last executing test programs: 3m16.237766988s ago: executing program 2 (id=3030): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000fc0)=0x6, 0x4) 3m15.990209345s ago: executing program 2 (id=3034): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x2, 0x89ff]}}) 3m15.834104523s ago: executing program 2 (id=3038): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7ff, 0x20000000, 0x1, 0x8}, @multicast2, @broadcast, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 3m15.677586921s ago: executing program 2 (id=3042): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x40) 3m15.39771396s ago: executing program 2 (id=3049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e31000000000000000000000014000000110001"], 0xa4}}, 0x0) 3m15.190882383s ago: executing program 2 (id=3054): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 3m0.09210427s ago: executing program 32 (id=3054): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m40.831094839s ago: executing program 0 (id=3887): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r0) 2m40.731317102s ago: executing program 0 (id=3889): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d4e0a"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2m40.610302692s ago: executing program 0 (id=3894): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0) 2m40.437774597s ago: executing program 0 (id=3898): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 2m40.194705378s ago: executing program 0 (id=3903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) 2m39.990152639s ago: executing program 0 (id=3907): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m24.972204761s ago: executing program 33 (id=3907): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.140304065s ago: executing program 1 (id=7571): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b50200000000000085000000cb0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21) 1.084126962s ago: executing program 4 (id=7572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x20, 0xfffd, 0x0, 0xa, 0x20, 0xa0, 0x32}, {@in=@loopback, 0x0, 0x2b}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x3503, 0xa, 0x4, 0xfd, 0x91}}, 0xf0}, 0x1, 0x0, 0x0, 0x50}, 0x4000) 1.067276481s ago: executing program 3 (id=7573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x48}}, 0x0) 931.697078ms ago: executing program 1 (id=7576): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000180), 0x4) 931.248816ms ago: executing program 5 (id=7577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000100070000000900020073797a310000000014000780050011008200000008001240000000000500050002000000050004000000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 917.241468ms ago: executing program 4 (id=7578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400000014001680100008800c"], 0x38}}, 0x0) 898.495796ms ago: executing program 6 (id=7579): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1}, 0x24}}, 0x0) 860.288281ms ago: executing program 3 (id=7580): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x6, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 812.864606ms ago: executing program 1 (id=7581): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000180)) 720.335307ms ago: executing program 5 (id=7582): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac14142a05000900290000000800040000054000f5"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 695.243455ms ago: executing program 6 (id=7583): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40209c0}}, {{&(0x7f0000000080)=@file={0x1, './cgroup/../file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x20000000) 658.453276ms ago: executing program 4 (id=7584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000fc0)={0x0, 0xfcff, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000", @ANYRES32=0x0, @ANYBLOB="02000000080002000700000008000200070000000800020003000100080002000000000014000100ff"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 640.533704ms ago: executing program 3 (id=7585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) 619.238657ms ago: executing program 1 (id=7586): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 556.014089ms ago: executing program 5 (id=7587): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$FICLONE(r0, 0x40049409, r0) 502.573636ms ago: executing program 4 (id=7588): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}, {&(0x7f00000001c0)="877ba26b4957606fb1e825155fdfd219a2e8852392b2a954ba3ca6a6b5d0196756af9d11b41e44527c82e6b6c4fa06b841a84e241cf4bea99ae1acfa07f4c1cc4c06552c51f0603fd5292b74f8981d3816a65292c9dc797ce027eac497a4cb85d44b5d44de727e037b8f6c2634f69f06c242271b572ce5942312154aa74c63ae7fcfa1b518cba69f51b8177d56ef01c3515eb9d9f84afcefc435ec2cc0427a66af12dd9cde0b06821e10dcd511e8be474460c24b7e3d9c3543ae26e6a34782fa47d4923e4c60000000", 0xffe7}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) 491.10897ms ago: executing program 6 (id=7589): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r0, 0x8008b705, 0x0) 477.624366ms ago: executing program 3 (id=7590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54583}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 401.442392ms ago: executing program 4 (id=7591): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 320.039087ms ago: executing program 5 (id=7592): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000340)=0x4) 319.486122ms ago: executing program 6 (id=7593): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x7fffffff, 0x0, 0x2000000}}) 282.773899ms ago: executing program 1 (id=7594): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 247.417096ms ago: executing program 3 (id=7595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0xc8, 0x30, 0x25, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_pedit={0xb0, 0x1, 0x0, 0x0, {{0xa}, {0x84, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xe, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) 234.740294ms ago: executing program 4 (id=7596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c0fba3f0c67497c6e350f409efe4", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 183.537325ms ago: executing program 5 (id=7597): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e00010000000000000000fdff000000000000000000000a00603000000000", @ANYRES32=0x0], 0xb8}}, 0x0) 132.534707ms ago: executing program 6 (id=7598): r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) 131.746076ms ago: executing program 3 (id=7599): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 61.735851ms ago: executing program 1 (id=7600): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) 33.534861ms ago: executing program 6 (id=7601): r0 = socket$inet(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 0s ago: executing program 5 (id=7602): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) kernel console output (not intermixed with test programs): z.3.2466': attribute type 1 has an invalid length. [ 174.785291][T10933] netlink: 'syz.0.2467': attribute type 21 has an invalid length. [ 174.794421][T10930] NCSI netlink: No device for ifindex 0 [ 174.830445][T10933] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.902695][T10937] netlink: 'syz.2.2469': attribute type 1 has an invalid length. [ 175.437032][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2484'. [ 175.475325][T10969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.827604][T10989] netlink: 'syz.4.2493': attribute type 10 has an invalid length. [ 175.851106][T10989] team0: Device ipvlan1 failed to register rx_handler [ 176.437074][T11025] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.2511'. [ 176.608319][T11037] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2515'. [ 176.885513][T11051] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2521'. [ 176.981262][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2525'. [ 177.015087][T11056] tc_dump_action: action bad kind [ 177.057620][T11061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2527'. [ 177.310930][T11076] xt_TCPMSS: Only works on TCP SYN packets [ 177.435993][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2538'. [ 177.924131][T11106] vlan0: entered promiscuous mode [ 178.698823][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.742409][T11151] netlink: 'syz.3.2572': attribute type 5 has an invalid length. [ 178.754684][T11151] netlink: 'syz.3.2572': attribute type 7 has an invalid length. [ 178.873255][T11133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.909907][T11133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.098776][T11151] : entered promiscuous mode [ 179.106676][T11164] netlink: 'syz.0.2579': attribute type 12 has an invalid length. [ 179.131399][T11164] __nla_validate_parse: 1 callbacks suppressed [ 179.131417][T11164] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2579'. [ 179.183197][ T3433] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.212146][ T3433] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.225588][T11166] raw_sendmsg: syz.1.2580 forgot to set AF_INET. Fix it! [ 179.242729][ T3433] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.289474][ T3433] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.068574][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 180.262227][T11222] netlink: 'syz.2.2607': attribute type 11 has an invalid length. [ 180.281308][T11222] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2607'. [ 180.356165][T11224] netlink: 'syz.3.2608': attribute type 1 has an invalid length. [ 180.390020][T11224] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2608'. [ 180.589065][T11236] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 180.593874][T11238] netlink: 'syz.3.2613': attribute type 1 has an invalid length. [ 180.645295][T11238] netlink: 'syz.3.2613': attribute type 11 has an invalid length. [ 180.662085][T11238] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2613'. [ 181.063446][T11265] netlink: 'syz.0.2625': attribute type 11 has an invalid length. [ 181.088885][T11265] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2625'. [ 181.464982][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2633'. [ 181.822139][T11304] No such timeout policy "syz0" [ 181.974587][T11314] netlink: 'syz.1.2644': attribute type 3 has an invalid length. [ 181.984094][T11314] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2644'. [ 182.356118][T11331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2653'. [ 182.388067][T11331] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 182.431934][T11337] netlink: 'syz.1.2657': attribute type 11 has an invalid length. [ 182.494814][T11337] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2657'. [ 182.825583][T11356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.155404][T11434] __nla_validate_parse: 4 callbacks suppressed [ 184.155422][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 184.587655][T11458] xt_bpf: check failed: parse error [ 185.967087][T11530] lo speed is unknown, defaulting to 1000 [ 185.998774][T11530] lo speed is unknown, defaulting to 1000 [ 186.029535][T11530] lo speed is unknown, defaulting to 1000 [ 186.079893][T11530] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.126172][T11530] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.242260][T11530] lo speed is unknown, defaulting to 1000 [ 186.251249][T11530] lo speed is unknown, defaulting to 1000 [ 186.271818][T11530] lo speed is unknown, defaulting to 1000 [ 186.297195][T11530] lo speed is unknown, defaulting to 1000 [ 186.340591][T11530] lo speed is unknown, defaulting to 1000 [ 186.485468][T11553] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 186.828447][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 187.246031][T11586] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 187.285640][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2761'. [ 187.825778][T11615] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2774'. [ 188.209321][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 188.629759][T11657] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 189.626427][T11712] batadv1: entered allmulticast mode [ 189.653547][T11712] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.998014][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 190.076076][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2828'. [ 190.084725][T11739] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 190.262639][T11739] bond1: entered promiscuous mode [ 190.268733][T11739] bond1: entered allmulticast mode [ 190.276025][T11739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.282930][T11750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2833'. [ 190.353461][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2833'. [ 190.406533][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2833'. [ 190.488176][ T5948] IPVS: starting estimator thread 0... [ 190.506520][T11761] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 190.625007][T11759] IPVS: using max 37 ests per chain, 88800 per kthread [ 190.817478][T11775] ipt_REJECT: ECHOREPLY no longer supported. [ 190.900240][T11780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2847'. [ 190.980720][T11783] bond0: option lp_interval: invalid value (18446744073709551604) [ 191.026665][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2851'. [ 191.040119][T11783] bond0: option lp_interval: allowed values 1 - 2147483647 [ 191.052814][T11790] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 191.075155][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2851'. [ 191.084626][T11790] netlink: 'syz.2.2850': attribute type 2 has an invalid length. [ 191.290790][T11802] xt_HMARK: proto mask must be zero with L3 mode [ 191.770393][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2866'. [ 191.897781][T11836] netlink: 'syz.2.2870': attribute type 1 has an invalid length. [ 191.908230][T11838] netlink: 'syz.4.2869': attribute type 10 has an invalid length. [ 191.976093][T11838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2869'. [ 192.001394][T11838] batadv0: entered promiscuous mode [ 192.019204][T11838] batadv0: entered allmulticast mode [ 192.055455][T11838] bridge0: port 3(batadv0) entered blocking state [ 192.082363][T11838] bridge0: port 3(batadv0) entered disabled state [ 192.095609][T11838] bridge0: port 3(batadv0) entered blocking state [ 192.102204][T11838] bridge0: port 3(batadv0) entered forwarding state [ 192.144492][T11849] netlink: 'syz.2.2875': attribute type 3 has an invalid length. [ 192.559224][ T44] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 192.569043][ T44] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 192.748041][T11875] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 193.921612][T11933] netlink: 'syz.0.2912': attribute type 2 has an invalid length. [ 194.198558][T11950] netlink: 'syz.0.2925': attribute type 1 has an invalid length. [ 194.260483][T11950] netlink: 'syz.0.2925': attribute type 2 has an invalid length. [ 194.310112][T11957] netlink: 'syz.1.2926': attribute type 4 has an invalid length. [ 194.310547][T11955] lo speed is unknown, defaulting to 1000 [ 194.332193][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338652][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.350519][T11957] netlink: 'syz.1.2926': attribute type 17 has an invalid length. [ 194.590703][T11972] netlink: 'syz.2.2932': attribute type 11 has an invalid length. [ 194.601830][T11973] No such timeout policy "syz1" [ 195.125118][T12001] __nla_validate_parse: 7 callbacks suppressed [ 195.125138][T12001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2947'. [ 195.371177][T12014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2953'. [ 195.482714][T12022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.675009][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2962'. [ 