last executing test programs: 3m10.246363055s ago: executing program 1 (id=3118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 3m10.098248966s ago: executing program 1 (id=3121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x30, 0x1a, 0x1, 0x70bd25, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x84}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 3m9.774705218s ago: executing program 1 (id=3129): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x43}}], 0x20) 3m9.576619477s ago: executing program 1 (id=3135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, &(0x7f0000000040)) 3m9.31525158s ago: executing program 1 (id=3141): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x130, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69fa01dadbec8db85ad0a147eabb22fc6896d6d3e706b0bc8e88325fe6d76e894a422b9116227af2d29f89510f70541336b3d4683107c0bbb678ae476a0c409c15fda7d5cdbaf1265605a79e9847258124c3a6cf28e1df891b8edaac28b82794422d4b2b0d13870eff73990ecde487d74267d83a5c16592feb0211e9b9b13e420c29ac2d21de289c4109553ec0949748802a31d68b2280ab9de82ba7019d6798bc961633741dae6a5b0314266fadeb001584395af710b03134456f3ae4e24b8a777a1848ca788d2a28d5dac39c", @generic="5860e64b3f515b4e2e3de25114d4302f5f36993c6250ac50688494c207e07c71442fadba75909e81940f6fed"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3m9.154730286s ago: executing program 1 (id=3148): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m54.063904268s ago: executing program 32 (id=3148): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m29.466751742s ago: executing program 5 (id=3938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) 2m29.262001547s ago: executing program 5 (id=3943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {}, 0x7}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) 2m29.015444564s ago: executing program 5 (id=3950): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m28.640886026s ago: executing program 5 (id=3959): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000140)) 2m28.452703353s ago: executing program 5 (id=3962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffa563a52de7fdda", @ANYRES32, @ANYBLOB="080002"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 2m28.232131003s ago: executing program 5 (id=3968): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) 2m13.052002035s ago: executing program 33 (id=3968): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) 21.465454042s ago: executing program 0 (id=6887): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 21.311077267s ago: executing program 0 (id=6891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000050) 21.129612449s ago: executing program 0 (id=6897): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) 20.889087524s ago: executing program 0 (id=6903): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb68b, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040094}, 0x40800) 20.730669215s ago: executing program 0 (id=6908): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x44}}, 0x0) 20.54472428s ago: executing program 0 (id=6913): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5.458016958s ago: executing program 34 (id=6913): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.941581329s ago: executing program 3 (id=7254): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25080021"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.757982128s ago: executing program 3 (id=7259): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1.552883604s ago: executing program 4 (id=7261): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) 1.508386181s ago: executing program 3 (id=7263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 1.379186004s ago: executing program 4 (id=7265): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff61}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x34, 0x0, &(0x7f0000000100)="259a53f20000fd33e1f82da8290bb92fc3c4b7b7445c54db76899692be9f27ebad6deb5a6ebe43fb3641a88395eb9400bb2ad258", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 1.260011459s ago: executing program 3 (id=7267): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r0, 0x0, 0x0) 1.158747392s ago: executing program 6 (id=7268): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000010000507000000000100000000000006", @ANYRES32=0x0, @ANYBLOB="40000200000000005c00128008000100677265005000028005000a000000000006000f00100000000600030000080000050013000000000006000f000010000006000f000100000008000100", @ANYRES32, @ANYBLOB="040012"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.081107227s ago: executing program 3 (id=7269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 1.070803332s ago: executing program 2 (id=7270): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff3}, {0x4, 0xf}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 902.157999ms ago: executing program 2 (id=7271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 766.886885ms ago: executing program 6 (id=7272): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) 766.636976ms ago: executing program 4 (id=7273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000500000000000008000f"], 0x24}}, 0x0) 701.830783ms ago: executing program 2 (id=7274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0) 646.325971ms ago: executing program 6 (id=7275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a3000000000400000001b0a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xd8}}, 0x80) 514.696883ms ago: executing program 4 (id=7276): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r0, 0x0, 0x0) 511.340539ms ago: executing program 2 (id=7277): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001900010000000000000000001d010900500010804b000000990d59906040c6226d83b3dd9f0284140a973fa17924702f9b6aef2bab7bb223177c25bb9bd08da55bafe6afdd6ee1b52f5b71c6068ea84b4900077fd8998d20c93b0e01f5"], 0x64}}, 0x0) 497.336425ms ago: executing program 6 (id=7278): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x7e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) 325.735206ms ago: executing program 3 (id=7279): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) 294.235601ms ago: executing program 4 (id=7280): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8a5e322d8e489c231db446dfce5034a3625a1060961a5c8e8ebee289dc9b81c6", "f22ad97c8d000000000000007a03b2400b00", "24d1030000000001b36853e70000b4b9f979a100", "16960bf75c8ad1e4d903c98b4613a024b2f65c2cdd5efe4157a125325c262ce4", "6a272fe447160298c7b816cd3dec35bdef00", "2600000043125300", 0x2, 0x2, 0xfffffffd, 0x7ff, 0x6}}) 266.291286ms ago: executing program 6 (id=7281): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x16, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="e1af822f"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 232.823599ms ago: executing program 2 (id=7282): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80024000000000000002000000010000000000080008000100000000ff", 0x24) 59.308681ms ago: executing program 6 (id=7283): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000140)) 610.402µs ago: executing program 2 (id=7284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000100)}, 0x20) 0s ago: executing program 4 (id=7285): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000d00)={'netdevsim0\x00', &(0x7f000000dc00)=@ethtool_ts_info={0x50}}) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.4.2435'. [ 213.303844][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'. [ 213.331804][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2435'. [ 213.484029][T10908] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 213.963122][T10933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2454'. [ 214.005869][T10933] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 214.444791][T10956] netlink: 'syz.2.2466': attribute type 1 has an invalid length. [ 214.452587][T10956] netlink: 'syz.2.2466': attribute type 1 has an invalid length. [ 214.649650][T10969] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2473'. [ 214.786039][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 214.831303][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 215.034730][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 215.173945][T10993] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443) [ 215.207736][T10993] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 215.291851][T10997] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2485'. [ 215.327077][T10997] 0·: renamed from hsr_slave_1 (while UP) [ 215.350227][T10997] 0·: entered allmulticast mode [ 215.386058][T10997] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 215.485919][T11006] veth2: entered allmulticast mode [ 215.567572][T11006] veth3: entered promiscuous mode [ 216.650255][T11048] xt_bpf: check failed: parse error [ 216.987399][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 216.993910][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 217.000137][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 217.003521][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 217.006360][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 217.993328][T11109] xt_ecn: cannot match TCP bits for non-tcp packets [ 218.169012][T11118] __nla_validate_parse: 2 callbacks suppressed [ 218.169034][T11118] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2544'. [ 218.354391][T11128] netlink: 'syz.1.2548': attribute type 1 has an invalid length. [ 218.381977][T11128] netlink: 'syz.1.2548': attribute type 3 has an invalid length. [ 218.414504][T11128] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2548'. [ 218.423622][T11128] NCSI netlink: No device for ifindex 246 [ 218.609161][T11138] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.034028][T11160] dummy0: mtu less than device minimum [ 219.089851][T11162] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 219.274966][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2570'. [ 220.000547][T11210] ip6gretap1: entered promiscuous mode [ 220.332242][ T43] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.624193][T11240] netlink: 'syz.0.2603': attribute type 5 has an invalid length. [ 220.669492][T11240] ip6erspan0: entered promiscuous mode [ 220.773678][T11246] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2605'. [ 221.213488][T11268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.227482][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2617'. [ 221.497620][T11284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2623'. [ 221.889939][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 222.240553][T11325] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2644'. [ 222.351921][T11327] ip6erspan0: entered promiscuous mode [ 222.495675][T11335] netlink: 'syz.4.2649': attribute type 15 has an invalid length. [ 222.664489][T11347] delete_channel: no stack [ 222.990710][T11363] vlan0: entered promiscuous mode [ 223.167894][T11369] geneve2: entered allmulticast mode [ 223.223544][T11374] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.368108][T11379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2670'. [ 223.409462][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2673'. [ 223.410677][T11385] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2672'. [ 223.428610][T11379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2670'. [ 223.696201][T11397] netlink: 'syz.1.2679': attribute type 13 has an invalid length. [ 223.884569][T11405] netlink: 'syz.0.2682': attribute type 1 has an invalid length. [ 223.954067][T11405] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2682'. [ 224.305231][T11426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2694'. [ 224.667105][T11445] xt_TCPMSS: Only works on TCP SYN packets [ 224.714311][T11449] netlink: 'syz.2.2705': attribute type 21 has an invalid length. [ 224.772605][T11449] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2705'. [ 224.803077][T11449] netlink: 'syz.2.2705': attribute type 5 has an invalid length. [ 224.812044][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 224.834180][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 224.843210][T11449] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2705'. [ 225.756976][T11504] openvswitch: netlink: IP tunnel dst address not specified [ 226.872146][T11537] netlink: 'syz.4.2744': attribute type 10 has an invalid length. [ 226.931785][T11537] team0: entered promiscuous mode [ 226.970955][T11537] team_slave_0: entered promiscuous mode [ 226.996169][T11537] team_slave_1: entered promiscuous mode [ 227.002243][T11537] team0: entered allmulticast mode [ 227.039204][T11537] team_slave_0: entered allmulticast mode [ 227.056899][T11537] team_slave_1: entered allmulticast mode [ 227.088908][T11537] bridge0: port 3(team0) entered blocking state [ 227.116630][T11537] bridge0: port 3(team0) entered disabled state [ 227.152028][T11537] bridge0: port 3(team0) entered blocking state [ 227.158694][T11537] bridge0: port 3(team0) entered forwarding state [ 227.608042][T11571] netlink: 'syz.0.2757': attribute type 5 has an invalid length. [ 228.717709][T11626] netlink: 'syz.0.2779': attribute type 8 has an invalid length. [ 229.227056][T11648] ip6t_srh: unknown srh invflags 4000 [ 229.743893][T11672] __nla_validate_parse: 1 callbacks suppressed [ 229.743913][T11672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2799'. [ 230.361432][T11703] netlink: 'syz.4.2811': attribute type 12 has an invalid length. [ 230.874554][T11730] raw_sendmsg: syz.4.2821 forgot to set AF_INET. Fix it! [ 230.889677][T11727] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 230.985606][T11727] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 231.090667][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 231.124120][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 231.138505][T11738] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2826'. [ 231.163717][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 231.181085][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 231.191051][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 231.217620][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 231.241500][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 231.262121][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 231.824910][T11762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.919016][T11871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.996533][T11879] netlink: 'syz.1.2884': attribute type 1 has an invalid length. [ 236.563114][T11956] xt_hashlimit: size too large, truncated to 1048576 [ 236.571495][T11956] xt_hashlimit: max too large, truncated to 1048576 [ 236.714666][T11962] __nla_validate_parse: 78 callbacks suppressed [ 236.714686][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 236.949039][T11972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2923'. [ 236.965475][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2923'. [ 236.993946][T11972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2923'. [ 237.121002][T11978] netlink: 'syz.3.2925': attribute type 3 has an invalid length. [ 237.129254][T11979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2926'. [ 237.161063][T11978] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2925'. [ 237.188638][T11983] netlink: 'syz.4.2928': attribute type 21 has an invalid length. [ 237.636552][T12007] xt_TCPMSS: Only works on TCP SYN packets [ 237.740813][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.749589][T12001] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.981197][T12001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.997320][T12001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.173981][T12017] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 238.182160][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2944'. [ 238.198417][T12017] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 238.207723][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2944'. [ 