47*64kB (UME) 8*128kB (UM) 2*256kB (M) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3908660kB [ 454.188416][T23332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.198308][T23332] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.214063][T23332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.223826][T23332] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.233196][T23332] 42489 total pagecache pages [ 454.237910][T23332] 0 pages in swap cache [ 454.242236][T23332] Free swap = 124996kB [ 454.246427][T23332] Total swap = 124996kB [ 454.256498][T23332] 2097051 pages RAM [ 454.260363][T23332] 0 pages HighMem/MovableOnly [ 454.339967][T23332] 424691 pages reserved [ 454.352828][T23332] 0 pages cma reserved [ 455.122307][T23389] netlink: 'syz.0.8274': attribute type 1 has an invalid length. [ 455.267231][T23395] netlink: 'syz.4.8275': attribute type 1 has an invalid length. [ 455.296016][T23395] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8275'. [ 455.346136][T23395] netlink: 'syz.4.8275': attribute type 1 has an invalid length. [ 455.752922][T23424] net_ratelimit: 217 callbacks suppressed [ 455.752946][T23424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 455.765435][T23424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 455.816633][T23424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 455.823984][T23427] openvswitch: netlink: IPv4 tunnel dst address is zero [ 455.824121][T23424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 455.892435][T23424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 455.898950][T23424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 455.936693][T23424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 455.943208][T23424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 456.040976][T23424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 456.397064][T23453] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8304'. [ 456.928394][T23469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8311'. [ 457.115918][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8314'. [ 457.128005][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8314'. [ 457.428156][T23481] sch_fq: defrate 0 ignored. [ 457.650032][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8321'. [ 458.466288][T23531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8336'. [ 458.736605][T23542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8341'. [ 459.006761][T23556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8348'. [ 459.206324][T23567] netlink: 'syz.2.8353': attribute type 1 has an invalid length. [ 459.537578][T23586] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8362'. [ 459.621873][T23588] block nbd0: Unsupported socket: shutdown callout must be supported. [ 459.962091][T23610] netlink: 'syz.3.8373': attribute type 83 has an invalid length. [ 459.985020][T23611] veth0: entered promiscuous mode [ 459.996742][T23611] veth0: left promiscuous mode [ 460.274724][T23623] bond1: entered promiscuous mode [ 460.287557][T23623] bond1: entered allmulticast mode [ 460.294691][T23623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.442186][T23623] bond1 (unregistering): Released all slaves [ 460.691450][T23638] netlink: 236 bytes leftover after parsing attributes in process `syz.4.8383'. [ 461.542379][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8396'. [ 461.564108][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8396'. [ 461.599012][T23665] veth0: entered promiscuous mode [ 461.610162][T23664] veth0: left promiscuous mode [ 462.189833][T23694] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8409'. [ 462.481046][T23708] veth0: entered promiscuous mode [ 462.501532][T23706] veth0: left promiscuous mode [ 462.698060][T23718] netlink: 'syz.3.8422': attribute type 1 has an invalid length. [ 462.759991][T23722] sctp: [Deprecated]: syz.0.8424 (pid 23722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.759991][T23722] Use struct sctp_sack_info instead [ 463.209369][T23739] netlink: 'syz.0.8431': attribute type 1 has an invalid length. [ 463.337775][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8436'. [ 464.095708][T23791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8455'. [ 464.699860][T23807] bridge0: entered allmulticast mode [ 465.131911][T23825] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8469'. [ 466.011184][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8490'. [ 466.028078][T23872] netlink: 'syz.3.8490': attribute type 3 has an invalid length. [ 466.431292][T23894] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8501'. [ 466.541385][T23900] netlink: 'syz.0.8503': attribute type 1 has an invalid length. [ 466.549634][T23900] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8503'. [ 467.833907][T23970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8535'. [ 468.016498][T23970] macvtap1: entered promiscuous mode [ 468.026900][T23970] vlan0: entered promiscuous mode [ 468.036338][T23970] macvtap1: entered allmulticast mode [ 468.043090][T23970] vlan0: entered allmulticast mode [ 468.048368][T23970] veth0_vlan: entered allmulticast mode [ 468.250739][T23990] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 468.414727][T24001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8550'. [ 468.660717][T24012] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8555'. [ 468.735004][T24017] net_ratelimit: 67 callbacks suppressed [ 468.735028][T24017] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 469.125005][T24033] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8566'. [ 469.477714][T24050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8573'. [ 469.536176][T24050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8573'. [ 