last executing test programs: 2m28.75515272s ago: executing program 0 (id=7035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xa8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x7, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) 2m28.667754652s ago: executing program 0 (id=7038): socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "0813f3", 0x9, 0xff, 0x0, @mcast1, @mcast2, [@fragment={0x84, 0x0, 0xc, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) 2m28.555118184s ago: executing program 0 (id=7042): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0xffffffd9}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, @sadb_lifetime={0x4, 0x4, 0x2, 0x5, 0xffffffffffff8000, 0x3}]}, 0x98}, 0x1, 0x7}, 0x0) 2m28.436382285s ago: executing program 0 (id=7048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xfd}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 2m28.266340932s ago: executing program 0 (id=7053): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000007b40)="fb9f", 0x2}, {0x0}], 0x2}}], 0x1, 0x40000) 2m28.092413929s ago: executing program 0 (id=7059): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) 2m13.018723701s ago: executing program 32 (id=7059): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) 2.332460388s ago: executing program 1 (id=11275): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2.006517988s ago: executing program 1 (id=11280): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb5cf}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) 1.783866845s ago: executing program 1 (id=11286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) 1.770582105s ago: executing program 3 (id=11288): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.709207996s ago: executing program 5 (id=11289): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) 1.547802864s ago: executing program 3 (id=11291): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @multicast2}], 0x20) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) 1.538928242s ago: executing program 5 (id=11293): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc44}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.52670286s ago: executing program 2 (id=11294): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.471982445s ago: executing program 3 (id=11295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) 1.357256997s ago: executing program 5 (id=11297): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x9}, 0x8) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000200)) 1.354994909s ago: executing program 2 (id=11298): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 1.342123563s ago: executing program 3 (id=11299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 1.208020162s ago: executing program 3 (id=11301): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) unshare(0x6020400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) 1.140082491s ago: executing program 2 (id=11303): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000008c0012800c0001006d6163766c616e007c0002800800030003000000640005800a000400ffffffffffff00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400bbbbbbbbbbbb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400ffffffffffff00000a000400aaaaaaaaaaaa00000a000400aa"], 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.009987664s ago: executing program 2 (id=11304): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x83, 0x0, 0x0) 997.190566ms ago: executing program 3 (id=11306): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 846.499849ms ago: executing program 4 (id=11307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 720.315686ms ago: executing program 1 (id=11308): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x6a) 688.08666ms ago: executing program 4 (id=11309): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 615.048989ms ago: executing program 4 (id=11310): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) listen(r0, 0x3) 590.996713ms ago: executing program 1 (id=11311): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) close(0x3) 561.063863ms ago: executing program 4 (id=11312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe8103, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 386.885175ms ago: executing program 1 (id=11313): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000001c0)) 281.703209ms ago: executing program 5 (id=11314): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x44040) 280.750712ms ago: executing program 4 (id=11315): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x16c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x154, 0x1, [@m_nat={0x108, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x10000000, 0x80000001}, @empty, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x6, 0x6979, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6, 0x3, 0x9f}, @empty, @multicast1}}]}, {0x65, 0x6, "525dfeac86ce84c0651b02d8cfcfb2e8ebe4fa883a2e8593252c80a728a5f4291635480f6cbc84b2432cef684200149d9d5edd825c13eb2d4d0d699ac1ca3cc36e4a09f088dc445f0783cc90f1d501855767e6d7c186ca9b4e0cb1c4bf18117b10"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x48, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 268.184409ms ago: executing program 2 (id=11316): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f00000013c0)=""/4096, 0x1000, 0x2df) 144.543158ms ago: executing program 5 (id=11317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 120.549425ms ago: executing program 2 (id=11318): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 94.699681ms ago: executing program 4 (id=11319): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000d3e9daf57786", @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1803000042000000000000000500100018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000040000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 0s ago: executing program 5 (id=11320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x1, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): 0.3960'. [ 226.982360][T14240] netlink: 'syz.2.3964': attribute type 12 has an invalid length. [ 227.019513][T14242] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3966'. [ 227.449654][T14271] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.749593][T14286] bond3: option tlb_dynamic_lb: invalid value (5) [ 227.779442][T14286] bond3 (unregistering): Released all slaves [ 227.803853][T14296] ip6t_srh: unknown srh match flags C404 [ 228.400860][T14332] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4005'. [ 228.569838][T14346] netlink: 'syz.3.4011': attribute type 1 has an invalid length. [ 228.581516][T14346] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4011'. [ 228.641825][T14351] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4014'. [ 228.642791][T14352] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4012'. [ 228.755331][T14356] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4017'. [ 229.009581][T14374] netlink: 'syz.0.4024': attribute type 30 has an invalid length. [ 229.097527][T14378] netlink: 'syz.1.4027': attribute type 7 has an invalid length. [ 229.113860][T14378] netlink: 'syz.1.4027': attribute type 8 has an invalid length. [ 229.256852][T14391] netlink: 'syz.2.4032': attribute type 2 has an invalid length. [ 229.927158][T14439] netlink: 'syz.4.4057': attribute type 16 has an invalid length. [ 229.961463][T14439] netlink: 'syz.4.4057': attribute type 17 has an invalid length. [ 230.147781][T14439] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.155664][T14439] bridge0: port 1(1¾x9ÿ) entered disabled state [ 230.318233][T14439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.338603][T14439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.517455][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.534481][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.555259][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.589099][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.805899][T14479] xt_hashlimit: size too large, truncated to 1048576 [ 230.937836][T14491] macvtap0: refused to change device tx_queue_len [ 231.079217][T14500] netlink: 'syz.0.4085': attribute type 5 has an invalid length. [ 231.545684][T14530] __nla_validate_parse: 4 callbacks suppressed [ 231.545705][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4101'. [ 231.592085][T14534] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 231.618226][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4101'. [ 231.697942][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4108'. [ 231.964310][T14558] netlink: 'syz.0.4116': attribute type 32 has an invalid length. [ 233.791331][T14622] netlink: 'syz.0.4147': attribute type 2 has an invalid length. [ 233.811643][T14627] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4146'. [ 233.821756][T14622] netlink: 'syz.0.4147': attribute type 1 has an invalid length. [ 233.836811][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4147'. [ 233.879561][T14631] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 234.286334][T14662] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4166'. [ 234.298954][T14662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4166'. [ 234.387027][T14667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4168'. [ 234.600201][T14680] netlink: 'syz.2.4175': attribute type 1 has an invalid length. [ 234.652670][T14682] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.694050][T14682] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.973911][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'. [ 235.339689][T14720] netlink: 'syz.4.4195': attribute type 25 has an invalid length. [ 236.168475][T14775] x_tables: ip_tables: osf match: only valid for protocol 6 [ 236.171954][T14777] netlink: 'syz.1.4222': attribute type 2 has an invalid length. [ 236.193915][T14777] netlink: 'syz.1.4222': attribute type 9 has an invalid length. [ 236.202976][T14777] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4222'. [ 236.330939][T14783] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 237.023860][T14832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.466913][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4264'. [ 237.484805][T14866] wlan0 speed is unknown, defaulting to 1000 [ 237.491287][T14866] wlan0 speed is unknown, defaulting to 1000 [ 237.497401][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4264'. [ 237.520986][T14866] wlan0 speed is unknown, defaulting to 1000 [ 237.568178][T14866] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 237.665524][T14866] wlan0 speed is unknown, defaulting to 1000 [ 237.681457][T14876] netlink: 'syz.4.4272': attribute type 21 has an invalid length. [ 237.705749][T14866] wlan0 speed is unknown, defaulting to 1000 [ 237.729152][T14876] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4272'. [ 237.755025][T14866] wlan0 speed is unknown, defaulting to 1000 [ 237.764457][T14866] wlan0 speed is unknown, defaulting to 1000 [ 237.787797][T14866] wlan0 speed is unknown, defaulting to 1000 [ 237.883747][T14887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4276'. [ 238.209587][T14912] netlink: 'syz.3.4288': attribute type 21 has an invalid length. [ 238.239644][T14912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4288'. [ 238.651015][T14944] netlink: 'syz.1.4304': attribute type 10 has an invalid length. [ 238.659592][T14944] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4304'. [ 238.668613][T14944] bond0: entered promiscuous mode [ 238.674359][T14944] bond_slave_0: entered promiscuous mode [ 238.681031][T14944] bond_slave_1: entered promiscuous mode [ 238.713401][T14944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.721991][T14944] bridge0: port 3(bond0) entered blocking state [ 238.738709][T14944] bridge0: port 3(bond0) entered disabled state [ 238.756421][T14944] bond0: entered allmulticast mode [ 238.762061][T14944] bond_slave_0: entered allmulticast mode [ 238.768371][T14944] bond_slave_1: entered allmulticast mode [ 238.882219][T14953] netlink: 'syz.2.4309': attribute type 10 has an invalid length. [ 238.905005][T14953] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4309'. [ 238.941622][T14960] SET target dimension over the limit! [ 239.980338][T15031] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.250852][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4358'. [ 240.357767][T15060] netlink: 'syz.0.4361': attribute type 16 has an invalid length. [ 240.375159][T15060] netlink: 'syz.0.4361': attribute type 17 has an invalid length. [ 240.444240][T15066] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 240.545797][T15060] bridge0: port 3(bond0) entered disabled state [ 240.571457][T15072] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4368'. [ 240.665299][ T1109] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.681507][ T1109] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.725281][ T1109] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.748747][ T1109] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.790207][T15084] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4374'. [ 242.449048][T15139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.459865][T15139] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 242.520640][T15139] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.531582][T15139] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 242.673358][T15139] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.724951][T15139] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 242.739543][T15187] netlink: 'syz.1.4417': attribute type 3 has an invalid length. [ 242.763850][T15139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.785293][T15139] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 242.872475][T15139] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.878417][T15139] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 243.929553][T15261] IPv6: sit1: Disabled Multicast RS [ 243.951212][T15264] __nla_validate_parse: 1 callbacks suppressed [ 243.951232][T15264] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4449'. [ 244.352670][T15290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.646780][T15308] SET target dimension over the limit! [ 244.857661][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4473'. [ 244.938569][T15328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4475'. [ 244.968081][T15331] netlink: 'syz.4.4476': attribute type 1 has an invalid length. [ 244.991039][T15328] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4475'. [ 245.007274][T15334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4479'. [ 245.271377][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4484'. [ 245.317612][T15346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4484'. [ 245.337818][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'. [ 245.889352][T15391] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 246.014843][T15396] netlink: 'syz.4.4504': attribute type 1 has an invalid length. [ 246.046348][T15396] netlink: 'syz.4.4504': attribute type 3 has an invalid length. [ 246.057685][T15396] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4504'. [ 246.356095][T15420] netlink: 'syz.1.4513': attribute type 9 has an invalid length. [ 246.388817][T15420] netlink: 'syz.1.4513': attribute type 6 has an invalid length. [ 246.507463][T15427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4516'. [ 246.599829][T15432] netlink: 'syz.0.4518': attribute type 1 has an invalid length. [ 246.607599][T15432] netlink: 'syz.0.4518': attribute type 2 has an invalid length. [ 247.532953][T15494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.762470][T15510] netlink: 'syz.2.4550': attribute type 5 has an invalid length. [ 