238.228280][T12017] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 238.244606][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2944'. [ 238.275335][T12017] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 238.301627][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2944'. [ 238.343633][T12017] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 238.352595][T12017] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 238.367632][T12017] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 238.437541][ T1150] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.467669][ T1150] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.523299][ T1150] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.544281][ T1150] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.319733][T12070] ip6gre2: entered allmulticast mode [ 239.952710][T12107] Cannot find add_set index 4 as target [ 240.295892][T12127] xt_bpf: check failed: parse error [ 240.459623][T12136] sctp: [Deprecated]: syz.4.3002 (pid 12136) Use of int in maxseg socket option. [ 240.459623][T12136] Use struct sctp_assoc_value instead [ 241.092465][T12166] syz_tun: entered allmulticast mode [ 241.113815][T12166] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 241.525275][T12194] validate_nla: 75 callbacks suppressed [ 241.525294][T12194] netlink: 'syz.2.3030': attribute type 5 has an invalid length. [ 241.544942][T12193] netlink: 'syz.3.3029': attribute type 7 has an invalid length. [ 241.579523][T12193] netlink: 'syz.3.3029': attribute type 8 has an invalid length. [ 242.121171][T12223] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 242.167920][T12228] xt_ecn: cannot match TCP bits for non-tcp packets [ 242.277113][T12231] netlink: 'syz.2.3049': attribute type 1 has an invalid length. [ 242.298154][T12231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.552188][T12247] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 242.594944][T12248] netlink: 'syz.1.3057': attribute type 1 has an invalid length. [ 242.660869][T12250] IPv6: Can't replace route, no match found [ 242.953173][T12266] __nla_validate_parse: 88 callbacks suppressed [ 242.953195][T12266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3066'. [ 243.521854][T12296] ieee802154 phy0 wpan0: encryption failed: -90 [ 243.548923][T12297] batadv1: entered promiscuous mode [ 243.681877][T12304] netlink: 'syz.4.3084': attribute type 26 has an invalid length. [ 244.070372][T12321] xt_bpf: check failed: parse error [ 244.461390][T12345] lo: entered promiscuous mode [ 244.488673][T12345] netlink: 'syz.2.3102': attribute type 1 has an invalid length. [ 244.534798][T12345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.772336][T12359] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 244.854509][T12365] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 244.862304][T12365] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3114'. [ 245.162257][T12382] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 245.881789][T12419] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 246.688862][T12458] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3160'. [ 247.228827][T12485] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3171'. [ 247.768310][T12513] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3181'. [ 248.049866][T12526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3188'. [ 248.560693][T12552] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 249.409421][T12592] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3213'. [ 249.593637][T12603] netlink: 'syz.0.3217': attribute type 3 has an invalid length. [ 249.612651][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3219'. [ 249.636889][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3219'. [ 250.524991][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3233'. [ 250.547370][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3233'. [ 250.635426][T12641] veth4: entered allmulticast mode [ 251.223776][T12672] netlink: 'syz.4.3247': attribute type 11 has an invalid length. [ 252.242674][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3262'. [ 252.630759][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3269'. [ 252.726678][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3270'. [ 252.736345][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3269'. [ 252.791160][T12741] netlink: 'syz.2.3272': attribute type 9 has an invalid length. [ 252.846348][T12741] netlink: 'syz.2.3272': attribute type 7 has an invalid length. [ 252.872648][T12741] netlink: 'syz.2.3272': attribute type 8 has an invalid length. [ 252.894611][T12744] netlink: 'syz.0.3273': attribute type 11 has an invalid length. [ 253.055524][T12751] __nla_validate_parse: 1 callbacks suppressed [ 253.055545][T12751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3277'. [ 253.086455][T12751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3277'. [ 253.339336][T12766] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 253.592627][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 253.743945][T12785] netlink: 'syz.0.3289': attribute type 1 has an invalid length. [ 253.826081][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3291'. [ 253.840553][T12789] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3291'. [ 254.021884][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3296'. [ 254.568982][T12830] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 254.584611][T12830] ipt_ECN: cannot use operation on non-tcp rule [ 255.143573][T12859] ip6gretap2: entered allmulticast mode [ 255.618336][T12887] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3336'. [ 255.644628][T12887] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3336'. [ 255.869500][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.876187][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.979146][T12900] netlink: 'syz.2.3342': attribute type 2 has an invalid length. [ 256.016338][T12900] þ: entered promiscuous mode [ 256.043501][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3344'. [ 256.224538][T12912] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3348'. [ 257.193194][T12962] netlink: 'syz.2.3373': attribute type 1 has an invalid length. [ 257.228603][T12964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.927640][T12999] netlink: 'syz.0.3392': attribute type 1 has an invalid length. [ 257.949998][T12999] netlink: 'syz.0.3392': attribute type 2 has an invalid length. [ 258.287274][T13022] __nla_validate_parse: 8 callbacks suppressed [ 258.287294][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3402'. [ 259.159868][T13068] netlink: 'syz.4.3425': attribute type 11 has an invalid length. [ 259.305582][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'. [ 259.598488][T13087] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3435'. [ 259.993039][T13109] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 260.041364][T13109] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 260.380471][T13129] netlink: 'syz.4.3455': attribute type 11 has an invalid length. [ 260.404005][T13129] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3455'. [ 260.503314][T13135] openvswitch: netlink: Missing key (keys=40, expected=80) [ 260.825071][T13151] netlink: 'syz.3.3466': attribute type 1 has an invalid length. [ 261.017823][T13159] netlink: 'syz.3.3470': attribute type 6 has an invalid length. [ 261.067789][T13159] netlink: 'syz.3.3470': attribute type 7 has an invalid length. [ 261.100557][T13159] netlink: 'syz.3.3470': attribute type 8 has an invalid length. [ 261.204736][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3475'. [ 261.234661][T13168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3475'. [ 261.272357][T13172] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 261.324712][T13172] CPU: 1 UID: 0 PID: 13172 Comm: syz.4.3476 Not tainted 6.16.0-rc3-syzkaller-00837-g28aa52b6189f #0 PREEMPT(full) [ 261.324760][T13172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.324787][T13172] Call Trace: [ 261.324796][T13172] [ 261.324806][T13172] dump_stack_lvl+0x189/0x250 [ 261.324862][T13172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.324897][T13172] ? __pfx__printk+0x10/0x10 [ 261.324922][T13172] ? kernfs_path_from_node+0x2c/0x260 [ 261.324949][T13172] ? kernfs_path_from_node+0x2c/0x260 [ 261.324971][T13172] ? kernfs_path_from_node+0x2c/0x260 [ 261.324999][T13172] ? kernfs_path_from_node+0x22c/0x260 [ 261.325023][T13172] ? kernfs_path_from_node+0x2c/0x260 [ 261.325052][T13172] sysfs_warn_dup+0x8e/0xa0 [ 261.325090][T13172] sysfs_do_create_link_sd+0xc0/0x110 [ 261.325117][T13172] device_add_class_symlinks+0x1cf/0x240 [ 261.325146][T13172] device_add+0x475/0xb50 [ 261.325175][T13172] wiphy_register+0x1ba6/0x28d0 [ 261.325220][T13172] ? __pfx_wiphy_register+0x10/0x10 [ 261.325244][T13172] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 261.325285][T13172] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 261.325320][T13172] ieee80211_register_hw+0x33e1/0x4120 [ 261.325372][T13172] ? ieee80211_register_hw+0x14d1/0x4120 [ 261.325421][T13172] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 261.325457][T13172] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 261.325489][T13172] ? __hrtimer_setup+0x187/0x210 [ 261.325519][T13172] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 261.325551][T13172] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 261.325612][T13172] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 261.325634][T13172] ? trace_kmalloc+0x1f/0xd0 [ 261.325651][T13172] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 261.325672][T13172] ? kstrndup+0xbf/0x160 [ 261.325709][T13172] hwsim_new_radio_nl+0xea4/0x1b10 [ 261.325737][T13172] ? __pfx___nla_validate_parse+0x10/0x10 [ 261.325782][T13172] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 261.325819][T13172] ? __nla_parse+0x40/0x60 [ 261.325854][T13172] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 261.325897][T13172] genl_family_rcv_msg_doit+0x215/0x300 [ 261.325938][T13172] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 261.325987][T13172] ? bpf_lsm_capable+0x9/0x20 [ 261.326005][T13172] ? security_capable+0x7e/0x2e0 [ 261.326038][T13172] genl_rcv_msg+0x60e/0x790 [ 261.326078][T13172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.326109][T13172] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 261.326151][T13172] netlink_rcv_skb+0x208/0x470 [ 261.326178][T13172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.326210][T13172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.326257][T13172] ? down_read+0x1ad/0x2e0 [ 261.326286][T13172] genl_rcv+0x28/0x40 [ 261.326314][T13172] netlink_unicast+0x75b/0x8d0 [ 261.326350][T13172] netlink_sendmsg+0x805/0xb30 [ 261.326395][T13172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.326443][T13172] ? aa_sock_msg_perm+0x94/0x160 [ 261.326472][T13172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.326498][T13172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.326526][T13172] __sock_sendmsg+0x219/0x270 [ 261.326555][T13172] ____sys_sendmsg+0x505/0x830 [ 261.326593][T13172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.326636][T13172] ? import_iovec+0x74/0xa0 [ 261.326662][T13172] ___sys_sendmsg+0x21f/0x2a0 [ 261.326696][T13172] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.326775][T13172] ? __fget_files+0x2a/0x420 [ 261.326797][T13172] ? __fget_files+0x3a0/0x420 [ 261.326835][T13172] __x64_sys_sendmsg+0x19b/0x260 [ 261.326870][T13172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.326915][T13172] ? rcu_is_watching+0x15/0xb0 [ 261.326955][T13172] ? do_syscall_64+0xbe/0x3b0 [ 261.326986][T13172] do_syscall_64+0xfa/0x3b0 [ 261.327010][T13172] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.327034][T13172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.327054][T13172] ? clear_bhb_loop+0x60/0xb0 [ 261.327081][T13172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.327102][T13172] RIP: 0033:0x7f9c48b8e929 [ 261.327130][T13172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.327148][T13172] RSP: 002b:00007f9c49a1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.327172][T13172] RAX: ffffffffffffffda RBX: 00007f9c48db5fa0 RCX: 00007f9c48b8e929 [ 261.327187][T13172] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 261.327201][T13172] RBP: 00007f9c48c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 261.327214][T13172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.327227][T13172] R13: 0000000000000000 R14: 00007f9c48db5fa0 R15: 00007ffd109b38e8 [ 261.327263][T13172] [ 262.208587][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.218668][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.226653][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.255242][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.263957][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.877635][T13220] unsupported nlmsg_type 40 [ 263.688753][T13186] chnl_net:caif_netlink_parms(): no params data found [ 264.132557][T13264] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 264.193290][T13186] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.201471][T13186] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.231523][T13186] bridge_slave_0: entered allmulticast mode [ 264.256863][T13186] bridge_slave_0: entered promiscuous mode [ 264.284680][T13267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3520'. [ 264.288196][T13186] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.344755][ T51] Bluetooth: hci5: command tx timeout [ 264.422277][T13186] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.467393][T13186] bridge_slave_1: entered allmulticast mode [ 264.497185][T13186] bridge_slave_1: entered promiscuous mode [ 264.606287][T13186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.649167][T13186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.724454][T13285] netlink: 'syz.3.3529': attribute type 1 has an invalid length. [ 264.751625][T13285] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3529'. [ 264.783666][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 264.863547][T13186] team0: Port device team_slave_0 added [ 264.877676][T13186] team0: Port device team_slave_1 added [ 265.077763][T13186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.099472][T13186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.207714][T13186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.236602][T13186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.254461][T13186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.302120][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3538'. [ 265.374983][T13186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.632593][T13186] hsr_slave_0: entered promiscuous mode [ 265.654221][T13186] hsr_slave_1: entered promiscuous mode [ 265.672802][T13186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.700779][T13186] Cannot create hsr debugfs directory [ 266.028483][T13337] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3550'. [ 266.430198][T13349] xt_CT: No such helper "snmp_trap" [ 266.455758][ T51] Bluetooth: hci5: command tx timeout [ 266.779345][T13186] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.803821][T13186] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.902865][T13186] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.035203][T13186] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.310672][T13396] netlink: 'syz.0.3570': attribute type 10 has an invalid length. [ 267.335228][T13396] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.342980][T13396] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.409076][T13396] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.416447][T13396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.424760][T13396] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.431965][T13396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.479680][T13396] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 