469.713738][T24058] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8576'. [ 470.041430][T24058]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.064460][T24058]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.117540][T24058]  (unregistering): (slave dummy0): Releasing backup interface [ 470.138602][T24058]  (unregistering): Released all slaves [ 472.020328][T24162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8625'. [ 472.044915][T24162] chnl_net:caif_netlink_parms(): no params data found [ 473.117585][T24212] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 473.169671][T24212] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 473.188870][T24212] gretap1: entered promiscuous mode [ 473.197043][T24212] gretap1: entered allmulticast mode [ 474.384368][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8665'. [ 475.427217][T24315] lo speed is unknown, defaulting to 1000 [ 476.266392][T24351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8698'. [ 476.281698][T24351] netlink: 'syz.0.8698': attribute type 7 has an invalid length. [ 476.329222][T24351] netlink: 'syz.0.8698': attribute type 8 has an invalid length. [ 476.349129][T24351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8698'. [ 476.450347][T24358] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8700'. [ 476.468407][T24315] vxcan1 speed is unknown, defaulting to 1000 [ 476.689251][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8707'. [ 476.716332][T24370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8705'. [ 476.817780][T24376] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8709'. [ 476.900697][T24370] netlink: 'syz.2.8705': attribute type 1 has an invalid length. [ 476.931662][T24370] netlink: 'syz.2.8705': attribute type 2 has an invalid length. [ 477.030431][T24381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.137900][T24386] syzkaller1: entered promiscuous mode [ 477.147483][T24386] syzkaller1: entered allmulticast mode [ 477.167047][T24386] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 26 [ 478.255748][T24421] sctp: [Deprecated]: syz.3.8729 (pid 24421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.255748][T24421] Use struct sctp_sack_info instead [ 479.315825][T24474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8752'. [ 479.344615][T24474] netlink: 'syz.3.8752': attribute type 1 has an invalid length. [ 479.354640][T24474] netlink: 'syz.3.8752': attribute type 2 has an invalid length. [ 479.479465][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.510810][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.624980][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.651957][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.807090][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.847560][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.034820][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.070201][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.588012][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 480.602782][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 480.622001][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 480.631673][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 480.655625][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 480.743095][T24511] lo speed is unknown, defaulting to 1000 [ 481.133665][ T36] veth0_to_bridge: left allmulticast mode [ 481.188600][ T36] veth0_to_bridge: left promiscuous mode [ 481.234899][ T36] bridge0: port 1(veth0_to_bridge) entered disabled state [ 482.445166][ T36] bond0 (unregistering): Released all slaves [ 482.464160][ T36] bond1 (unregistering): Released all slaves [ 482.482669][ T36] bond2 (unregistering): Released all slaves [ 482.500462][T24511] vxcan1 speed is unknown, defaulting to 1000 [ 482.639854][ T36] : left promiscuous mode [ 482.725657][ T5845] Bluetooth: hci0: command tx timeout [ 482.791178][T24571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 482.830105][ T36] tipc: Disabling bearer [ 482.862086][ T36] tipc: Left network mode [ 483.119387][T24582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8786'. [ 483.156165][T24582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8786'. [ 483.186510][T24587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8788'. [ 483.495102][T24594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8791'. [ 483.589998][T24583] lo speed is unknown, defaulting to 1000 [ 484.689700][T24511] chnl_net:caif_netlink_parms(): no params data found [ 484.791915][ T5845] Bluetooth: hci0: command tx timeout [ 485.021143][T24645] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 485.031515][T22147] IPVS: starting estimator thread 0... [ 485.075471][T24583] vxcan1 speed is unknown, defaulting to 1000 [ 485.171779][T24649] IPVS: using max 23 ests per chain, 55200 per kthread [ 485.655335][T24673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8811'. [ 485.671155][T24511] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.710552][T24511] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.739018][T24511] bridge_slave_0: entered allmulticast mode [ 485.773870][T24511] bridge_slave_0: entered promiscuous mode [ 485.810841][T24511] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.838337][T24511] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.851894][T24511] bridge_slave_1: entered allmulticast mode [ 485.860213][T24511] bridge_slave_1: entered promiscuous mode [ 486.043769][T24684] netlink: 604 bytes leftover after parsing attributes in process `syz.1.8814'. [ 486.135283][T24681] netlink: 'syz.1.8814': attribute type 29 has an invalid length. [ 486.157400][T24683] netlink: 'syz.1.8814': attribute type 29 has an invalid length. [ 