247.791642][T15510] geneve2: entered promiscuous mode [ 247.806990][T15510] geneve2: entered allmulticast mode [ 247.826206][ T3467] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 247.861451][ T3467] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 247.878261][ T3467] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 247.919335][ T3467] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 248.436242][T15552] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 248.744612][T15574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.219591][T15603] netlink: 'syz.4.4587': attribute type 13 has an invalid length. [ 249.466560][T15618] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 249.489231][T15618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.564400][T15622] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 249.715342][T15634] __nla_validate_parse: 13 callbacks suppressed [ 249.715361][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4601'. [ 249.776374][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4601'. [ 249.995641][T15651] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.293537][T15669] sctp: [Deprecated]: syz.4.4616 (pid 15669) Use of int in maxseg socket option. [ 250.293537][T15669] Use struct sctp_assoc_value instead [ 250.361860][T15671] SET target dimension over the limit! [ 250.728500][T15699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4628'. [ 250.745666][T15699] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4628'. [ 251.038011][T15720] netlink: 'syz.0.4636': attribute type 21 has an invalid length. [ 251.199529][T15729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.259147][T15733] netlink: 'syz.1.4640': attribute type 1 has an invalid length. [ 251.266920][T15733] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4640'. [ 251.863389][T15769] xt_TCPMSS: Only works on TCP SYN packets [ 252.200998][T15795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4666'. [ 252.229645][T15795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4666'. [ 252.547713][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 252.647251][T15820] No such timeout policy "syz1" [ 252.789366][T15831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4681'. [ 253.157955][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4688'. [ 253.816873][T15890] bond3: Removing last arp target with arp_interval on [ 254.266887][T15928] netlink: 'syz.2.4720': attribute type 1 has an invalid length. [ 254.542127][T15945] SET target dimension over the limit! [ 255.108513][T15986] __nla_validate_parse: 4 callbacks suppressed [ 255.108532][T15986] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4743'. [ 255.150479][T15986] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4743'. [ 255.365141][T16003] delete_channel: no stack [ 255.619356][T16017] openvswitch: netlink: IP tunnel dst address not specified [ 255.679203][T16022] netlink: 'syz.1.4756': attribute type 2 has an invalid length. [ 255.686992][T16022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4756'. [ 255.833323][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.849042][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.519328][T16068] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 256.621808][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4780'. [ 256.654746][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4781'. [ 256.677172][T16076] bridge_slave_1: left allmulticast mode [ 256.699079][T16076] bridge_slave_1: left promiscuous mode [ 256.720729][T16076] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.757173][T16076] ¾x9ÿ: left allmulticast mode [ 256.767149][T16076] ¾x9ÿ: left promiscuous mode [ 256.772247][T16076] bridge0: port 1(1¾x9ÿ) entered disabled state [ 256.892078][T16082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4784'. [ 257.071832][T16100] xt_connbytes: Forcing CT accounting to be enabled [ 257.165203][T16105] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 257.389517][T16119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4800'. [ 257.875439][T16155] netlink: 'syz.0.4821': attribute type 6 has an invalid length. [ 258.002945][T16163] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4824'. [ 258.084417][T16171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4828'. [ 258.152639][T16173] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4829'. [ 258.202136][T16179] openvswitch: netlink: IP tunnel dst address not specified [ 258.525124][T16197] xt_cgroup: invalid path, errno=-2 [ 258.543397][T16192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.555560][T16201] openvswitch: netlink: Message has 4 unknown bytes. [ 259.720399][T16280] netlink: 'syz.0.4881': attribute type 1 has an invalid length. [ 260.743322][T16344] bond4 (unregistering): Released all slaves [ 261.084462][T16372] __nla_validate_parse: 22 callbacks suppressed [ 261.084482][T16372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4924'. [ 261.312933][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4929'. [ 261.928548][T16427] xfrm1: entered allmulticast mode [ 262.294685][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4963'. [ 262.331863][T16452] bond0: left allmulticast mode [ 262.336898][T16452] bond_slave_0: left allmulticast mode [ 262.357065][T16452] bond_slave_1: left allmulticast mode [ 262.368584][T16452] bridge0: port 3(bond0) entered disabled state [ 262.391624][T16452] bridge_slave_1: left allmulticast mode [ 262.408658][T16452] bridge_slave_1: left promiscuous mode [ 262.415135][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.426397][T16452] bridge_slave_0: left allmulticast mode [ 262.433477][T16452] bridge_slave_0: left promiscuous mode [ 262.439988][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.525260][T16459] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 262.830211][T16488] netlink: 'syz.1.4983': attribute type 1 has an invalid length. [ 262.838274][T16488] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4983'. [ 262.963423][T16496] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4985'. [ 263.072018][T16506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4990'. [ 263.275889][T16520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4995'. [ 263.279959][T16517] netlink: 'syz.3.4993': attribute type 9 has an invalid length. [ 263.490808][T16526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.085356][T16578] netlink: 'syz.1.5026': attribute type 1 has an invalid length. [ 264.558308][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5040'. [ 264.582832][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5040'. [ 264.738783][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5044'. [ 264.941984][T16608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.987337][T16625] netlink: 'syz.3.5048': attribute type 2 has an invalid length. [ 264.995584][T16627] openvswitch: netlink: Duplicate or invalid key (type 0). [ 265.004364][T16627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.013430][T16625] netlink: 'syz.3.5048': attribute type 1 has an invalid length. [ 265.610986][T16671] openvswitch: netlink: Message has -2 unknown bytes. [ 266.041610][T16703] netlink: 'syz.4.5084': attribute type 1 has an invalid length. [ 266.260240][T16713] __nla_validate_parse: 19 callbacks suppressed [ 266.260258][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5089'. [ 266.594947][T16734] netlink: 'syz.2.5098': attribute type 29 has an invalid length. [ 266.637307][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5098'. [ 267.172150][T16764] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5113'. [ 267.249136][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5115'. [ 267.473829][T16774] bridge0: port 3(team0) entered disabled state [ 267.481260][T16774] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.488912][T16774] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.693490][T16774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.718848][T16774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.898872][ T1109] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.919581][ T1109] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.950190][ T1109] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.974733][ T1109] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.445329][T16838] netlink: 'syz.1.5147': attribute type 21 has an invalid length. [ 268.599735][T16843] netlink: 'syz.1.5152': attribute type 5 has an invalid length. [ 268.875290][T16866] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 269.129353][T16883] netlink: 'syz.0.5170': attribute type 2 has an invalid length. [ 269.137213][T16883] netlink: 119 bytes leftover after parsing attributes in process `syz.0.5170'. [ 269.472920][T16908] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5182'. [ 269.480105][T16907] IPVS: Unknown mcast interface: macvlan0 [ 269.496869][T16908] openvswitch: netlink: EtherType 0 is less than min 600 [ 269.614077][T16917] openvswitch: netlink: Flow key attr not present in new flow. [ 269.996754][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5200'. [ 270.490565][T16971] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 270.552255][T16971] bond5 (unregistering): Released all slaves [ 270.777508][T16993] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5224'. [ 271.036252][T16993] bond0 (unregistering): left allmulticast mode [ 271.042850][T16993] bond_slave_0: left allmulticast mode [ 271.048604][T16993] bond_slave_1: left allmulticast mode [ 271.055936][T16993] bond0 (unregistering): left promiscuous mode [ 271.062920][T16993] bond_slave_0: left promiscuous mode [ 271.068666][T16993] bond_slave_1: left promiscuous mode [ 271.074998][T16993] bridge0: port 3(bond0) entered disabled state [ 271.088155][T16993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.100018][T16993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.111271][T16993] bond0 (unregistering): Released all slaves [ 271.407046][T17034] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 271.432092][T17035] netlink: zone id is out of range [ 271.437264][T17035] netlink: zone id is out of range [ 271.451464][T17035] netlink: zone id is out of range [ 271.457156][T17035] netlink: zone id is out of range [ 271.463800][T17035] netlink: zone id is out of range [ 271.479306][T17035] netlink: zone id is out of range [ 271.491233][T17035] netlink: zone id is out of range [ 271.497905][T17035] netlink: zone id is out of range [ 271.531310][T17035] netlink: zone id is out of range [ 271.776514][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5255'. [ 271.927058][T17068] !: renamed from dummy0 (while UP) [ 271.962966][T17072] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5263'. [ 271.973364][T17072] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5263'. [ 272.103691][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5267'. [ 272.365681][T17093] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 272.383601][T17093] bond0 (unregistering): Released all slaves [ 272.665259][T17118] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5286'. [ 273.287428][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5308'. [ 273.464653][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5313'. [ 273.501955][T17179] netlink: 'syz.0.5316': attribute type 4 has an invalid length. [ 273.537050][T17176] ip6gretap1: entered promiscuous mode [ 273.558769][T17176] ip6gretap1: entered allmulticast mode [ 273.820379][T17203] netlink: 'syz.4.5327': attribute type 1 has an invalid length. [ 273.828633][T17203] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5327'. [ 274.338920][T17235] Zero length message leads to an empty skb [ 274.478329][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5349'. [ 275.150755][T17290] xt_l2tp: invalid flags combination: 8 [ 275.203433][T17294] netlink: 'syz.4.5374': attribute type 3 has an invalid length. [ 275.451423][T17305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5379'. [ 275.498239][T17305] tc_dump_action: action bad kind [ 275.849945][T17323] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 276.534258][T17341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.556625][T17341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.581866][T17341] bond0 (unregistering): Released all slaves [ 276.744386][T17366] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 276.849883][T17371] __nla_validate_parse: 3 callbacks suppressed [ 276.849902][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5411'. [ 276.891626][T17377] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 277.018010][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5416'. [ 277.181098][T17393] net_ratelimit: 6 callbacks suppressed [ 277.181117][T17393] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 277.187202][T17397] xt_hashlimit: max too large, truncated to 1048576 [ 277.473806][T17413] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.579167][T17420] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5435'. [ 278.529173][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5465'. [ 278.560430][T17489] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 278.609908][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5468'. [ 278.649605][T17494] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 278.976703][T17516] netlink: 'syz.3.5480': attribute type 1 has an invalid length. [ 279.004265][T17516] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5480'. [ 279.196432][T17532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.409275][T17541] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5492'. [ 279.424818][T17544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.740765][T17541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.767711][T17541] bond_slave_0: left promiscuous mode [ 279.781432][T17541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.806580][T17541] bond_slave_1: left promiscuous mode [ 279.820260][T17541] bond0 (unregistering): Released all slaves [ 279.876812][T17570] netlink: 'syz.2.5507': attribute type 23 has an invalid length. [ 280.092632][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5512'. [ 280.103251][T17581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5512'. [ 280.764096][T17625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5532'. [ 280.804212][T17630] netlink: 'syz.2.5537': attribute type 16 has an invalid length. [ 281.186255][T17659] netlink: 'syz.1.5551': attribute type 5 has an invalid length. [ 282.061877][T17723] __nla_validate_parse: 4 callbacks suppressed [ 282.061897][T17723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5580'. [ 282.170327][T17732] netlink: 'syz.2.5587': attribute type 3 has an invalid length. [ 282.291360][T17738] set match dimension is over the limit! [ 282.327761][T17742] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 282.546067][T17759] netlink: 'syz.4.5599': attribute type 10 has an invalid length. [ 282.566362][T17759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5599'. [ 282.611602][T17759] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 282.639981][T17759] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 282.667953][T17759] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 282.999285][T17787] netlink: 732 bytes leftover after parsing attributes in process `syz.2.5614'. [ 283.008371][T17787] netlink: 732 bytes leftover after parsing attributes in process `syz.2.5614'. [ 283.111631][T17796] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5618'. [ 283.227750][T17806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5621'. [ 283.241652][T17808] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.369944][T17817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5629'. [ 