267.551444][T13186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.648986][T13186] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.752512][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.759800][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.774728][T13416] netlink: 'syz.0.3577': attribute type 2 has an invalid length. [ 267.785064][T13416] netlink: 'syz.0.3577': attribute type 1 has an invalid length. [ 267.814367][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.821623][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.504945][ T51] Bluetooth: hci5: command tx timeout [ 268.517744][T13447] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3587'. [ 268.564413][T13447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3587'. [ 268.573513][T13447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3587'. [ 268.611785][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3587'. [ 268.703472][T13186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.900088][T13461] xt_limit: Overflow, try lower: 0/0 [ 268.975636][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'. [ 269.158129][T13474] set match dimension is over the limit! [ 269.388185][T13483] __nla_validate_parse: 1 callbacks suppressed [ 269.388207][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3600'. [ 269.645735][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3605'. [ 269.684786][T13494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3605'. [ 269.927084][T13186] veth0_vlan: entered promiscuous mode [ 269.963340][T13186] veth1_vlan: entered promiscuous mode [ 270.097048][T13186] veth0_macvtap: entered promiscuous mode [ 270.141881][T13186] veth1_macvtap: entered promiscuous mode [ 270.164694][T13513] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3612'. [ 270.227789][T13186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.280439][T13186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.321953][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.369732][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.402375][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.483833][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.585713][ T51] Bluetooth: hci5: command tx timeout [ 270.628241][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.674547][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.819979][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.875185][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.962770][T13542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3623'. [ 270.983673][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3623'. [ 271.023177][T13542] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3623'. [ 271.085276][T13542] netlink: 'syz.4.3623': attribute type 3 has an invalid length. [ 271.110328][T13542] netlink: 'syz.4.3623': attribute type 2 has an invalid length. [ 271.164691][T13542] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3623'. [ 271.173819][T13542] netlink: 'syz.4.3623': attribute type 2 has an invalid length. [ 271.198719][T13549] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 272.225045][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3645'. [ 272.258466][T13589] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3645'. [ 272.658506][T13611] xt_connbytes: Forcing CT accounting to be enabled [ 272.667418][T13610] netlink: 'syz.5.3653': attribute type 21 has an invalid length. [ 272.675318][T13611] xt_bpf: check failed: parse error [ 273.030137][T13626] netlink: 'syz.0.3662': attribute type 2 has an invalid length. [ 273.566113][T13649] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.931378][T13667] netlink: 'syz.3.3683': attribute type 4 has an invalid length. [ 274.554470][T13697] netlink: 'syz.3.3698': attribute type 1 has an invalid length. [ 274.612946][T13701] openvswitch: netlink: Missing valid actions attribute. [ 274.644432][T13701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.892912][T13717] __nla_validate_parse: 6 callbacks suppressed [ 274.892934][T13717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3706'. [ 275.320525][T13736] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.352284][T13738] netlink: 'syz.0.3714': attribute type 1 has an invalid length. [ 275.380826][T13738] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3714'. [ 275.465914][T13742] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3718'. [ 275.478908][T13742] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3718'. [ 275.732002][T13751] gretap1: entered allmulticast mode [ 276.083231][T13766] netlink: 'syz.2.3728': attribute type 11 has an invalid length. [ 276.117064][T13766] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3728'. [ 276.197229][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3731'. [ 276.531762][T13789] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3738'. [ 276.567506][T13789] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3738'. [ 276.628028][T13789] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3738'. [ 276.649828][T13790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3740'. [ 278.177665][T13865] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 278.594505][T13882] netlink: 'syz.5.3783': attribute type 5 has an invalid length. [ 278.602390][T13882] netlink: 'syz.5.3783': attribute type 7 has an invalid length. [ 278.663093][T13882] : entered promiscuous mode [ 279.269183][T13910] netlink: 'syz.5.3797': attribute type 7 has an invalid length. [ 279.480866][T13923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.639173][T13928] netlink: 'syz.3.3806': attribute type 1 has an invalid length. [ 279.972917][T13948] __nla_validate_parse: 7 callbacks suppressed [ 279.972936][T13948] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3816'. [ 280.146232][T13954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3820'. [ 280.312741][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3822'. [ 280.334705][T13960] openvswitch: netlink: Missing valid actions attribute. [ 280.341826][T13960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.351846][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3822'. [ 280.904118][ T5920] IPVS: starting estimator thread 0... [ 281.025191][T13991] IPVS: using max 31 ests per chain, 74400 per kthread [ 281.272384][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3844'. [ 281.587732][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3850'. [ 281.597265][T14020] netlink: 'syz.0.3851': attribute type 21 has an invalid length. [ 281.597291][T14020] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3851'. [ 281.597347][T14020] netlink: 'syz.0.3851': attribute type 4 has an invalid length. [ 281.597362][T14020] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3851'. [ 281.927264][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3859'. [ 282.003542][T14039] $Hÿ: renamed from bond0 (while UP) [ 282.087417][T14039] $Hÿ: entered promiscuous mode [ 282.092516][T14039] bond_slave_0: entered promiscuous mode [ 282.165677][T14039] bond_slave_1: entered promiscuous mode [ 282.184680][T14039] mac80211_hwsim hwsim11 : entered promiscuous mode [ 282.951172][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3877'. [ 283.638453][T14113] openvswitch: netlink: Message has 1 unknown bytes. [ 283.659663][T14113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.086316][T14138] Unknown options in mask 700 [ 284.425269][T14155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.630365][T14163] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 285.128957][T14183] __nla_validate_parse: 5 callbacks suppressed [ 285.128978][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'. [ 285.173574][T14186] netlink: 'syz.0.3925': attribute type 11 has an invalid length. [ 285.805783][T14214] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3940'. [ 285.826597][T14214] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3940'. [ 285.852586][T14214] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3940'. [ 285.990992][T14221] netlink: 'syz.4.3944': attribute type 21 has an invalid length. [ 286.030558][T14221] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3944'. [ 286.071180][T14227] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3946'. [ 286.787036][T14261] netlink: 'syz.5.3962': attribute type 2 has an invalid length. [ 286.883129][T14265] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 287.091454][T14276] netlink: 'syz.4.3972': attribute type 2 has an invalid length. [ 287.411440][T14291] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 287.753512][T14306] netlink: 'syz.3.3986': attribute type 10 has an invalid length. [ 288.009919][T14315] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 288.185218][T14319] sctp: [Deprecated]: syz.0.3992 (pid 14319) Use of int in maxseg socket option. [ 288.185218][T14319] Use struct sctp_assoc_value instead [ 288.615222][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4002'. [ 288.636768][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4002'. [ 289.362387][T14375] netlink: 'syz.3.4020': attribute type 303 has an invalid length. [ 289.891845][T14403] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4034'. [ 289.935141][T14405] netlink: 'syz.2.4035': attribute type 2 has an invalid length. [ 289.953184][T14405] netlink: 'syz.2.4035': attribute type 1 has an invalid length. [ 289.964080][T14405] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4035'. [ 290.084686][T14410] netlink: 'syz.0.4036': attribute type 282 has an invalid length. [ 290.723942][T14441] xt_cluster: node mask cannot exceed total number of nodes [ 291.019710][T14457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4061'. [ 291.148321][T14463] netlink: 'syz.3.4064': attribute type 12 has an invalid length. [ 291.795280][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4080'. [ 292.034665][T14509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4087'. [ 292.649699][T14540] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 292.874644][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4108'. [ 293.046080][T14558] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 293.227338][T14567] bond0: entered promiscuous mode [ 293.232440][T14567] bond_slave_0: entered promiscuous mode [ 293.254825][T14567] bond_slave_1: entered promiscuous mode [ 293.270954][T14567] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 293.431929][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4120'. [ 293.432923][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4121'. [ 293.464527][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4121'. [ 293.809440][T14595] netlink: 'syz.4.4130': attribute type 33 has an invalid length. [ 293.840362][T14595] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4130'. [ 293.857835][T14600] netlink: 'syz.2.4132': attribute type 8 has an invalid length. [ 293.862935][ T43] bridge0: port 3(team0) entered disabled state [ 293.968279][T14604] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4133'. [ 293.973727][T14602] netlink: 'syz.0.4134': attribute type 13 has an invalid length. [ 294.000903][T14604] netlink: 'syz.3.4133': attribute type 2 has an invalid length. [ 294.011463][T14602] macvtap0: entered promiscuous mode [ 294.019183][T14604] netlink: 'syz.3.4133': attribute type 1 has an invalid length. [ 294.028415][T14602] macvtap0: refused to change device tx_queue_len [ 294.092750][T14604] netlink: 'syz.3.4133': attribute type 1 has an invalid length. [ 294.123362][T14604] netlink: 'syz.3.4133': attribute type 1 has an invalid length. [ 294.157556][T14604] netlink: 'syz.3.4133': attribute type 1 has an invalid length. [ 294.167405][T14604] netlink: 'syz.3.4133': attribute type 1 has an invalid length. [ 294.311368][T14618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.937886][T14650] delete_channel: no stack [ 294.998540][T14652] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4159'. [ 295.484705][T14678] xt_cgroup: invalid path, errno=-2 [ 296.114964][T14711] __nla_validate_parse: 2 callbacks suppressed [ 296.114985][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4187'. [ 296.131116][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4187'. [ 296.157091][T14710] validate_nla: 1 callbacks suppressed [ 296.157112][T14710] netlink: 'syz.0.4186': attribute type 1 has an invalid length. [ 296.659474][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4198'. [ 296.726082][T14737] tipc: Trying to set illegal importance in message [ 296.853010][T14745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4202'. [ 296.892878][T14745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4202'. [ 296.984841][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4205'. [ 297.004756][T14751] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 297.031871][T14751] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 297.262241][T14762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4212'. [ 297.284663][T14763] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 298.009547][T14801] netlink: 'syz.0.4230': attribute type 10 has an invalid length. [ 298.155650][T14805] netlink: 'syz.4.4232': attribute type 1 has an invalid length. [ 298.466735][T14815] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4237'. [ 298.522700][T14815] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4237'. [ 298.564491][T14815] netlink: 'syz.4.4237': attribute type 6 has an invalid length. [ 298.572284][T14815] netlink: 'syz.4.4237': attribute type 5 has an invalid length. [ 298.616869][T14815] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4237'. [ 298.736690][T14827] netlink: 'syz.4.4243': attribute type 5 has an invalid length. [ 298.876007][T14832] ip6tnl1: entered promiscuous mode [ 299.100437][T14843] xt_TCPMSS: Only works on TCP SYN packets [ 300.391402][T14907] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 300.726378][T14926] openvswitch: netlink: Actions may not be safe on all matching packets [ 301.012577][T14941] netlink: 'syz.2.4298': attribute type 2 has an invalid length. [ 301.030923][T14941] netlink: 'syz.2.4298': attribute type 1 has an invalid length. [ 302.690645][T15003] __nla_validate_parse: 3 callbacks suppressed [ 302.690668][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4329'. [ 302.723829][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4329'. [ 302.764792][T15003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.839580][T15010] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 303.109207][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.118584][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.129157][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.139701][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.150105][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.343352][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4341'. [ 303.358500][T15032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4341'. [ 303.380712][T15032] netlink: 336 bytes leftover after parsing attributes in process `syz.2.4341'. [ 303.405131][T15032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4341'. [ 303.589280][T15021] chnl_net:caif_netlink_parms(): no params data found [ 303.939727][T15058] ieee802154 phy1 wpan1: encryption failed: -22 [ 304.071159][T15065] netlink: 'syz.3.4356': attribute type 10 has an invalid length. [ 304.100408][T15021] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.127993][T15021] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.167751][T15021] bridge_slave_0: entered allmulticast mode [ 304.187170][T15021] bridge_slave_0: entered promiscuous mode [ 304.211490][T15021] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.226339][T15021] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.233849][T15021] bridge_slave_1: entered allmulticast mode [ 304.242500][T15021] bridge_slave_1: entered promiscuous mode [ 304.390644][T15077] netlink: 'syz.3.4363': attribute type 3 has an invalid length. [ 304.415016][T15077] netlink: 'syz.3.4363': attribute type 1 has an invalid length. [ 304.430770][T15077] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4363'. [ 304.471383][T15021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.524068][T15021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.714748][T15092] netlink: 'syz.4.4370': attribute type 3 has an invalid length. [ 304.746212][T15021] team0: Port device team_slave_0 added [ 304.784926][T15021] team0: Port device team_slave_1 added [ 304.904910][T15021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.924639][T15100] netlink: 'syz.4.4374': attribute type 1 has an invalid length. [ 304.933047][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.960708][T15021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.973983][T15021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.981710][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.008787][T15021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.175558][T15021] hsr_slave_0: entered promiscuous mode [ 305.203751][T15021] hsr_slave_1: entered promiscuous mode [ 305.234684][ T51] Bluetooth: hci6: command tx timeout [ 305.234684][T15021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.240100][T15021] Cannot create hsr debugfs directory [ 305.416211][T15119] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4382'. [ 305.449206][T15119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.004682][T15021] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.049641][T15142] bridge2: entered promiscuous mode [ 306.083356][T15142] bridge2: entered allmulticast mode [ 306.107204][T15021] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.152424][T15021] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.205552][T15021] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.232940][T15150] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4398'. [ 306.261482][T15150] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4398'. [ 306.725104][T15021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.800820][T15021] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.909606][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.916858][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.957396][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.964625][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.033153][T15186] netlink: 'syz.3.4413': attribute type 3 has an invalid length. [ 307.086989][T15188] netlink: 'syz.4.4414': attribute type 11 has an invalid length. [ 307.304485][ T51] Bluetooth: hci6: command tx timeout [ 307.350621][T15196] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 307.731662][T15021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.124189][T15226] __nla_validate_parse: 2 callbacks suppressed [ 308.124209][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4427'. [ 308.631220][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4434'. [ 308.684435][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4434'. [ 308.814258][T15021] veth0_vlan: entered promiscuous mode [ 308.870403][T15021] veth1_vlan: entered promiscuous mode [ 308.987511][T15021] veth0_macvtap: entered promiscuous mode [ 309.022004][T15021] veth1_macvtap: entered promiscuous mode [ 309.122939][T15021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.158187][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4441'. [ 309.186587][T15021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.243000][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.317132][ T3489] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.356772][ T3489] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.400654][ T51] Bluetooth: hci6: command tx timeout [ 309.419593][ T3489] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.709914][T15273] xt_CT: No such helper "netbios-ns" [ 309.749673][T15280] ieee802154 phy1 wpan1: encryption failed: -90 [ 309.761896][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.804078][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.914580][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.922462][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.102528][T15292] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 311.173396][T15338] netlink: 'syz.6.4470': attribute type 21 has an invalid length. [ 311.464603][ T51] Bluetooth: hci6: command tx timeout [ 311.650974][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 311.955600][T15350] xt_CT: No such helper "syz0" [ 312.068235][T15361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4478'. [ 312.339608][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4484'. [ 312.348868][T15374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4485'. [ 314.174566][T15447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4518'. [ 314.251067][T15452] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4522'. [ 314.318246][T15452] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4522'. [ 314.478574][T15463] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 314.521660][T15466] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 315.389517][T15510] netlink: 'syz.4.4550': attribute type 31 has an invalid length. [ 315.424800][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4551'. [ 315.607667][T15522] netlink: 'syz.4.4556': attribute type 3 has an invalid length. [ 315.624579][T15518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4553'. [ 315.654482][T15518] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 315.662279][T15518] netlink: 'syz.0.4553': attribute type 2 has an invalid length. [ 315.711715][T15518] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4553'. [ 316.191364][T15548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.277497][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4571'. [ 316.398753][T15558] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4576'. [ 316.984762][T15591] sctp: [Deprecated]: syz.2.4589 (pid 15591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.984762][T15591] Use struct sctp_sack_info instead [ 317.310238][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.370907][T15609] netlink: 'syz.3.4598': attribute type 32 has an invalid length. [ 317.409281][T15612] netlink: 'syz.2.4599': attribute type 11 has an invalid length. [ 317.444432][T15609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4598'. [ 317.464703][T15612] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4599'. [ 318.478089][T15643] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.493217][T15643] bond_slave_0: left promiscuous mode [ 318.510426][T15643] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.531395][T15643] bond_slave_1: left promiscuous mode [ 318.550691][T15643] $Hÿ (unregistering): (slave ): Releasing backup interface [ 318.575313][T15643] mac80211_hwsim hwsim11 : left promiscuous mode [ 318.612722][T15643] $Hÿ (unregistering): Released all slaves [ 318.858363][T15677] xt_hashlimit: invalid interval [ 319.180950][T15693] Unsupported ieee802154 address type: 0 [ 319.189810][T15695] xt_TCPMSS: Only works on TCP SYN packets [ 319.245948][T15697] __nla_validate_parse: 1 callbacks suppressed [ 319.245967][T15697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4635'. [ 319.276134][T15689] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.283964][T15689] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.298367][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4635'. [ 319.515597][T15689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.541797][T15689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.660076][T15709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4641'. [ 319.760955][ T43] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.796210][ T76] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.828934][ T76] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.869025][ T76] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.995842][T15721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4648'. [ 320.066491][T15721] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4648'. [ 320.130163][T15727] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 320.864455][T15763] netlink: 'syz.2.4668': attribute type 10 has an invalid length. [ 321.031048][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4671'. [ 321.045370][T15767] netlink: 'syz.6.4670': attribute type 6 has an invalid length. [ 321.053166][T15767] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4670'. [ 321.078110][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4671'. [ 321.233025][T15775] netlink: 'syz.2.4675': attribute type 12 has an invalid length. [ 321.245909][T15775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4675'. [ 321.664541][T15795] netlink: 'syz.4.4684': attribute type 2 has an invalid length. [ 321.766733][T15797] netlink: 'syz.3.4686': attribute type 3 has an invalid length. [ 321.791246][T15797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4686'. [ 321.805049][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.813029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.832055][T15803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.102097][T15817] netlink: 'syz.0.4695': attribute type 10 has an invalid length. [ 322.122485][T15817] veth1_vlan: entered allmulticast mode [ 322.166109][T15817] team0: Device veth1_vlan failed to register rx_handler [ 323.171296][T15873] gtp0: entered promiscuous mode [ 323.228198][T15873] gtp0: entered allmulticast mode [ 323.903193][T15909] veth1_to_batadv: mtu greater than device maximum [ 324.170198][T15927] !: renamed from dummy0 (while UP) [ 324.392177][T15936] netlink: 'syz.3.4748': attribute type 1 has an invalid length. [ 324.417368][T15936] __nla_validate_parse: 5 callbacks suppressed [ 324.417385][T15936] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4748'. [ 324.761907][T15954] netlink: 'syz.4.4754': attribute type 3 has an invalid length. [ 324.793935][ T30] audit: type=1800 audit(1750975838.125:2): pid=15956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4757" name="bpf-map" dev="anon_inodefs" ino=1067 res=0 errno=0 [ 324.794426][T15954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4754'. [ 325.086396][T15968] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4764'. [ 325.576620][T15994] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4775'. [ 325.883941][T16008] Cannot find add_set index 0 as target [ 326.020848][T16015] x_tables: duplicate entry at hook 1 [ 326.113333][T16018] netlink: 'syz.6.4785': attribute type 21 has an invalid length. [ 326.133681][T16019] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4786'. [ 326.161400][T16018] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4785'. [ 326.749374][T16046] bond1: entered promiscuous mode [ 326.824921][T16046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.869049][T16055] ip6t_srh: unknown srh invflags 4449 [ 327.064708][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4805'. [ 327.292814][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4810'. [ 327.320517][T16071] netlink: 'syz.3.4810': attribute type 3 has an invalid length. [ 327.454886][T16077] netlink: 'syz.4.4813': attribute type 1 has an invalid length. [ 327.494515][T16077] netlink: 'syz.4.4813': attribute type 1 has an invalid length. [ 327.978050][T16104] sock: sock_timestamping_bind_phc: sock not bind to device [ 328.586066][T16126] netlink: 'syz.6.4836': attribute type 13 has an invalid length. [ 328.602048][T16126] netlink: 'syz.6.4836': attribute type 17 has an invalid length. [ 328.793779][T16126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.803892][T16126] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.829759][T16126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.894013][T16132] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4839'. [ 328.916185][T16132] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4839'. [ 330.123658][T16188] No such timeout policy "syz1" [ 330.144695][T16190] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 330.310123][T16196] __nla_validate_parse: 2 callbacks suppressed [ 330.310143][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 330.622163][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4878'. [ 330.701333][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4881'. [ 330.720695][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4881'. [ 331.456472][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4900'. [ 331.535345][T16258] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4902'. [ 331.812241][T16271] netlink: 'syz.6.4907': attribute type 10 has an invalid length. [ 331.827845][T16271] bridge0: port 3(team0) entered blocking state [ 331.839364][T16271] bridge0: port 3(team0) entered disabled state [ 331.846403][T16270] netlink: 'syz.3.4904': attribute type 3 has an invalid length. [ 331.893718][T16271] team0: entered allmulticast mode [ 331.918760][T16271] team_slave_0: entered allmulticast mode [ 331.943762][T16271] team_slave_1: entered allmulticast mode [ 331.971991][T16271] team0: entered promiscuous mode [ 331.988718][T16271] team_slave_0: entered promiscuous mode [ 332.008494][T16271] team_slave_1: entered promiscuous mode [ 332.023203][T16278] ksmbd: Unknown IPC event: 3, ignore. [ 332.172808][T16280] netlink: 'syz.4.4912': attribute type 12 has an invalid length. [ 332.185272][T16283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.457879][T16340] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4942'. [ 333.895862][T16355] netlink: 'syz.6.4949': attribute type 21 has an invalid length. [ 333.918710][T16355] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4949'. [ 334.209059][T16369] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4956'. [ 334.258442][T16373] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 334.393474][T16373] bond1: entered promiscuous mode [ 334.437649][T16373] bond1: entered allmulticast mode [ 334.479535][T16373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.822732][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4968'. [ 334.932179][T16407] No such timeout policy "syz0" [ 335.951863][T16458] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4992'. [ 335.982380][T16447] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.990202][T16447] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.252998][T16447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.272061][T16447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.534416][ T3489] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.555623][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.585537][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.993756][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5008'. [ 337.241573][T16504] bond1: entered allmulticast mode [ 337.511948][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5018'. [ 337.857585][T16540] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5026'. [ 337.992616][T16545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.760980][T16586] xt_TCPMSS: Only works on TCP SYN packets [ 339.091167][T16604] netlink: 'syz.4.5053': attribute type 9 has an invalid length. [ 339.130366][T16604] netlink: 'syz.4.5053': attribute type 1 has an invalid length. [ 339.180880][T16604] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5053'. [ 339.300120][T16610] netlink: 'syz.2.5058': attribute type 13 has an invalid length. [ 339.338434][T16610] netlink: 'syz.2.5058': attribute type 17 has an invalid length. [ 339.388233][T16610] lo: left promiscuous mode [ 339.629673][T16610] bond0: left promiscuous mode [ 339.634753][T16610] bond_slave_0: left promiscuous mode [ 339.651715][T16610] bond_slave_1: left promiscuous mode [ 339.674724][T16610] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 339.678990][T16628] xt_TCPMSS: Only works on TCP SYN packets [ 339.683615][T16610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.733936][T16610] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.794521][T16610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.923080][T16636] netlink: 'syz.3.5071': attribute type 10 has an invalid length. [ 339.951761][T16636] bridge0: port 3(team0) entered blocking state [ 339.994639][T16636] bridge0: port 3(team0) entered disabled state [ 340.001124][T16636] team0: entered allmulticast mode [ 340.011067][T16636] team_slave_0: entered allmulticast mode [ 340.030403][T16636] team_slave_1: entered allmulticast mode [ 340.050969][T16636] geneve0: entered allmulticast mode [ 340.081077][T16636] team0: entered promiscuous mode [ 340.088783][T16636] team_slave_0: entered promiscuous mode [ 340.096435][T16636] team_slave_1: entered promiscuous mode [ 340.107423][T16636] geneve0: entered promiscuous mode [ 340.125685][T16636] bridge0: port 3(team0) entered blocking state [ 340.132121][T16636] bridge0: port 3(team0) entered forwarding state [ 340.239776][T16651] netlink: 'syz.4.5079': attribute type 1 has an invalid length. [ 341.194072][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5102'. [ 341.241802][T16697] xt_CT: No such helper "netbios-ns" [ 341.424124][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5105'. [ 341.541392][T16718] netlink: 'syz.0.5109': attribute type 32 has an invalid length. [ 341.740515][T16730] netlink: 'syz.2.5114': attribute type 1 has an invalid length. [ 342.056357][T16749] xt_TPROXY: Can be used only with -p tcp or -p udp [ 342.333789][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5133'. [ 342.452505][ T24] IPVS: starting estimator thread 0... [ 342.544420][T16773] IPVS: using max 29 ests per chain, 69600 per kthread [ 342.581647][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5139'. [ 342.635072][T16781] openvswitch: netlink: Duplicate or invalid key (type 0). [ 342.642568][T16781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.707657][T16785] SET target dimension over the limit! [ 343.625789][T16839] netlink: 'syz.4.5166': attribute type 13 has an invalid length. [ 343.652324][T16839] netlink: 'syz.4.5166': attribute type 17 has an invalid length. [ 343.859200][T16839] syz_tun: left allmulticast mode [ 344.012239][T16839] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.054751][T16839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.416727][T16874] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5185'. [ 344.816823][T16896] ipt_rpfilter: unknown options [ 345.230281][T16922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5208'. [ 346.496755][T16993] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5243'. [ 346.542220][ T978] IPVS: starting estimator thread 0... [ 346.619967][T17002] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 346.644693][T16996] IPVS: using max 27 ests per chain, 64800 per kthread [ 346.935288][T17021] netlink: 'syz.6.5255': attribute type 1 has an invalid length. [ 346.969808][T17021] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5255'. [ 347.183595][T17031] SET target dimension over the limit! [ 347.625145][T17055] openvswitch: netlink: Message has 4 unknown bytes. [ 347.631906][T17055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.852371][T17067] xt_HMARK: spi-set and port-set can't be combined [ 348.407425][T17094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5292'. [ 348.636779][T17105] syz.2.5297 uses old SIOCAX25GETINFO [ 348.757700][T17113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5299'. [ 348.766836][T17111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.869959][T17117] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 349.082836][T17129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5310'. [ 349.783622][T17171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5329'. [ 350.134738][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5337'. [ 350.250233][T17198] netlink: 'syz.3.5341': attribute type 16 has an invalid length. [ 350.302243][T17198] netlink: 'syz.3.5341': attribute type 17 has an invalid length. [ 350.366289][T17198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.412631][T17204] netlink: 'syz.6.5343': attribute type 21 has an invalid length. [ 350.450598][T17204] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5343'. [ 350.780198][T17222] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5350'. [ 350.845373][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5351'. [ 351.211608][T17245] netlink: 'syz.3.5360': attribute type 1 has an invalid length. [ 351.471361][T17257] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 351.837726][T17278] SET target dimension over the limit! [ 353.129434][T17343] delete_channel: no stack [ 353.313957][T17351] __nla_validate_parse: 1 callbacks suppressed [ 353.313978][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'. [ 353.369294][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'. [ 353.680175][T17372] vxcan2: entered promiscuous mode [ 353.894524][T17383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5426'. [ 353.924629][T17384] xt_l2tp: missing protocol rule (udp|l2tpip) [ 354.214910][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5434'. [ 354.293432][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5437'. [ 354.994586][T17443] netlink: 'syz.6.5455': attribute type 10 has an invalid length. [ 355.035434][T17443] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 355.449698][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5468'. [ 355.683571][T17482] netlink: 'syz.2.5474': attribute type 1 has an invalid length. [ 355.705904][T17482] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5474'. [ 356.449649][T17522] netlink: 'syz.0.5493': attribute type 9 has an invalid length. [ 356.911414][T17545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.054057][T17552] xt_ecn: cannot match TCP bits for non-tcp packets [ 357.340688][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5514'. [ 357.365525][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5517'. [ 357.556086][T17581] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5520'. [ 357.645141][T17585] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 357.661855][T17585] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 357.709260][T17589] netlink: 'syz.3.5525': attribute type 1 has an invalid length. [ 358.252123][T17616] netlink: 'syz.0.5537': attribute type 10 has an invalid length. [ 358.282509][T17618] bridge4: entered promiscuous mode [ 358.325412][T17616] team0: Port device 0! added [ 358.722442][T17638] xt_TPROXY: Can be used only with -p tcp or -p udp [ 358.986767][T17652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5555'. [ 359.239574][T17665] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 359.634951][T17678] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 359.643847][T17678] geneve2: left allmulticast mode [ 359.676540][T17678] bridge4: left promiscuous mode [ 359.772099][T17690] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 359.817798][T17693] netlink: 'syz.3.5575': attribute type 12 has an invalid length. [ 359.825163][T17696] netlink: 'syz.6.5574': attribute type 32 has an invalid length. [ 359.835333][T17693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5575'. [ 359.853037][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5574'. [ 359.884649][T17696] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 360.209600][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5584'. [ 360.268060][T17721] netlink: 'syz.4.5586': attribute type 5 has an invalid length. [ 360.270592][T17719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.469295][T17729] netlink: 'syz.3.5590': attribute type 7 has an invalid length. [ 360.648218][T17738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5596'. [ 361.032337][T17760] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5608'. [ 361.074506][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5608'. [ 361.194792][T17767] Zero length message leads to an empty skb [ 361.692161][T17793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5622'. [ 361.754607][T17797] netlink: 'syz.0.5624': attribute type 10 has an invalid length. [ 361.785392][T17797] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 361.827678][T17797] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 361.860269][T17803] netlink: 'syz.4.5627': attribute type 1 has an invalid length. [ 361.863507][T17797] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 362.059481][T17809] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5630'. [ 362.673929][T17839] netlink: 'syz.2.5645': attribute type 13 has an invalid length. [ 363.586071][T17843] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5647'. [ 364.434236][T17894] netlink: 'syz.0.5672': attribute type 1 has an invalid length. [ 365.154163][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5689'. [ 365.828013][T17960] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5701'. [ 365.831066][T17955] lo: entered promiscuous mode [ 365.868303][T17955] lo: entered allmulticast mode [ 365.878865][T17955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.962737][T17960] 0ªX¹¦À: renamed from caif0 [ 365.995258][T17960] 0ªX¹¦À: entered allmulticast mode [ 366.005067][T17960] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 366.301975][T17977] netlink: 'syz.0.5706': attribute type 4 has an invalid length. [ 366.464893][T17981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5708'. [ 366.560536][T17986] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 367.170098][T18012] netlink: 'syz.0.5721': attribute type 1 has an invalid length. [ 367.301709][T18014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5723'. [ 367.345813][T18019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.829657][T18038] bond3: entered promiscuous mode [ 367.835488][T18038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.870609][T18043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5736'. [ 368.366287][T18067] netlink: set zone limit has 8 unknown bytes [ 369.514476][T18114] sit0: entered promiscuous mode [ 369.538084][T18114] netlink: 'syz.4.5772': attribute type 1 has an invalid length. [ 369.557135][T18114] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5772'. [ 369.758584][T18120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.080413][T18139] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.5794'. [ 370.145014][T18141] netlink: 'syz.4.5784': attribute type 13 has an invalid length. [ 370.234040][T18137] bridge0: port 3(team0) entered disabled state [ 370.240738][T18137] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.248517][T18137] bridge0: port 1(1¾x9ÿ) entered disabled state [ 370.430943][T18137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.458458][T18137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.818567][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.860953][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.895244][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.929706][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.856893][T18201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5812'. [ 371.904823][T18203] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5814'. [ 371.948087][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5816'. [ 372.254538][T18222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5823'. [ 372.615119][T18234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.755412][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5831'. [ 372.887398][T18240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5830'. [ 373.400687][T18263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5846'. [ 373.423600][T18263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5846'. [ 373.438173][T18263] netlink: 'syz.3.5846': attribute type 6 has an invalid length. [ 373.810018][T18284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.921118][T18294] IPv6: sit2: Disabled Multicast RS [ 374.240677][T18312] netlink: 'syz.3.5868': attribute type 1 has an invalid length. [ 374.259340][T18312] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5868'. [ 374.387445][T18320] netlink: 'syz.2.5871': attribute type 2 has an invalid length. [ 374.863869][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5885'. [ 375.194932][T18364] netlink: 'syz.0.5893': attribute type 4 has an invalid length. [ 375.733940][T18395] netlink: 'syz.4.5909': attribute type 1 has an invalid length. [ 377.143701][T18477] netlink: 'syz.0.5948': attribute type 1 has an invalid length. [ 377.363827][T18487] __nla_validate_parse: 1 callbacks suppressed [ 377.363847][T18487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5953'. [ 377.834607][T18516] netlink: 'syz.3.5966': attribute type 21 has an invalid length. [ 377.842480][T18516] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5966'. [ 377.894601][T18516] netlink: 'syz.3.5966': attribute type 4 has an invalid length. [ 377.916746][T18516] netlink: 'syz.3.5966': attribute type 3 has an invalid length. [ 377.925329][T18516] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5966'. [ 378.048430][T18526] netlink: 288 bytes leftover after parsing attributes in process `syz.6.5972'. [ 378.605006][T18556] netlink: 'syz.3.5987': attribute type 20 has an invalid length. [ 378.701538][T18562] netlink: zone id is out of range [ 378.711623][T18562] netlink: zone id is out of range [ 378.749151][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.813952][T18562] netlink: set zone limit has 4 unknown bytes [ 379.415354][T18599] netlink: 'syz.6.6007': attribute type 5 has an invalid length. [ 379.432017][T18599] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.6007'. [ 379.595139][T18609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.608772][T18608] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6010'. [ 380.161654][T18641] netlink: 'syz.2.6027': attribute type 1 has an invalid length. [ 380.165826][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6028'. [ 380.186641][T18641] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6027'. [ 380.267510][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6030'. [ 380.747396][T18666] xt_CT: No such helper "pptp" [ 381.341345][T18707] netlink: 'syz.2.6058': attribute type 2 has an invalid length. [ 381.383610][T18712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6059'. [ 381.680665][T18728] netlink: 'syz.4.6067': attribute type 5 has an invalid length. [ 382.347022][T18766] xt_TCPMSS: Only works on TCP SYN packets [ 382.434979][T18771] __nla_validate_parse: 2 callbacks suppressed [ 382.435001][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6087'. [ 382.506699][T18771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.711325][T18788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6095'. [ 382.722075][T18787] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 383.090169][T18808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.812850][T18848] netlink: ct family unspecified [ 383.822809][T18848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.842772][T18852] netlink: 'syz.0.6128': attribute type 10 has an invalid length. [ 383.861646][T18852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6128'. [ 383.907481][T18852] batman_adv: batadv0: Adding interface: virt_wifi0 [ 383.934445][T18852] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.017485][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6131'. [ 384.032341][T18852] batman_adv: batadv0: Interface activated: virt_wifi0 [ 384.236857][T18864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.285185][T18873] netlink: 'syz.4.6136': attribute type 3 has an invalid length. [ 384.292983][T18873] netlink: 'syz.4.6136': attribute type 3 has an invalid length. [ 384.490679][T18883] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6143'. [ 