195.714535][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 196.418668][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 196.425012][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 196.425744][T12077] x_tables: unsorted entry at hook 1 [ 196.431036][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 196.436485][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 196.495529][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2984'. [ 196.717779][T12092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2991'. [ 196.748232][T12092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2991'. [ 196.991227][T12109] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2996'. [ 197.060876][T12111] tc_dump_action: action bad kind [ 197.515624][T12129] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.570887][T12131] delete_channel: no stack [ 198.135355][T12163] xt_nat: multiple ranges no longer supported [ 198.569241][T12186] ip6t_srh: unknown srh match flags 4000 [ 198.576713][T12188] SET target dimension over the limit! [ 198.749520][T12195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.182267][T12222] validate_nla: 1 callbacks suppressed [ 199.182301][T12222] netlink: 'syz.2.3042': attribute type 1 has an invalid length. [ 199.399490][T12231] geneve3: entered allmulticast mode [ 199.444067][ T44] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.498525][ T44] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.526624][T12241] xt_TPROXY: Can be used only with -p tcp or -p udp [ 199.546072][ T44] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.606715][ T44] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.920293][T12260] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 199.952313][T12260] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 199.952408][T12265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.969773][T12265] IPv6: NLM_F_CREATE should be set when creating new route [ 200.137755][T12271] No such timeout policy "syz0" [ 201.046791][T12323] bond0: Unable to set up delay as MII monitoring is disabled [ 202.296689][T12395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3113'. [ 202.717787][T12420] netlink: 'syz.1.3124': attribute type 6 has an invalid length. [ 202.796046][T12424] syz.4.3126 uses obsolete (PF_INET,SOCK_PACKET) [ 202.835173][T12424] hsr0: entered promiscuous mode [ 202.847036][T12424] hsr0: entered allmulticast mode [ 202.852108][T12424] hsr_slave_0: entered allmulticast mode [ 202.870426][T12424] hsr_slave_1: entered allmulticast mode [ 202.898498][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3128'. [ 203.095801][T12439] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3132'. [ 203.157401][T12444] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.260133][T12448] netlink: 'syz.0.3135': attribute type 2 has an invalid length. [ 203.311393][T12448] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 203.347219][T12448] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3135'. [ 203.483912][T12459] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 203.997954][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3150'. [ 204.592786][T12521] ip6erspan0: entered allmulticast mode [ 204.672627][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'. [ 204.834060][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3170'. [ 205.243093][T12554] ieee802154 phy0 wpan0: encryption failed: -90 [ 205.244047][T12551] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3180'. [ 205.692678][T12579] netlink: 'syz.1.3194': attribute type 13 has an invalid length. [ 205.713517][T12579] netlink: 'syz.1.3194': attribute type 17 has an invalid length. [ 205.779163][T12583] netlink: 'syz.0.3196': attribute type 10 has an invalid length. [ 205.842032][T12587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3198'. [ 205.853030][T12579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.878861][T12583] bridge0: port 3(netdevsim0) entered blocking state [ 205.915437][T12583] bridge0: port 3(netdevsim0) entered disabled state [ 205.935957][T12583] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 205.961732][T12589] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 205.970540][T12589] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3199'. [ 206.186926][T12600] netlink: 'syz.4.3204': attribute type 3 has an invalid length. [ 206.339367][T12609] netlink: 'syz.1.3207': attribute type 3 has an invalid length. [ 206.896588][T12646] netlink: 'syz.3.3222': attribute type 4 has an invalid length. [ 207.302300][T12667] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 207.369665][T12667] Cannot find add_set index 4 as target [ 207.404268][T12670] netlink: 'syz.1.3232': attribute type 32 has an invalid length. [ 207.560969][T12680] : entered promiscuous mode [ 208.000621][T12709] netlink: 'syz.4.3252': attribute type 4 has an invalid length. [ 208.034474][T12706] bond1: entered promiscuous mode [ 208.040495][T12706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.055867][T12709] veth1_macvtap: left promiscuous mode [ 208.951072][T12762] bond1: entered promiscuous mode [ 208.959159][T12762] bond1: entered allmulticast mode [ 208.966038][T12762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.107439][T12775] netlink: 'syz.3.3282': attribute type 11 has an invalid length. [ 209.122798][T12775] __nla_validate_parse: 4 callbacks suppressed [ 209.122817][T12775] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3282'. [ 209.506304][T12800] netlink: 3696 bytes leftover after parsing attributes in process `syz.4.3295'. [ 209.521390][T12800] netlink: 3696 bytes leftover after parsing attributes in process `syz.4.3295'. [ 209.890538][T12824] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 209.936132][T12824] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 209.955055][T12829] netlink: 'syz.1.3304': attribute type 1 has an invalid length. [ 209.965217][T12828] openvswitch: netlink: Actions may not be safe on all matching packets [ 209.977885][T12829] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3304'. [ 210.129798][T12835] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 210.533216][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3321'. [ 210.557906][T12863] openvswitch: netlink: IP tunnel dst address not specified [ 210.685102][T12867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3325'. [ 210.744203][T12871] syz_tun: entered allmulticast mode [ 210.775932][T12871] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3326'. [ 210.796589][T12871] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 210.839394][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3328'. [ 211.077474][T12889] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 211.201889][T12898] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 211.233213][T12898] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 211.534682][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 211.547094][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 211.643142][T12922] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.689030][T12922] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.278135][T12963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.468026][T12971] netlink: 'syz.0.3374': attribute type 11 has an invalid length. [ 212.664390][T12979] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 212.693580][T12979] bridge2: entered allmulticast mode [ 212.759482][T12987] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 213.867433][T13058] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 213.893856][T13058] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 213.956930][T13064] xt_connbytes: Forcing CT accounting to be enabled [ 213.963668][T13064] xt_bpf: check failed: parse error [ 214.075041][T13066] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 214.082379][T13066] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 214.116885][T13066] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 214.152295][T13074] __nla_validate_parse: 4 callbacks suppressed [ 214.152314][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3427'. [ 214.923108][T13117] netlink: 'syz.0.3447': attribute type 2 has an invalid length. [ 214.974964][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 215.054941][T13123] netlink: 'syz.1.3449': attribute type 1 has an invalid length. [ 215.378574][T13136] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 215.557494][T13142] netlink: 'syz.0.3455': attribute type 1 has an invalid length. [ 215.600363][T13142] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3455'. [ 215.600398][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3456'. [ 215.627709][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.640172][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.645021][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'. [ 215.656578][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.676789][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.685545][T13149] gre0: Master is either lo or non-ether device [ 215.691979][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.823458][T13150] lo speed is unknown, defaulting to 1000 [ 216.454700][T13150] chnl_net:caif_netlink_parms(): no params data found [ 216.819124][T13201] netlink: 'syz.3.3478': attribute type 16 has an invalid length. [ 216.842825][T13201] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3478'. [ 216.918611][T13150] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.935129][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.942377][T13150] bridge_slave_0: entered allmulticast mode [ 216.956696][T13150] bridge_slave_0: entered promiscuous mode [ 216.974710][T13150] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.998499][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.023597][T13150] bridge_slave_1: entered allmulticast mode [ 217.056012][T13150] bridge_slave_1: entered promiscuous mode [ 217.237115][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.284489][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.450123][T13150] team0: Port device team_slave_0 added [ 217.511043][T13150] team0: Port device team_slave_1 added [ 217.696998][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.717598][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.764930][ T5852] Bluetooth: hci5: command tx timeout [ 217.782914][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.797167][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.804204][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.806764][T13246] xt_ecn: cannot match TCP bits for non-tcp packets [ 217.831266][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.066655][T13150] hsr_slave_0: entered promiscuous mode [ 218.073307][T13150] hsr_slave_1: entered promiscuous mode [ 218.096101][T13150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.123240][T13150] Cannot create hsr debugfs directory [ 218.148724][T13260] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 218.291173][T13267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3512'. [ 218.301222][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 218.313843][T13267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3512'. [ 218.960547][T13150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.018484][T13150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.069673][T13150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.104523][T13150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.223996][T13309] _ÐZ`Ô€@: entered promiscuous mode [ 219.556868][T13150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.618849][T13150] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.703058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.710377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.737751][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.745631][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.761791][T13346] netlink: 'syz.1.3547': attribute type 2 has an invalid length. [ 219.828284][T13348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3548'. [ 219.847778][ T5852] Bluetooth: hci5: command tx timeout [ 219.861942][T13348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 219.939959][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'. [ 219.977691][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3550'. [ 220.016261][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'. [ 220.035869][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3550'. [ 220.057880][T13354] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3550'. [ 220.403994][T13378] netlink: 'syz.0.3560': attribute type 21 has an invalid length. [ 220.455135][T13378] netlink: 'syz.0.3560': attribute type 6 has an invalid length. [ 220.468960][T13378] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3560'. [ 220.720399][T13150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.819358][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 220.981728][T13404] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3571'. [ 221.010947][T13404] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3571'. [ 221.201899][T13413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 221.440854][T13428] IPv6: Can't replace route, no match found [ 221.500414][T13150] veth0_vlan: entered promiscuous mode [ 221.540075][T13150] veth1_vlan: entered promiscuous mode [ 221.554422][T13431] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 221.644146][T13150] veth0_macvtap: entered promiscuous mode [ 221.703649][T13150] veth1_macvtap: entered promiscuous mode [ 221.789751][T13150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.843041][T13150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.906369][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.927957][ T5852] Bluetooth: hci5: command tx timeout [ 221.939688][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.973589][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.023029][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.294435][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.327199][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.523801][T13471] syz_tun: left allmulticast mode [ 222.558651][ T4488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.579808][ T4488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.052356][T13501] netlink: 'syz.0.3615': attribute type 7 has an invalid length. [ 223.095186][T13501] netlink: 'syz.0.3615': attribute type 3 has an invalid length. [ 223.223187][T13510] netlink: 'syz.1.3620': attribute type 1 has an invalid length. [ 223.674529][T13536] netlink: 'syz.1.3631': attribute type 4 has an invalid length. [ 224.005825][ T5852] Bluetooth: hci5: command tx timeout [ 224.223070][T13564] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.382467][T13618] netlink: 'syz.5.3669': attribute type 2 has an invalid length. [ 225.668373][T13637] __nla_validate_parse: 4 callbacks suppressed [ 225.668391][T13637] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3681'. [ 226.117536][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3689'. [ 226.144045][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3689'. [ 226.181141][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3689'. [ 226.549001][T13678] --map-set only usable from mangle table [ 226.707998][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 226.758461][T13689] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3704'. [ 226.762125][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 226.808552][T13689] hsr_slave_0: left promiscuous mode [ 226.907215][T13689] hsr_slave_1: left promiscuous mode [ 227.075304][T13702] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3707'. [ 227.084311][T13702] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3707'. [ 227.093465][T13706] netlink: 'syz.0.3709': attribute type 1 has an invalid