283.439112][T17817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5629'. [ 284.108168][T17869] netlink: 'syz.2.5654': attribute type 4 has an invalid length. [ 284.134575][T17869] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5654'. [ 284.274610][T17881] netlink: 'syz.3.5662': attribute type 1 has an invalid length. [ 284.301454][T17881] netlink: 'syz.3.5662': attribute type 2 has an invalid length. [ 284.321980][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5660'. [ 284.512435][T17899] x_tables: duplicate entry at hook 2 [ 284.540733][T17903] netlink: 'syz.3.5671': attribute type 1 has an invalid length. [ 285.030691][T17935] netlink: 'syz.4.5688': attribute type 1 has an invalid length. [ 285.188637][T17950] netlink: 'syz.1.5692': attribute type 21 has an invalid length. [ 286.124848][T18019] netlink: 'syz.0.5727': attribute type 1 has an invalid length. [ 286.435207][T18033] x_tables: unsorted underflow at hook 1 [ 287.627237][T18097] __nla_validate_parse: 12 callbacks suppressed [ 287.627256][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5766'. [ 289.037914][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5800'. [ 289.223341][T18177] Cannot find set identified by id 65534 to match [ 289.718267][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'. [ 290.873731][T18268] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002 [ 291.124191][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5853'. [ 291.401943][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5859'. [ 291.617450][T18298] netlink: 'syz.4.5864': attribute type 1 has an invalid length. [ 291.841613][T18308] netlink: 324 bytes leftover after parsing attributes in process `syz.1.5869'. [ 292.112017][T18013] Set syz1 is full, maxelem 65536 reached [ 292.250106][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5880'. [ 292.655945][T18357] netlink: 'syz.2.5890': attribute type 1 has an invalid length. [ 292.826905][T18367] netlink: 'syz.3.5893': attribute type 10 has an invalid length. [ 292.849188][T18367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5893'. [ 292.875521][T18367] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 292.881009][T18371] ipt_rpfilter: unknown options [ 293.124617][T18388] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 293.287756][T18400] netlink: 'syz.3.5911': attribute type 3 has an invalid length. [ 293.437940][T18412] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5915'. [ 293.698612][T18432] openvswitch: netlink: Missing key (keys=40, expected=80) [ 294.020234][T18447] TCP: TCP_TX_DELAY enabled [ 294.576407][T18483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.654129][T18485] smc: removing ib device !yz! [ 295.046466][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5961'. [ 295.670198][T18533] netlink: 'syz.0.5973': attribute type 5 has an invalid length. [ 296.103292][T18548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5981'. [ 296.326884][T18553] veth3: entered promiscuous mode [ 296.881585][T18589] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 297.246126][T18612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6011'. [ 297.306400][T18618] netlink: 276 bytes leftover after parsing attributes in process `syz.2.6014'. [ 297.757385][T18653] netlink: 'syz.0.6029': attribute type 21 has an invalid length. [ 297.879541][T18659] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6032'. [ 298.251553][T18692] netlink: 'syz.4.6046': attribute type 3 has an invalid length. [ 298.376820][T18701] netlink: 'syz.3.6053': attribute type 1 has an invalid length. [ 298.426323][T18707] xt_ecn: cannot match TCP bits for non-tcp packets [ 298.449031][T18701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6053'. [ 298.478103][T18701] netlink: 'syz.3.6053': attribute type 1 has an invalid length. [ 298.628749][T18720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6062'. [ 298.832703][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6069'. [ 298.954985][ T5834] Bluetooth: hci0: command tx timeout [ 299.169066][T18762] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 299.988337][T18813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6106'. [ 300.000189][T18812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6108'. [ 300.096987][T18818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6110'. [ 300.390092][T18839] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6120'. [ 300.416104][T18839] openvswitch: netlink: Missing key (keys=40, expected=100) [ 300.459319][T18844] dummy0: entered allmulticast mode [ 300.479576][T18843] dummy0: left allmulticast mode [ 300.578346][T18854] netlink: 'syz.0.6127': attribute type 1 has an invalid length. [ 300.833183][T18874] xt_hashlimit: max too large, truncated to 1048576 [ 301.188522][T18900] sock: sock_timestamping_bind_phc: sock not bind to device [ 301.196166][ T5834] Bluetooth: hci0: command tx timeout [ 301.796871][T18946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.837064][T18952] openvswitch: netlink: Actions may not be safe on all matching packets [ 302.181935][T18979] netlink: 'syz.2.6188': attribute type 1 has an invalid length. [ 302.531033][T19003] netlink: 'syz.2.6199': attribute type 1 has an invalid length. [ 302.715946][T19018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6205'. [ 302.726469][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6206'. [ 303.141690][T19049] xt_policy: neither incoming nor outgoing policy selected [ 303.438536][T19072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6232'. [ 303.459337][T19078] netlink: 'syz.1.6233': attribute type 1 has an invalid length. [ 303.821218][T19103] netlink: 'syz.3.6247': attribute type 1 has an invalid length. [ 303.842937][T19103] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6247'. [ 304.027702][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6254'. [ 304.155337][T19129] netlink: 'syz.3.6260': attribute type 28 has an invalid length. [ 304.395859][T19145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6268'. [ 304.574948][T19163] openvswitch: netlink: IP tunnel dst address not specified [ 304.589208][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6277'. [ 304.779719][T19177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6284'. [ 304.814803][T19177] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6284'. [ 305.064683][T19198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6294'. [ 305.083475][T19198] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6294'. [ 305.129119][T19198] netlink: 'syz.0.6294': attribute type 5 has an invalid length. [ 305.136897][T19198] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6294'. [ 305.498567][T19229] netlink: 'syz.3.6310': attribute type 3 has an invalid length. [ 305.559211][T19231] ipt_REJECT: TCP_RESET invalid for non-tcp [ 305.757866][T19246] sock: sock_timestamping_bind_phc: sock not bind to device [ 306.118094][T19278] --map-set only usable from mangle table [ 306.132526][T19275] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 306.156923][T19275] bond0 (unregistering): Released all slaves [ 306.436405][T19296] netlink: 'syz.4.6344': attribute type 11 has an invalid length. [ 306.480416][T19300] netlink: 'syz.1.6343': attribute type 3 has an invalid length. [ 306.588314][T19306] netlink: 'syz.2.6347': attribute type 11 has an invalid length. [ 309.265518][T19362] syz.1.6374: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 309.286066][T19362] CPU: 1 UID: 0 PID: 19362 Comm: syz.1.6374 Not tainted syzkaller #0 PREEMPT(full) [ 309.286087][T19362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.286103][T19362] Call Trace: [ 309.286110][T19362] [ 309.286117][T19362] dump_stack_lvl+0x189/0x250 [ 309.286148][T19362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.286170][T19362] ? __pfx__printk+0x10/0x10 [ 309.286190][T19362] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 309.286223][T19362] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 309.286249][T19362] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 309.286275][T19362] warn_alloc+0x214/0x310 [ 309.286307][T19362] ? __pfx_warn_alloc+0x10/0x10 [ 309.286342][T19362] ? __get_vm_area_node+0x28f/0x300 [ 309.286366][T19362] ? veth_dev_init+0x368/0x570 [ 309.286388][T19362] __vmalloc_node_range_noprof+0x690/0x12d0 [ 309.286413][T19362] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 309.286465][T19362] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.286489][T19362] ? __kasan_kmalloc_large+0x1c/0xa0 [ 309.286519][T19362] ? rcu_is_watching+0x15/0xb0 [ 309.286541][T19362] ? veth_dev_init+0x368/0x570 [ 309.286559][T19362] __kvmalloc_node_noprof+0x674/0x910 [ 309.286585][T19362] ? veth_dev_init+0x368/0x570 [ 309.286603][T19362] ? __pfx_netdev_lock_cmp_fn+0x10/0x10 [ 309.286629][T19362] veth_dev_init+0x368/0x570 [ 309.286654][T19362] register_netdevice+0x6bf/0x1ae0 [ 309.286689][T19362] ? snprintf+0xda/0x120 [ 309.286711][T19362] ? __pfx_register_netdevice+0x10/0x10 [ 309.286731][T19362] ? __pfx_snprintf+0x10/0x10 [ 309.286752][T19362] ? __asan_memset+0x22/0x50 [ 309.286774][T19362] ? dev_addr_mod+0x2ce/0x3d0 [ 309.286801][T19362] veth_newlink+0x5d4/0xa60 [ 309.286821][T19362] ? __pfx_veth_newlink+0x10/0x10 [ 309.286844][T19362] ? css_rstat_updated+0x23a/0x4f0 [ 309.286871][T19362] ? __pfx_css_rstat_updated+0x10/0x10 [ 309.286950][T19362] ? validate_linkmsg+0x765/0x950 [ 309.286984][T19362] ? __pfx_veth_newlink+0x10/0x10 [ 309.287003][T19362] rtnl_newlink_create+0x310/0xb00 [ 309.287029][T19362] ? __lock_acquire+0xab9/0xd20 [ 309.287052][T19362] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 309.287076][T19362] ? __pfx___mutex_lock+0x10/0x10 [ 309.287103][T19362] ? ns_capable+0x8a/0xf0 [ 309.287127][T19362] rtnl_newlink+0x16e4/0x1c80 [ 309.287161][T19362] ? __pfx_rtnl_newlink+0x10/0x10 [ 309.287183][T19362] ? __lock_acquire+0xab9/0xd20 [ 309.287285][T19362] ? __lock_acquire+0xab9/0xd20 [ 309.287331][T19362] ? __pfx_rtnl_newlink+0x10/0x10 [ 309.287348][T19362] rtnetlink_rcv_msg+0x7cf/0xb70 [ 309.287364][T19362] ? __lock_acquire+0xab9/0xd20 [ 309.287383][T19362] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 309.287400][T19362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.287434][T19362] netlink_rcv_skb+0x208/0x470 [ 309.287451][T19362] ? __lock_acquire+0xab9/0xd20 [ 309.287468][T19362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.287487][T19362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.287518][T19362] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.287545][T19362] netlink_unicast+0x82f/0x9e0 [ 309.287578][T19362] ? __pfx_netlink_unicast+0x10/0x10 [ 309.287606][T19362] ? netlink_sendmsg+0x642/0xb30 [ 309.287622][T19362] ? skb_put+0x11b/0x210 [ 309.287645][T19362] netlink_sendmsg+0x805/0xb30 [ 309.287673][T19362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.287696][T19362] ? aa_sock_msg_perm+0xf1/0x1d0 [ 309.287723][T19362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.287741][T19362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.287761][T19362] __sock_sendmsg+0x21c/0x270 [ 309.287788][T19362] ____sys_sendmsg+0x505/0x830 [ 309.287813][T19362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.287843][T19362] ? import_iovec+0x74/0xa0 [ 309.287868][T19362] ___sys_sendmsg+0x21f/0x2a0 [ 309.287891][T19362] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.287948][T19362] ? __fget_files+0x2a/0x420 [ 309.287964][T19362] ? __fget_files+0x3a0/0x420 [ 309.287992][T19362] __x64_sys_sendmsg+0x19b/0x260 [ 309.288016][T19362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.288054][T19362] ? do_syscall_64+0xbe/0xfa0 [ 309.288083][T19362] do_syscall_64+0xfa/0xfa0 [ 309.288107][T19362] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.288133][T19362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.288150][T19362] ? clear_bhb_loop+0x60/0xb0 [ 309.288172][T19362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.288190][T19362] RIP: 0033:0x7ff78698f6c9 [ 309.288222][T19362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.288236][T19362] RSP: 002b:00007ff7877c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.288254][T19362] RAX: ffffffffffffffda RBX: 00007ff786be5fa0 RCX: 00007ff78698f6c9 [ 309.288267][T19362] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 309.288279][T19362] RBP: 00007ff786a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 309.288289][T19362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.288300][T19362] R13: 00007ff786be6038 R14: 00007ff786be5fa0 R15: 00007ffc02166bb8 [ 309.288331][T19362] [ 309.288343][T19362] Mem-Info: [ 309.781950][T19362] active_anon:5333 inactive_anon:0 isolated_anon:0 [ 309.781950][T19362] active_file:3077 inactive_file:39964 isolated_file:0 [ 309.781950][T19362] unevictable:768 dirty:344 writeback:0 [ 309.781950][T19362] slab_reclaimable:11898 slab_unreclaimable:160033 [ 309.781950][T19362] mapped:29073 shmem:1361 pagetables:1157 [ 309.781950][T19362] sec_pagetables:0 bounce:0 [ 309.781950][T19362] kernel_misc_reclaimable:0 [ 309.781950][T19362] free:1262526 free_pcp:12182 free_cma:0 [ 309.828615][T19362] Node 0 active_anon:21332kB inactive_anon:0kB active_file:12308kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116292kB dirty:1372kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12536kB pagetables:4484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.861066][T19362] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.891159][T19362] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.921682][T19362] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 309.927511][T19362] Node 0 DMA32 free:1136876kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21332kB inactive_anon:0kB active_file:12308kB inactive_file:159656kB unevictable:1536kB writepending:1372kB zspages:0kB present:3129332kB managed:2565132kB mlocked:0kB bounce:0kB free_pcp:33956kB local_pcp:21400kB free_cma:0kB [ 309.961267][T19362] lowmem_reserve[]: 0 0 0 0 0 [ 309.966000][T19362] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.995830][T19362] lowmem_reserve[]: 0 0 0 0 0 [ 310.000711][T19362] Node 1 Normal free:3897836kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15840kB local_pcp:11360kB free_cma:0kB [ 310.033124][T19362] lowmem_reserve[]: 0 0 0 0 0 [ 310.037852][T19362] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 310.050664][T19362] Node 0 DMA32: 1031*4kB (UM) 464*8kB (UM) 121*16kB (UM) 778*32kB (UM) 857*64kB (UM) 252*128kB (UM) 75*256kB (UM) 27*512kB (UM) 11*1024kB (UM) 4*2048kB (M) 235*4096kB (M) = 1136812kB [ 310.069420][T19362] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 310.081169][T19362] Node 1 Normal: 179*4kB (UM) 44*8kB (UME) 40*16kB (UME) 124*32kB (UME) 35*64kB (UME) 10*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3897836kB [ 310.099314][T19362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.108846][T19362] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.118180][T19362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.127803][T19362] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.137125][T19362] 44398 total pagecache pages [ 310.141929][T19362] 0 pages in swap cache [ 310.146073][T19362] Free swap = 124996kB [ 310.150456][T19362] Total swap = 124996kB [ 310.154613][T19362] 2097051 pages RAM [ 310.158401][T19362] 0 pages HighMem/MovableOnly [ 310.163240][T19362] 424126 pages reserved [ 310.167399][T19362] 0 pages cma reserved [ 311.139978][T19372] __nla_validate_parse: 5 callbacks suppressed [ 311.139996][T19372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6379'. [ 311.189043][T19386] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 311.338325][T19399] netlink: 'syz.4.6391': attribute type 5 has an invalid length. [ 311.466219][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6396'. [ 