486.185724][T24511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.268253][T24511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.580016][T24511] team0: Port device team_slave_0 added [ 486.608347][T24511] team0: Port device team_slave_1 added [ 486.718123][ T36] hsr_slave_0: left promiscuous mode [ 486.736595][ T36] hsr_slave_1: left promiscuous mode [ 486.766952][T24703] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8821'. [ 486.788606][ T36] veth0_macvtap: left allmulticast mode [ 486.797883][ T36] vlan0: left allmulticast mode [ 486.804683][ T36] veth0_vlan: left allmulticast mode [ 486.810303][ T36] vlan0: left promiscuous mode [ 486.832909][ T36] veth0_macvtap: left promiscuous mode [ 486.838831][ T36] veth1_vlan: left promiscuous mode [ 486.852571][ T36] veth0_vlan: left promiscuous mode [ 486.872100][ T5845] Bluetooth: hci0: command tx timeout [ 487.745292][ T12] smc: removing ib device syz2 [ 488.121085][T24511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.128383][T24511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.183443][T24511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.286196][T22147] vxcan1 speed is unknown, defaulting to 1000 [ 488.304540][T22147] syz2: Port: 1 Link DOWN [ 488.573248][T24511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.594939][T24511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.671772][T24511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.952121][ T5845] Bluetooth: hci0: command tx timeout [ 488.966322][T24733] netlink: 'syz.0.8829': attribute type 1 has an invalid length. [ 489.468084][T24511] hsr_slave_0: entered promiscuous mode [ 489.496325][T24511] hsr_slave_1: entered promiscuous mode [ 491.033959][ T36] IPVS: stop unused estimator thread 0... [ 492.361228][T24511] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 492.426143][T24511] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 492.496570][T24511] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 492.588616][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.597875][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.600181][T24511] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 492.615744][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.629841][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.640259][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.889374][T24806] lo speed is unknown, defaulting to 1000 [ 493.244185][T24511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.359159][T24511] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.404558][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.411868][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.482360][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.489650][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.642937][T24848] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8865'. [ 493.665536][T24511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.537810][T24806] chnl_net:caif_netlink_parms(): no params data found [ 494.716687][ T5851] Bluetooth: hci3: command tx timeout [ 494.747520][T24511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.941429][T24806] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.959380][T24806] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.966908][T24806] bridge_slave_0: entered allmulticast mode [ 494.978584][T24806] bridge_slave_0: entered promiscuous mode [ 495.002238][T24806] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.009553][T24806] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.019705][T24806] bridge_slave_1: entered allmulticast mode [ 495.042720][T24806] bridge_slave_1: entered promiscuous mode [ 495.235704][T24806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.325197][T24806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.444503][T24906] netlink: 'syz.0.8882': attribute type 4 has an invalid length. [ 495.496180][T24806] team0: Port device team_slave_0 added [ 495.544120][T24806] team0: Port device team_slave_1 added [ 495.675688][T24511] veth0_vlan: entered promiscuous mode [ 495.751494][T24806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.781818][T24806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.847970][T24806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.958344][T24806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.989332][T24806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.064992][T24806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.117862][T24511] veth1_vlan: entered promiscuous mode [ 496.294201][T24806] hsr_slave_0: entered promiscuous mode [ 496.301074][T24806] hsr_slave_1: entered promiscuous mode [ 496.335303][T24806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.370929][T24806] Cannot create hsr debugfs directory [ 496.587807][T24511] veth0_macvtap: entered promiscuous mode [ 496.654478][T24511] veth1_macvtap: entered promiscuous mode [ 496.792572][ T5851] Bluetooth: hci3: command tx timeout [ 496.793958][T24955] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8899'. [ 496.918975][T24511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.993307][T24806] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.066227][T24511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.109181][T24806] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.144383][T24511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.171441][T24511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.190591][T24511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.212011][T24511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.287071][T24806] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.420798][T24806] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.737145][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.777587][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.929602][T24993] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 