length. [ 227.093484][T13706] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3709'. [ 227.519401][T13726] netlink: 'syz.0.3717': attribute type 1 has an invalid length. [ 227.584328][T13728] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 227.824320][T13739] netlink: 'syz.1.3725': attribute type 4 has an invalid length. [ 228.393664][T13771] netlink: 'syz.5.3738': attribute type 1 has an invalid length. [ 230.503977][T13891] dummy0: entered promiscuous mode [ 230.541435][T13891] dummy0: entered allmulticast mode [ 230.584310][T13896] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 230.591609][T13895] netlink: 'syz.5.3794': attribute type 2 has an invalid length. [ 230.604439][T13896] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.616307][T13895] netlink: 'syz.5.3794': attribute type 1 has an invalid length. [ 230.726511][T13902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.017938][T13920] xt_TCPMSS: Only works on TCP SYN packets [ 231.088587][T13926] __nla_validate_parse: 9 callbacks suppressed [ 231.088604][T13926] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3809'. [ 231.197816][T13932] netlink: 'syz.1.3812': attribute type 2 has an invalid length. [ 231.218704][T13934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.245225][T13932] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3812'. [ 232.068235][T13981] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 232.166430][ T5912] IPVS: starting estimator thread 0... [ 232.265486][T13987] IPVS: using max 36 ests per chain, 86400 per kthread [ 232.347469][T13993] netlink: 'syz.3.3842': attribute type 2 has an invalid length. [ 232.498520][T14002] netlink: zone id is out of range [ 232.503820][T14002] netlink: del zone limit has 8 unknown bytes [ 233.197663][T14042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3866'. [ 233.200897][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'. [ 233.232107][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3866'. [ 233.431791][T14054] netlink: 'syz.0.3872': attribute type 1 has an invalid length. [ 233.441951][T14054] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3872'. [ 233.771100][T14076] xt_NFQUEUE: number of total queues is 0 [ 233.778322][T14075] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.354591][T14106] netlink: 'syz.0.3898': attribute type 4 has an invalid length. [ 234.394966][T14106] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.3898'. [ 235.177591][T14140] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 235.184681][T14133] xt_CT: No such helper "syz0" [ 235.253021][T14143] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3914'. [ 235.299047][T14143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3914'. [ 235.338891][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3914'. [ 235.556935][T14154] IPv6: sit1: Disabled Multicast RS [ 235.587136][T14154] sit1: entered allmulticast mode [ 236.214570][T14191] openvswitch: netlink: Unknown key attributes 2 [ 236.528570][T14211] __nla_validate_parse: 4 callbacks suppressed [ 236.528595][T14211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3948'. [ 236.898441][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3954'. [ 236.981598][T14208] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.989345][T14208] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.124229][T14231] netlink: 'syz.5.3957': attribute type 9 has an invalid length. [ 237.146404][T14231] netlink: 'syz.5.3957': attribute type 1 has an invalid length. [ 237.154387][T14231] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.3957'. [ 237.507870][T14208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.538029][T14208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.971183][T14237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3960'. [ 237.998060][ T44] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.020365][ T44] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 238.050624][ T44] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.103315][ T44] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 238.135341][ T44] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.144249][ T44] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 238.180700][ T44] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.225241][ T44] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 238.812066][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3979'. [ 239.031369][T14291] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3985'. [ 239.241985][T14301] netlink: 'syz.5.3989': attribute type 2 has an invalid length. [ 239.263544][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3991'. [ 239.275806][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3991'. [ 239.298944][T14303] netlink: 'syz.4.3991': attribute type 6 has an invalid length. [ 240.025471][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4008'. [ 240.053274][T14345] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4008'. [ 241.355208][T14420] netlink: 'syz.1.4036': attribute type 3 has an invalid length. [ 241.362983][T14420] netlink: 'syz.1.4036': attribute type 3 has an invalid length. [ 241.917243][T14450] netlink: 'syz.1.4051': attribute type 11 has an invalid length. [ 242.402017][T14477] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.317032][T14527] vlan0: entered promiscuous mode [ 243.378407][T14533] __nla_validate_parse: 1 callbacks suppressed [ 243.378425][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4092'. [ 244.432862][T14596] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4123'. [ 244.445831][T14597] xt_hashlimit: max too large, truncated to 1048576 [ 245.550161][T14663] veth0_macvtap: left promiscuous mode [ 245.559779][T14663] macvtap0: entered promiscuous mode [ 245.565488][T14663] macvtap0: entered allmulticast mode [ 245.839876][T14679] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 246.462626][T14709] netlink: 'syz.1.4180': attribute type 1 has an invalid length. [ 246.552714][T14695] bridge0: port 3(batadv0) entered disabled state [ 246.559631][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.567315][T14695] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.847607][T14695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.884027][T14695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.169965][T14719] ..@ÿ: renamed from bond_slave_0 (while UP) [ 247.409273][T14742] xt_hashlimit: size too large, truncated to 1048576 [ 247.416855][T14742] xt_hashlimit: max too large, truncated to 1048576 [ 247.565846][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4196'. [ 247.903597][T14772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4206'. [ 247.919686][T14772] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4206'. [ 247.949741][T14772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4206'. [ 248.280044][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4216'. [ 248.620235][T14811] netlink: 'syz.1.4224': attribute type 1 has an invalid length. [ 248.630805][T14811] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4224'. [ 248.866452][T14822] netlink: 'syz.4.4231': attribute type 1 has an invalid length. [ 248.941299][T14825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4234'. [ 249.032819][T14833] lo: entered promiscuous mode [ 249.041330][T14833] lo: entered allmulticast mode [ 249.050795][T14833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.425451][T14911] netlink: 'syz.5.4276': attribute type 4 has an invalid length. [ 250.521415][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.535869][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.545431][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.553545][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.562138][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.618075][T14914] lo speed is unknown, defaulting to 1000 [ 250.961815][T14914] chnl_net:caif_netlink_parms(): no params data found [ 251.069439][T14934] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 251.321239][T14914] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.342465][T14914] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.376637][T14914] bridge_slave_0: entered allmulticast mode [ 251.387573][T14914] bridge_slave_0: entered promiscuous mode [ 251.420254][T14914] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.433757][T14914] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.461117][T14914] bridge_slave_1: entered allmulticast mode [ 251.480984][T14914] bridge_slave_1: entered promiscuous mode [ 251.660910][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4294'. [ 251.693589][T14914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.737366][T14914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.758827][T14960] openvswitch: netlink: Flow key attribute not present in set flow. [ 251.864302][T14963] IPVS: length: 209 != 24 [ 251.996305][T14969] ieee802154 phy0 wpan0: encryption failed: -90 [ 252.001386][T14914] team0: Port device team_slave_0 added [ 252.038297][T14914] team0: Port device team_slave_1 added [ 252.181440][T14975] netlink: 'syz.5.4302': attribute type 11 has an invalid length. [ 252.257595][T14914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.264580][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.340342][T14914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.366969][T14914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.383304][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.460971][T14914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.521475][T14986] netlink: 'syz.3.4308': attribute type 11 has an invalid length. [ 252.645015][ T5156] Bluetooth: hci6: command tx timeout [ 252.645302][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4310'. [ 252.683379][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4310'. [ 252.728750][T14914] hsr_slave_0: entered promiscuous mode [ 252.748371][T14914] hsr_slave_1: entered promiscuous mode [ 252.764227][T14914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.775612][T14914] Cannot create hsr debugfs directory [ 252.842776][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4315'. [ 252.880628][T14998] lo speed is unknown, defaulting to 1000 [ 252.974584][T15005] netlink: 'syz.5.4317': attribute type 33 has an invalid length. [ 253.002358][T15005] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4317'. [ 253.023865][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4319'. [ 253.041171][T15009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4319'. [ 253.712102][T14914] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.756958][T14914] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.777155][T15040] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.796151][T14914] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.827622][T14914] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.952230][T15054] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 254.184492][T14914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.231358][T14914] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.270032][T15070] netlink: 'syz.5.4344': attribute type 1 has an invalid length. [ 254.299225][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.306445][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.322424][T15070] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4344'. [ 254.344129][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.351343][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.417847][T15077] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4347'. [ 254.427367][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 254.471746][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4348'. [ 254.524286][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4348'. [ 254.729950][ T5156] Bluetooth: hci6: command tx timeout [ 255.027023][T15110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4358'. [ 255.144284][T14914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.392260][T15128] netlink: 'syz.4.4365': attribute type 21 has an invalid length. [ 255.421585][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4367'. [ 255.430812][T15128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4365'. [ 255.769733][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776316][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.271418][T14914] veth0_vlan: entered promiscuous mode [ 256.328934][T14914] veth1_vlan: entered promiscuous mode [ 256.437910][T14914] veth0_macvtap: entered promiscuous mode [ 256.470176][T14914] veth1_macvtap: entered promiscuous mode [ 256.556409][T15185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4383'. [ 256.569305][T14914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.659112][T14914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.698074][ T44] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.789060][T15208] xt_connbytes: Forcing CT accounting to be enabled [ 256.805258][ T5156] Bluetooth: hci6: command tx timeout [ 256.886415][T15208] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 257.045271][T15218] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.061049][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.245381][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.380122][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.401556][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.511452][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.545518][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.690612][T15247] netlink: 'syz.4.4396': attribute type 30 has an invalid length. [ 257.729835][T15247] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 257.775772][T15247] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 257.855930][T15254] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4259'. [ 258.369564][T15274] netlink: 'syz.3.4406': attribute type 16 has an invalid length. [ 258.405118][T15274] netlink: 'syz.3.4406': attribute type 17 has an invalid length. [ 258.527819][T15274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.536459][T15274] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.579657][T15274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.885039][ T5156] Bluetooth: hci6: command tx timeout [ 259.580734][T15336] __nla_validate_parse: 2 callbacks suppressed [ 259.580753][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4431'. [ 259.863910][T15349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4436'. [ 259.914189][T15349] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4436'. [ 259.971068][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4440'. [ 260.292793][T15376] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 261.113806][T15399] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4458'. [ 261.264158][T15403] openvswitch: netlink: IP tunnel dst address not specified [ 261.323728][T15388] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.331481][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.643886][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4467'. [ 261.649201][T15388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.678897][T15388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.834012][T15422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.841321][T15422] IPv6: NLM_F_CREATE should be set when creating new route [ 261.920146][T15424] xt_HMARK: spi-set and port-set can't be combined [ 262.057806][T15214] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.089775][T15214] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.144947][T15214] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.153877][T15214] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.495224][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4481'. [ 262.609796][T15457] netlink: 'syz.1.4485': attribute type 15 has an invalid length. [ 262.645257][T15457] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4485'. [ 262.686464][T15461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4486'. [ 262.974499][T15476] netlink: 'syz.4.4493': attribute type 1 has an invalid length. [ 262.993974][T15476] netlink: 'syz.4.4493': attribute type 1 has an invalid length. [ 263.024986][T15477] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 264.032640][T15530] bridge_slave_0: left allmulticast mode [ 264.052324][T15530] bridge_slave_0: left promiscuous mode [ 264.073891][T15530] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.118907][T15530] bridge_slave_1: left allmulticast mode [ 264.152051][T15530] bridge_slave_1: left promiscuous mode [ 264.185765][T15530] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.246374][T15530] bond0: (slave ..