311.773245][T19432] netlink: 'syz.1.6408': attribute type 2 has an invalid length. [ 311.786118][T19432] netlink: 'syz.1.6408': attribute type 1 has an invalid length. [ 311.819094][T19432] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6408'. [ 311.822018][T19436] netlink: 'syz.2.6411': attribute type 3 has an invalid length. [ 312.023180][T19449] netlink: 'syz.2.6416': attribute type 28 has an invalid length. [ 312.041958][T19449] netlink: 'syz.2.6416': attribute type 3 has an invalid length. [ 312.053763][T19449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6416'. [ 312.059977][T19451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6418'. [ 312.089356][T19451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6418'. [ 312.143960][T19455] netlink: 516 bytes leftover after parsing attributes in process `syz.0.6420'. [ 312.294073][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6427'. [ 312.409168][T19475] netlink: 'syz.3.6430': attribute type 1 has an invalid length. [ 312.496493][T19477] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6431'. [ 312.511293][T19481] netlink: 'syz.0.6432': attribute type 21 has an invalid length. [ 312.513891][T19483] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 312.520648][T19477] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6431'. [ 313.139175][T19521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.146610][T19521] IPv6: NLM_F_CREATE should be set when creating new route [ 313.154005][T19521] IPv6: NLM_F_CREATE should be set when creating new route [ 313.356084][T19533] netlink: 'syz.3.6458': attribute type 2 has an invalid length. [ 313.591071][T19551] netlink: 'syz.1.6468': attribute type 6 has an invalid length. [ 313.692253][ T5977] IPVS: starting estimator thread 0... [ 313.799336][T19561] IPVS: using max 31 ests per chain, 74400 per kthread [ 314.716720][T19643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.585609][T19771] xt_TCPMSS: Only works on TCP SYN packets [ 316.704052][T19777] xt_CT: No such helper "snmp_trap" [ 316.994188][T19800] validate_nla: 1 callbacks suppressed [ 316.994206][T19800] netlink: 'syz.3.6588': attribute type 1 has an invalid length. [ 317.019013][T19800] __nla_validate_parse: 8 callbacks suppressed [ 317.019032][T19800] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6588'. [ 317.273189][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.451191][T19830] netlink: 'syz.1.6603': attribute type 2 has an invalid length. [ 317.544185][T19840] netlink: 'syz.4.6607': attribute type 7 has an invalid length. [ 317.637995][T19846] xt_TCPMSS: Only works on TCP SYN packets [ 317.857274][T19857] bond0: option packets_per_slave: invalid value (1048582) [ 317.865599][T19857] bond0: option packets_per_slave: allowed values 0 - 65535 [ 317.880671][T19857] bond0 (unregistering): Released all slaves [ 317.970688][T19870] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 318.259125][T19888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6630'. [ 318.279210][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6633'. [ 318.298456][T19895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6633'. [ 318.385324][T19902] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6637'. [ 318.490804][T19906] netlink: 'syz.2.6639': attribute type 1 has an invalid length. [ 319.049594][T19938] netlink: 'syz.3.6655': attribute type 12 has an invalid length. [ 319.505305][T19965] netlink: 'syz.4.6667': attribute type 5 has an invalid length. [ 319.928385][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6679'. [ 320.186606][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6691'. [ 320.274504][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6692'. [ 321.749776][T20110] netlink: 'syz.1.6737': attribute type 6 has an invalid length. [ 321.757547][T20110] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.797982][T20114] netlink: 'syz.2.6740': attribute type 9 has an invalid length. [ 321.819272][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6739'. [ 321.828171][T20116] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6739'. [ 322.001600][T20130] delete_channel: no stack [ 322.109199][T20135] __nla_validate_parse: 2 callbacks suppressed [ 322.109217][T20135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6749'. [ 322.169001][T20135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6749'. [ 322.284111][T20146] bond0: entered promiscuous mode [ 322.294147][T20146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.398269][T20157] netlink: 'syz.4.6758': attribute type 1 has an invalid length. [ 322.435096][T20159] netlink: 'syz.0.6761': attribute type 10 has an invalid length. [ 322.439407][T20157] netlink: 'syz.4.6758': attribute type 2 has an invalid length. [ 322.444127][T20159] batman_adv: batadv0: Adding interface: netdevsim0 [ 322.485485][T20159] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.515385][T20159] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 322.691403][T20176] xt_hashlimit: overflow, try lower: 3/0 [ 322.952486][T20193] netlink: 'syz.3.6776': attribute type 10 has an invalid length. [ 322.976941][T20193] syz_tun: entered promiscuous mode [ 322.983071][T20193] syz_tun: entered allmulticast mode [ 322.989878][T20193] team0: Port device syz_tun added [ 323.556227][T20238] x_tables: duplicate underflow at hook 2 [ 324.504005][T20302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6832'. [ 324.521722][T20302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6832'. [ 324.624870][T20306] bond3: Removing last arp target with arp_interval on [ 324.634113][T20306] bond3: entered promiscuous mode [ 324.639303][T20306] bond3: entered allmulticast mode [ 324.645059][T20306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 324.948190][T20327] netlink: 21 bytes leftover after parsing attributes in process `syz.3.6844'. [ 325.047868][T20332] xt_TCPMSS: Only works on TCP SYN packets [ 325.508191][T20362] bond0: Error: Cannot enslave bond to itself. [ 325.727160][T20376] Ï: option downdelay: invalid value (18446744073709547007) [ 325.741750][T20376] Ï: option downdelay: allowed values 0 - 2147483647 [ 325.787304][T20376] Ï (unregistering): Released all slaves [ 325.869406][T20387] netlink: 'syz.1.6872': attribute type 49 has an invalid length. [ 325.967339][T20396] IPv6: Can't replace route, no match found [ 326.065717][T20403] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 326.078699][T20403] bond3 (unregistering): Released all slaves [ 326.513933][T20438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6897'. [ 326.671900][T20450] netlink: 'syz.1.6903': attribute type 21 has an invalid length. [ 326.726549][T20450] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6903'. [ 326.769985][T20450] netlink: 'syz.1.6903': attribute type 4 has an invalid length. [ 326.777846][T20450] netlink: 'syz.1.6903': attribute type 3 has an invalid length. [ 326.802798][T20450] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6903'. [ 326.915065][T20466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6912'. [ 326.943896][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6912'. [ 327.046209][T20470] xt_CT: No such helper "snmp" [ 327.093405][T20479] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 328.136025][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6953'. [ 328.145246][T20553] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 328.167351][T20554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6953'. [ 328.594820][T20586] netlink: 'syz.4.6969': attribute type 12 has an invalid length. [ 328.864324][T20602] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 329.251407][T20633] openvswitch: netlink: Actions may not be safe on all matching packets [ 329.503054][T20654] warn_alloc: 1 callbacks suppressed [ 329.503072][T20654] syz.2.7002: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 329.530261][T20654] CPU: 1 UID: 0 PID: 20654 Comm: syz.2.7002 Not tainted syzkaller #0 PREEMPT(full) [ 329.530287][T20654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 329.530299][T20654] Call Trace: [ 329.530306][T20654] [ 329.530314][T20654] dump_stack_lvl+0x189/0x250 [ 329.530346][T20654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.530371][T20654] ? __pfx__printk+0x10/0x10 [ 329.530390][T20654] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 329.530414][T20654] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 329.530438][T20654] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 329.530471][T20654] warn_alloc+0x214/0x310 [ 329.530497][T20654] ? stack_depot_save_flags+0x41b/0x860 [ 329.530534][T20654] ? __pfx_warn_alloc+0x10/0x10 [ 329.530560][T20654] ? kasan_save_track+0x3e/0x80 [ 329.530581][T20654] ? __kasan_kmalloc+0x93/0xb0 [ 329.530605][T20654] ? xsk_setsockopt+0x4dc/0x8d0 [ 329.530626][T20654] ? do_sock_setsockopt+0x17c/0x1b0 [ 329.530643][T20654] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 329.530661][T20654] ? do_syscall_64+0xfa/0xfa0 [ 329.530682][T20654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.530706][T20654] __vmalloc_node_range_noprof+0x125/0x12d0 [ 329.530759][T20654] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 329.530788][T20654] ? __kasan_kmalloc+0x93/0xb0 [ 329.530815][T20654] vmalloc_user_noprof+0xad/0xf0 [ 329.530838][T20654] ? xskq_create+0xbf/0x170 [ 329.530863][T20654] xskq_create+0xbf/0x170 [ 329.530890][T20654] xsk_init_queue+0xb0/0x110 [ 329.530914][T20654] xsk_setsockopt+0x4dc/0x8d0 [ 329.530937][T20654] ? __pfx_xsk_setsockopt+0x10/0x10 [ 329.530962][T20654] ? __pfx_aa_sk_perm+0x10/0x10 [ 329.530987][T20654] ? aa_sock_opt_perm+0xff/0x1b0 [ 329.531013][T20654] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 329.531028][T20654] ? __pfx_xsk_setsockopt+0x10/0x10 [ 329.531050][T20654] do_sock_setsockopt+0x17c/0x1b0 [ 329.531073][T20654] __x64_sys_setsockopt+0x13f/0x1b0 [ 329.531094][T20654] do_syscall_64+0xfa/0xfa0 [ 329.531116][T20654] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.531139][T20654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.531155][T20654] ? clear_bhb_loop+0x60/0xb0 [ 329.531173][T20654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.531188][T20654] RIP: 0033:0x7fd7b538f6c9 [ 329.531204][T20654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.531217][T20654] RSP: 002b:00007fd7b61b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 329.531234][T20654] RAX: ffffffffffffffda RBX: 00007fd7b55e5fa0 RCX: 00007fd7b538f6c9 [ 329.531245][T20654] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 329.531257][T20654] RBP: 00007fd7b5411f91 R08: 0000000000000004 R09: 0000000000000000 [ 329.531266][T20654] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.531278][T20654] R13: 00007fd7b55e6038 R14: 00007fd7b55e5fa0 R15: 00007ffed0f32868 [ 329.531309][T20654] [ 329.531753][T20654] Mem-Info: [ 329.563902][T20658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7005'. [ 329.599131][T20654] active_anon:5328 inactive_anon:0 isolated_anon:0 [ 329.599131][T20654] active_file:3077 inactive_file:39972 isolated_file:0 [ 329.599131][T20654] unevictable:768 dirty:287 writeback:0 [ 329.599131][T20654] slab_reclaimable:11923 slab_unreclaimable:157192 [ 329.599131][T20654] mapped:29046 shmem:1361 pagetables:1147 [ 329.599131][T20654] sec_pagetables:0 bounce:0 [ 329.599131][T20654] kernel_misc_reclaimable:0 [ 329.599131][T20654] free:1265559 free_pcp:13492 free_cma:0 [ 329.747785][T20665] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7008'. [ 329.797123][T20654] Node 0 active_anon:21612kB inactive_anon:0kB active_file:12308kB inactive_file:159688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116284kB dirty:1144kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12736kB pagetables:4944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.969072][T20654] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 330.026688][T20654] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.028684][T20672] sit0: entered promiscuous mode [ 330.058732][T20654] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 330.068885][T20654] Node 0 DMA32 free:1148224kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21392kB inactive_anon:0kB active_file:12308kB inactive_file:159688kB unevictable:1536kB writepending:1168kB zspages:0kB present:3129332kB managed:2565132kB mlocked:0kB bounce:0kB free_pcp:38684kB local_pcp:18124kB free_cma:0kB [ 330.105035][T20672] netlink: 'syz.4.7013': attribute type 1 has an invalid length. [ 330.113511][T20672] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7013'. [ 330.125281][T20654] lowmem_reserve[]: 0 0 0 0 0 [ 330.135091][T20654] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.174830][T20675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.202128][T20654] lowmem_reserve[]: 0 0 0 0 0 [ 330.214177][T20654] Node 1 Normal free:3898348kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15328kB local_pcp:4224kB free_cma:0kB [ 330.262083][T20654] lowmem_reserve[]: 0 0 0 0 0 [ 330.267078][T20654] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 330.283430][T20654] Node 0 DMA32: 1278*4kB (UM) 481*8kB (UM) 169*16kB (UME) 804*32kB (UM) 851*64kB (UM) 261*128kB (UM) 86*256kB (UME) 29*512kB (UME) 16*1024kB (UME) 5*2048kB (ME) 234*4096kB (M) = 1147216kB [ 330.300720][T20681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7016'. [ 330.308763][T20654] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 330.416077][T20654] Node 1 Normal: 179*4kB (UM) 44*8kB (UME) 40*16kB (UME) 134*32kB (UME) 36*64kB (UME) 11*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3898348kB [ 330.450076][T20654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 330.479099][T20654] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 330.508912][T20654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 330.518625][T20654] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 330.543149][T20654] 44406 total pagecache pages [ 330.595047][T20654] 0 pages in swap cache [ 330.616190][T20654] Free swap = 124996kB [ 330.629349][T20654] Total swap = 124996kB [ 330.633640][T20654] 2097051 pages RAM [ 330.657749][T20654] 0 pages HighMem/MovableOnly [ 330.671517][T20696] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 330.672819][T20654] 424126 pages reserved [ 330.689778][T20654] 0 pages cma reserved [ 330.800483][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'. [ 330.827683][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'. [ 330.846727][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'. [ 330.852356][T20710] netlink: 'syz.4.7030': attribute type 10 has an invalid length. [ 330.857328][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'. [ 330.877266][ T5834] Bluetooth: hci0: command tx timeout [ 330.918452][T20710] veth1_vlan: entered allmulticast mode [ 330.953749][T20710] veth1_vlan: left promiscuous mode [ 330.976104][T20710] team0: Device veth1_vlan failed to register rx_handler [ 331.112441][T20716] xt_CT: No such helper "syz0" [ 331.614813][T20762] netlink: 'syz.4.7054': attribute type 30 has an invalid length. [ 331.645807][T20765] SET target dimension over the limit! [ 331.711401][T20768] netlink: 'syz.1.7057': attribute type 1 has an invalid length. [ 331.748112][T20768] netlink: 'syz.1.7057': attribute type 1 has an invalid length. [ 332.110212][T20796] netlink: 'syz.4.7070': attribute type 2 has an invalid length. [ 332.156570][T20796] !: entered promiscuous mode [ 332.163297][T20801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.316657][T20812] netlink: 'syz.1.7078': attribute type 21 has an invalid length. [ 332.342375][T20812] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.350609][T20812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.357855][T20812] IPv6: NLM_F_CREATE should be set when creating new route [ 332.365304][T20812] IPv6: NLM_F_CREATE should be set when creating new route [ 332.372587][T20812] IPv6: NLM_F_CREATE should be set when creating new route [ 332.518040][T20823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.195806][T20874] __nla_validate_parse: 101 callbacks suppressed [ 333.195826][T20874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7108'. [ 333.579959][T20906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.645845][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7127'. [ 335.110804][T20996] xt_CONNSECMARK: invalid mode: 0 [ 335.146780][T20993] bond0: option mode: invalid value (254) [ 335.157586][T20993] bond0 (unregistering): Released all slaves [ 335.225993][T21001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7158'. [ 335.245729][T21001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7158'. [ 335.255041][T21001] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7158'. [ 335.677070][T21035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7176'. [ 335.703240][T21035] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 336.119129][T21064] netlink: 'syz.2.7190': attribute type 2 has an invalid length. [ 336.270010][T21072] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7194'. [ 336.993789][T21119] Bluetooth: MGMT ver 1.23 [ 337.282088][T21138] netlink: 'syz.4.7222': attribute type 11 has an invalid length. [ 337.301628][T21138] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7222'. [ 337.360862][T21146] xt_connbytes: Forcing CT accounting to be enabled [ 337.587585][T21162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7235'. [ 338.037410][T21192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7249'. [ 338.180764][T21200] macsec1: entered allmulticast mode [ 338.186110][T21200] macsec0: entered allmulticast mode [ 338.202675][T21200] veth1_macvtap: entered allmulticast mode [ 338.329916][T21207] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 338.342322][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7256'. [ 338.343209][T21207] bond0 (unregistering): Released all slaves [ 338.361911][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7256'. [ 338.874438][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7271'. [ 339.246762][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7281'. [ 339.289434][T21265] erspan0: entered promiscuous mode [ 339.311647][T21265] erspan0: left promiscuous mode [ 339.751107][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7298'. [ 340.609515][T11157] IPVS: starting estimator thread 0... [ 340.664597][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7323'. [ 340.696718][T21352] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 340.699800][T21345] IPVS: using max 32 ests per chain, 76800 per kthread [ 340.752628][T21356] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.7326'. [ 340.766205][T21356] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 340.924468][T21366] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7331'. [ 341.198491][T21381] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7338'. [ 341.450476][T21397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7346'. [ 341.459922][T21397] tipc: Invalid UDP bearer configuration [ 341.459976][T21397] tipc: Enabling of bearer rejected, failed to enable media [ 341.781403][T21417] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 341.880405][T21423] syz.4.7359 (21423) used obsolete PPPIOCDETACH ioctl [ 342.736579][T21486] xt_HMARK: proto mask must be zero with L3 mode [ 343.261122][T21525] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 343.301251][T21529] netlink: zone id is out of range [ 343.306509][T21529] netlink: zone id is out of range [ 343.312132][T21529] netlink: set zone limit has 8 unknown bytes [ 343.358012][T21534] __nla_validate_parse: 4 callbacks suppressed [ 343.358030][T21534] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7414'. [ 343.398026][T21534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.538498][T21546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7420'. [ 343.980759][T21573] vlan0: entered promiscuous mode [ 343.986084][T21573] geneve1: entered promiscuous mode [ 343.992449][T21573] vlan0: entered allmulticast mode [ 343.997861][T21573] geneve1: entered allmulticast mode [ 344.129639][T21587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7439'. [ 344.141544][T21587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7439'. [ 344.390557][T21607] syz.4.7449 uses old SIOCAX25GETINFO [ 344.754565][T21625] team0 (unregistering): left allmulticast mode [ 344.762446][T21625] team_slave_0: left allmulticast mode [ 344.768103][T21625] ±ÿ: left allmulticast mode [ 344.773341][T21625] syz_tun: left allmulticast mode [ 344.778505][T21625] team0 (unregistering): left promiscuous mode [ 344.781478][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7463'. [ 344.785625][T21625] team_slave_0: left promiscuous mode [ 344.800526][T21625] ±ÿ: left promiscuous mode [ 344.805307][T21625] syz_tun: left promiscuous mode [ 344.810838][T21625] bridge0: port 3(team0) entered disabled state [ 344.824640][T21625] team0 (unregistering): Port device team_slave_0 removed [ 344.835252][T21625] team0 (unregistering): Port device 26±ÿ removed [ 344.851662][T21625] team0 (unregistering): Port device syz_tun removed [ 344.867733][T21638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7464'. [ 344.928246][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7465'. [ 345.273211][T21665] netlink: 'syz.1.7477': attribute type 1 has an invalid length. [ 345.281840][T21665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7477'. [ 346.439875][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7510'. [ 347.192678][T11157] IPVS: starting estimator thread 0... [ 347.289188][T21776] IPVS: using max 28 ests per chain, 67200 per kthread [ 347.397327][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.406852][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.417184][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.426023][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.434256][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.453662][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.455678][T21789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7533'. [ 347.463091][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.479059][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.488096][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.496277][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.588334][T21785] lo speed is unknown, defaulting to 1000 [ 347.969995][T21785] wlan0 speed is unknown, defaulting to 1000 [ 348.123335][T21824] Bluetooth: MGMT ver 1.23 [ 348.246801][T21785] chnl_net:caif_netlink_parms(): no params data found [ 348.843216][T21785] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.863177][T21785] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.877010][T21785] bridge_slave_0: entered allmulticast mode [ 348.896196][T21785] bridge_slave_0: entered promiscuous mode [ 348.919748][T21785] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.938351][T21785] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.960254][T21785] bridge_slave_1: entered allmulticast mode [ 348.989919][T21785] bridge_slave_1: entered promiscuous mode [ 349.175381][T21785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.223625][T21785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.348217][T21785] team0: Port device team_slave_0 added [ 349.363384][T21785] team0: Port device team_slave_1 added [ 349.442518][T21785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.453191][T21785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.534904][ T5832] Bluetooth: hci5: command tx timeout [ 349.541317][T21785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.554677][T21785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.563242][T21785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.589764][T21785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.683303][T21785] hsr_slave_0: entered promiscuous mode [ 349.691778][T21785] hsr_slave_1: entered promiscuous mode [ 349.698353][T21785] debugfs: 'hsr0' already exists in 'hsr' [ 349.706680][T21785] Cannot create hsr debugfs directory [ 349.984332][T21899] __nla_validate_parse: 2 callbacks suppressed [ 349.984350][T21899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7581'. [ 350.123079][T21907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7586'. [ 350.325340][T21785] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.382120][T21785] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.397475][T21785] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.433455][T21785] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.690106][T21785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.711607][T21944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7601'. [ 350.763229][T21785] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.790595][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.797782][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.838163][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.845465][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.982333][T11156] IPVS: starting estimator thread 0... [ 351.070354][T21957] IPVS: using max 31 ests per chain, 74400 per kthread [ 351.341327][T21785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.592464][ T5832] Bluetooth: hci5: command tx timeout [ 351.748552][T22008] sctp: [Deprecated]: syz.2.7627 (pid 22008) Use of int in max_burst socket option deprecated. [ 351.748552][T22008] Use struct sctp_assoc_value instead [ 351.771539][T21785] veth0_vlan: entered promiscuous mode [ 351.804132][T21785] veth1_vlan: entered promiscuous mode [ 351.834991][T21785] veth0_macvtap: entered promiscuous mode [ 351.845866][T21785] veth1_macvtap: entered promiscuous mode [ 351.878011][T21785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.898843][T21785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.928153][ T1151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.962961][T22014] bond4: option lacp_rate: invalid value (255) [ 351.971329][T22014] bond4 (unregistering): Released all slaves [ 351.991132][ T1151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.000252][ T1151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.014826][ T1109] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.121974][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.137430][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.175893][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.187132][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.288691][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7519'. [ 352.978579][T22065] Bluetooth: MGMT ver 1.23 [ 353.671373][ T5832] Bluetooth: hci5: command tx timeout [ 354.114602][T22127] netlink: 'syz.3.7684': attribute type 1 has an invalid length. [ 354.265187][T22133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7686'. [ 354.300565][T22133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7686'. [ 354.352208][T22140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7689'. [ 354.404285][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7690'. [ 354.512735][T22144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7692'. [ 354.600468][T22150] tipc: Started in network mode [ 354.605511][T22150] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 354.620033][T22150] tipc: Enabled bearer , priority 10 [ 354.665773][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7696'. [ 354.777015][T22161] netlink: 'syz.1.7699': attribute type 1 has an invalid length. [ 355.075262][T22184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.740294][T11156] tipc: Node number set to 10136234 [ 355.750036][ T5832] Bluetooth: hci5: command tx timeout [ 355.904717][T22218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7726'. [ 355.930310][T22218] tipc: Enabling of bearer rejected, failed to enable media [ 356.070073][T22224] netlink: 'syz.3.7729': attribute type 16 has an invalid length. [ 356.086206][T22224] netlink: 'syz.3.7729': attribute type 3 has an invalid length. [ 356.114031][T22224] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.7729'. [ 357.536088][T22311] rdma_op ffff8880587201f0 conn xmit_rdma 0000000000000000 [ 357.627677][T22315] netlink: 'syz.4.7773': attribute type 1 has an invalid length. [ 357.881815][T22334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7783'. [ 359.714343][T22452] netlink: 'syz.4.7841': attribute type 1 has an invalid length. [ 361.090011][T22536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7881'. [ 361.161251][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7883'. [ 361.170976][T22540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.418536][T22582] sctp: [Deprecated]: syz.5.7904 (pid 22582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.418536][T22582] Use struct sctp_sack_info instead [ 362.468751][T22582] sctp: [Deprecated]: syz.5.7904 (pid 22582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.468751][T22582] Use struct sctp_sack_info instead [ 362.491499][T22585] vlan2: entered promiscuous mode [ 362.503073][T22585] gretap0: entered promiscuous mode [ 362.609989][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7909'. [ 363.372111][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7931'. [ 363.718853][T22659] netlink: 'syz.2.7941': attribute type 1 has an invalid length. [ 363.739099][T22659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.231844][T22691] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 364.435531][T22701] Bluetooth: MGMT ver 1.23 [ 364.465726][T22705] nbd: must specify at least one socket [ 364.590319][T22712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7968'. [ 364.882187][T22732] netlink: 'syz.5.7976': attribute type 6 has an invalid length. [ 364.903172][T22732] netlink: 'syz.5.7976': attribute type 6 has an invalid length. [ 365.521858][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7992'. [ 365.703965][T22783] netlink: 'syz.1.7998': attribute type 3 has an invalid length. [ 366.135179][T22811] netlink: 388 bytes leftover after parsing attributes in process `syz.1.8013'. [ 366.428700][T22832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8021'. [ 366.551430][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8027'. [ 366.569160][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8027'. [ 366.929445][T22866] netlink: 766 bytes leftover after parsing attributes in process `syz.1.8038'. [ 366.996510][T22871] tipc: Started in network mode [ 367.016049][T22871] tipc: Node identity ac14140f, cluster identity 4711 [ 367.025916][T22871] tipc: New replicast peer: 255.255.255.83 [ 367.039796][T22871] tipc: Enabled bearer , priority 10 [ 367.306460][T22892] netlink: 260 bytes leftover after parsing attributes in process `syz.1.8050'. [ 367.354531][T22892] netlink: 260 bytes leftover after parsing attributes in process `syz.1.8050'. [ 367.739993][T22918] tipc: Enabling of bearer rejected, failed to enable media [ 368.062630][T22939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8073'. [ 368.128060][T22945] No such timeout policy "syz1" [ 368.159539][T11156] tipc: Node number set to 2886997007 [ 368.189443][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8077'. [ 368.392507][T22959] netlink: 'syz.2.8083': attribute type 1 has an invalid length. [ 368.452535][T22959] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8083'. [ 369.215679][T23012] Bluetooth: MGMT ver 1.23 [ 369.793504][T23047] pim6reg: entered allmulticast mode [ 369.809604][T23047] pim6reg: left allmulticast mode [ 370.170144][T23069] netlink: 'syz.4.8136': attribute type 9 has an invalid length. [ 