384.777649][T18899] netlink: 'syz.0.6150': attribute type 21 has an invalid length. [ 384.822034][T18899] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6150'. [ 384.854760][T18899] netlink: 'syz.0.6150': attribute type 4 has an invalid length. [ 384.884168][T18899] netlink: 'syz.0.6150': attribute type 5 has an invalid length. [ 384.904364][T18899] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6150'. [ 385.161521][T18921] netlink: 'syz.3.6164': attribute type 2 has an invalid length. [ 385.221647][T18925] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6162'. [ 385.430498][T18937] x_tables: unsorted underflow at hook 3 [ 385.560331][T18943] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 385.573137][T18945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6174'. [ 385.582152][T18947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6175'. [ 386.373781][T18986] netlink: 'syz.4.6193': attribute type 6 has an invalid length. [ 387.545667][T19054] __nla_validate_parse: 1 callbacks suppressed [ 387.545690][T19054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6228'. [ 387.625012][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6228'. [ 387.776088][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6236'. [ 387.796786][T19071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6235'. [ 389.020863][T19135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6268'. [ 389.034567][T19135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6268'. [ 389.054093][T19135] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6268'. [ 389.329160][T19147] netlink: 'syz.4.6274': attribute type 12 has an invalid length. [ 389.346856][T19147] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.6274'. [ 389.562608][T19155] netlink: 'syz.0.6277': attribute type 4 has an invalid length. [ 391.106746][T19239] netlink: 'syz.4.6319': attribute type 1 has an invalid length. [ 391.330107][T19251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6324'. [ 391.342796][T19252] netlink: 'syz.6.6326': attribute type 30 has an invalid length. [ 391.395434][T19252] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 391.425468][T19252] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 391.685827][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6334'. [ 391.724601][T19269] vlan0: entered promiscuous mode [ 392.164114][T19299] netlink: 'syz.2.6349': attribute type 9 has an invalid length. [ 392.348804][T19307] IPv6: Can't replace route, no match found [ 392.372151][T19309] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.570691][T19319] __nla_validate_parse: 1 callbacks suppressed [ 392.570714][T19319] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6358'. [ 392.603652][T19319] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6358'. [ 392.895426][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6363'. [ 392.961301][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6363'. [ 393.096191][T19347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6370'. [ 393.183304][T19347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6370'. [ 393.998117][T19390] netlink: 'syz.3.6392': attribute type 3 has an invalid length. [ 394.350233][T19408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6401'. [ 394.394570][T19408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6401'. [ 394.641217][T19420] geneve3: entered promiscuous mode [ 394.666623][ T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.694928][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.727828][T19424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.789744][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.357591][T19453] netlink: 'syz.4.6424': attribute type 3 has an invalid length. [ 395.386036][T19453] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6424'. [ 395.624051][T19469] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6431'. [ 395.950232][T19484] netlink: 'syz.2.6438': attribute type 1 has an invalid length. [ 396.744548][T19522] netlink: 'syz.6.6456': attribute type 1 has an invalid length. [ 396.968775][T19533] netlink: 'syz.6.6462': attribute type 1 has an invalid length. [ 397.328060][T19555] netlink: 'syz.4.6473': attribute type 3 has an invalid length. [ 397.347184][T19555] netlink: 'syz.4.6473': attribute type 3 has an invalid length. [ 397.752286][T19578] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 397.818905][T19583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.245007][T19608] SET target dimension over the limit! [ 398.546512][T19624] xt_NFQUEUE: number of total queues is 0 [ 398.551998][T19621] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 398.571748][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.582901][T19621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 398.883522][T19640] __nla_validate_parse: 9 callbacks suppressed [ 398.883542][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6515'. [ 399.116641][T19653] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 399.578957][T19675] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6533'. [ 399.787574][T19690] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 399.851445][T19694] netlink: 'syz.6.6542': attribute type 3 has an invalid length. [ 399.960883][T19697] netlink: 'syz.0.6544': attribute type 1 has an invalid length. [ 400.018713][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6544'. [ 400.053693][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6544'. [ 400.121231][T19706] xt_TCPMSS: Only works on TCP SYN packets [ 400.288883][T19716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6552'. [ 400.354811][T19716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6552'. [ 400.441411][T19724] syz.4.6557: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 400.492558][T19724] CPU: 0 UID: 0 PID: 19724 Comm: syz.4.6557 Not tainted 6.16.0-rc3-syzkaller-00837-g28aa52b6189f #0 PREEMPT(full) [ 400.492593][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.492606][T19724] Call Trace: [ 400.492614][T19724] [ 400.492623][T19724] dump_stack_lvl+0x189/0x250 [ 400.492667][T19724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.492698][T19724] ? __pfx__printk+0x10/0x10 [ 400.492719][T19724] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 400.492742][T19724] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 400.492768][T19724] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 400.492794][T19724] warn_alloc+0x214/0x310 [ 400.492827][T19724] ? stack_depot_save_flags+0x429/0x900 [ 400.492860][T19724] ? __pfx_warn_alloc+0x10/0x10 [ 400.492886][T19724] ? kasan_save_track+0x4f/0x80 [ 400.492917][T19724] ? xskq_create+0x56/0x170 [ 400.492938][T19724] ? xsk_init_queue+0xb0/0x110 [ 400.492957][T19724] ? xsk_setsockopt+0x43f/0x710 [ 400.492974][T19724] ? do_sock_setsockopt+0x257/0x3e0 [ 400.493001][T19724] ? __x64_sys_setsockopt+0x18b/0x220 [ 400.493028][T19724] ? do_syscall_64+0xfa/0x3b0 [ 400.493050][T19724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.493081][T19724] __vmalloc_node_range_noprof+0x125/0x12f0 [ 400.493137][T19724] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 400.493163][T19724] ? xskq_create+0x56/0x170 [ 400.493187][T19724] ? __kasan_kmalloc+0x93/0xb0 [ 400.493211][T19724] vmalloc_user_noprof+0xad/0xf0 [ 400.493233][T19724] ? xskq_create+0xbf/0x170 [ 400.493256][T19724] xskq_create+0xbf/0x170 [ 400.493282][T19724] xsk_init_queue+0xb0/0x110 [ 400.493308][T19724] xsk_setsockopt+0x43f/0x710 [ 400.493332][T19724] ? __pfx_xsk_setsockopt+0x10/0x10 [ 400.493351][T19724] ? __lock_acquire+0xab9/0xd20 [ 400.493391][T19724] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 400.493417][T19724] ? __pfx_xsk_setsockopt+0x10/0x10 [ 400.493440][T19724] do_sock_setsockopt+0x257/0x3e0 [ 400.493472][T19724] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 400.493506][T19724] ? __fget_files+0x2a/0x420 [ 400.493539][T19724] __x64_sys_setsockopt+0x18b/0x220 [ 400.493574][T19724] do_syscall_64+0xfa/0x3b0 [ 400.493598][T19724] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.493621][T19724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.493642][T19724] ? clear_bhb_loop+0x60/0xb0 [ 400.493668][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.493688][T19724] RIP: 0033:0x7f9c48b8e929 [ 400.493708][T19724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.493726][T19724] RSP: 002b:00007f9c49a1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 400.493749][T19724] RAX: ffffffffffffffda RBX: 00007f9c48db5fa0 RCX: 00007f9c48b8e929 [ 400.493764][T19724] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 400.493776][T19724] RBP: 00007f9c48c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 400.493790][T19724] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.493803][T19724] R13: 0000000000000000 R14: 00007f9c48db5fa0 R15: 00007ffd109b38e8 [ 400.493842][T19724] [ 400.493863][T19724] Mem-Info: [ 400.654856][T19730] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 400.690305][T19724] active_anon:5601 inactive_anon:0 isolated_anon:0 [ 400.690305][T19724] active_file:1147 inactive_file:39950 isolated_file:0 [ 400.690305][T19724] unevictable:768 dirty:278 writeback:0 [ 400.690305][T19724] slab_reclaimable:12151 slab_unreclaimable:155830 [ 400.690305][T19724] mapped:39320 shmem:1377 pagetables:1303 [ 400.690305][T19724] sec_pagetables:0 bounce:0 [ 400.690305][T19724] kernel_misc_reclaimable:0 [ 400.690305][T19724] free:1241790 free_pcp:15417 free_cma:0 [ 400.955499][T19724] Node 0 active_anon:22504kB inactive_anon:0kB active_file:4588kB inactive_file:159600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157380kB dirty:1112kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12732kB pagetables:4964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.070570][T19724] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.163455][T19724] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.228794][T19724] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 401.229038][T19750] lo: entered promiscuous mode [ 401.244703][T19724] Node 0 DMA32 free:1055760kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22480kB inactive_anon:0kB active_file:4588kB inactive_file:157776kB unevictable:1536kB writepending:1124kB present:3129332kB managed:2560932kB mlocked:0kB bounce:0kB free_pcp:41936kB local_pcp:20984kB free_cma:0kB [ 401.316992][T19750] tunl0: entered promiscuous mode [ 401.330380][T19750] gre0: entered promiscuous mode [ 401.346351][T19724] lowmem_reserve[]: 0 0 1 1 1 [ 401.357881][T19750] gretap0: entered promiscuous mode [ 401.373772][T19724] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 401.382918][T19750] erspan0: entered promiscuous mode [ 401.409700][T19724] lowmem_reserve[]: 0 0 0 0 0 [ 401.426015][T19724] Node 1 Normal free:3900896kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20928kB local_pcp:6592kB free_cma:0kB [ 401.481225][T19750] ip_vti0: entered promiscuous mode [ 401.509560][T19724] lowmem_reserve[]: 0 0 0 0 0 [ 401.515398][T19724] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.517705][T19750] ip6_vti0: entered promiscuous mode [ 401.528816][T19724] Node 0 DMA32: 1385*4kB (UME) 740*8kB (UM) 248*16kB (UME) 179*32kB (UME) 108*64kB (UME) 58*128kB (UM) 34*256kB (UM) 26*512kB (UME) 19*1024kB (UM) 2*2048kB (ME) 238*4096kB (M) = 1055908kB [ 401.562253][T19750] sit0: entered promiscuous mode [ 401.575306][T19750] ip6tnl0: entered promiscuous mode [ 401.576351][T19724] Node 0 [ 401.582516][T19750] ip6gre0: entered promiscuous mode [ 401.588558][T19724] Normal: [ 401.592851][T19750] syz_tun: entered promiscuous mode [ 401.596017][T19724] 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 401.596145][T19724] Node 1 Normal: 214*4kB (UE) 45*8kB (UME) 40*16kB (UME) 69*32kB (UME) 22*64kB (UME) 5*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3900896kB [ 401.601755][T19724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.627122][T19750] ip6gretap0: entered promiscuous mode [ 401.648913][T19750] bridge0: entered promiscuous mode [ 401.659136][T19750] vcan0: entered promiscuous mode [ 401.672289][T19724] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.675792][T19750] bond0: entered promiscuous mode [ 401.683961][T19724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.705906][T19724] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.709021][T19750] bond_slave_0: entered promiscuous mode [ 401.722457][T19750] bond_slave_1: entered promiscuous mode [ 401.736771][T19750] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.746039][T19750] dummy0: entered promiscuous mode [ 401.746325][T19724] 42472 total pagecache pages [ 401.753880][T19750] nlmon0: entered promiscuous mode [ 401.771083][T19724] 0 pages in swap cache [ 401.778806][T19750] caif0: entered promiscuous mode [ 401.781457][T19724] Free swap = 124996kB [ 401.791844][T19724] Total swap = 124996kB [ 401.796205][T19724] 2097051 pages RAM [ 401.799342][T19750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.800702][T19724] 0 pages HighMem/MovableOnly [ 401.820463][T19724] 424712 pages reserved [ 401.825106][T19724] 0 pages cma reserved [ 401.883700][T19760] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6574'. [ 402.871082][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6601'. [ 403.476081][T19847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6616'. [ 404.777540][T19916] bond0: (slave ): Enslaving as a backup interface with a down link [ 405.149658][T19938] lo: entered allmulticast mode [ 405.628509][T19965] delete_channel: no stack [ 406.236848][T19997] netlink: 'syz.3.6688': attribute type 23 has an invalid length. [ 406.643149][T20023] vti0: entered promiscuous mode [ 406.857520][T20033] netlink: 'syz.2.6706': attribute type 13 has an invalid length. [ 407.754490][T20087] netlink: 'syz.3.6732': attribute type 21 has an invalid length. [ 407.777791][T20087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6732'. [ 407.959573][T20093] netlink: 45 bytes leftover after parsing attributes in process `syz.4.6735'. [ 408.294873][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6744'. [ 408.984432][T20144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6761'. [ 409.192365][T20156] netlink: 'syz.4.6767': attribute type 10 has an invalid length. [ 409.197854][T20158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.225023][T20156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6767'. [ 409.247790][T20156] veth0_vlan: entered allmulticast mode [ 409.274326][T20156] bridge0: port 4(veth0_vlan) entered blocking state [ 409.294558][T20156] bridge0: port 4(veth0_vlan) entered disabled state [ 409.327389][T20156] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 409.395069][T20161] netlink: 'syz.6.6768': attribute type 1 has an invalid length. [ 409.454787][T20167] x_tables: unsorted underflow at hook 2 [ 409.674456][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6776'. [ 409.719552][T20180] veth0_vlan: left allmulticast mode [ 410.407256][T20220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.414589][T20220] IPv6: NLM_F_CREATE should be set when creating new route [ 410.421880][T20220] IPv6: NLM_F_CREATE should be set when creating new route [ 411.129774][T20258] vlan0: entered promiscuous mode [ 411.167067][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6818'. [ 411.823768][T20301] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6837'. [ 411.975116][T20310] xt_TPROXY: Can be used only with -p tcp or -p udp [ 412.181246][T20322] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 412.320243][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6850'. [ 412.525810][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6857'. [ 412.550371][T20342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.882837][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6867'. [ 413.171124][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6874'. [ 413.354638][T20386] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.827957][T20408] sctp: [Deprecated]: syz.4.6890 (pid 20408) Use of int in max_burst socket option. [ 413.827957][T20408] Use struct sctp_assoc_value instead [ 413.924114][T20411] netlink: 'syz.3.6892': attribute type 97 has an invalid length. [ 414.090163][T20419] netlink: 'syz.0.6897': attribute type 3 has an invalid length. [ 414.101015][T20422] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6896'. [ 414.350380][T20439] sock: sock_timestamping_bind_phc: sock not bind to device [ 414.481674][T20446] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 414.499934][T20446] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 414.522702][T20447] netlink: 'syz.6.6909': attribute type 10 has an invalid length. [ 414.549732][T20447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.603285][T20447] bond0: entered promiscuous mode [ 414.614685][T20447] bond_slave_0: entered promiscuous mode [ 414.624913][T20447] bond_slave_1: entered promiscuous mode [ 414.644486][T20447] dummy0: entered promiscuous mode [ 414.658171][T20447] bond0: entered allmulticast mode [ 414.677158][T20447] bond_slave_0: entered allmulticast mode [ 414.694987][T20447] bond_slave_1: entered allmulticast mode [ 414.716630][T20447] dummy0: entered allmulticast mode [ 414.725967][T20447] team0: Port device bond0 added [ 414.758862][ T1150] bridge0: port 3(team0) entered blocking state [ 414.765331][ T1150] bridge0: port 3(team0) entered forwarding state [ 415.164882][T20477] SET target dimension over the limit! [ 415.733029][T20508] netlink: 'syz.4.6939': attribute type 1 has an invalid length. [ 415.752623][T20508] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6939'. [ 415.779405][T20508] netlink: 'syz.4.6939': attribute type 1 has an invalid length. [ 415.950060][T20520] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 416.062832][T20524] netlink: 'syz.4.6947': attribute type 1 has an invalid length. [ 416.090878][T20524] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6947'. [ 416.197890][T20534] netlink: 'syz.6.6950': attribute type 10 has an invalid length. [ 416.221581][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6951'. [ 416.288677][T20534] bridge0: port 3(team0) entered disabled state [ 416.322811][T20534] team0: left allmulticast mode [ 416.341436][T20534] team_slave_0: left allmulticast mode [ 416.364425][T20534] team_slave_1: left allmulticast mode [ 416.384432][T20534] bond0: left allmulticast mode [ 416.389362][T20534] bond_slave_0: left allmulticast mode [ 416.434645][T20534] bond_slave_1: left allmulticast mode [ 416.440183][T20534] dummy0: left allmulticast mode [ 416.458760][T20534] team0: left promiscuous mode [ 416.463589][T20534] team_slave_0: left promiscuous mode [ 416.475085][T20534] team_slave_1: left promiscuous mode [ 416.480750][T20534] bond0: left promiscuous mode [ 416.494951][T20534] bond_slave_0: left promiscuous mode [ 416.501917][T20534] bond_slave_1: left promiscuous mode [ 416.509096][T20534] dummy0: left promiscuous mode [ 416.515073][T20534] bridge0: port 3(team0) entered disabled state [ 416.525628][T20534] team0: Cannot enslave team device to itself [ 417.054056][T20571] netlink: 'syz.4.6969': attribute type 1 has an invalid length. [ 417.080201][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6969'. [ 417.174634][T20579] openvswitch: netlink: IP tunnel dst address not specified [ 417.229299][T20583] IPv6: NLM_F_REPLACE set, but no existing node found! [ 417.747528][T20612] nftables ruleset with unbound chain [ 418.027917][T20626] netlink: 'syz.2.6995': attribute type 1 has an invalid length. [ 418.053642][T20626] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6995'. [ 418.141225][T20633] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6999'. [ 418.553246][T20655] netlink: 300 bytes leftover after parsing attributes in process `syz.3.7010'. [ 418.890883][T20674] team0: left allmulticast mode [ 418.914645][T20674] team_slave_0: left allmulticast mode [ 418.920203][T20674] team_slave_1: left allmulticast mode [ 418.934562][T20674] team0: left promiscuous mode [ 418.942524][T20674] team_slave_0: left promiscuous mode [ 418.988657][T20674] team_slave_1: left promiscuous mode [ 418.995512][T20674] bridge0: port 3(team0) entered disabled state [ 419.016028][T20674] bridge_slave_0: left allmulticast mode [ 419.053460][T20674] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.057899][T20682] netlink: 'syz.6.7023': attribute type 2 has an invalid length. [ 419.096403][T20674] bridge_slave_1: left allmulticast mode [ 419.102106][T20674] bridge_slave_1: left promiscuous mode [ 419.108719][T20674] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.131864][T20674] team0: Port device team_slave_0 removed [ 419.167605][T20674] team0: Port device team_slave_1 removed [ 419.194854][T20674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.219023][T20674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.242818][T20674] bond0: (slave ): Releasing backup interface [ 419.440017][T20701] netlink: 'syz.4.7032': attribute type 3 has an invalid length. [ 419.685099][T20712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7038'. [ 419.804760][T20717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7039'. [ 419.824524][T20717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7039'. [ 420.234513][T20741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7052'. [ 420.252610][T20741] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7052'. [ 420.262323][T20741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7052'. [ 420.454133][T20753] openvswitch: netlink: Key type 73 is out of range max 32 [ 420.555751][T20752] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 420.581684][T20752] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 420.606358][T20752] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 420.727554][T20767] netlink: 'syz.6.7064': attribute type 2 has an invalid length. [ 420.744193][T20766] netlink: 'syz.2.7065': attribute type 11 has an invalid length. [ 420.764721][T20766] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7065'. [ 421.253801][T20791] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453) [ 421.296763][T20791] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 423.230816][T20892] __nla_validate_parse: 8 callbacks suppressed [ 423.230838][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7127'. [ 423.287399][T20896] netlink: 'syz.2.7126': attribute type 58 has an invalid length. [ 423.482849][T20906] netlink: 136 bytes leftover after parsing attributes in process `syz.6.7133'. [ 423.514854][T20906] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 423.524757][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7134'. [ 423.632292][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7135'. [ 423.664910][T20910] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 424.782288][T20951] bond0: entered promiscuous mode [ 424.799462][T20951] bond0: entered allmulticast mode [ 424.818198][T20951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.843721][T20954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7156'. [ 424.889379][T20954] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 425.498952][T20986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7172'. [ 426.903089][T20976] syz.6.7167: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 426.904861][ T5845] Bluetooth: hci6: command 0x0406 tx timeout [ 426.926083][T20976] CPU: 1 UID: 0 PID: 20976 Comm: syz.6.7167 Not tainted 6.16.0-rc3-syzkaller-00837-g28aa52b6189f #0 PREEMPT(full) [ 426.926116][T20976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.926137][T20976] Call Trace: [ 426.926147][T20976] [ 426.926156][T20976] dump_stack_lvl+0x189/0x250 [ 426.926207][T20976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.926247][T20976] ? __pfx__printk+0x10/0x10 [ 426.926273][T20976] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 426.926300][T20976] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 426.926330][T20976] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 426.926360][T20976] warn_alloc+0x214/0x310 [ 426.926396][T20976] ? __pfx_warn_alloc+0x10/0x10 [ 426.926437][T20976] ? __get_vm_area_node+0x28f/0x300 [ 426.926463][T20976] ? veth_dev_init+0x363/0x570 [ 426.926501][T20976] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 426.926573][T20976] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 426.926598][T20976] ? __kasan_kmalloc_large+0x1c/0xa0 [ 426.926629][T20976] ? rcu_is_watching+0x15/0xb0 [ 426.926672][T20976] ? veth_dev_init+0x363/0x570 [ 426.926703][T20976] ? veth_dev_init+0x363/0x570 [ 426.926733][T20976] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 426.926758][T20976] ? veth_dev_init+0x363/0x570 [ 426.926801][T20976] veth_dev_init+0x363/0x570 [ 426.926843][T20976] register_netdevice+0x6bc/0x1ae0 [ 426.926896][T20976] ? snprintf+0xda/0x120 [ 426.926938][T20976] ? __pfx_register_netdevice+0x10/0x10 [ 426.926975][T20976] ? __pfx_snprintf+0x10/0x10 [ 426.927014][T20976] ? __asan_memset+0x22/0x50 [ 426.927047][T20976] ? dev_addr_mod+0x2ce/0x3d0 [ 426.927094][T20976] veth_newlink+0x5cc/0xa50 [ 426.927128][T20976] ? __pfx_veth_newlink+0x10/0x10 [ 426.927165][T20976] ? __pfx_css_rstat_updated+0x10/0x10 [ 426.927277][T20976] ? validate_linkmsg+0x765/0x950 [ 426.927316][T20976] ? __pfx_veth_newlink+0x10/0x10 [ 426.927351][T20976] rtnl_newlink_create+0x310/0xb00 [ 426.927394][T20976] ? __pfx_aa_get_newest_label+0x10/0x10 [ 426.927430][T20976] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 426.927461][T20976] ? rtnl_newlink+0x8db/0x1c70 [ 426.927493][T20976] ? __pfx___mutex_lock+0x10/0x10 [ 426.927543][T20976] ? ns_capable+0x8a/0xf0 [ 426.927585][T20976] rtnl_newlink+0x16d6/0x1c70 [ 426.927618][T20976] ? netlink_sendmsg+0x805/0xb30 [ 426.927663][T20976] ? __pfx_rtnl_newlink+0x10/0x10 [ 426.927788][T20976] ? __lock_acquire+0xab9/0xd20 [ 426.927855][T20976] ? __pfx_rtnl_newlink+0x10/0x10 [ 426.927883][T20976] rtnetlink_rcv_msg+0x7cf/0xb70 [ 426.927918][T20976] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 426.927947][T20976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.927975][T20976] ? ref_tracker_free+0x63a/0x7d0 [ 426.928007][T20976] ? __copy_skb_header+0xa7/0x550 [ 426.928046][T20976] ? __pfx_ref_tracker_free+0x10/0x10 [ 426.928079][T20976] ? __skb_clone+0x63/0x7a0 [ 426.928124][T20976] netlink_rcv_skb+0x208/0x470 [ 426.928156][T20976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.928189][T20976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.928235][T20976] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.928263][T20976] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.928299][T20976] netlink_unicast+0x75b/0x8d0 [ 426.928340][T20976] netlink_sendmsg+0x805/0xb30 [ 426.928383][T20976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.928418][T20976] ? aa_sock_msg_perm+0x94/0x160 [ 426.928451][T20976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.928481][T20976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.928521][T20976] __sock_sendmsg+0x219/0x270 [ 426.928550][T20976] ____sys_sendmsg+0x505/0x830 [ 426.928594][T20976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.928642][T20976] ? import_iovec+0x74/0xa0 [ 426.928670][T20976] ___sys_sendmsg+0x21f/0x2a0 [ 426.928710][T20976] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.928789][T20976] ? __fget_files+0x2a/0x420 [ 426.928815][T20976] ? __fget_files+0x3a0/0x420 [ 426.928856][T20976] __x64_sys_sendmsg+0x19b/0x260 [ 426.928895][T20976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.928945][T20976] ? rcu_is_watching+0x15/0xb0 [ 426.928988][T20976] ? do_syscall_64+0xbe/0x3b0 [ 426.929023][T20976] do_syscall_64+0xfa/0x3b0 [ 426.929051][T20976] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.929077][T20976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.929101][T20976] ? clear_bhb_loop+0x60/0xb0 [ 426.929132][T20976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.929159][T20976] RIP: 0033:0x7f401638e929 [ 426.929182][T20976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.929203][T20976] RSP: 002b:00007f40171fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.929230][T20976] RAX: ffffffffffffffda RBX: 00007f40165b5fa0 RCX: 00007f401638e929 [ 426.929248][T20976] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 426.929264][T20976] RBP: 00007f4016410b39 R08: 0000000000000000 R09: 0000000000000000 [ 426.929278][T20976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.929293][T20976] R13: 0000000000000000 R14: 00007f40165b5fa0 R15: 00007ffd1c84a5b8 [ 426.929331][T20976] [ 426.929346][T20976] Mem-Info: [ 426.930711][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 426.966515][T20976] active_anon:5693 inactive_anon:0 isolated_anon:0 [ 426.966515][T20976] active_file:1147 inactive_file:39961 isolated_file:0 [ 426.966515][T20976] unevictable:768 dirty:300 writeback:0 [ 426.966515][T20976] slab_reclaimable:12084 slab_unreclaimable:159142 [ 426.966515][T20976] mapped:39310 shmem:1378 pagetables:1267 [ 426.966515][T20976] sec_pagetables:0 bounce:0 [ 426.966515][T20976] kernel_misc_reclaimable:0 [ 426.966515][T20976] free:1240785 free_pcp:13138 free_cma:0 [ 427.486222][T20976] Node 0 active_anon:23020kB inactive_anon:0kB active_file:4588kB inactive_file:159644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157240kB dirty:1116kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12592kB pagetables:4976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.520105][T20976] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.552015][T20976] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.582366][T20976] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 427.590032][T20976] Node 0 DMA32 free:1045840kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22976kB inactive_anon:0kB active_file:4588kB inactive_file:157812kB unevictable:1536kB writepending:1032kB present:3129332kB managed:2560932kB mlocked:0kB bounce:0kB free_pcp:31744kB local_pcp:16044kB free_cma:0kB [ 427.622936][T20976] lowmem_reserve[]: 0 0 1 1 1 [ 427.640456][T20976] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 427.673812][T20976] lowmem_reserve[]: 0 0 0 0 0 [ 427.679131][T20976] Node 1 Normal free:3900896kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20928kB local_pcp:6592kB free_cma:0kB [ 427.712344][T20976] lowmem_reserve[]: 0 0 0 0 0 [ 427.720502][T20976] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 427.733799][T20976] Node 0 DMA32: 1152*4kB (UME) 898*8kB (UM) 148*16kB (ME) 86*32kB (UME) 109*64kB (UME) 50*128kB (UM) 37*256kB (U) 35*512kB (UME) 21*1024kB (UM) 2*2048kB (ME) 235*4096kB (M) = 1045840kB [ 427.753003][T20976] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 427.766400][T20976] Node 1 Normal: 214*4kB (UE) 45*8kB (UME) 40*16kB (UME) 69*32kB (UME) 22*64kB (UME) 5*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3900896kB [ 427.785391][T20976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.797613][T20976] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.807543][T20976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.817206][T20976] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.826827][T20976] 42484 total pagecache pages [ 427.831528][T20976] 0 pages in swap cache [ 427.836450][T20976] Free swap = 124996kB [ 427.840753][T20976] Total swap = 124996kB [ 427.845091][T20976] 2097051 pages RAM [ 427.848910][T20976] 0 pages HighMem/MovableOnly [ 427.853672][T20976] 424712 pages reserved [ 427.857909][T20976] 0 pages cma reserved [ 429.417526][T21002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.241723][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 430.248907][T21036] netlink: 'syz.2.7196': attribute type 7 has an invalid length. [ 430.262567][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 430.272534][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 430.282451][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 