@ÿ): Releasing backup interface [ 264.264157][T15530] bond0: (slave bond_slave_1): Releasing backup interface [ 264.334036][T15530] team0: Port device team_slave_0 removed [ 264.351163][T15530] team0: Port device team_slave_1 removed [ 264.365654][T15549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4524'. [ 264.368312][T15530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.385104][T15530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.395639][T15530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.403205][T15530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.516131][T15540] lo speed is unknown, defaulting to 1000 [ 265.177060][T15585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.436252][T15593] xt_hashlimit: max too large, truncated to 1048576 [ 265.443288][T15593] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 265.863096][T15622] netlink: 'syz.3.4557': attribute type 21 has an invalid length. [ 265.925235][T15622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4557'. [ 265.960908][T15617] xt_CT: No such helper "pptp" [ 266.064992][T15629] netlink: 248 bytes leftover after parsing attributes in process `syz.6.4561'. [ 266.789780][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4574'. [ 267.055215][T15678] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 267.298115][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4585'. [ 267.350286][T15687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4585'. [ 267.492666][T15699] netlink: 'syz.4.4589': attribute type 32 has an invalid length. [ 267.529561][T15698] ip6erspan0: entered promiscuous mode [ 267.531122][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'. [ 267.588932][T15699] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 268.859104][T15772] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 269.119436][T15788] netlink: 'syz.5.4626': attribute type 3 has an invalid length. [ 269.243222][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4630'. [ 269.449882][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4634'. [ 269.474059][T15808] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4632'. [ 269.515354][T15808] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4632'. [ 269.753809][T15822] netlink: 'syz.6.4641': attribute type 4 has an invalid length. [ 269.778702][T15821] wireguard0: entered promiscuous mode [ 269.807471][T15821] wireguard0: entered allmulticast mode [ 269.862747][T15822] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 269.950997][T15825] lo speed is unknown, defaulting to 1000 [ 270.123677][T15838] syz.6.4648 uses old SIOCAX25GETINFO [ 270.561771][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.588038][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.654511][ T78] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.681855][ T78] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.025363][T15878] __nla_validate_parse: 8 callbacks suppressed [ 271.025381][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4662'. [ 271.087530][T15878] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 272.086292][T15933] lo speed is unknown, defaulting to 1000 [ 272.525597][T15959] netlink: 'syz.3.4694': attribute type 10 has an invalid length. [ 272.554176][T15959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4694'. [ 272.690243][T15959] batman_adv: batadv0: Adding interface: virt_wifi0 [ 272.697730][T15959] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.725557][T15959] batman_adv: batadv0: Interface activated: virt_wifi0 [ 272.821567][T15968] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4699'. [ 272.835639][T15968] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4699'. [ 272.866024][T15968] netlink: 81 bytes leftover after parsing attributes in process `syz.6.4699'. [ 273.345162][T15995] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4711'. [ 273.412116][T16000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4713'. [ 273.441452][T16002] lo: entered promiscuous mode [ 273.487073][T16002] tunl0: entered promiscuous mode [ 273.493625][T16002] gre0: entered promiscuous mode [ 273.523994][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4715'. [ 273.563933][T16002] gretap0: entered promiscuous mode [ 273.596607][T16002] erspan0: entered promiscuous mode [ 273.603707][T16002] ip_vti0: entered promiscuous mode [ 273.649303][T16002] ip6_vti0: entered promiscuous mode [ 273.688776][T16002] sit0: entered promiscuous mode [ 273.769060][T16002] ip6tnl0: entered promiscuous mode [ 273.804087][T16002] ip6gre0: entered promiscuous mode [ 273.812572][T16002] syz_tun: entered promiscuous mode [ 273.827872][T16002] ip6gretap0: entered promiscuous mode [ 273.859477][T16002] bridge0: entered promiscuous mode [ 273.880718][T16002] vcan0: entered promiscuous mode [ 273.898125][T16002] bond0: entered promiscuous mode [ 273.913581][T16002] bond_slave_0: entered promiscuous mode [ 273.939726][T16002] bond_slave_1: entered promiscuous mode [ 273.953492][T16002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.977296][T16002] team0: entered promiscuous mode [ 273.995804][T16002] team_slave_0: entered promiscuous mode [ 274.013894][T16002] team_slave_1: entered promiscuous mode [ 274.043508][T16002] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.069123][T16002] dummy0: entered promiscuous mode [ 274.093376][T16002] nlmon0: entered promiscuous mode [ 274.101211][T16002] caif0: entered promiscuous mode [ 274.112476][T16002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.171563][T16029] gretap1: entered promiscuous mode [ 274.177168][T16029] gretap1: entered allmulticast mode [ 274.189390][T16039] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 274.325011][T16043] netlink: 'syz.1.4729': attribute type 58 has an invalid length. [ 274.485727][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4733'. [ 274.491087][T16051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4732'. [ 274.919979][T16072] netlink: 'syz.1.4743': attribute type 1 has an invalid length. [ 275.462641][T16103] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.935389][T16131] netlink: 'syz.6.4771': attribute type 30 has an invalid length. [ 276.703936][T16175] netlink: 'syz.6.4791': attribute type 21 has an invalid length. [ 276.719981][T16176] xt_bpf: check failed: parse error [ 276.743493][T16175] __nla_validate_parse: 3 callbacks suppressed [ 276.743511][T16175] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4791'. [ 276.793801][T16175] netlink: 'syz.6.4791': attribute type 5 has an invalid length. [ 276.834505][T16175] netlink: 'syz.6.4791': attribute type 6 has an invalid length. [ 276.878547][T16175] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4791'. [ 277.280654][T16202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.362985][T16209] bond0: option use_carrier: invalid value (4) [ 277.454477][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4806'. [ 277.484331][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4808'. [ 277.911257][T16237] netlink: 'syz.1.4817': attribute type 10 has an invalid length. [ 277.947257][T16237] batman_adv: batadv0: Adding interface: netdevsim0 [ 277.965930][T16237] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.057974][T16237] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 278.574262][T16274] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4834'. [ 278.653997][T16278] netlink: 'syz.3.4835': attribute type 4 has an invalid length. [ 278.850338][T16288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.963851][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4843'. [ 278.985291][T16294] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.744492][T16338] openvswitch: netlink: IP tunnel TTL not specified. [ 279.919351][T16350] netlink: 'syz.5.4870': attribute type 1 has an invalid length. [ 279.948178][T16350] netlink: 'syz.5.4870': attribute type 2 has an invalid length. [ 280.005518][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4870'. [ 280.199906][T16364] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 280.328817][T16371] netlink: 'syz.4.4881': attribute type 10 has an invalid length. [ 280.549077][T16384] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 280.688484][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4890'. [ 280.697671][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4890'. [ 280.722703][T16390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.910806][T16396] netlink: 'syz.6.4894': attribute type 5 has an invalid length. [ 280.942403][T16398] netlink: 'syz.5.4895': attribute type 21 has an invalid length. [ 280.964076][T16400] netlink: 'syz.4.4896': attribute type 4 has an invalid length. [ 281.250190][T16417] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 281.553316][T16433] xt_hashlimit: invalid rate [ 281.824624][T16449] netlink: 'syz.1.4919': attribute type 1 has an invalid length. [ 281.851625][T16453] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4922'. [ 281.867789][T16452] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 281.905015][T16452] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 282.022720][T16459] openvswitch: netlink: Actions may not be safe on all matching packets [ 282.090701][T16461] xt_cluster: node mask cannot exceed total number of nodes [ 282.152852][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4928'. [ 282.350066][T16476] netlink: 'syz.6.4933': attribute type 5 has an invalid length. [ 282.400492][T16476] ip6erspan0: entered allmulticast mode [ 282.597372][T16489] lo: left promiscuous mode [ 282.602169][T16489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.274026][T16525] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 283.547378][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4959'. [ 283.785195][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'. [ 283.815131][T16555] netlink: 'syz.1.4966': attribute type 1 has an invalid length. [ 284.227103][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4976'. [ 284.307345][T16581] netlink: 'syz.1.4978': attribute type 13 has an invalid length. [ 284.354815][T16581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4978'. [ 284.488840][ T30] audit: type=1107 audit(1750829956.641:2): pid=16586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 284.827632][T16610] xt_nfacct: accounting object `syz1' does not exists [ 285.546299][T16649] validate_nla: 1 callbacks suppressed [ 285.546315][T16649] netlink: 'syz.1.5010': attribute type 10 has an invalid length. [ 285.632020][T16649] macvlan0: entered promiscuous mode [ 285.673431][T16649] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 286.192830][T16687] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.789799][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5043'. [ 287.180617][T16737] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 287.652822][T16765] @ÿ: renamed from veth0_vlan [ 287.730602][T16770] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5064'. [ 289.035469][T16835] netlink: 'syz.3.5093': attribute type 10 has an invalid length. [ 289.055013][T16835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5093'. [ 289.064202][T16837] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.5095'. [ 289.092771][T16835] team0: entered promiscuous mode [ 289.099248][T16835] team_slave_0: entered promiscuous mode [ 289.131239][T16835] team_slave_1: entered promiscuous mode [ 289.145052][T16835] team0: entered allmulticast mode [ 289.160800][T16835] team_slave_0: entered allmulticast mode [ 289.169781][T16835] team_slave_1: entered allmulticast mode [ 289.177392][T16835] bridge0: port 3(team0) entered blocking state [ 289.184462][T16835] bridge0: port 3(team0) entered disabled state [ 289.317312][T16850] xt_TCPMSS: Only works on TCP SYN packets [ 290.001970][T16888] netlink: 'syz.4.5119': attribute type 10 has an invalid length. [ 290.031011][T16888] team0: Device hsr_slave_0 failed to register rx_handler [ 290.170751][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5123'. [ 290.200206][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5123'. [ 290.232485][T16899] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453) [ 290.245020][T16899] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 291.811050][T16997] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 291.827064][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5168'. [ 291.874571][T16999] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5170'. [ 292.305608][T17017] xt_hashlimit: max too large, truncated to 1048576 [ 292.584258][T17035] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5186'. [ 292.683628][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5190'. [ 293.731431][T17102] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 293.892290][T17111] netlink: 'syz.4.5226': attribute type 1 has an invalid length. [ 294.023896][T17119] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5230'. [ 294.070152][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5230'. [ 294.111587][T17119] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5230'. [ 294.138139][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5230'. [ 294.156360][T17119] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5230'. [ 294.388772][T17139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5239'. [ 294.401459][T17139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5239'. [ 294.422575][T17139] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5239'. [ 294.567980][T17145] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5243'. [ 294.610385][T17145] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5243'. [ 295.545669][T17184] netlink: 'syz.6.5262': attribute type 1 has an invalid length. [ 296.376926][T17228] netlink: 'syz.5.5284': attribute type 6 has an invalid length. [ 296.402508][T17228] netlink: 'syz.5.5284': attribute type 5 has an invalid length. [ 296.921572][T17258] netlink: 'syz.1.5297': attribute type 1 has an invalid length. [ 298.757295][T17345] tc_dump_action: action bad kind [ 299.125072][ T5852] Bluetooth: hci6: command 0x0405 tx timeout [ 300.331995][T17435] pimreg: entered allmulticast mode [ 300.469640][T17445] C: renamed from team_slave_0 [ 300.522218][T17445] netlink: 'syz.1.5377': attribute type 1 has an invalid length. [ 300.569897][T17445] __nla_validate_parse: 33 callbacks suppressed [ 300.569913][T17445] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5377'. [ 300.595788][T17451] xt_l2tp: wrong L2TP version: 0 [ 300.605953][T17445] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 301.014523][T17474] netlink: 'syz.3.5389': attribute type 1 has an invalid length. [ 301.033729][T17474] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5389'. [ 301.465402][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5404'. [ 301.762516][T17516] xt_HMARK: spi-set and port-set can't be combined [ 301.771129][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5413'. [ 301.951300][T17528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5418'. [ 