371.516798][T23149] __nla_validate_parse: 4 callbacks suppressed [ 371.516816][T23149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8171'. [ 372.190208][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8188'. [ 372.196987][T23185] netlink: 'syz.2.8191': attribute type 2 has an invalid length. [ 372.217650][T23183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8188'. [ 372.231141][T23185] netlink: 'syz.2.8191': attribute type 2 has an invalid length. [ 372.372461][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8194'. [ 372.652750][T23202] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 372.703963][T23202] tipc: Enabled bearer , priority 10 [ 373.563450][T23257] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8225'. [ 374.449456][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8252'. [ 374.525697][T23319] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8254'. [ 374.941832][T23343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8266'. [ 374.976275][T23343] netlink: 'syz.2.8266': attribute type 4 has an invalid length. [ 375.247213][T23364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8276'. [ 375.670086][T23390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8289'. [ 375.892464][T23406] netlink: 'syz.4.8295': attribute type 14 has an invalid length. [ 376.462918][T23449] netlink: 'syz.2.8315': attribute type 1 has an invalid length. [ 377.381586][T23509] __nla_validate_parse: 6 callbacks suppressed [ 377.381606][T23509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8342'. [ 377.739960][T23532] ipvlan2: entered promiscuous mode [ 377.750032][T23532] bridge0: port 3(ipvlan2) entered blocking state [ 377.756710][T23532] bridge0: port 3(ipvlan2) entered disabled state [ 377.779990][T23532] ipvlan2: entered allmulticast mode [ 377.785900][T23532] bridge0: entered allmulticast mode [ 377.803375][T23532] ipvlan2: left allmulticast mode [ 377.817138][T23532] bridge0: left allmulticast mode [ 378.241608][T23549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8361'. [ 378.250904][T23549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8361'. [ 378.587977][T23556] netlink: 'syz.4.8365': attribute type 29 has an invalid length. [ 378.634058][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8367'. [ 378.714746][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.085696][T23585] netlink: 'syz.3.8380': attribute type 15 has an invalid length. [ 379.501703][T23615] macsec1: entered promiscuous mode [ 379.507257][T23615] macsec1: entered allmulticast mode [ 380.454748][T23688] tipc: Enabling of bearer rejected, failed to enable media [ 381.190413][T23737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8452'. [ 381.352584][T23753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8459'. [ 381.470449][T23759] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8461'. [ 381.825792][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8476'. [ 381.975715][T23795] tipc: Started in network mode [ 381.991597][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8482'. [ 381.995172][T23795] tipc: Node identity aaaaaaaaaa1b, cluster identity 4711 [ 382.008580][T23795] tipc: Enabled bearer , priority 10 [ 382.379743][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8494'. [ 383.119180][ T5938] tipc: Node number set to 11643562 [ 383.280803][T23864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8514'. [ 383.483696][T23872] sit2: entered promiscuous mode [ 383.736644][T23890] sock: sock_set_timeout: `syz.1.8526' (pid 23890) tries to set negative timeout [ 384.201476][T23922] netlink: 'syz.5.8542': attribute type 1 has an invalid length. [ 384.210424][T23922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.357631][T23928] netlink: 'syz.5.8545': attribute type 1 has an invalid length. [ 384.385524][T23928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.448685][T23934] netlink: 'syz.1.8548': attribute type 1 has an invalid length. [ 384.566539][T23939] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8550'. [ 385.120405][T23961] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.178266][T23961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.208382][ T5941] lo speed is unknown, defaulting to 1000 [ 385.215396][ T5941] syz2: Port: 1 Link ACTIVE [ 385.225835][ T5941] lo speed is unknown, defaulting to 1000 [ 386.046132][T24031] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8593'. [ 386.547608][T24065] netlink: 'syz.2.8610': attribute type 1 has an invalid length. [ 386.893298][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8622'. [ 387.261188][T24104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.543932][T24125] xt_l2tp: unknown flags: 51 [ 387.696332][T24135] netlink: 344 bytes leftover after parsing attributes in process `syz.5.8643'. [ 387.713072][T24135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8643'. [ 388.069513][T24154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8652'. [ 388.243041][T24161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8656'. [ 388.268250][T24165] tipc: Invalid UDP bearer configuration [ 388.268304][T24165] tipc: Enabling of bearer rejected, failed to enable media [ 388.759617][T24197] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.8672'. [ 388.851739][T24202] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 389.094183][T24213] lo speed is unknown, defaulting to 1000 [ 389.301855][T24213] wlan0 speed is unknown, defaulting to 1000 [ 389.438096][T24228] netlink: 'syz.3.8684': attribute type 1 has an invalid length. [ 389.467609][T24226] macsec1: entered promiscuous mode [ 389.508485][T24226] macsec1: entered allmulticast mode [ 389.966402][T24241] bridge6: entered promiscuous mode [ 389.978747][T24241] bridge6: entered allmulticast mode [ 389.999445][T24241] team0: Port device bridge6 added [ 390.452819][T24281] nbd: couldn't find device at index 536870912 [ 391.640968][T24360] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8747'. [ 391.693176][T24365] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8750'. [ 391.867343][T24378] bond0: (slave rose0): Enslaving as an active interface with an up link [ 392.042945][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8761'. [ 392.139307][T24390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.214606][T24400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8767'. [ 392.834380][T24444] bridge0: port 3(veth0_to_bridge) entered blocking state [ 392.856549][T24444] bridge0: port 3(veth0_to_bridge) entered disabled state [ 392.870504][T24444] veth0_to_bridge: entered allmulticast mode [ 392.889815][T24444] veth0_to_bridge: entered promiscuous mode [ 393.073174][T24462] netlink: 'syz.4.8796': attribute type 5 has an invalid length. [ 393.649710][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8814'. [ 393.660301][T24505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8814'. [ 393.673170][T24505] netlink: 'syz.5.8814': attribute type 7 has an invalid length. [ 393.785073][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8819'. [ 394.028530][T24532] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8827'. [ 394.123937][T24536] netlink: 4348 bytes leftover after parsing attributes in process `syz.5.8830'. [ 394.163800][T24536] netlink: 4348 bytes leftover after parsing attributes in process `syz.5.8830'. [ 394.240058][T24541] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.250171][T24541] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.307801][T24545] netlink: 'syz.4.8834': attribute type 3 has an invalid length. [ 394.664932][T24571] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 394.760341][T24578] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8850'. [ 394.769675][T24580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8852'. [ 394.911692][T24588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8856'. [ 394.936003][T24590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.040194][T24598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 395.353178][T24620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8872'. [ 395.399144][T24620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8872'. [ 395.486671][T24628] sit0: left promiscuous mode [ 395.510819][T24628] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.527567][T24628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.636728][T24638] netlink: 47 bytes leftover after parsing attributes in process `syz.1.8880'. [ 395.786185][T24643] openvswitch: netlink: Message has 572 unknown bytes. [ 395.809629][T24649] netlink: 'syz.1.8882': attribute type 18 has an invalid length. [ 395.818672][T24643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.359526][T24686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.379913][T24763] netem: change failed [ 398.012861][T24805] netlink: 'syz.3.8963': attribute type 15 has an invalid length. [ 398.721163][T24855] syz_tun: entered promiscuous mode [ 398.726778][T24855] macsec1: entered promiscuous mode [ 398.758123][T24855] macsec1: entered allmulticast mode [ 398.777167][T24855] syz_tun: entered allmulticast mode [ 398.801424][T24855] syz_tun: left allmulticast mode [ 398.806922][T24855] syz_tun: left promiscuous mode [ 398.850805][T24859] vlan2: entered allmulticast mode [ 398.857090][T24859] batadv_slave_1: entered allmulticast mode [ 399.024501][T24874] IPVS: Scheduler module ip_vs_ not found [ 399.114193][T24884] __nla_validate_parse: 5 callbacks suppressed [ 399.114210][T24884] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9000'. [ 399.237153][T24893] netlink: 11 bytes leftover after parsing attributes in process `syz.5.9004'. [ 399.248499][T24893] netlink: 11 bytes leftover after parsing attributes in process `syz.5.9004'. [ 399.260847][T24893] netlink: 11 bytes leftover after parsing attributes in process `syz.5.9004'. [ 399.271639][T24893] netlink: 11 bytes leftover after parsing attributes in process `syz.5.9004'. [ 399.372407][T24901] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9008'. [ 400.232234][T24942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9028'. [ 400.351229][T24948] netlink: 277 bytes leftover after parsing attributes in process `syz.5.9031'. [ 400.657206][T24959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9034'. [ 400.696225][T24962] netlink: 'syz.4.9039': attribute type 1 has an invalid length. [ 400.708031][T24962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9039'. [ 401.013021][T24979] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.211118][ T30] audit: type=1804 audit(1762824912.632:3): pid=24996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9055" name="/newroot/1827/cgroup.controllers" dev="tmpfs" ino=9162 res=1 errno=0 [ 401.262168][ T30] audit: type=1800 audit(1762824912.632:4): pid=24996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9055" name="cgroup.controllers" dev="tmpfs" ino=9162 res=0 errno=0 [ 401.352332][T25005] netlink: 'syz.3.9059': attribute type 5 has an invalid length. [ 402.962733][T25101] tipc: Enabling of bearer rejected, failed to enable media [ 403.059235][T25109] sctp: [Deprecated]: syz.2.9111 (pid 25109) Use of int in maxseg socket option. [ 403.059235][T25109] Use struct sctp_assoc_value instead [ 403.367759][T25130] bond4: invalid ARP target 0.0.0.0 specified for addition [ 403.378560][T25130] bond4: option arp_ip_target: invalid value (0) [ 403.393211][T25130] bond4 (unregistering): Released all slaves [ 404.926366][T25205] __nla_validate_parse: 11 callbacks suppressed [ 404.926389][T25205] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.9157'. [ 405.134102][T25217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9162'. [ 405.865164][T25258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9182'. [ 405.924200][T25258] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 406.332884][T25294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9199'. [ 406.354426][T25294] tipc: Started in network mode [ 406.364701][T25294] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 406.409493][T25294] tipc: Enabling of bearer rejected, failed to enable media [ 406.530646][T25307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9205'. [ 406.860173][T25327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9215'. [ 406.869499][T25327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9215'. [ 407.123300][T25343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9222'. [ 407.231394][T25351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9227'. [ 407.614085][T25380] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9241'. [ 407.867822][T25394] : entered promiscuous mode [ 408.745806][T25451] netlink: 'syz.2.9276': attribute type 11 has an invalid length. [ 409.443129][T25506] netlink: 'syz.5.9304': attribute type 18 has an invalid length. [ 409.603041][T25512] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 410.079932][T25537] macvtap1: entered promiscuous mode [ 410.099325][T25537] batadv0: entered promiscuous mode [ 410.114937][T25537] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 410.253540][T25537] batadv0: left promiscuous mode [ 411.464786][T25595] __nla_validate_parse: 4 callbacks suppressed [ 411.464805][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9345'. [ 411.642635][T25604] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 411.783301][T25612] : entered promiscuous mode [ 412.079258][T25630] netlink: 'syz.2.9364': attribute type 3 has an invalid length. [ 412.097322][T25630] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9364'. [ 412.189649][T25636] tipc: Enabled bearer , priority 10 [ 412.320828][T25646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.499177][T25658] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9377'. [ 412.543769][T25662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9379'. [ 412.648544][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9385'. [ 412.699905][T25672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9383'. [ 412.959195][T25692] netlink: 1028 bytes leftover after parsing attributes in process `syz.4.9394'. [ 413.010806][T25692] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 413.068823][T25700] pimreg3: entered allmulticast mode [ 413.302386][T25716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9406'. [ 413.331210][T25716] bridge_slave_0: default FDB implementation only supports local addresses [ 413.429398][T25722] netlink: 71 bytes leftover after parsing attributes in process `syz.2.9409'. [ 413.710146][T25741] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9417'. [ 413.731432][T25741] netlink: 'syz.2.9417': attribute type 5 has an invalid length. [ 413.759493][T25741] netlink: 'syz.2.9417': attribute type 6 has an invalid length. [ 413.799688][T25749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.996640][T25765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.622189][T25805] macsec1: entered promiscuous mode [ 414.637975][T25805] macsec0: entered promiscuous mode [ 414.646523][T25805] macsec0: left promiscuous mode [ 414.681219][T25808] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 416.151091][T25905] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 416.243335][T25912] netlink: 'syz.3.9498': attribute type 1 has an invalid length. [ 416.328651][T25918] netlink: 'syz.1.9501': attribute type 10 has an invalid length. [ 416.461609][T25927] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 416.550427][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 416.667738][T25943] netlink: 'syz.2.9514': attribute type 16 has an invalid length. [ 416.678066][T25943] netlink: 'syz.2.9514': attribute type 1 has an invalid length. [ 416.702616][T25943] netlink: 'syz.2.9514': attribute type 2 has an invalid length. [ 416.822352][ T5977] IPVS: starting estimator thread 0... [ 