last executing test programs: 1.703065763s ago: executing program 0 (id=9028): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 1.498140254s ago: executing program 0 (id=9031): r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80000017}) 1.389800777s ago: executing program 0 (id=9033): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.18655895s ago: executing program 0 (id=9036): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) 1.065503716s ago: executing program 0 (id=9039): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd27, 0x25dddbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x24040890) 855.919758ms ago: executing program 0 (id=9045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x7, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000240)=0x10) recvfrom$inet6(r0, 0x0, 0x0, 0x10002, &(0x7f0000000040)={0xa, 0x4e23, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) 764.209967ms ago: executing program 3 (id=9046): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r0, r1, 0x0, 0x0) 750.14641ms ago: executing program 4 (id=9048): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 742.141585ms ago: executing program 1 (id=9049): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1000519"], 0x3c}}, 0x0) 674.275573ms ago: executing program 3 (id=9050): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 608.224417ms ago: executing program 2 (id=9051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010030bd7000f9dbdf4854ab4e0008000300", @ANYRES32=r2, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 607.989844ms ago: executing program 4 (id=9052): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00005}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 602.64722ms ago: executing program 1 (id=9053): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 537.861948ms ago: executing program 2 (id=9054): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) 495.501122ms ago: executing program 3 (id=9055): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000029c0)={'ip6gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 492.993398ms ago: executing program 4 (id=9056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x28}}, 0x80) 469.185429ms ago: executing program 1 (id=9057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000000)={'virt_wifi0\x00'}) 399.485246ms ago: executing program 2 (id=9058): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 372.223429ms ago: executing program 4 (id=9059): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) 363.719528ms ago: executing program 3 (id=9060): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r2, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}}, 0x0) 289.653835ms ago: executing program 1 (id=9061): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x1000000}]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 289.177458ms ago: executing program 2 (id=9062): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) 239.22451ms ago: executing program 4 (id=9063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008040) 197.611365ms ago: executing program 1 (id=9064): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000c80)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000f80)="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", 0xfdef}], 0x1}, 0x0) 166.124002ms ago: executing program 2 (id=9065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x332, 0x0, 0x2, 0x9a, 0x6, 0x101, 0x834e, 0x6, 0x6}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x60}}, 0x0) 119.699342ms ago: executing program 3 (id=9066): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000001, 0x12) 95.698414ms ago: executing program 1 (id=9067): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 81.484864ms ago: executing program 4 (id=9068): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='b', 0x1, 0x0) 239.007µs ago: executing program 2 (id=9069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000350000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x138}}, 0x0) 0s ago: executing program 3 (id=9070): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8000f28, 0x0) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000400)="1333", 0x2}], 0x1, 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 76.448738][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.489749][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.500805][ T51] Bluetooth: hci1: command tx timeout [ 76.544341][ T5849] veth0_macvtap: entered promiscuous mode [ 76.557739][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.575416][ T5849] veth1_macvtap: entered promiscuous mode [ 76.587458][ T51] Bluetooth: hci0: command tx timeout [ 76.587766][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.602677][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.605093][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.620699][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.637284][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.661327][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.670619][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.700681][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.710754][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.728652][ T1085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.729494][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.743852][ T1085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.754893][ T51] Bluetooth: hci2: command tx timeout [ 76.760681][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.810469][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.826265][ T51] Bluetooth: hci3: command tx timeout [ 76.874803][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.902254][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.909884][ T51] Bluetooth: hci4: command tx timeout [ 76.969256][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.971496][ T5848] veth0_vlan: entered promiscuous mode [ 76.979305][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.030095][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.043810][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.064796][ T5848] veth1_vlan: entered promiscuous mode [ 77.124356][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.170564][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.188119][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.198767][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.274666][ T5848] veth0_macvtap: entered promiscuous mode [ 77.319438][ T5848] veth1_macvtap: entered promiscuous mode [ 77.334611][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.349036][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.451707][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.469039][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.527921][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.563017][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.610387][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.622721][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.698211][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.787397][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.885875][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.897373][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.905197][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.927345][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.250547][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.280983][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.435205][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.487224][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.605756][ T51] Bluetooth: hci1: command tx timeout [ 78.656159][ T51] Bluetooth: hci0: command tx timeout [ 78.816418][ T51] Bluetooth: hci2: command tx timeout [ 78.896100][ T51] Bluetooth: hci3: command tx timeout [ 78.976280][ T51] Bluetooth: hci4: command tx timeout [ 84.966343][ T6315] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 86.665609][ T976] cfg80211: failed to load regulatory.db [ 97.587525][ T6983] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 98.044379][ T7009] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 101.554903][ T7169] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 107.906199][ T7504] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.966630][ T7782] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 114.076048][ T7848] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 114.434906][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.171512][ T8146] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.193468][ T8151] warning: `syz.4.1092' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.756995][ T8182] netlink: 'syz.3.1106': attribute type 11 has an invalid length. [ 119.765168][ T8182] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1106'. [ 119.862055][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 120.203307][ T8204] netlink: 'syz.2.1118': attribute type 2 has an invalid length. [ 120.211281][ T8210] netlink: 'syz.0.1121': attribute type 7 has an invalid length. [ 120.223943][ T8210] : entered promiscuous mode [ 120.320485][ T8204] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 120.641979][ T8229] netlink: 'syz.4.1130': attribute type 1 has an invalid length. [ 120.688526][ T8229] netlink: 'syz.4.1130': attribute type 1 has an invalid length. [ 120.862579][ T8242] netlink: 'syz.1.1135': attribute type 21 has an invalid length. [ 120.883594][ T8242] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1135'. [ 121.048702][ T8250] netlink: 'syz.4.1141': attribute type 11 has an invalid length. [ 121.080833][ T8250] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1141'. [ 121.273814][ T8265] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1148'. [ 121.621689][ T8283] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 121.676210][ T8283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1157'. [ 121.864892][ T8297] netlink: 'syz.4.1164': attribute type 3 has an invalid length. [ 122.210313][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 122.232789][ T8319] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 122.235008][ T8318] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1172'. [ 122.254934][ T8319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.289187][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 122.302880][ T8319] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 122.462616][ T8323] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 123.270039][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 123.511210][ T8386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.553577][ T8506] mac80211_hwsim hwsim6 ÿ: renamed from wlan1 [ 125.562525][ T8507] validate_nla: 4 callbacks suppressed [ 125.562544][ T8507] netlink: 'syz.4.1264': attribute type 10 has an invalid length. [ 125.627733][ T8507] veth0_vlan: entered allmulticast mode [ 125.715173][ T8507] veth0_vlan: left promiscuous mode [ 125.751242][ T8507] veth0_vlan: entered promiscuous mode [ 125.780502][ T8507] team0: Device veth0_vlan failed to register rx_handler [ 126.032000][ T8507] syz.4.1264 (8507) used greatest stack depth: 20056 bytes left [ 126.603380][ T8559] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 126.645677][ T8559] netlink: 'syz.1.1292': attribute type 2 has an invalid length. [ 127.275946][ T8597] __nla_validate_parse: 1 callbacks suppressed [ 