497.975862][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.977890][T24806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.021947][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.189826][T24806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 498.238351][T24806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 498.303277][T24806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.468518][T24511] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 498.480477][T24511] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 498.488900][T24511] CPU: 1 UID: 0 PID: 24511 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 498.501144][T24511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.511208][T24511] RIP: 0010:klist_remove+0x14a/0x340 [ 498.516515][T24511] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 31 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 31 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 498.536131][T24511] RSP: 0018:ffffc9000b7ff840 EFLAGS: 00010202 [ 498.542217][T24511] RAX: 000000000000000b RBX: ffff888058e25a00 RCX: 0000000000000000 [ 498.550192][T24511] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 498.558167][T24511] RBP: ffffc9000b7ff928 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 498.566144][T24511] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 498.574120][T24511] R13: 1ffff11005fcdb0c R14: ffff88802fe6d860 R15: dffffc0000000000 [ 498.582101][T24511] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 498.591065][T24511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.597742][T24511] CR2: 00007ff6b47e0a90 CR3: 0000000054e4e000 CR4: 00000000003526f0 [ 498.605806][T24511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.613778][T24511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 498.621755][T24511] Call Trace: [ 498.625223][T24511] [ 498.628161][T24511] ? __pfx_klist_remove+0x10/0x10 [ 498.633203][T24511] ? __pfx_kobject_move+0x10/0x10 [ 498.638242][T24511] ? get_device_parent+0x366/0x3a0 [ 498.643361][T24511] device_move+0x193/0x700 [ 498.647795][T24511] hci_conn_del_sysfs+0xb8/0x170 [ 498.652745][T24511] hci_conn_del+0x8ff/0xcb0 [ 498.657385][T24511] hci_conn_hash_flush+0x191/0x230 [ 498.662524][T24511] hci_dev_close_sync+0xaef/0x1330 [ 498.667656][T24511] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 498.673215][T24511] ? up_write+0x1c4/0x420 [ 498.677554][T24511] hci_unregister_dev+0x21a/0x510 [ 498.682587][T24511] vhci_release+0x80/0xd0 [ 498.686932][T24511] ? __pfx_vhci_release+0x10/0x10 [ 498.691971][T24511] __fput+0x44c/0xa70 [ 498.696053][T24511] task_work_run+0x1d1/0x260 [ 498.700650][T24511] ? __pfx_task_work_run+0x10/0x10 [ 498.705774][T24511] ? kmem_cache_free+0x18f/0x400 [ 498.710715][T24511] do_exit+0x6ad/0x22e0 [ 498.714884][T24511] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 498.720274][T24511] ? __pfx_do_exit+0x10/0x10 [ 498.724879][T24511] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.730095][T24511] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.735396][T24511] do_group_exit+0x21c/0x2d0 [ 498.739992][T24511] __x64_sys_exit_group+0x3f/0x40 [ 498.745026][T24511] x64_sys_call+0x21ba/0x21c0 [ 498.749709][T24511] do_syscall_64+0xfa/0x3b0 [ 498.754220][T24511] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.759449][T24511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.765547][T24511] ? clear_bhb_loop+0x60/0xb0 [ 498.770243][T24511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.776165][T24511] RIP: 0033:0x7f6939b8e929 [ 498.780586][T24511] Code: Unable to access opcode bytes at 0x7f6939b8e8ff. [ 498.787625][T24511] RSP: 002b:00007fff7213ec98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 498.796326][T24511] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6939b8e929 [ 498.804340][T24511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 498.812324][T24511] RBP: 00007f6939bee8f0 R08: 00007fff7213ca37 R09: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 498.820301][T24511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.828367][T24511] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff7213ee50 [ 498.836356][T24511] [ 498.839380][T24511] Modules linked in: [ 498.845366][T24511] ---[ end trace 0000000000000000 ]--- [ 498.871135][T24511] RIP: 0010:klist_remove+0x14a/0x340 [ 498.891591][ T5851] Bluetooth: hci3: command tx timeout [ 498.914710][T24511] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 31 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 31 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 498.935655][T24511] RSP: 0018:ffffc9000b7ff840 EFLAGS: 00010202 [ 498.941832][T24511] RAX: 000000000000000b RBX: ffff888058e25a00 RCX: 0000000000000000 [ 498.949839][T24511] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 498.958788][T24511] RBP: ffffc9000b7ff928 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 498.967153][T24511] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 498.975538][T24511] R13: 1ffff11005fcdb0c R14: ffff88802fe6d860 R15: dffffc0000000000 [ 498.983978][T24511] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 499.012180][T24511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.018819][T24511] CR2: 00007ff2d24e7d60 CR3: 000000006de84000 CR4: 00000000003526f0 [ 499.051730][T24511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.091616][T24511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 499.099669][T24511] Kernel panic - not syncing: Fatal exception [ 499.106033][T24511] Kernel Offset: disabled [ 499.110536][T24511] Rebooting in 86400 seconds..