302.088192][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5420'. [ 302.362439][T17551] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5428'. [ 302.464139][T17557] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 302.502773][T17557] CPU: 0 UID: 0 PID: 17557 Comm: syz.5.5431 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 302.502800][T17557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.502816][T17557] Call Trace: [ 302.502827][T17557] [ 302.502835][T17557] dump_stack_lvl+0x189/0x250 [ 302.502886][T17557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.502912][T17557] ? __pfx__printk+0x10/0x10 [ 302.502931][T17557] ? kernfs_path_from_node+0x2c/0x260 [ 302.502952][T17557] ? kernfs_path_from_node+0x2c/0x260 [ 302.502969][T17557] ? kernfs_path_from_node+0x2c/0x260 [ 302.502987][T17557] ? kernfs_path_from_node+0x22c/0x260 [ 302.503002][T17557] ? kernfs_path_from_node+0x2c/0x260 [ 302.503023][T17557] sysfs_warn_dup+0x8e/0xa0 [ 302.503042][T17557] sysfs_do_create_link_sd+0xc0/0x110 [ 302.503062][T17557] device_add_class_symlinks+0x1cf/0x240 [ 302.503084][T17557] device_add+0x475/0xb50 [ 302.503108][T17557] wiphy_register+0x199a/0x26b0 [ 302.503144][T17557] ? __pfx_wiphy_register+0x10/0x10 [ 302.503163][T17557] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 302.503193][T17557] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 302.503219][T17557] ieee80211_register_hw+0x33e1/0x4120 [ 302.503258][T17557] ? ieee80211_register_hw+0x1401/0x4120 [ 302.503289][T17557] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 302.503315][T17557] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 302.503347][T17557] ? __hrtimer_setup+0x187/0x210 [ 302.503370][T17557] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 302.503395][T17557] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 302.503447][T17557] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 302.503463][T17557] ? trace_kmalloc+0x1f/0xd0 [ 302.503476][T17557] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 302.503493][T17557] ? kstrndup+0xbf/0x160 [ 302.503523][T17557] hwsim_new_radio_nl+0xea4/0x1b10 [ 302.503544][T17557] ? __pfx___nla_validate_parse+0x10/0x10 [ 302.503580][T17557] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 302.503605][T17557] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 302.503629][T17557] ? __nla_parse+0x40/0x60 [ 302.503655][T17557] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 302.503681][T17557] genl_family_rcv_msg_doit+0x215/0x300 [ 302.503706][T17557] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 302.503736][T17557] ? bpf_lsm_capable+0x9/0x20 [ 302.503750][T17557] ? security_capable+0x7e/0x2e0 [ 302.503778][T17557] genl_rcv_msg+0x60e/0x790 [ 302.503803][T17557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.503819][T17557] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 302.503853][T17557] netlink_rcv_skb+0x205/0x470 [ 302.503883][T17557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.503903][T17557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.503942][T17557] ? down_read+0x1ad/0x2e0 [ 302.503963][T17557] genl_rcv+0x28/0x40 [ 302.503984][T17557] netlink_unicast+0x758/0x8d0 [ 302.504016][T17557] netlink_sendmsg+0x805/0xb30 [ 302.504045][T17557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.504068][T17557] ? aa_sock_msg_perm+0x94/0x160 [ 302.504092][T17557] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.504110][T17557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.504131][T17557] __sock_sendmsg+0x219/0x270 [ 302.504153][T17557] ____sys_sendmsg+0x505/0x830 [ 302.504181][T17557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.504215][T17557] ? import_iovec+0x74/0xa0 [ 302.504238][T17557] ___sys_sendmsg+0x21f/0x2a0 [ 302.504261][T17557] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.504320][T17557] ? __fget_files+0x2a/0x420 [ 302.504336][T17557] ? __fget_files+0x3a0/0x420 [ 302.504365][T17557] __x64_sys_sendmsg+0x19b/0x260 [ 302.504392][T17557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.504426][T17557] ? rcu_is_watching+0x15/0xb0 [ 302.504453][T17557] ? do_syscall_64+0xbe/0x3b0 [ 302.504476][T17557] do_syscall_64+0xfa/0x3b0 [ 302.504492][T17557] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.504509][T17557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.504526][T17557] ? clear_bhb_loop+0x60/0xb0 [ 302.504548][T17557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.504565][T17557] RIP: 0033:0x7fe36578e929 [ 302.504591][T17557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.504605][T17557] RSP: 002b:00007fe3666d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.504628][T17557] RAX: ffffffffffffffda RBX: 00007fe3659b5fa0 RCX: 00007fe36578e929 [ 302.504641][T17557] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 302.504653][T17557] RBP: 00007fe365810b39 R08: 0000000000000000 R09: 0000000000000000 [ 302.504664][T17557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.504674][T17557] R13: 0000000000000000 R14: 00007fe3659b5fa0 R15: 00007fff357a5068 [ 302.504702][T17557] [ 303.180008][T17572] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 303.354152][T17581] mac80211_hwsim hwsim3 : renamed from wlan1 [ 303.901209][T17608] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 303.925027][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 303.941571][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5459'. [ 304.001080][T17616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5459'. [ 304.040578][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5459'. [ 304.256380][T17631] netlink: 'syz.1.5466': attribute type 9 has an invalid length. [ 304.445022][T17641] xt_hashlimit: size too large, truncated to 1048576 [ 304.451741][T17641] xt_hashlimit: overflow, try lower: 3/0 [ 304.760101][T17658] netlink: 'syz.3.5479': attribute type 10 has an invalid length. [ 304.840227][T17658] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 305.533243][T17693] netlink: 'syz.6.5496': attribute type 2 has an invalid length. [ 305.566421][T17694] sock: sock_timestamping_bind_phc: sock not bind to device [ 306.589230][T17742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.674988][T17750] __nla_validate_parse: 4 callbacks suppressed [ 306.675005][T17750] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5522'. [ 307.044448][T17770] netlink: 'syz.5.5529': attribute type 1 has an invalid length. [ 307.208632][T17779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.451356][T17792] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5542'. [ 308.018389][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5557'. [ 308.225685][T17838] netlink: 'syz.6.5562': attribute type 3 has an invalid length. [ 308.458936][T17851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.648805][T17863] netlink: 'syz.5.5573': attribute type 15 has an invalid length. [ 308.701251][T17864] netlink: 'syz.6.5572': attribute type 21 has an invalid length. [ 308.742214][T17864] netlink: 'syz.6.5572': attribute type 6 has an invalid length. [ 308.779936][T17864] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5572'. [ 309.034121][T17884] netlink: 'syz.3.5585': attribute type 13 has an invalid length. [ 309.094689][T17887] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5586'. [ 309.468849][T17884] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 309.572544][T17896] dummy0: mtu less than device minimum [ 309.619122][T17892] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 309.933834][T17912] netlink: 'syz.5.5599': attribute type 2 has an invalid length. [ 310.116110][T17922] netlink: 'syz.5.5604': attribute type 10 has an invalid length. [ 310.184342][T17922] dummy0: left promiscuous mode [ 310.194614][T17922] dummy0: entered promiscuous mode [ 310.204415][T17922] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.384960][T17934] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5610'. [ 310.586209][T17948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5617'. [ 310.808423][T17960] openvswitch: netlink: Missing valid actions attribute. [ 310.824371][T17960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.328649][T17991] netlink: 'syz.5.5637': attribute type 1 has an invalid length. [ 311.357319][T17991] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5637'. [ 311.670658][T18012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.751490][T18016] nft_compat: unsupported protocol 0 [ 313.433372][T18104] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5684'. [ 313.648604][T18115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5690'. [ 313.660216][T18115] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 314.003074][T18133] dvmrp0: entered allmulticast mode [ 314.284600][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5708'. [ 314.527308][T18161] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5713'. [ 314.955707][T18184] netlink: 'syz.6.5723': attribute type 13 has an invalid length. [ 315.273357][T18184] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.281220][T18184] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.535622][T18184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.558193][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5734'. [ 315.571638][T18184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.062631][ T44] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.097429][ T44] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.190090][ T44] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.222741][ T44] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.445117][T18242] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.5745'. [ 317.013269][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5759'. [ 317.032223][T18274] netlink: 'syz.4.5759': attribute type 5 has an invalid length. [ 317.052757][T18274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5759'. [ 317.211250][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.223099][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.733971][T18260] syz.3.5754: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 318.755147][T18260] CPU: 0 UID: 0 PID: 18260 Comm: syz.3.5754 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 318.755172][T18260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.755182][T18260] Call Trace: [ 318.755190][T18260] [ 318.755197][T18260] dump_stack_lvl+0x189/0x250 [ 318.755229][T18260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.755260][T18260] ? __pfx__printk+0x10/0x10 [ 318.755278][T18260] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 318.755298][T18260] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 318.755318][T18260] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 318.755339][T18260] warn_alloc+0x214/0x310 [ 318.755365][T18260] ? __pfx_warn_alloc+0x10/0x10 [ 318.755395][T18260] ? __get_vm_area_node+0x28f/0x300 [ 318.755414][T18260] ? veth_dev_init+0x363/0x570 [ 318.755442][T18260] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 318.755494][T18260] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 318.755512][T18260] ? __kasan_kmalloc_large+0x1c/0xa0 [ 318.755534][T18260] ? rcu_is_watching+0x15/0xb0 [ 318.755560][T18260] ? veth_dev_init+0x363/0x570 [ 318.755581][T18260] ? veth_dev_init+0x363/0x570 [ 318.755601][T18260] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 318.755621][T18260] ? veth_dev_init+0x363/0x570 [ 318.755651][T18260] veth_dev_init+0x363/0x570 [ 318.755682][T18260] register_netdevice+0x6bc/0x1ae0 [ 318.755711][T18260] ? snprintf+0xda/0x120 [ 318.755737][T18260] ? __pfx_register_netdevice+0x10/0x10 [ 318.755754][T18260] ? __pfx_snprintf+0x10/0x10 [ 318.755777][T18260] ? __asan_memset+0x22/0x50 [ 318.755799][T18260] ? dev_addr_mod+0x2ce/0x3d0 [ 318.755829][T18260] veth_newlink+0x5cc/0xa50 [ 318.755855][T18260] ? __pfx_veth_newlink+0x10/0x10 [ 318.755881][T18260] ? __pfx_css_rstat_updated+0x10/0x10 [ 318.755970][T18260] ? validate_linkmsg+0x765/0x950 [ 318.755999][T18260] ? __pfx_veth_newlink+0x10/0x10 [ 318.756024][T18260] rtnl_newlink_create+0x30d/0xb00 [ 318.756055][T18260] ? __pfx_aa_get_newest_label+0x10/0x10 [ 318.756082][T18260] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 318.756102][T18260] ? rtnl_newlink+0x8db/0x1c70 [ 318.756123][T18260] ? __pfx___mutex_lock+0x10/0x10 [ 318.756151][T18260] ? ns_capable+0x8a/0xf0 [ 318.756179][T18260] rtnl_newlink+0x16d6/0x1c70 [ 318.756216][T18260] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.756254][T18260] ? __lock_acquire+0xab9/0xd20 [ 318.756341][T18260] ? __lock_acquire+0xab9/0xd20 [ 318.756387][T18260] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.756407][T18260] rtnetlink_rcv_msg+0x7cc/0xb70 [ 318.756433][T18260] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 318.756453][T18260] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.756492][T18260] netlink_rcv_skb+0x205/0x470 [ 318.756515][T18260] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.756539][T18260] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.756574][T18260] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.756596][T18260] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.756623][T18260] netlink_unicast+0x758/0x8d0 [ 318.756655][T18260] netlink_sendmsg+0x805/0xb30 [ 318.756688][T18260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.756713][T18260] ? aa_sock_msg_perm+0x94/0x160 [ 318.756737][T18260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.756759][T18260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.756782][T18260] __sock_sendmsg+0x219/0x270 [ 318.756806][T18260] ____sys_sendmsg+0x505/0x830 [ 318.756837][T18260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.756871][T18260] ? import_iovec+0x74/0xa0 [ 318.756893][T18260] ___sys_sendmsg+0x21f/0x2a0 [ 318.756920][T18260] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.756985][T18260] ? __fget_files+0x2a/0x420 [ 318.757002][T18260] ? __fget_files+0x3a0/0x420 [ 318.757033][T18260] __x64_sys_sendmsg+0x19b/0x260 [ 318.757061][T18260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.757098][T18260] ? rcu_is_watching+0x15/0xb0 [ 318.757128][T18260] ? do_syscall_64+0xbe/0x3b0 [ 318.757152][T18260] do_syscall_64+0xfa/0x3b0 [ 318.757168][T18260] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.757186][T18260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.757204][T18260] ? clear_bhb_loop+0x60/0xb0 [ 318.757226][T18260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.757249][T18260] RIP: 0033:0x7f4dd058e929 [ 318.757266][T18260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.757281][T18260] RSP: 002b:00007f4dd13d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.757300][T18260] RAX: ffffffffffffffda RBX: 00007f4dd07b5fa0 RCX: 00007f4dd058e929 [ 318.757314][T18260] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 318.757325][T18260] RBP: 00007f4dd0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 318.757337][T18260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.757347][T18260] R13: 0000000000000000 R14: 00007f4dd07b5fa0 R15: 00007ffe0cc2e5a8 [ 318.757377][T18260] [ 318.757392][T18260] Mem-Info: [ 319.231334][T18260] active_anon:6362 inactive_anon:0 isolated_anon:0 [ 319.231334][T18260] active_file:1137 inactive_file:39920 isolated_file:0 [ 319.231334][T18260] unevictable:768 dirty:221 writeback:0 [ 319.231334][T18260] slab_reclaimable:11513 slab_unreclaimable:190964 [ 319.231334][T18260] mapped:39571 shmem:1391 pagetables:1368 [ 319.231334][T18260] sec_pagetables:0 bounce:0 [ 319.231334][T18260] kernel_misc_reclaimable:0 [ 319.231334][T18260] free:1211220 free_pcp:13797 free_cma:0 [ 319.279265][T18260] Node 0 active_anon:25448kB inactive_anon:0kB active_file:4548kB inactive_file:159480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158284kB dirty:848kB writeback:0kB shmem:4028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13744kB