430.292547][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 430.340910][T21039] No such timeout policy "syz1" [ 431.111025][T21035] chnl_net:caif_netlink_parms(): no params data found [ 431.212873][T21083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7215'. [ 431.300610][T21084] team0: Port device bond0 removed [ 431.320570][T21090] netlink: 'syz.4.7220': attribute type 1 has an invalid length. [ 431.335371][T21084] bond0: (slave dummy0): Releasing backup interface [ 431.377134][T21084] bridge_slave_0: left allmulticast mode [ 431.416569][T21084] bridge_slave_0: left promiscuous mode [ 431.425041][T21084] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.441466][T21084] bridge_slave_1: left allmulticast mode [ 431.449410][T21084] bridge_slave_1: left promiscuous mode [ 431.474597][T21084] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.525215][T21084] bond0: (slave bond_slave_0): Releasing backup interface [ 431.551046][T21084] bond0: (slave bond_slave_1): Releasing backup interface [ 431.585439][T21084] team0: Port device team_slave_0 removed [ 431.605329][T21084] team0: Port device team_slave_1 removed [ 431.620429][T21084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.650535][T21084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.917068][T21035] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.927295][T21035] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.934971][T21035] bridge_slave_0: entered allmulticast mode [ 431.943037][T21035] bridge_slave_0: entered promiscuous mode [ 431.953872][T21035] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.964813][T21035] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.977768][T21035] bridge_slave_1: entered allmulticast mode [ 431.992481][T21035] bridge_slave_1: entered promiscuous mode [ 432.243376][T21035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.297612][T21035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.348570][ T51] Bluetooth: hci7: command tx timeout [ 432.668830][T21035] team0: Port device team_slave_0 added [ 432.705928][T21035] team0: Port device team_slave_1 added [ 432.878418][T21035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.901594][T21159] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 432.912215][T21035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.970381][T21035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.047047][T21035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.063879][T21035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.103243][T21035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.434541][T21183] netlink: 'syz.2.7256': attribute type 2 has an invalid length. [ 433.442354][T21183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7256'. [ 433.469467][T21181] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 433.510866][T21035] hsr_slave_0: entered promiscuous mode [ 433.544202][T21035] hsr_slave_1: entered promiscuous mode [ 433.574217][T21035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.583617][T21035] Cannot create hsr debugfs directory [ 433.754765][T21194] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 434.027900][T21208] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7268'. [ 434.426828][ T51] Bluetooth: hci7: command tx timeout [ 434.602797][T21035] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 434.636872][T21035] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 434.705135][T21035] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 434.732130][T21035] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 434.913668][T21245] C: renamed from team_slave_0 [ 434.953473][T21245] netlink: 'syz.3.7279': attribute type 1 has an invalid length. [ 434.980885][T21245] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7279'. [ 435.003060][T21245] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 435.065549][ T31] INFO: task syz.5.3968:14271 blocked for more than 143 seconds. [ 435.073417][ T31] Not tainted 6.16.0-rc3-syzkaller-00837-g28aa52b6189f #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 435.134496][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.170934][ T31] task:syz.5.3968 state:D stack:27528 pid:14271 tgid:14270 ppid:13186 task_flags:0x400040 flags:0x00004004 [ 435.264430][ T31] Call Trace: [ 435.267775][ T31] [ 435.270797][ T31] __schedule+0x16f5/0x4d00 [ 435.357933][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.362873][ T31] ? schedule+0x165/0x360 [ 435.385448][ T31] ? __pfx___schedule+0x10/0x10 [ 435.390403][ T31] ? schedule+0x91/0x360 [ 435.415797][ T31] schedule+0x165/0x360 [ 435.425294][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.430824][ T31] __mutex_lock+0x724/0xe80 [ 435.449574][ T31] ? __mutex_lock+0x51b/0xe80 [ 435.454640][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 435.460515][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.474757][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 435.481430][ T31] ? __nlmsg_put+0xef/0x1b0 [ 435.486646][ T31] ? genlmsg_put+0x137/0x2e0 [ 435.491301][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 435.501435][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 435.510582][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 435.522842][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 435.541356][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 435.562894][ T31] genl_rcv_msg+0x60e/0x790 [ 435.568972][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.574050][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 435.589370][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 435.600686][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 435.612809][ T31] netlink_rcv_skb+0x208/0x470 [ 435.623222][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.633813][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.645699][ T31] ? down_read+0x1ad/0x2e0 [ 435.660769][ T31] genl_rcv+0x28/0x40 [ 435.665269][ T31] netlink_unicast+0x75b/0x8d0 [ 435.670085][ T31] netlink_sendmsg+0x805/0xb30 [ 435.684706][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.690071][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 435.705550][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.710910][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.725130][ T31] __sock_sendmsg+0x219/0x270 [ 435.729977][ T31] ____sys_sendmsg+0x505/0x830 [ 435.746085][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.753242][ T31] ? import_iovec+0x74/0xa0 [ 435.764464][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 435.769226][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.783658][ T31] ? __fget_files+0x2a/0x420 [ 435.788725][ T31] ? __fget_files+0x3a0/0x420 [ 435.793477][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 435.809565][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.820217][ T31] ? rcu_is_watching+0x15/0xb0 [ 435.832050][ T31] ? do_syscall_64+0xbe/0x3b0 [ 435.842076][ T31] do_syscall_64+0xfa/0x3b0 [ 435.852689][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.874427][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.880570][ T31] ? clear_bhb_loop+0x60/0xb0 [ 435.894647][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.900616][ T31] RIP: 0033:0x7f8327b8e929 [ 435.914785][ T31] RSP: 002b:00007f8328ac2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.923282][ T31] RAX: ffffffffffffffda RBX: 00007f8327db5fa0 RCX: 00007f8327b8e929 [ 435.942977][ T31] RDX: 0000000000000010 RSI: 0000200000001540 RDI: 0000000000000003 [ 435.961433][ T31] RBP: 00007f8327c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 435.969554][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.977752][ T31] R13: 0000000000000000 R14: 00007f8327db5fa0 R15: 00007ffc131ba108 [ 435.985896][ T31] [ 436.004587][ T31] [ 436.004587][ T31] Showing all locks held in the system: [ 436.012361][ T31] 1 lock held by khungtaskd/31: [ 436.104715][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 436.164527][ T31] 4 locks held by kworker/u8:3/43: [ 436.169744][ T31] 2 locks held by getty/5590: [ 436.185050][ T31] #0: ffff888034f920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 436.214345][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 436.237756][ T31] 1 lock held by syz-executor/5850: [ 436.243016][ T31] 3 locks held by kworker/0:4/5904: [ 436.284435][ T31] 2 locks held by kworker/0:5/5925: [ 436.289699][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 436.364524][ T31] #1: ffffc90004ef7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 436.424430][ T31] 2 locks held by syz.1.3148/12430: [ 436.429698][ T31] #0: ffffffff8f5777f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 436.474538][ T31] #1: ffffffff8e41cf48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 436.514370][ T51] Bluetooth: hci7: command tx timeout [ 436.519978][ T31] 2 locks held by syz.5.3968/14271: [ 436.525528][ T31] #0: ffffffff8f5777f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 436.533781][ T31] #1: ffffffff8e41cf48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 436.564287][ T31] 4 locks held by syz-executor/15021: [ 436.569818][ T31] 2 locks held by syz.0.6913/20455: [ 436.594372][ T31] #0: ffffffff8f5777f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 436.602669][ T31] #1: ffffffff8e41cf48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 436.624386][ T31] 2 locks held by dhcpcd/21270: [ 436.629294][ T31] #0: ffff888059f85c08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 436.674316][ T31] #1: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 436.714483][ T31] [ 436.716867][ T31] ============================================= [ 436.716867][ T31] [ 436.780646][ T31] NMI backtrace for cpu 1 [ 436.780669][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00837-g28aa52b6189f #0 PREEMPT(full) [ 436.780694][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.780706][ T31] Call Trace: [ 436.780714][ T31] [ 436.780723][ T31] dump_stack_lvl+0x189/0x250 [ 436.780758][ T31] ? __wake_up_klogd+0xd9/0x110 [ 436.780785][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.780818][ T31] ? __pfx__printk+0x10/0x10 [ 436.780854][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 436.780890][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 436.780919][ T31] ? _printk+0xcf/0x120 [ 436.780945][ T31] ? __pfx__printk+0x10/0x10 [ 436.780968][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.780999][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 436.781035][ T31] watchdog+0xfee/0x1030 [ 436.781065][ T31] ? watchdog+0x1de/0x1030 [ 436.781100][ T31] kthread+0x70e/0x8a0 [ 436.781128][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.781153][ T31] ? __pfx_kthread+0x10/0x10 [ 436.781179][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.781200][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.781221][ T31] ? __pfx_kthread+0x10/0x10 [ 436.781246][ T31] ret_from_fork+0x3fc/0x770 [ 436.781278][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 436.781313][ T31] ? __switch_to_asm+0x39/0x70 [ 436.781333][ T31] ? __switch_to_asm+0x33/0x70 [ 436.781352][ T31] ? __pfx_kthread+0x10/0x10 [ 436.781376][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.781414][ T31] [ 436.781422][ T31] Sending NMI from CPU 1 to CPUs 0: [ 436.944752][ C0] NMI backtrace for cpu 0 [ 436.944770][ C0] CPU: 0 UID: 0 PID: 21271 Comm: kworker/0:0 Not tainted 6.16.0-rc3-syzkaller-00837-g28aa52b6189f #0 PREEMPT(full) [ 436.944792][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.944804][ C0] Workqueue: events destroy_super_work [ 436.944827][ C0] RIP: 0010:validate_chain+0xfd7/0x2140 [ 436.944846][ C0] Code: 25 ff 0f 00 00 39 05 d4 bf 06 12 73 06 89 05 cc bf 06 12 49 8b 04 24 48 89 de 48 39 e8 0f 84 33 fe ff ff 4c 89 68 30 48 8b 00 <48> 39 e8 75 f4 48 89 de e9 1f fe ff ff 48 c7 c7 70 fd 00 8e 48 89 [ 436.944862][ C0] RSP: 0018:ffffc90003a17608 EFLAGS: 00000002 [ 436.944876][ C0] RAX: ffffffff963b6908 RBX: 0000000000000155 RCX: 0000000000000004 [ 436.944888][ C0] RDX: 0000000000000008 RSI: 0000000000000155 RDI: ffff888052871e00 [ 436.944900][ C0] RBP: ffffffff93466df8 R08: ffffc90003a175d0 R09: 0000000000000020 [ 436.944912][ C0] R10: dffffc0000000000 R11: ffffffff819e9310 R12: ffffffff9628cd88 [ 436.944926][ C0] R13: ffffffff9628cdf8 R14: ffff888052872968 R15: 0000000000000003 [ 436.944938][ C0] FS: 0000000000000000(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 436.944952][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.944964][ C0] CR2: 00007ffeaf23c4b8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 436.944979][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.944989][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 436.945000][ C0] Call Trace: [ 436.945007][ C0] [ 436.945027][ C0] __lock_acquire+0xab9/0xd20 [ 436.945055][ C0] ? __free_object+0x260/0x6c0 [ 436.945073][ C0] lock_acquire+0x120/0x360 [ 436.945097][ C0] ? __free_object+0x260/0x6c0 [ 436.945123][ C0] _raw_spin_lock+0x2e/0x40 [ 436.945151][ C0] ? __free_object+0x260/0x6c0 [ 436.945169][ C0] __free_object+0x260/0x6c0 [ 436.945190][ C0] ? __pfx___free_object+0x10/0x10 [ 436.945208][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 436.945225][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 436.945245][ C0] debug_check_no_obj_freed+0x1dc/0x470 [ 436.945271][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 436.945296][ C0] kfree+0x112/0x440 [ 436.945320][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 436.945346][ C0] process_scheduled_works+0xae1/0x17b0 [ 436.945390][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 436.945423][ C0] worker_thread+0x8a0/0xda0 [ 436.945450][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 436.945471][ C0] ? __kthread_parkme+0x7b/0x200 [ 436.945491][ C0] kthread+0x70e/0x8a0 [ 436.945510][ C0] ? __pfx_worker_thread+0x10/0x10 [ 436.945536][ C0] ? __pfx_kthread+0x10/0x10 [ 436.945555][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.945571][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.945589][ C0] ? __pfx_kthread+0x10/0x10 [ 436.945608][ C0] ret_from_fork+0x3fc/0x770 [ 436.945634][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 436.945660][ C0] ? __switch_to_asm+0x39/0x70 [ 436.945677][ C0] ? __switch_to_asm+0x33/0x70 [ 436.945694][ C0] ? __pfx_kthread+0x10/0x10 [ 436.945713][ C0] ret_from_fork_asm+0x1a/0x30 [ 436.945737][ C0] [ 437.302162][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 437.309067][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00837-g28aa52b6189f #0 PREEMPT(full) [ 437.320893][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.330979][ T31] Call Trace: [ 437.334289][ T31] [ 437.337241][ T31] dump_stack_lvl+0x99/0x250 [ 437.341843][ T31] ? __asan_memcpy+0x40/0x70 [ 437.346443][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.351653][ T31] ? __pfx__printk+0x10/0x10 [ 437.356262][ T31] panic+0x2db/0x790 [ 437.360197][ T31] ? __pfx_panic+0x10/0x10 [ 437.364641][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 437.370477][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 437.375884][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 437.382057][ T31] watchdog+0x102d/0x1030 [ 437.386389][ T31] ? watchdog+0x1de/0x1030 [ 437.390815][ T31] kthread+0x70e/0x8a0 [ 437.394895][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.399575][ T31] ? __pfx_kthread+0x10/0x10 [ 437.404165][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.409374][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.414607][ T31] ? __pfx_kthread+0x10/0x10 [ 437.419223][ T31] ret_from_fork+0x3fc/0x770 [ 437.423830][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 437.428946][ T31] ? __switch_to_asm+0x39/0x70 [ 437.433703][ T31] ? __switch_to_asm+0x33/0x70 [ 437.438461][ T31] ? __pfx_kthread+0x10/0x10 [ 437.443055][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.447828][ T31] [ 437.451190][ T31] Kernel Offset: disabled [ 437.455521][ T31] Rebooting in 86400 seconds..