127.275964][ T8597] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1311'. [ 127.540011][ T8612] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1319'. [ 128.658771][ T8674] netlink: 'syz.0.1343': attribute type 39 has an invalid length. [ 128.810049][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1348'. [ 128.903989][ T8688] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 129.059165][ T8695] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.150634][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 129.829934][ T8736] IPv6: sit1: Disabled Multicast RS [ 130.035389][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1382'. [ 130.066486][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1381'. [ 130.783714][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'. [ 130.932879][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1407'. [ 130.977923][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 131.016115][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 131.825210][ T8849] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 131.832004][ T8849] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 132.650248][ T8888] netlink: 'syz.3.1445': attribute type 21 has an invalid length. [ 132.661454][ T8888] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.673667][ T8888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.681122][ T8888] IPv6: NLM_F_CREATE should be set when creating new route [ 132.688464][ T8888] IPv6: NLM_F_CREATE should be set when creating new route [ 132.695726][ T8888] IPv6: NLM_F_CREATE should be set when creating new route [ 132.746113][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.754617][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.955369][ T8905] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 133.013958][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 133.070390][ T8912] netlink: 'syz.0.1458': attribute type 7 has an invalid length. [ 133.545993][ T8936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.861644][ T8950] netlink: 'syz.1.1478': attribute type 4 has an invalid length. [ 134.066333][ T8964] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 134.072807][ T8964] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 134.249125][ T8974] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 134.691630][ T8998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1499'. [ 134.873989][ T9006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1505'. [ 135.136009][ T9010] syz.1.1507 (9010) used greatest stack depth: 19992 bytes left [ 135.177483][ T9020] netlink: 'syz.4.1512': attribute type 1 has an invalid length. [ 135.620279][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 136.790826][ T9108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.880616][ T9116] netlink: 'syz.1.1553': attribute type 11 has an invalid length. [ 136.910922][ T9116] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1553'. [ 137.427738][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 137.599739][ T9147] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1564'. [ 139.227396][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 139.240236][ T9238] sctp: [Deprecated]: syz.2.1604 (pid 9238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.240236][ T9238] Use struct sctp_sack_info instead [ 139.452107][ T9246] veth3: entered allmulticast mode [ 139.638787][ T9260] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 139.660409][ T9260] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1616'. [ 140.189041][ T9286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.752605][ T9317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1644'. [ 141.047502][ T9335] netlink: 'syz.0.1652': attribute type 11 has an invalid length. [ 141.225729][ T9338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.427779][ T9354] syz.0.1660 uses obsolete (PF_INET,SOCK_PACKET) [ 141.693305][ T9365] netlink: 'syz.3.1664': attribute type 4 has an invalid length. [ 142.391954][ T9406] netlink: 'syz.1.1682': attribute type 21 has an invalid length. [ 142.433959][ T9406] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1682'. [ 142.577033][ T9414] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 143.227701][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 143.835733][ T9479] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1718'. [ 143.891814][ T9479] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1718'. [ 143.915367][ T9483] netlink: 'syz.1.1720': attribute type 3 has an invalid length. [ 143.955721][ T9483] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1720'. [ 143.998041][ T9485] netlink: 'syz.2.1721': attribute type 21 has an invalid length. [ 144.046633][ T9485] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.623784][ T9575] netlink: 'syz.1.1766': attribute type 1 has an invalid length. [ 145.675670][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 145.679947][ T9581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1768'. [ 145.684980][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 145.722682][ T9583] netlink: 'syz.0.1769': attribute type 9 has an invalid length. [ 146.063331][ T9595] netlink: 'syz.0.1776': attribute type 8 has an invalid length. [ 146.090128][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 146.572872][ T9624] openvswitch: netlink: Missing valid actions attribute. [ 146.597039][ T9624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.871747][ T9642] netlink: 'syz.2.1797': attribute type 2 has an invalid length. [ 146.903968][ T9643] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.891389][ T9698] netlink: 'syz.4.1826': attribute type 21 has an invalid length. [ 147.915728][ T9698] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1826'. [ 