416.909388][T25954] IPVS: using max 39 ests per chain, 93600 per kthread [ 418.059479][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.085796][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.109592][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.136062][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.478296][T26052] __nla_validate_parse: 12 callbacks suppressed [ 418.478317][T26052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9562'. [ 419.785917][ T1109] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.799252][ T1109] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.808451][ T1109] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.819820][ T1109] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.370160][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9620'. [ 420.668422][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9630'. [ 420.678199][T26193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9630'. [ 420.693622][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9630'. [ 420.713113][T26193] netlink: 'syz.4.9630': attribute type 5 has an invalid length. [ 421.324974][T26236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9651'. [ 421.446347][T26245] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9656'. [ 421.477417][T26248] nbd: must specify an index to disconnect [ 422.697213][T26321] team_slave_0: entered promiscuous mode [ 422.703198][T26321] team_slave_1: entered promiscuous mode [ 422.786388][T26325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9693'. [ 422.821140][T26327] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9695'. [ 422.822255][T26325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9693'. [ 423.629498][T26386] macvtap1: entered promiscuous mode [ 423.635232][T26386] veth1_to_hsr: entered promiscuous mode [ 423.649779][T26386] macvtap1: entered allmulticast mode [ 423.655299][T26386] veth1_to_hsr: entered allmulticast mode [ 423.719929][T26392] __nla_validate_parse: 2 callbacks suppressed [ 423.719949][T26392] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9726'. [ 424.098281][T26418] nbd: must specify a size in bytes for the device [ 424.444516][T26437] ip6gre1: entered promiscuous mode [ 424.478348][T26443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9749'. [ 424.880787][T26473] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.9765'. [ 424.907606][T26473] openvswitch: netlink: Message has 6 unknown bytes. [ 425.003526][T26479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9766'. [ 425.024901][T26479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9766'. [ 425.471250][T26509] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9782'. [ 426.089423][T26540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9797'. [ 426.204041][T26551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9801'. [ 426.320423][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9802'. [ 426.323936][T26560] xt_socket: unknown flags 0xfc [ 426.614259][T26577] IPVS: Error connecting to the multicast addr [ 426.686532][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9818'. [ 428.949667][T26751] __nla_validate_parse: 9 callbacks suppressed [ 428.949684][T26751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9898'. [ 429.315172][T26774] netlink: 'syz.2.9909': attribute type 1 has an invalid length. [ 430.610437][T26855] netlink: 'syz.4.9946': attribute type 1 has an invalid length. [ 431.104552][T26882] tipc: Enabling of bearer rejected, already enabled [ 431.369272][T26898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9967'. [ 431.402390][T26898] vlan2: entered promiscuous mode [ 432.223855][T26945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9991'. [ 432.319080][T26949] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9993'. [ 432.773679][T26984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.326269][T27015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10023'. [ 433.371188][T27015] macsec2: entered promiscuous mode [ 433.383207][T27015] macsec2: entered allmulticast mode [ 433.756625][T27041] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10033'. [ 434.053313][T27049] "syz.4.10039" (27049) uses obsolete ecb(arc4) skcipher [ 434.479763][T27096] tipc: Enabling of bearer rejected, already enabled [ 434.507994][T27092] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10058'. [ 434.542142][T27092] block nbd0: not configured, cannot reconfigure [ 434.646321][T27104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10064'. [ 435.277233][T27150] netlink: 'syz.1.10087': attribute type 178 has an invalid length. [ 435.798238][T27189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10105'. [ 435.814967][T27189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10105'. [ 435.827141][T27192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.709050][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 436.913709][T27256] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10138'. [ 436.976331][T27258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10139'. [ 437.377199][T27280] pim6reg: entered allmulticast mode [ 437.695857][T27299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10157'. [ 438.088160][T27332] netlink: 'syz.4.10173': attribute type 5 has an invalid length. [ 438.103444][T27332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10173'. [ 438.699942][T27375] netlink: 'syz.2.10192': attribute type 1 has an invalid length. [ 438.708459][T27375] netlink: 'syz.2.10192': attribute type 3 has an invalid length. [ 438.717545][T27375] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10192'. [ 438.727300][T27375] NCSI netlink: No device for ifindex 813332851 [ 438.809854][T27383] xt_l2tp: wrong L2TP version: 1 [ 438.914114][T27390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10199'. [ 439.151930][T27402] nbd: socks must be embedded in a SOCK_ITEM attr [ 439.289273][T27412] sctp: [Deprecated]: syz.5.10209 (pid 27412) Use of int in max_burst socket option. [ 439.289273][T27412] Use struct sctp_assoc_value instead [ 440.140158][T27462] dvmrp1: entered allmulticast mode [ 440.153098][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.181757][T27462] dvmrp1: left allmulticast mode [ 440.405095][T27478] netlink: 'syz.1.10240': attribute type 4 has an invalid length. [ 440.421694][T27478] __nla_validate_parse: 1 callbacks suppressed [ 440.421711][T27478] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10240'. [ 440.437945][T27481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10239'. [ 440.472111][T27481] 8021q: VLANs not supported on ipvlan1 [ 440.683573][T27498] veth0_to_bridge: left allmulticast mode [ 440.700454][T27498] veth0_to_bridge: left promiscuous mode [ 440.706378][T27498] bridge0: port 3(veth0_to_bridge) entered disabled state [ 440.752837][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10250'. [ 440.777047][T27498] bridge_slave_0: left allmulticast mode [ 440.795830][T27498] bridge_slave_0: left promiscuous mode [ 440.813825][T27498] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.871967][T27498] bridge_slave_1: left allmulticast mode [ 440.897255][T27498] bridge_slave_1: left promiscuous mode [ 440.912956][T27498] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.945457][T27498] bond0: (slave bond_slave_0): Releasing backup interface [ 440.968012][T27498] bond0: (slave bond_slave_1): Releasing backup interface [ 440.987226][T27498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.999329][T27498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.017416][T27498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.182154][T27524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10261'. [ 441.672758][T27559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10279'. [ 441.824907][T27568] macsec1: entered promiscuous mode [ 442.145275][T27590] ip6gre1: entered promiscuous mode [ 442.158232][T27590] ip6gre1: entered allmulticast mode [ 442.936330][T27648] netlink: 'syz.4.10322': attribute type 16 has an invalid length. [ 442.956949][T27652] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10323'. [ 442.966444][T27652] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10323'. [ 443.006145][T27652] gretap0: entered promiscuous mode [ 443.012559][T27655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10324'. [ 443.059057][T27652] gretap0: left promiscuous mode [ 444.049907][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10355'. [ 444.371104][T27737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10361'. [ 444.430873][T27728] udevd[27728]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 444.465149][T27728] udevd[27728]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 444.752570][T27756] openvswitch: netlink: Message has 8 unknown bytes. [ 445.424095][T27798] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 445.622335][T27811] netlink: 'syz.5.10396': attribute type 1 has an invalid length. [ 445.662380][T27811] netlink: 'syz.5.10396': attribute type 3 has an invalid length. [ 445.697765][T27811] __nla_validate_parse: 2 callbacks suppressed [ 445.697786][T27811] netlink: 172 bytes leftover after parsing attributes in process `syz.5.10396'. [ 445.742875][T27811] NCSI netlink: No device for ifindex 813332851 [ 446.196312][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10417'. [ 446.331559][T27864] netlink: 'syz.3.10420': attribute type 11 has an invalid length. [ 446.340388][T27864] netlink: 'syz.3.10420': attribute type 11 has an invalid length. [ 446.348311][T27864] netlink: 204 bytes leftover after parsing attributes in process `syz.3.10420'. [ 446.624306][T27883] netlink: 'syz.3.10432': attribute type 63 has an invalid length. [ 446.775696][T27892] tipc: Enabling of bearer rejected, failed to enable media [ 446.820754][T27896] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10438'. [ 447.149887][T27918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10448'. [ 447.199370][T27918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10448'. [ 447.290124][T27927] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.10452'. [ 447.340963][T27927] ksmbd: Unknown IPC event: 1, ignore. [ 448.244037][T27992] netlink: 'syz.2.10485': attribute type 2 has an invalid length. [ 448.569549][T28015] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.10495'. [ 449.318729][T28044] syz.3.10509 (28044) used greatest stack depth: 17832 bytes left [ 449.563067][T28050] udevd[28050]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 450.209932][T28098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10533'. [ 450.222547][T28098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10533'. [ 450.233223][T28098] netlink: 'syz.1.10533': attribute type 13 has an invalid length. [ 450.643791][T28127] openvswitch: netlink: Message has 536 unknown bytes. [ 450.670038][T28126] x_tables: duplicate underflow at hook 1 [ 450.672686][T28127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.849234][T28133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10549'. [ 451.063241][T28146] netlink: 'syz.3.10554': attribute type 3 has an invalid length. [ 451.194482][T28152] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.361892][T28164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10563'. [ 452.159495][T28214] netlink: 'syz.4.10584': attribute type 49 has an invalid length. [ 452.419177][T28229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10596'. [ 452.429541][T28229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10596'. [ 452.436287][T28235] netlink: 'syz.5.10597': attribute type 1 has an invalid length. [ 452.530035][T28238] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10599'. [ 453.631726][T28283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10622'. [ 453.680814][T28283] veth5: entered promiscuous mode [ 453.972558][T28308] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10633'. [ 454.024782][T28308] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10633'. [ 454.272248][T28330] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 454.278523][T28334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10645'. [ 454.429817][T28338] macsec2: entered promiscuous mode [ 454.447875][T28338] macsec2: entered allmulticast mode [ 454.619984][T28349] xt_CT: No such helper "snmp" [ 454.915151][T28370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10661'. [ 455.843370][T28417] netlink: 'syz.3.10685': attribute type 2 has an invalid length. [ 455.872715][T28417] __nla_validate_parse: 2 callbacks suppressed [ 455.872734][T28417] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10685'. [ 456.199325][T28437] netlink: 'syz.2.10693': attribute type 1 has an invalid length. [ 456.283610][T28427] udevd[28427]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 456.343035][T28449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10699'. [ 456.353673][T28449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10699'. [ 456.365981][T28448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.517145][T28459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10704'. [ 457.023959][T28494] netlink: 'syz.5.10720': attribute type 27 has an invalid length. [ 459.238265][T28604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.557817][T28626] xt_l2tp: v2 tid > 0xffff: 37482740 [ 459.896808][T28654] netlink: 'syz.4.10799': attribute type 3 has an invalid length. [ 459.905921][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10799'. [ 460.026790][T28664] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10804'. [ 460.516317][T28702] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10820'. [ 460.694148][T28710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10825'. [ 461.462740][T28745] erspan0: entered promiscuous mode [ 461.472536][T28744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10839'. [ 461.828494][T28764] netlink: 300 bytes leftover after parsing attributes in process `syz.3.10851'. [ 461.991771][T28776] tun0: tun_chr_ioctl cmd 1074025681 [ 462.380187][T28794] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.406357][T28792] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.436068][T28792] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.488507][T28792] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.536637][T28792] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.551596][T28792] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.565630][T28792] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.594504][T28792] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.615395][T28792] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.627406][T28792] netlink: 'syz.1.10864': attribute type 29 has an invalid length. [ 462.879040][T28816] hsr_slave_1 (unregistering): left promiscuous mode [ 463.226429][T28835] netlink: 184 bytes leftover after parsing attributes in process `syz.1.10885'. [ 463.253886][T28835] NCSI netlink: No device for ifindex 131092 [ 463.541699][T28855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10895'. [ 464.017039][T28891] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10911'. [ 465.243407][T28975] bond0: entered promiscuous mode [ 465.248484][T28975] bond_slave_0: entered promiscuous mode [ 465.254699][T28975] bond_slave_1: entered promiscuous mode [ 465.266067][T28975] dummy0: entered promiscuous mode [ 465.280938][T28975] hsr1: entered promiscuous mode [ 465.286007][T28975] hsr1: entered allmulticast mode [ 465.291807][T28975] bond0: entered allmulticast mode [ 465.297100][T28975] bond_slave_0: entered allmulticast mode [ 465.303415][T28975] bond_slave_1: entered allmulticast mode [ 465.309906][T28975] dummy0: entered allmulticast mode [ 466.851908][T29068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10992'. [ 466.853869][T29069] netlink: zone id is out of range [ 466.868430][T29069] netlink: zone id is out of range [ 466.878661][T29069] netlink: set zone limit has 8 unknown bytes [ 467.197167][T29093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11003'. [ 467.916930][T29134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11023'. [ 468.543991][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11023'. [ 469.044657][T29190] netlink: 18 bytes leftover after parsing attributes in process `syz.5.11048'. [ 469.481374][T29223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11060'. [ 470.563212][T29296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11099'. [ 470.754173][T29307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11103'. [ 470.874804][T29312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11106'. [ 470.937440][T29312] macvlan1: entered promiscuous mode [ 470.943189][T29312] macvlan1: entered allmulticast mode [ 470.948715][T29312] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 473.255347][T29447] validate_nla: 23 callbacks suppressed [ 473.255364][T29447] netlink: 'syz.5.11170': attribute type 1 has an invalid length. [ 473.282313][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11170'. [ 473.460195][T29457] netlink: 'syz.5.11175': attribute type 2 has an invalid length. [ 473.789531][T29472] bond5 (unregistering): Released all slaves [ 474.048113][T29488] netlink: 'syz.2.11189': attribute type 15 has an invalid length. [ 474.079901][T29483] nbd2: detected capacity change from 0 to 127 [ 474.100017][ T5832] block nbd2: Receive control failed (result -32) [ 474.120618][T29486] block nbd2: Dead connection, failed to find a fallback [ 474.128829][T29486] block nbd2: shutting down sockets [ 474.134744][T29486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.145393][T29486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 474.153676][T29486] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.164493][T29486] Buffer I/O error on dev nbd2, logical block 1, async page read [ 474.172924][T29486] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.182638][T29486] Buffer I/O error on dev nbd2, logical block 2, async page read [ 474.190862][T29486] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.202047][T29486] Buffer I/O error on dev nbd2, logical block 3, async page read [ 474.218297][T29486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.241243][T29486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 474.265296][T29486] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.292306][T29486] Buffer I/O error on dev nbd2, logical block 1, async page read [ 474.309240][T29486] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.327998][T29486] Buffer I/O error on dev nbd2, logical block 2, async page read [ 474.346761][T29486] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.366789][T29486] Buffer I/O error on dev nbd2, logical block 3, async page read [ 474.381508][T29486] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.391152][T29486] Buffer I/O error on dev nbd2, logical block 0, async page read [ 474.409776][T29486] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.437244][T29486] Buffer I/O error on dev nbd2, logical block 1, async page read [ 474.457348][T29486] ldm_validate_partition_table(): Disk read failed. [ 474.472544][T29486] Dev nbd2: unable to read RDB block 0 [ 474.481098][T29486] nbd2: unable to read partition table [ 474.497023][T29486] ldm_validate_partition_table(): Disk read failed. [ 474.523807][T29486] Dev nbd2: unable to read RDB block 0 [ 474.547361][T29486] nbd2: unable to read partition table [ 474.862789][T29527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11208'. [ 474.872169][T29527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11208'. [ 474.884041][T29527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11208'. [ 474.893353][T29527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11208'. [ 475.003774][T29536] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11212'. [ 475.016361][T29536] bridge_slave_0: entered allmulticast mode [ 475.350591][T29555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11220'. [ 475.382301][T29559] netlink: 'syz.2.11222': attribute type 9 has an invalid length. [ 475.660024][T29577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11231'. [ 476.315971][T29607] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11246'. [ 476.640370][T29628] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11255'. [ 477.552906][T29671] batman_adv: batadv0: Adding interface: macsec1 [ 477.579490][T29671] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.642507][T29671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.669430][T29671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.689477][T29671] batman_adv: batadv0: Interface activated: macsec1 [ 478.499467][T29727] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 478.689455][T29739] __nla_validate_parse: 1 callbacks suppressed [ 478.689474][T29739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11303'. [ 479.277430][T29768] tap0: tun_chr_ioctl cmd 1074025677 [ 479.292596][T29768] tap0: linktype set to 780 [ 479.848768][ T31] INFO: task syz.0.7059:20770 blocked for more than 143 seconds. [ 479.889309][ T31] Not tainted syzkaller #0 [ 479.894300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.925946][ T31] task:syz.0.7059 state:D stack:24872 pid:20770 tgid:20769 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 479.962062][ T31] Call Trace: [ 479.965394][ T31] [ 479.968423][ T31] __schedule+0x1798/0x4cc0 [ 480.007998][ T31] ? do_syscall_64+0xfa/0xfa0 [ 480.013137][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.018024][ T31] ? __pfx___schedule+0x10/0x10 [ 480.039265][ T31] ? schedule+0x91/0x360 [ 480.043574][ T31] schedule+0x165/0x360 [ 480.047770][ T31] schedule_timeout+0x9a/0x270 [ 480.058176][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 480.064567][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.070352][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.075704][ T31] ? wait_for_completion+0x267/0x5d0 [ 480.081202][ T31] wait_for_completion+0x2bf/0x5d0 [ 480.086479][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 480.092450][ T31] ? up_write+0x1c4/0x420 [ 480.096945][ T31] ? remove_client_context+0xc0/0x1e0 [ 480.102549][ T31] disable_device+0x1c6/0x320 [ 480.107389][ T31] ? __pfx_disable_device+0x10/0x10 [ 480.112886][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 480.118584][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 480.124733][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 480.130993][ T31] nldev_dellink+0x2d1/0x320 [ 480.135741][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 480.141244][ T31] ? apparmor_capable+0x137/0x1b0 [ 480.146422][ T31] ? bpf_lsm_capable+0x9/0x20 [ 480.151706][ T31] ? security_capable+0x7e/0x2e0 [ 480.156797][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 480.162186][ T31] rdma_nl_rcv+0x6ae/0x980 [ 480.166774][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 480.172018][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.177123][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.182587][ T31] netlink_unicast+0x82f/0x9e0 [ 480.187549][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 480.193074][ T31] ? netlink_sendmsg+0x642/0xb30 [ 480.198166][ T31] ? skb_put+0x11b/0x210 [ 480.202596][ T31] netlink_sendmsg+0x805/0xb30 [ 480.207697][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.213248][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 480.218343][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.223825][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.229505][ T31] __sock_sendmsg+0x21c/0x270 [ 480.234310][ T31] ____sys_sendmsg+0x505/0x830 [ 480.239291][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.244748][ T31] ? import_iovec+0x74/0xa0 [ 480.249471][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 480.254456][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.260039][ T31] ? __fget_files+0x2a/0x420 [ 480.264792][ T31] ? __fget_files+0x3a0/0x420 [ 480.270203][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 480.275341][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.281121][ T31] ? do_syscall_64+0xbe/0xfa0 [ 480.285942][ T31] do_syscall_64+0xfa/0xfa0 [ 480.290654][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.296000][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.302306][ T31] ? clear_bhb_loop+0x60/0xb0 [ 480.307318][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.313788][ T31] RIP: 0033:0x7fe59cb8f6c9 [ 480.318315][ T31] RSP: 002b:00007fe59daa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.326926][ T31] RAX: ffffffffffffffda RBX: 00007fe59cde5fa0 RCX: 00007fe59cb8f6c9 [ 480.335176][ T31] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000003 [ 480.343354][ T31] RBP: 00007fe59cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 480.351582][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.359804][ T31] R13: 00007fe59cde6038 R14: 00007fe59cde5fa0 R15: 00007ffdb7e5e3d8 [ 480.367968][ T31] [ 480.371610][ T31] [ 480.371610][ T31] Showing all locks held in the system: [ 480.383867][ T31] 1 lock held by ksoftirqd/0/15: [ 480.392092][ T31] 1 lock held by khungtaskd/31: [ 480.398015][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 480.408418][ T31] 4 locks held by kworker/u8:8/1158: [ 480.414161][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.425315][ T31] #1: ffffc90003cafba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.436046][ T31] #2: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 480.445839][ T31] #3: ffff888057d20700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.457645][ T31] 2 locks held by getty/5583: [ 480.462540][ T31] #0: ffff88814d99d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 480.472511][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 480.483994][ T31] 2 locks held by syz.0.7059/20770: [ 480.489368][ T31] #0: ffffffff99b65918 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 480.501654][ T31] #1: ffff888057d20700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 480.513387][ T31] 2 locks held by syz.4.11321/29795: [ 480.518785][ T31] #0: ffffffff8f2cbc88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 480.528308][ T31] #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 480.539827][ T31] 1 lock held by cmp/29812: [ 480.559669][ T31] [ 480.562100][ T31] ============================================= [ 480.562100][ T31] [ 480.570857][ T31] NMI backtrace for cpu 1 [ 480.570881][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 480.570924][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 480.570947][ T31] Call Trace: [ 480.570961][ T31] [ 480.570976][ T31] dump_stack_lvl+0x189/0x250 [ 480.571038][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.571067][ T31] ? __pfx__printk+0x10/0x10 [ 480.571098][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 480.571122][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 480.571145][ T31] ? __pfx__printk+0x10/0x10 [ 480.571167][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 480.571195][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 480.571219][ T31] watchdog+0xf60/0xfa0 [ 480.571242][ T31] ? watchdog+0x1e2/0xfa0 [ 480.571265][ T31] kthread+0x711/0x8a0 [ 480.571290][ T31] ? __pfx_watchdog+0x10/0x10 [ 480.571307][ T31] ? __pfx_kthread+0x10/0x10 [ 480.571330][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.571352][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.571373][ T31] ? __pfx_kthread+0x10/0x10 [ 480.571396][ T31] ret_from_fork+0x4bc/0x870 [ 480.571416][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 480.571441][ T31] ? __switch_to_asm+0x39/0x70 [ 480.571455][ T31] ? __switch_to_asm+0x33/0x70 [ 480.571468][ T31] ? __pfx_kthread+0x10/0x10 [ 480.571490][ T31] ret_from_fork_asm+0x1a/0x30 [ 480.571522][ T31] [ 480.571528][ T31] Sending NMI from CPU 1 to CPUs 0: [ 480.720102][ C0] NMI backtrace for cpu 0 [ 480.720118][ C0] CPU: 0 UID: 0 PID: 29815 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 480.720136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 480.720146][ C0] RIP: 0010:stack_trace_consume_entry+0x20/0x280 [ 480.720171][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc ff df 4c 8d 47 10 <4c> 89 c5 48 c1 ed 03 0f b6 44 15 00 84 c0 0f 85 09 01 00 00 44 8b [ 480.720184][ C0] RSP: 0018:ffffc9000bcbf358 EFLAGS: 00000292 [ 480.720199][ C0] RAX: ffffffff8182e98b RBX: ffffc9000bcbf460 RCX: 6f07b675d0801100 [ 480.720210][ C0] RDX: dffffc0000000000 RSI: ffffffff8182e98b RDI: ffffc9000bcbf460 [ 480.720222][ C0] RBP: ffffc9000bcbf430 R08: ffffc9000bcbf470 R09: 0000000000000000 [ 480.720233][ C0] R10: ffffc9000bcbf3f8 R11: ffffffff81ac2f50 R12: ffff888052c5bc80 [ 480.720245][ C0] R13: ffff8880240bb000 R14: ffffffff81ac2f50 R15: ffffc9000bcbf3a8 [ 480.720256][ C0] FS: 00007ff70393dc80(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 480.720269][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.720280][ C0] CR2: 00007ff703ba17e8 CR3: 000000003b08e000 CR4: 00000000003526f0 [ 480.720293][ C0] Call Trace: [ 480.720299][ C0] [ 480.720305][ C0] ? __x64_sys_clone+0x18b/0x1e0 [ 480.720326][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.720344][ C0] arch_stack_walk+0x110/0x150 [ 480.720364][ C0] ? __x64_sys_clone+0x18b/0x1e0 [ 480.720384][ C0] stack_trace_save+0x9c/0xe0 [ 480.720401][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 480.720424][ C0] kasan_save_track+0x3e/0x80 [ 480.720443][ C0] ? kasan_save_track+0x3e/0x80 [ 480.720461][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 480.720480][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 480.720497][ C0] ? anon_vma_fork+0x1f1/0x500 [ 480.720515][ C0] ? dup_mmap+0x9e2/0x1b10 [ 480.720533][ C0] ? copy_mm+0x13c/0x4b0 [ 480.720547][ C0] ? copy_process+0x1706/0x3c00 [ 480.720561][ C0] ? kernel_clone+0x21e/0x840 [ 480.720599][ C0] ? anon_vma_fork+0x1f1/0x500 [ 480.720619][ C0] __kasan_slab_alloc+0x6c/0x80 [ 480.720640][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 480.720659][ C0] ? anon_vma_fork+0x1f1/0x500 [ 480.720681][ C0] anon_vma_fork+0x1f1/0x500 [ 480.720703][ C0] dup_mmap+0x9e2/0x1b10 [ 480.720732][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 480.720757][ C0] ? mm_init+0xd74/0xfa0 [ 480.720776][ C0] copy_mm+0x13c/0x4b0 [ 480.720793][ C0] copy_process+0x1706/0x3c00 [ 480.720817][ C0] ? copy_process+0x97f/0x3c00 [ 480.720837][ C0] ? __pfx_copy_process+0x10/0x10 [ 480.720854][ C0] ? __lock_acquire+0xab9/0xd20 [ 480.720873][ C0] kernel_clone+0x21e/0x840 [ 480.720893][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 480.720914][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 480.720938][ C0] __x64_sys_clone+0x18b/0x1e0 [ 480.720956][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 480.720991][ C0] ? do_syscall_64+0xbe/0xfa0 [ 480.721014][ C0] do_syscall_64+0xfa/0xfa0 [ 480.721033][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.721053][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.721068][ C0] ? clear_bhb_loop+0x60/0xb0 [ 480.721085][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.721099][ C0] RIP: 0033:0x7ff703ad7636 [ 480.721111][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 480.721123][ C0] RSP: 002b:00007fff56b3ab20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 480.721138][ C0] RAX: ffffffffffffffda RBX: 00007fff56b3ab28 RCX: 00007ff703ad7636 [ 480.721150][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 480.721159][ C0] RBP: 0000565315f6ec30 R08: 0000000000000000 R09: 00000000000000d0 [ 480.721169][ C0] R10: 00007ff70393df50 R11: 0000000000000246 R12: 0000565315f7cfc0 [ 480.721180][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.721199][ C0]