pagetables:5344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 319.313225][T18260] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 319.346223][T18260] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.376679][T18260] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 319.382479][T18260] Node 0 DMA32 free:924788kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25404kB inactive_anon:0kB active_file:4548kB inactive_file:157656kB unevictable:1536kB writepending:848kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:38468kB local_pcp:18508kB free_cma:0kB [ 319.416696][T18260] lowmem_reserve[]: 0 0 1 1 1 [ 319.421434][T18260] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 319.452153][T18260] lowmem_reserve[]: 0 0 0 0 0 [ 319.457878][T18260] Node 1 Normal free:3904660kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:10720kB free_cma:0kB [ 319.489765][T18260] lowmem_reserve[]: 0 0 0 0 0 [ 319.494504][T18260] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 319.507863][T18260] Node 0 DMA32: 763*4kB (UM) 413*8kB (UM) 38*16kB (ME) 190*32kB (UME) 574*64kB (UM) 312*128kB (UME) 74*256kB (UM) 48*512kB (UME) 37*1024kB (UM) 2*2048kB (U) 183*4096kB (M) = 924788kB [ 319.527847][T18260] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 319.540086][T18260] Node 1 Normal: 167*4kB (UM) 49*8kB (UME) 53*16kB (UME) 127*32kB (UME) 39*64kB (UME) 9*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3904660kB [ 319.559281][T18260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.568944][T18260] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 319.578376][T18260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.587974][T18260] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 319.597294][T18260] 42446 total pagecache pages [ 319.601956][T18260] 0 pages in swap cache [ 319.606190][T18260] Free swap = 124996kB [ 319.610340][T18260] Total swap = 124996kB [ 319.614485][T18260] 2097051 pages RAM [ 319.618426][T18260] 0 pages HighMem/MovableOnly [ 319.623102][T18260] 424693 pages reserved [ 319.627303][T18260] 0 pages cma reserved [ 320.767776][T18262] dvmrp0: entered allmulticast mode [ 320.806039][T18274] geneve3: entered promiscuous mode [ 320.811274][T18274] geneve3: entered allmulticast mode [ 320.896998][ T44] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 256 - 0 [ 320.924416][ T44] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 320.965403][T18306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5770'. [ 320.978708][ T44] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 321.005737][ T44] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 321.014719][T18308] ip6t_srh: unknown srh invflags 4449 [ 321.020754][T18306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5770'. [ 321.086628][T18306] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.5770'. [ 321.104878][T18314] netlink: 'syz.6.5773': attribute type 21 has an invalid length. [ 321.113259][T18312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5774'. [ 321.309674][T18324] xt_TCPMSS: Only works on TCP SYN packets [ 321.374550][T18328] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5781'. [ 321.539689][T18336] netlink: 'syz.4.5785': attribute type 2 has an invalid length. [ 321.563425][T18336] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5785'. [ 321.749010][T18345] netlink: 'syz.6.5789': attribute type 4 has an invalid length. [ 322.165714][T18374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5802'. [ 322.185238][T18374] netlink: 'syz.3.5802': attribute type 1 has an invalid length. [ 322.222440][T18374] netlink: 'syz.3.5802': attribute type 2 has an invalid length. [ 322.263156][T18374] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5802'. [ 322.657378][T18401] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5816'. [ 323.105300][T18428] Cannot find set identified by id 1 to match [ 323.503546][T18448] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 323.690573][T18461] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5844'. [ 324.385922][T18495] wg1 speed is unknown, defaulting to 1000 [ 324.391836][T18495] wg1 speed is unknown, defaulting to 1000 [ 324.435219][T18495] wg1 speed is unknown, defaulting to 1000 [ 324.490171][T18495] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 324.505387][T18503] netlink: 'syz.5.5865': attribute type 21 has an invalid length. [ 324.653805][T18509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 324.666769][T18495] wg1 speed is unknown, defaulting to 1000 [ 324.683271][T18511] netlink: 'syz.5.5868': attribute type 1 has an invalid length. [ 324.708821][T18495] wg1 speed is unknown, defaulting to 1000 [ 324.731611][T18495] wg1 speed is unknown, defaulting to 1000 [ 324.756684][T18495] wg1 speed is unknown, defaulting to 1000 [ 324.787464][T18495] wg1 speed is unknown, defaulting to 1000 [ 324.835281][T18495] wg1 speed is unknown, defaulting to 1000 [ 324.842964][T18495] wg1 speed is unknown, defaulting to 1000 [ 325.993390][T18583] xt_recent: Unsupported userspace flags (00000048) [ 326.017353][T18587] netlink: 'syz.3.5907': attribute type 21 has an invalid length. [ 326.093140][T18587] __nla_validate_parse: 4 callbacks suppressed [ 326.093156][T18587] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5907'. [ 326.160592][T18587] netlink: 'syz.3.5907': attribute type 5 has an invalid length. [ 326.189679][T18587] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5907'. [ 326.799371][T18630] netlink: 'syz.5.5928': attribute type 3 has an invalid length. [ 326.850388][T18630] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5928'. [ 326.891566][T18633] ip6tnl1: entered promiscuous mode [ 326.902280][T18633] ip6tnl1: entered allmulticast mode [ 326.911272][T18637] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5931'. [ 327.048998][T18643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.213537][T18652] netlink: 'syz.1.5939': attribute type 1 has an invalid length. [ 327.220000][T18648] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 327.412739][T18663] netlink: del zone limit has 8 unknown bytes [ 327.757600][T18676] Cannot find del_set index 4 as target [ 327.900483][T18679] wireguard0: entered promiscuous mode [ 327.914937][T18679] wireguard0: entered allmulticast mode [ 327.997802][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5956'. [ 328.224479][T18695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5959'. [ 328.277225][T18701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5962'. [ 328.301597][T18695] netlink: 'syz.3.5959': attribute type 1 has an invalid length. [ 328.394898][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5965'. [ 328.421953][T18707] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5965'. [ 328.454908][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5965'. [ 328.844975][T18731] netlink: 'syz.1.5976': attribute type 5 has an invalid length. [ 328.908335][T18731] bridge6: entered promiscuous mode [ 328.925544][T18731] bridge6: entered allmulticast mode [ 329.216370][T18746] xt_CT: No such helper "netbios-ns" [ 329.754733][T18781] netlink: 'syz.1.6000': attribute type 3 has an invalid length. [ 329.998183][T18794] xt_cgroup: xt_cgroup: no path or classid specified [ 330.245310][ T5852] Bluetooth: hci6: command 0x0405 tx timeout [ 331.752883][T18897] __nla_validate_parse: 7 callbacks suppressed [ 331.752902][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6054'. [ 331.805291][T18897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6054'. [ 332.258171][T18924] netlink: 'syz.4.6067': attribute type 21 has an invalid length. [ 332.283332][T18924] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6067'. [ 332.295042][T18926] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.304087][T18924] netlink: 'syz.4.6067': attribute type 4 has an invalid length. [ 332.322716][T18924] netlink: 'syz.4.6067': attribute type 5 has an invalid length. [ 332.348418][T18924] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6067'. [ 332.355657][T18929] netlink: 'syz.3.6069': attribute type 11 has an invalid length. [ 332.408701][T18929] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6069'. [ 332.486887][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6071'. [ 332.776244][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6079'. [ 332.953753][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6084'. [ 333.000906][T18965] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.6087'. [ 333.012751][T18966] netlink: 'syz.1.6086': attribute type 2 has an invalid length. [ 333.057740][T18966] netlink: 119 bytes leftover after parsing attributes in process `syz.1.6086'. [ 334.851520][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.641430][T19117] bridge1: entered promiscuous mode [ 335.660075][T19117] bridge1: entered allmulticast mode [ 336.046934][T19137] IPv6: syztnl1: Disabled Multicast RS [ 336.390076][T19158] tipc: Can't bind to reserved service type 1 [ 337.417565][T19217] __nla_validate_parse: 3 callbacks suppressed [ 337.417584][T19217] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6203'. [ 337.793690][T19238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.817554][T19239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6212'. [ 338.000471][T19248] netlink: 'syz.4.6219': attribute type 1 has an invalid length. [ 338.025299][T19248] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6219'. [ 338.154063][T19251] veth3: entered promiscuous mode [ 338.297812][T19261] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6226'. [ 338.362393][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6228'. [ 338.888241][T19296] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.6243'. [ 339.071418][T19310] netlink: 'syz.4.6251': attribute type 5 has an invalid length. [ 339.702567][T19346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6268'. [ 339.765124][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 340.243878][T19378] netlink: 'syz.4.6284': attribute type 9 has an invalid length. [ 340.307469][T19380] netlink: 'syz.1.6287': attribute type 5 has an invalid length. [ 340.362218][T19380] ip6erspan0: entered promiscuous mode [ 340.635824][T19394] netlink: 'syz.1.6293': attribute type 8 has an invalid length. [ 340.645120][T19397] netlink: 'syz.3.6292': attribute type 1 has an invalid length. [ 340.672716][T19397] netlink: 'syz.3.6292': attribute type 2 has an invalid length. [ 340.754484][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6296'. [ 340.854320][T19407] netlink: 'syz.6.6298': attribute type 29 has an invalid length. [ 340.894287][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6298'. [ 340.929120][T19410] netlink: 288 bytes leftover after parsing attributes in process `syz.5.6300'. [ 340.964198][T19416] netlink: 'syz.3.6303': attribute type 1 has an invalid length. [ 341.500007][T19446] netlink: 'syz.1.6317': attribute type 1 has an invalid length. [ 342.224310][T19486] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 342.257242][T19486] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 342.290043][T19486] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 342.830567][T19526] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 342.945845][T19532] __nla_validate_parse: 4 callbacks suppressed [ 342.945863][T19532] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6361'. [ 343.046054][T19535] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 343.936337][T19574] xt_l2tp: missing protocol rule (udp|l2tpip) [ 343.945781][T19575] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 344.075626][T19578] SET target dimension over the limit! [ 344.516822][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 344.560656][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 344.634740][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 344.692151][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 344.731674][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 344.774491][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 344.842074][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 344.905475][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 344.928256][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 345.409799][T19641] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 345.738054][T19659] xt_ipcomp: unknown flags F7 [ 345.745738][T19657] validate_nla: 5 callbacks suppressed [ 345.745752][T19657] netlink: 'syz.1.6416': attribute type 1 has an invalid length. [ 346.555047][T19705] delete_channel: no stack [ 347.388257][T19744] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 347.399940][T19745] batadv1: entered promiscuous mode [ 347.437491][T19745] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 347.733368][T19761] netlink: 'syz.5.6460': attribute type 11 has an invalid length. [ 347.891451][T19763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.396420][T19798] netlink: 'syz.3.6477': attribute type 1 has an invalid length. [ 348.423716][T19798] __nla_validate_parse: 46 callbacks suppressed [ 348.423731][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6477'. [ 349.278226][T19842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6500'. [ 349.352171][T19849] netlink: 596 bytes leftover after parsing attributes in process `syz.6.6504'. [ 349.357997][T19850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6501'. [ 350.049149][T19882] gretap2: entered allmulticast mode [ 350.142772][T19892] ip6gre1: entered promiscuous mode [ 350.365706][T19904] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6531'. [ 350.485015][T19910] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6534'. [ 350.762170][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6542'. [ 351.321801][T19949] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 351.680616][T19959] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6557'. [ 352.181996][T19980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6566'. [ 352.213619][T19980] netlink: 37 bytes leftover after parsing attributes in process `syz.1.6566'. [ 352.699254][T20005] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 352.731630][T20011] netlink: 'syz.4.6579': attribute type 11 has an invalid length. [ 353.609597][T20053] __nla_validate_parse: 2 callbacks suppressed [ 353.609620][T20053] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6596'. [ 353.702448][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6600'. [ 353.748280][T20057] netlink: 'syz.3.6600': attribute type 1 has an invalid length. [ 353.843349][T20064] ±ÿ: renamed from team_slave_1 [ 354.388889][T20093] netlink: 'syz.3.6617': attribute type 11 has an invalid length. [ 354.554433][T20103] netlink: 'syz.3.6622': attribute type 12 has an invalid length. [ 354.563008][T20103] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.6622'. [ 354.933849][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6629'. [ 354.960840][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6632'. [ 354.972659][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6632'. [ 354.982193][T20118] openvswitch: netlink: Missing key (keys=40, expected=100) [ 354.991032][T20123] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6632'. [ 355.650029][T20160] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6648'. [ 355.863575][T20173] netlink: 'syz.5.6655': attribute type 1 has an invalid length. [ 355.890948][T20173] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6655'. [ 356.274962][T20192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6664'. [ 356.909079][T20228] netlink: 'syz.6.6683': attribute type 32 has an invalid length. [ 356.942891][T20233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.273619][T20250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.670573][T20273] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 357.782388][T20278] IPv6: sit1: Disabled Multicast RS [ 358.192524][T20301] netlink: 'syz.5.6712': attribute type 4 has an invalid length. [ 358.294515][T20309] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 358.746606][T20331] SET target dimension over the limit! [ 358.996839][T20346] __nla_validate_parse: 4 callbacks suppressed [ 358.996858][T20346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6735'. [ 359.499376][T20374] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 359.716896][T20388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.812316][T20395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6756'. [ 360.131720][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6763'. [ 360.379500][T20424] netlink: 'syz.5.6769': attribute type 2 has an invalid length. [ 360.401765][T20426] x_tables: duplicate entry at hook 1 [ 360.572360][T20432] netlink: 'syz.4.6774': attribute type 1 has an invalid length. [ 360.604532][T20432] netlink: 784 bytes leftover after parsing attributes in process `syz.4.6774'. [ 360.731900][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6778'. [ 360.793162][T20444] netlink: 'syz.6.6779': attribute type 8 has an invalid length. [ 361.125116][T20462] netlink: 'syz.3.6789': attribute type 1 has an invalid length. [ 361.133373][T20462] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6789'. [ 361.134859][T20465] xt_policy: too many policy elements [ 361.171029][T20469] netlink: get zone limit has 4 unknown bytes [ 361.303896][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6794'. [ 361.339587][T20477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6793'. [ 361.717658][T20487] bond4: entered allmulticast mode [ 361.763478][T20494] IPv6: sit2: Disabled Multicast RS [ 361.928182][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6809'. [ 362.117645][T20519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6815'. [ 363.255981][T20588] netlink: 'syz.5.6849': attribute type 11 has an invalid length. [ 363.463611][T20599] netlink: 'syz.4.6855': attribute type 30 has an invalid length. [ 363.471629][T20597] netlink: 'syz.1.6853': attribute type 23 has an invalid length. [ 364.026968][T20625] __nla_validate_parse: 5 callbacks suppressed [ 364.026987][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6868'. [ 364.100166][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6868'. [ 364.449514][T20648] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 366.018318][T20660] warn_alloc: 1 callbacks suppressed [ 366.018335][T20660] syz.6.6887: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 366.043959][T20660] CPU: 1 UID: 0 PID: 20660 Comm: syz.6.6887 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 366.043982][T20660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.043994][T20660] Call Trace: [ 366.044002][T20660] [ 366.044010][T20660] dump_stack_lvl+0x189/0x250 [ 366.044044][T20660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.044071][T20660] ? __pfx__printk+0x10/0x10 [ 366.044091][T20660] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 366.044111][T20660] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 366.044132][T20660] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 366.044153][T20660] warn_alloc+0x214/0x310 [ 366.044180][T20660] ? __pfx_warn_alloc+0x10/0x10 [ 366.044210][T20660] ? __get_vm_area_node+0x28f/0x300 [ 366.044229][T20660] ? veth_dev_init+0x363/0x570 [ 366.044265][T20660] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 366.044316][T20660] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 366.044333][T20660] ? __kasan_kmalloc_large+0x1c/0xa0 [ 366.044355][T20660] ? rcu_is_watching+0x15/0xb0 [ 366.044382][T20660] ? veth_dev_init+0x363/0x570 [ 366.044403][T20660] ? veth_dev_init+0x363/0x570 [ 366.044423][T20660] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 366.044443][T20660] ? veth_dev_init+0x363/0x570 [ 366.044473][T20660] veth_dev_init+0x363/0x570 [ 366.044502][T20660] register_netdevice+0x6bc/0x1ae0 [ 366.044530][T20660] ? snprintf+0xda/0x120 [ 366.044556][T20660] ? __pfx_register_netdevice+0x10/0x10 [ 366.044573][T20660] ? __pfx_snprintf+0x10/0x10 [ 366.044596][T20660] ? __asan_memset+0x22/0x50 [ 366.044616][T20660] ? dev_addr_mod+0x2ce/0x3d0 [ 366.044644][T20660] veth_newlink+0x5cc/0xa50 [ 366.044666][T20660] ? __pfx_veth_newlink+0x10/0x10 [ 366.044689][T20660] ? __pfx_css_rstat_updated+0x10/0x10 [ 366.044779][T20660] ? validate_linkmsg+0x765/0x950 [ 366.044807][T20660] ? __pfx_veth_newlink+0x10/0x10 [ 366.044831][T20660] rtnl_newlink_create+0x30d/0xb00 [ 366.044860][T20660] ? __pfx_aa_get_newest_label+0x10/0x10 [ 366.044887][T20660] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 366.044907][T20660] ? rtnl_newlink+0x8db/0x1c70 [ 366.044932][T20660] ? __pfx___mutex_lock+0x10/0x10 [ 366.044962][T20660] ? ns_capable+0x8a/0xf0 [ 366.044990][T20660] rtnl_newlink+0x16d6/0x1c70 [ 366.045029][T20660] ? __pfx_rtnl_newlink+0x10/0x10 [ 366.045059][T20660] ? __lock_acquire+0xab9/0xd20 [ 366.045152][T20660] ? __lock_acquire+0xab9/0xd20 [ 366.045201][T20660] ? __pfx_rtnl_newlink+0x10/0x10 [ 366.045220][T20660] rtnetlink_rcv_msg+0x7cc/0xb70 [ 366.045244][T20660] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 366.045271][T20660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.045308][T20660] netlink_rcv_skb+0x205/0x470 [ 366.045332][T20660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.045355][T20660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.045391][T20660] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.045413][T20660] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.045440][T20660] netlink_unicast+0x758/0x8d0 [ 366.045473][T20660] netlink_sendmsg+0x805/0xb30 [ 366.045504][T20660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.045530][T20660] ? aa_sock_msg_perm+0x94/0x160 [ 366.045554][T20660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.045576][T20660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.045598][T20660] __sock_sendmsg+0x219/0x270 [ 366.045622][T20660] ____sys_sendmsg+0x505/0x830 [ 366.045653][T20660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.045688][T20660] ? import_iovec+0x74/0xa0 [ 366.045710][T20660] ___sys_sendmsg+0x21f/0x2a0 [ 366.045738][T20660] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.045801][T20660] ? __fget_files+0x2a/0x420 [ 366.045819][T20660] ? __fget_files+0x3a0/0x420 [ 366.045850][T20660] __x64_sys_sendmsg+0x19b/0x260 [ 366.045877][T20660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.045913][T20660] ? rcu_is_watching+0x15/0xb0 [ 366.045943][T20660] ? do_syscall_64+0xbe/0x3b0 [ 366.045963][T20660] do_syscall_64+0xfa/0x3b0 [ 366.045979][T20660] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.045996][T20660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.046012][T20660] ? clear_bhb_loop+0x60/0xb0 [ 366.046033][T20660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.046051][T20660] RIP: 0033:0x7f160f18e929 [ 366.046066][T20660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.046081][T20660] RSP: 002b:00007f160ffd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.046100][T20660] RAX: ffffffffffffffda RBX: 00007f160f3b5fa0 RCX: 00007f160f18e929 [ 366.046112][T20660] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 366.046122][T20660] RBP: 00007f160f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 366.046132][T20660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.046143][T20660] R13: 0000000000000000 R14: 00007f160f3b5fa0 R15: 00007ffce1bdd1c8 [ 366.046171][T20660] [ 366.515500][T20660] Mem-Info: [ 366.518632][T20660] active_anon:6409 inactive_anon:0 isolated_anon:0 [ 366.518632][T20660] active_file:1137 inactive_file:39941 isolated_file:0 [ 366.518632][T20660] unevictable:768 dirty:281 writeback:0 [ 366.518632][T20660] slab_reclaimable:11805 slab_unreclaimable:192720 [ 366.518632][T20660] mapped:39519 shmem:1392 pagetables:1364 [ 366.518632][T20660] sec_pagetables:0 bounce:0 [ 366.518632][T20660] kernel_misc_reclaimable:0 [ 366.518632][T20660] free:1210196 free_pcp:10778 free_cma:0 [ 366.572593][T20660] Node 0 active_anon:25636kB inactive_anon:0kB active_file:4548kB inactive_file:159564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158076kB dirty:1124kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13868kB pagetables:5328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 366.607009][T20660] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 366.639047][T20660] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.675687][T20660] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 366.681513][T20660] Node 0 DMA32 free:919980kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25692kB inactive_anon:0kB active_file:4548kB inactive_file:157740kB unevictable:1536kB writepending:1124kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:27356kB local_pcp:13768kB free_cma:0kB [ 366.714101][T20660] lowmem_reserve[]: 0 0 1 1 1 [ 366.718906][T20660] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 366.747989][T20660] lowmem_reserve[]: 0 0 0 0 0 [ 366.752710][T20660] Node 1 Normal free:3905428kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16384kB local_pcp:9952kB free_cma:0kB [ 366.784625][T20660] lowmem_reserve[]: 0 0 0 0 0 [ 366.789624][T20660] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 366.802383][T20660] Node 0 DMA32: 195*4kB (U) 535*8kB (UM) 224*16kB (UME) 455*32kB (UM) 427*64kB (UME) 316*128kB (UM) 84*256kB (UM) 47*512kB (UME) 39*1024kB (UME) 3*2048kB (UME) 180*4096kB (M) = 919908kB [ 366.821599][T20660] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 366.833616][T20660] Node 1 Normal: 167*4kB (UM) 49*8kB (UME) 53*16kB (UME) 131*32kB (UME) 43*64kB (UME) 12*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3905428kB [ 366.852993][T20660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.862674][T20660] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.872533][T20660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.882113][T20660] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.892094][T20660] 42466 total pagecache pages [ 366.896922][T20660] 0 pages in swap cache [ 366.901070][T20660] Free swap = 124996kB [ 366.905378][T20660] Total swap = 124996kB [ 366.909530][T20660] 2097051 pages RAM [ 366.913311][T20660] 0 pages HighMem/MovableOnly [ 366.918019][T20660] 424693 pages reserved [ 366.922166][T20660] 0 pages cma reserved [ 368.162822][T20674] netlink: 'syz.1.6890': attribute type 10 has an invalid length. [ 368.191034][T20679] veth4: entered allmulticast mode [ 368.451775][T20695] netlink: 'syz.4.6899': attribute type 12 has an invalid length. [ 368.543145][T20699] openvswitch: netlink: IP tunnel dst address not specified [ 368.567120][T20701] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6902'. [ 369.281158][T20745] netlink: 'syz.6.6921': attribute type 39 has an invalid length. [ 369.402156][T20753] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6928'. [ 369.432959][T20753] netlink: 'syz.5.6928': attribute type 1 has an invalid length. [ 369.719641][T20769] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6934'. [ 369.758487][T20769] openvswitch: netlink: Missing key (keys=40, expected=80) [ 369.967281][T20781] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6940'. [ 370.313374][T20795] bridge10: entered promiscuous mode [ 371.165046][T20835] xt_hashlimit: size too large, truncated to 1048576 [ 371.204989][T20835] xt_hashlimit: max too large, truncated to 1048576 [ 371.751181][T20869] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6982'. [ 371.795470][T20869] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6982'. [ 371.820567][T20869] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6982'. [ 372.211232][T20897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.322416][T20900] netlink: 'syz.1.6999': attribute type 10 has an invalid length. [ 372.369434][T20900] batman_adv: batadv0: Removing interface: netdevsim0 [ 372.399890][T20900] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 372.447188][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7004'. [ 372.502897][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7005'. [ 372.525062][T20912] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7005'. [ 372.755978][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7013'. [ 372.902700][T20938] ksmbd: Unknown IPC event: 3, ignore. [ 373.241887][T20955] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 373.801188][T20986] netlink: 'syz.3.7041': attribute type 4 has an invalid length. [ 374.352725][T21018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.842728][T21040] netlink: 'syz.4.7068': attribute type 3 has an invalid length. [ 374.899290][T21040] __nla_validate_parse: 3 callbacks suppressed [ 374.899306][T21040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7068'. [ 375.063140][T21050] netlink: 'syz.6.7072': attribute type 2 has an invalid length. [ 375.105206][T21050] netlink: 'syz.6.7072': attribute type 1 has an invalid length. [ 375.264525][T21060] _ÐZ`Ô€@: entered promiscuous mode [ 375.335537][T21065] netlink: 'syz.3.7080': attribute type 11 has an invalid length. [ 375.358212][T21065] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7080'. [ 375.615074][ T5852] Bluetooth: hci6: command 0x0405 tx timeout [ 376.252825][T21119] netlink: 'syz.4.7107': attribute type 1 has an invalid length. [ 376.285069][T21119] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7107'. [ 376.677355][T21145] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7120'. [ 376.930787][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7129'. [ 377.008641][T21166] vlan0: entered promiscuous mode [ 377.595725][T21199] netlink: 300 bytes leftover after parsing attributes in process `syz.1.7147'. [ 377.956938][T21212] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 378.051491][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7153'. [ 378.061689][T21214] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7153'. [ 378.077101][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7153'. [ 378.100088][T21214] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7153'. [ 378.222503][T21219] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 378.665276][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.834985][T21248] netlink: 'syz.4.7171': attribute type 10 has an invalid length. [ 378.843034][T21248] team0: Cannot enslave team device to itself [ 380.227209][T21335] ieee802154 phy1 wpan1: encryption failed: -90 [ 380.349098][T21342] netlink: 'syz.5.7215': attribute type 1 has an invalid length. [ 380.392440][T21342] __nla_validate_parse: 1 callbacks suppressed [ 380.392458][T21342] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7215'. [ 380.500936][T21349] lo: entered promiscuous mode [ 380.506045][T21349] lo: entered allmulticast mode [ 380.521653][T21349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.736648][T21360] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7225'. [ 380.932344][T21373] netlink: 'syz.4.7231': attribute type 1 has an invalid length. [ 380.944941][T21374] netlink: 348 bytes leftover after parsing attributes in process `syz.5.7230'. [ 381.063917][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7233'. [ 381.113434][T21381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7233'. [ 381.585369][T21409] netlink: 'syz.1.7247': attribute type 9 has an invalid length. [ 381.621886][T21413] netlink: 'syz.3.7249': attribute type 10 has an invalid length. [ 381.668018][T21413] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 381.685151][T21415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7250'. [ 381.713683][T21413] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 381.742592][T21413] team0: Port device wlan1 added [ 381.960904][T21430] xt_l2tp: missing protocol rule (udp|l2tpip) [ 382.304004][T21454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7268'. [ 