147.967937][ T9698] netlink: 'syz.4.1826': attribute type 5 has an invalid length. [ 147.996833][ T9698] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1826'. [ 148.565428][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 148.793150][ T9746] netlink: 'syz.4.1849': attribute type 2 has an invalid length. [ 149.100713][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 149.170183][ T9770] delete_channel: no stack [ 149.296559][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.304669][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.514567][ T9768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.530898][ T9768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.588354][ T9768] veth0_vlan: left allmulticast mode [ 149.810597][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.840228][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.876515][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.885778][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.951465][ T9798] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 149.969400][ T9801] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1874'. [ 149.996381][ T9798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1873'. [ 150.035901][ T9798] nbd: illegal input index 1048576 [ 150.565799][ T9831] netlink: 'syz.3.1888': attribute type 6 has an invalid length. [ 152.589113][ T9932] openvswitch: netlink: Key type 85 is out of range max 32 [ 152.751051][ T9940] __nla_validate_parse: 2 callbacks suppressed [ 152.751068][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1937'. [ 152.791909][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 152.862858][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 153.037478][ T9950] tipc: Can't bind to reserved service type 1 [ 153.192292][ T9952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.486926][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1950'. [ 153.777027][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 153.796737][ T9980] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1957'. [ 154.464183][T10017] netlink: 'syz.2.1974': attribute type 6 has an invalid length. [ 155.245442][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1993'. [ 155.584912][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 155.733744][T10076] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2003'. [ 155.769570][T10078] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.236026][T10096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.343887][T10104] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 156.386100][T10104] netlink: 'syz.4.2017': attribute type 11 has an invalid length. [ 156.405934][T10104] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2017'. [ 156.830090][T10127] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 157.860192][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 158.650341][T10209] netlink: 'syz.2.2070': attribute type 1 has an invalid length. [ 158.687435][T10209] netlink: 'syz.2.2070': attribute type 11 has an invalid length. [ 158.709983][T10209] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2070'. [ 158.885677][T10220] netlink: 'syz.2.2074': attribute type 25 has an invalid length. [ 159.134324][T10230] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 160.046072][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2102'. [ 160.329504][T10291] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2109'. [ 160.827511][T10319] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2124'. [ 161.165752][T10334] netlink: 'syz.4.2131': attribute type 1 has an invalid length. [ 161.173514][T10334] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2131'. [ 161.335730][T10342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2135'. [ 161.344703][T10342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2135'. [ 162.570735][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'. [ 162.700504][T10418] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2172'. [ 162.735485][T10418] netlink: 'syz.4.2172': attribute type 6 has an invalid length. [ 162.775743][T10418] netlink: 'syz.4.2172': attribute type 5 has an invalid length. [ 162.781291][T10424] vxcan1 speed is unknown, defaulting to 1000 [ 162.815102][T10424] vxcan1 speed is unknown, defaulting to 1000 [ 162.889156][T10424] vxcan1 speed is unknown, defaulting to 1000 [ 163.819105][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.856654][T10463] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.863862][T10463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.900956][T10424] infiniband syz2: set active [ 163.917918][ T5937] vxcan1 speed is unknown, defaulting to 1000 [ 163.929977][T10424] infiniband syz2: added vxcan1 [ 163.959657][T10424] syz2: rxe_create_cq: returned err = -12 [ 163.990292][T10424] infiniband syz2: Couldn't create ib_mad CQ [ 164.030859][T10424] infiniband syz2: Couldn't open port 1 [ 164.157236][T10424] RDS/IB: syz2: added [ 164.161669][T10424] smc: adding ib device syz2 with port count 1 [ 164.204878][T10485] __nla_validate_parse: 2 callbacks suppressed [ 164.204894][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 164.223289][T10424] smc: ib device syz2 port 1 has pnetid [ 164.241054][T10487] netlink: 'syz.3.2206': attribute type 4 has an invalid length. [ 164.253510][T10424] vxcan1 speed is unknown, defaulting to 1000 [ 164.271252][ T976] vxcan1 speed is unknown, defaulting to 1000 [ 164.802401][T10510] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 165.022585][T10520] netlink: 'syz.0.2221': attribute type 10 has an invalid length. [ 165.072557][T10520] team0: Device veth1_macvtap failed to register rx_handler [ 165.212021][T10424] vxcan1 speed is unknown, defaulting