382.873835][T21476] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7279'. [ 384.358133][T21560] netlink: 'syz.1.7319': attribute type 1 has an invalid length. [ 384.408206][T21560] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7319'. [ 384.519005][T21568] netlink: 'syz.6.7326': attribute type 11 has an invalid length. [ 384.540421][T21568] netlink: 'syz.6.7326': attribute type 4 has an invalid length. [ 384.560600][T21570] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7325'. [ 384.570418][T21573] netlink: 'syz.1.7328': attribute type 13 has an invalid length. [ 384.598722][T21573] gretap0: refused to change device tx_queue_len [ 384.625001][T21573] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 384.945582][T21587] bond0: (slave macvlan0): Releasing backup interface [ 384.952401][T21587] bond0: (slave macvlan0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 385.000641][T21593] x_tables: duplicate underflow at hook 2 [ 385.115394][T21587] bond0: (slave netdevsim0): Releasing backup interface [ 385.173524][T21602] netlink: 'syz.6.7341': attribute type 1 has an invalid length. [ 385.374998][T21611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.758564][T21630] No such timeout policy "syz1" [ 385.924287][T21642] xt_limit: Overflow, try lower: 0/0 [ 386.019185][T21644] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 386.285071][T21660] delete_channel: no stack [ 386.555089][T21674] netlink: 'syz.3.7377': attribute type 28 has an invalid length. [ 386.625543][T21678] __nla_validate_parse: 1 callbacks suppressed [ 386.625559][T21678] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.7379'. [ 386.674420][T21678] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 386.713553][T21678] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 386.908569][T21696] netlink: 'syz.1.7386': attribute type 8 has an invalid length. [ 387.123736][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7392'. [ 387.599542][T21738] IPv6: sit3: Disabled Multicast RS [ 387.887645][T21756] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7416'. [ 387.902283][T21758] netlink: 'syz.5.7418': attribute type 1 has an invalid length. [ 388.126912][T21771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.397184][T21787] SET target dimension over the limit! [ 388.548818][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7436'. [ 388.637376][T21799] TCP: TCP_TX_DELAY enabled [ 388.662465][T21801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7439'. [ 388.689656][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7440'. [ 388.731457][T21807] netlink: 'syz.5.7442': attribute type 1 has an invalid length. [ 388.767683][T21807] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7442'. [ 388.847465][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7445'. [ 388.967047][T21816] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.078335][T21826] netlink: 'syz.5.7452': attribute type 5 has an invalid length. [ 389.256271][T21834] bridge_slave_0: entered promiscuous mode [ 389.262362][T21834] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 389.436729][T21840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7458'. [ 389.727718][T21855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.790487][T21861] sctp: [Deprecated]: syz.4.7468 (pid 21861) Use of int in maxseg socket option. [ 389.790487][T21861] Use struct sctp_assoc_value instead [ 389.944967][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7471'. [ 390.513687][T21901] netlink: 'syz.6.7488': attribute type 33 has an invalid length. [ 390.788031][T21915] netlink: 'syz.1.7495': attribute type 10 has an invalid length. [ 390.822849][T21915] mac80211_hwsim hwsim3 : left allmulticast mode [ 390.889976][T21915] bond0: (slave ): Enslaving as an active interface with an up link [ 392.179947][T21992] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 392.804359][T22026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.982388][T22032] __nla_validate_parse: 2 callbacks suppressed [ 392.982406][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7550'. [ 393.192935][T22045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.355127][T22055] ip6t_srh: unknown srh invflags 4000 [ 393.460442][T22062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7567'. [ 393.843563][T22083] netlink: 'syz.5.7577': attribute type 17 has an invalid length. [ 393.893180][T22087] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7579'. [ 393.944182][T22092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7580'. [ 393.963354][T22092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7580'. [ 394.102570][T22098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7585'. [ 394.345171][T22110] ip6tnl3: entered promiscuous mode [ 394.650355][ T31] INFO: task syz.0.3907:14125 blocked for more than 143 seconds. [ 394.663239][ T31] Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 [ 394.696976][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.730230][ T31] task:syz.0.3907 state:D stack:27400 pid:14125 tgid:14124 ppid:5836 task_flags:0x400140 flags:0x00004004 [ 394.761618][ T31] Call Trace: [ 394.770778][ T31] [ 394.779372][ T31] __schedule+0x16f5/0x4d00 [ 394.791716][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.805677][ T31] ? schedule+0x165/0x360 [ 394.816715][ T31] ? __pfx___schedule+0x10/0x10 [ 394.826479][ T31] ? schedule+0x91/0x360 [ 394.837453][ T31] schedule+0x165/0x360 [ 394.849322][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.855160][ T31] __mutex_lock+0x724/0xe80 [ 394.859755][ T31] ? __mutex_lock+0x51b/0xe80 [ 394.864522][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 394.870374][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.875745][ T31] ? __nlmsg_put+0xef/0x1b0 [ 394.880298][ T31] ? genlmsg_put+0x137/0x2e0 [ 394.885113][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 394.890743][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 394.896973][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 394.902224][ T31] ? kernel_text_address+0xa5/0xe0 [ 394.907473][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 394.913064][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 394.919358][ T31] genl_rcv_msg+0x60e/0x790 [ 394.924143][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.929298][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 394.935560][ T31] netlink_rcv_skb+0x205/0x470 [ 394.940376][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.945523][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.950902][ T31] ? down_read+0x1ad/0x2e0 [ 394.955518][ T31] genl_rcv+0x28/0x40 [ 394.959504][ T31] netlink_unicast+0x758/0x8d0 [ 394.964258][ T31] netlink_sendmsg+0x805/0xb30 [ 394.975183][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.980486][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 394.985571][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.990867][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.996361][ T31] __sock_sendmsg+0x219/0x270 [ 395.001044][ T31] ____sys_sendmsg+0x505/0x830 [ 395.005866][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.011157][ T31] ? import_iovec+0x74/0xa0 [ 395.015821][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 395.020516][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.026274][ T31] ? __fget_files+0x2a/0x420 [ 395.030874][ T31] ? __fget_files+0x3a0/0x420 [ 395.035701][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 395.040647][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.046482][ T31] ? rcu_is_watching+0x15/0xb0 [ 395.051263][ T31] ? do_syscall_64+0xbe/0x3b0 [ 395.056159][ T31] do_syscall_64+0xfa/0x3b0 [ 395.060664][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.066009][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.072078][ T31] ? clear_bhb_loop+0x60/0xb0 [ 395.076812][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.082734][ T31] RIP: 0033:0x7f53e518e929 [ 395.087468][ T31] RSP: 002b:00007f53e603c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.095935][ T31] RAX: ffffffffffffffda RBX: 00007f53e53b5fa0 RCX: 00007f53e518e929 [ 395.103930][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 395.112096][ T31] RBP: 00007f53e5210b39 R08: 0000000000000000 R09: 0000000000000000 [ 395.120215][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.128703][ T31] R13: 0000000000000000 R14: 00007f53e53b5fa0 R15: 00007ffc4a395ce8 [ 395.136766][ T31] [ 395.139827][ T31] [ 395.139827][ T31] Showing all locks held in the system: [ 395.148222][ T31] 2 locks held by ksoftirqd/0/15: [ 395.153271][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 395.171601][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 395.183086][ T31] 1 lock held by khungtaskd/31: [ 395.188006][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 395.197943][ T31] 2 locks held by getty/5598: [ 395.202615][ T31] #0: ffff888034c420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 395.212766][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 395.222921][ T31] 2 locks held by syz.2.3054/12247: [ 395.228232][ T31] #0: ffffffff8f577bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.236816][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 395.247500][ T31] 2 locks held by syz.0.3907/14125: [ 395.252695][ T31] #0: ffffffff8f577bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.260940][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 395.271236][ T31] 2 locks held by kworker/u8:13/15214: [ 395.277638][ T31] 5 locks held by kworker/u8:17/15223: [ 395.283099][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 395.293125][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 395.304608][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 395.313662][ T31] #3: ffffffff99d65cd8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 395.324065][ T31] #4: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 395.334200][ T31] [ 395.337462][ T31] ============================================= [ 395.337462][ T31] [ 395.346674][ T31] NMI backtrace for cpu 1 [ 395.346689][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 395.346710][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.346720][ T31] Call Trace: [ 395.346728][ T31] [ 395.346735][ T31] dump_stack_lvl+0x189/0x250 [ 395.346760][ T31] ? __wake_up_klogd+0xd9/0x110 [ 395.346781][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.346804][ T31] ? __pfx__printk+0x10/0x10 [ 395.346834][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 395.346860][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 395.346878][ T31] ? _printk+0xcf/0x120 [ 395.346900][ T31] ? __pfx__printk+0x10/0x10 [ 395.346920][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.346943][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 395.346968][ T31] watchdog+0xfee/0x1030 [ 395.346991][ T31] ? watchdog+0x1de/0x1030 [ 395.347019][ T31] kthread+0x70e/0x8a0 [ 395.347041][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.347061][ T31] ? __pfx_kthread+0x10/0x10 [ 395.347079][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.347102][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.347116][ T31] ? __pfx_kthread+0x10/0x10 [ 395.347136][ T31] ret_from_fork+0x3f9/0x770 [ 395.347160][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.347188][ T31] ? __switch_to_asm+0x39/0x70 [ 395.347204][ T31] ? __switch_to_asm+0x33/0x70 [ 395.347219][ T31] ? __pfx_kthread+0x10/0x10 [ 395.347238][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.347270][ T31] [ 395.347278][ T31] Sending NMI from CPU 1 to CPUs 0: [ 395.504548][ C0] NMI backtrace for cpu 0 [ 395.504564][ C0] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 395.504582][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.504592][ C0] RIP: 0010:lock_release+0x3c/0x3e0 [ 395.504616][ C0] Code: 49 89 f5 49 89 fe 65 48 8b 05 60 ed fe 10 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 63 ed fe 10 83 f8 08 0f 83 9a 02 00 00 89 c0 <48> 0f a3 05 0c e2 02 0e 73 16 e8 55 e0 08 00 84 c0 75 0d f6 05 47 [ 395.504629][ C0] RSP: 0018:ffffc90003fafd38 EFLAGS: 00000293 [ 395.504642][ C0] RAX: 0000000000000000 RBX: 000055555bd0be20 RCX: a11edd07b105a500 [ 395.504653][ C0] RDX: 0000000000000000 RSI: ffffffff820c5120 RDI: ffff88807b10ace0 [ 395.504664][ C0] RBP: ffffc90003fafec0 R08: 0000000000000000 R09: ffffffff820c5120 [ 395.504674][ C0] R10: ffffc90003fafe20 R11: fffff520007f5fc8 R12: dffffc0000000000 [ 395.504686][ C0] R13: ffffffff820c5120 R14: ffff88807b10ace0 R15: 0000000000000000 [ 395.504696][ C0] FS: 000055555bd0b500(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 395.504709][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.504720][ C0] CR2: 00007fb49c180ab8 CR3: 000000007ab68000 CR4: 00000000003526f0 [ 395.504733][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.504745][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.504754][ C0] Call Trace: [ 395.504760][ C0] [ 395.504766][ C0] ? __might_fault+0xb0/0x130 [ 395.504781][ C0] ? __might_fault+0xcc/0x130 [ 395.504796][ C0] __rseq_handle_notify_resume+0x5f0/0x11f0 [ 395.504819][ C0] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 395.504836][ C0] ? __se_sys_clock_nanosleep+0x2f1/0x380 [ 395.504858][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 395.504878][ C0] exit_to_user_mode_loop+0xc2/0x110 [ 395.504896][ C0] do_syscall_64+0x2bd/0x3b0 [ 395.504911][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.504925][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.504940][ C0] ? clear_bhb_loop+0x60/0xb0 [ 395.504955][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.504969][ C0] RIP: 0033:0x7f610adc11a3 [ 395.504982][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 43 1c 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 395.504994][ C0] RSP: 002b:00007ffcddcf4858 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 395.505009][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f610adc11a3 [ 395.505019][ C0] RDX: 00007ffcddcf4870 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.505029][ C0] RBP: 0000000000000000 R08: 00000000289a3905 R09: 7fffffffffffffff [ 395.505039][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcddcf4cc0 [ 395.505049][ C0] R13: 0000000000000004 R14: 00007ffcddcf48ac R15: 00007ffcddcf4940 [ 395.505066][ C0] [ 395.505656][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 395.505670][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 395.505690][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.505701][ T31] Call Trace: [ 395.505708][ T31] [ 395.505716][ T31] dump_stack_lvl+0x99/0x250 [ 395.505742][ T31] ? __asan_memcpy+0x40/0x70 [ 395.505764][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.505787][ T31] ? __pfx__printk+0x10/0x10 [ 395.505817][ T31] panic+0x2db/0x790 [ 395.505844][ T31] ? __pfx_panic+0x10/0x10 [ 395.505865][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 395.505884][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 395.505911][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 395.505933][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 395.505961][ T31] watchdog+0x102d/0x1030 [ 395.505984][ T31] ? watchdog+0x1de/0x1030 [ 395.506012][ T31] kthread+0x70e/0x8a0 [ 395.506033][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.506052][ T31] ? __pfx_kthread+0x10/0x10 [ 395.506072][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.506095][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.506110][ T31] ? __pfx_kthread+0x10/0x10 [ 395.506129][ T31] ret_from_fork+0x3f9/0x770 [ 395.506166][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.506193][ T31] ? __switch_to_asm+0x39/0x70 [ 395.506208][ T31] ? __switch_to_asm+0x33/0x70 [ 395.506224][ T31] ? __pfx_kthread+0x10/0x10 [ 395.506244][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.506274][ T31] [ 395.938309][ T31] Kernel Offset: disabled [ 395.942617][ T31] Rebooting in 86400 seconds..