to 1000 [ 165.386367][T10536] sctp: [Deprecated]: syz.4.2230 (pid 10536) Use of int in max_burst socket option. [ 165.386367][T10536] Use struct sctp_assoc_value instead [ 165.433581][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 165.546149][T10542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.217454][T10424] vxcan1 speed is unknown, defaulting to 1000 [ 167.045353][T10424] vxcan1 speed is unknown, defaulting to 1000 [ 167.093544][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2266'. [ 167.722771][T10638] netlink: 'syz.1.2281': attribute type 1 has an invalid length. [ 167.766145][T10638] netlink: 'syz.1.2281': attribute type 1 has an invalid length. [ 167.921389][T10424] vxcan1 speed is unknown, defaulting to 1000 [ 168.170677][T10657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.239828][T10662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2291'. [ 169.002562][T10697] netlink: 'syz.2.2309': attribute type 21 has an invalid length. [ 169.015661][T10697] netlink: 'syz.2.2309': attribute type 6 has an invalid length. [ 169.051903][T10697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2309'. [ 169.804144][T10732] netlink: 'syz.0.2324': attribute type 12 has an invalid length. [ 170.052587][T10744] netlink: 696 bytes leftover after parsing attributes in process `syz.0.2330'. [ 170.460303][T10769] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 170.695974][T10780] delete_channel: no stack [ 170.730049][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'. [ 170.946702][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 170.965685][T10798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2353'. [ 171.325371][T10813] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2360'. [ 171.544068][T10824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.597426][T10828] netlink: 'syz.1.2366': attribute type 6 has an invalid length. [ 171.614545][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2367'. [ 171.637047][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2367'. [ 171.662953][T10833] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.035710][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2377'. [ 172.055347][T10855] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 172.279579][T10868] netlink: 'syz.4.2383': attribute type 8 has an invalid length. [ 172.643172][T10884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.690222][T10884] bond0: (slave rose0): Enslaving as an active interface with an up link [ 172.806761][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2395'. [ 172.850857][T10898] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2396'. [ 172.939558][T10903] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 173.879202][T10954] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 173.936107][T10954] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 174.226563][T10974] netlink: 'syz.3.2427': attribute type 1 has an invalid length. [ 174.382801][T10983] netlink: 'syz.2.2431': attribute type 10 has an invalid length. [ 174.439677][T10983] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.468962][T10983] bond0: (slave team0): Enslaving as an active interface with an up link [ 174.642564][T10996] Illegal XDP return value 3668069017 on prog (id 227) dev N/A, expect packet loss! [ 175.772701][T11033] __nla_validate_parse: 2 callbacks suppressed [ 175.772719][T11033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2446'. [ 175.868221][T11033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2446'. [ 176.813558][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2470'. [ 176.943584][T11094] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 177.236680][T11114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.521729][T11124] dvmrp1: entered allmulticast mode [ 177.561401][T11130] netlink: 'syz.4.2489': attribute type 13 has an invalid length. [ 177.843872][T11130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.861942][T11130] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.884187][T11130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.030816][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2501'. [ 178.324313][T11169] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2507'. [ 178.326672][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 178.511978][T11183] netlink: 'syz.0.2514': attribute type 39 has an invalid length. [ 178.820136][T11199] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 178.850459][T11199] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2520'. [ 179.003973][T11211] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.068347][T11215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2527'. [ 179.296754][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2534'. [ 179.302758][T11230] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2536'. [ 179.804084][T11260] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 180.278428][T11289] netlink: 'syz.4.2564': attribute type 4 has an invalid length. [ 180.563439][T11309] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 180.615187][T11311] netlink: 'syz.4.2576': attribute type 1 has an invalid length. [ 180.779556][T11324] __nla_validate_parse: 3 callbacks suppressed [ 180.779574][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2580'. [ 180.786990][T11313] bond3: entered promiscuous mode [ 180.824666][T11313] bond3: entered allmulticast mode [ 180.834668][T11313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.300360][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 181.333296][T11352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2595'. [ 181.385366][T11352] geneve2: entered promiscuous mode [ 181.408325][T11352] geneve2: entered allmulticast mode [ 181.612556][T11369] netlink: 'syz.0.2601': attribute type 21 has an invalid length. [ 181.725764][T11375] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2606'. [ 182.775814][T11439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.794065][T11440] geneve2: entered promiscuous mode [ 182.803581][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2639'. [ 182.813892][T11440] geneve2: entered allmulticast mode [ 182.833065][ T59] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 182.833267][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2639'. [ 182.852171][ T59] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 182.881687][ T59] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 182.921999][ T59] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 183.263764][T11471] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2653'. [ 183.364304][T11474] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2654'. [ 183.399964][T11474] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2654'. [ 183.549571][T11485] sctp: [Deprecated]: syz.4.2661 (pid 11485) Use of int in maxseg socket option. [ 183.549571][T11485] Use struct sctp_assoc_value instead [ 183.662941][T11491] delete_channel: no stack [ 184.199286][T11523] geneve3: entered promiscuous mode [ 184.214952][T11523] geneve3: entered allmulticast mode [ 184.241324][T11527] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2680'. [ 184.429963][T11538] netlink: 'syz.2.2684': attribute type 21 has an invalid length. [ 184.453435][T11539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.460711][T11539] IPv6: NLM_F_CREATE should be set when creating new route [ 184.663516][T11553] netlink: 'syz.1.2692': attribute type 1 has an invalid length. [ 184.790973][T11560] netlink: 'syz.3.2695': attribute type 15 has an invalid length. [ 184.791002][T11559] netlink: 'syz.2.2696': attribute type 6 has an invalid length. [ 184.866860][T11564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.183703][T11583] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 185.271104][T11587] netlink: 'syz.1.2709': attribute type 3 has an invalid length. [ 185.791620][T11621] __nla_validate_parse: 1 callbacks suppressed [ 185.791638][T11621] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2726'. [ 186.221800][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2739'. [ 186.561810][T11668] netlink: 'syz.1.2749': attribute type 1 has an invalid length. [ 186.579994][T11671] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2751'. [ 186.630466][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 187.476396][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2778'. [ 188.847367][T11813] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 188.894516][T11817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2821'. [ 189.074472][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2824'. [ 189.506611][T11850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.754158][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'. [ 189.821082][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'. [ 190.046817][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2846'. [ 191.109629][T11946] netlink: 'syz.3.2871': attribute type 1 has an invalid length. [ 191.887977][T11992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2891'. [ 192.227333][T12012] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2901'. [ 192.534438][T12030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2911'. [ 192.669458][T12037] netlink: 'syz.3.2915': attribute type 10 has an invalid length. [ 192.705350][T12037] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.713720][T12037] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.761081][T12037] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.768354][T12037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.775897][T12037] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.783555][T12037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.800709][T12037] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 193.356049][T12081] syz.0.2936 uses old SIOCAX25GETINFO [ 193.694782][T12100] bond0: entered allmulticast mode [ 193.714748][T12100] bond_slave_0: entered allmulticast mode [ 193.731608][T12100] bond_slave_1: entered allmulticast mode [ 193.741112][T12100] batadv0: entered allmulticast mode [ 193.747270][T12100] team0: entered allmulticast mode [ 193.753038][T12100] team_slave_0: entered allmulticast mode [ 193.759354][T12100] team_slave_1: entered allmulticast mode [ 194.085831][T12118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.115171][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 194.148458][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 194.186014][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.211571][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 194.324962][T12135] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2959'. [ 194.405972][T12135] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.613022][T12152] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2969'. [ 194.899076][T12166] netlink: 'syz.1.2976': attribute type 12 has an invalid length. [ 195.283630][T12192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.992598][T12227] wg1: entered promiscuous mode [ 196.033366][T12227] wg1: entered allmulticast mode [ 196.258129][T12127] Bluetooth: hci0: command 0x0406 tx timeout [ 196.264220][T12127] Bluetooth: hci2: command 0x0406 tx timeout [ 196.272380][T12127] Bluetooth: hci3: command 0x0406 tx timeout [ 196.278593][T12127] Bluetooth: hci4: command 0x0406 tx timeout [ 196.284611][T12127] Bluetooth: hci1: command 0x0406 tx timeout [ 196.632604][T12262] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3016'. [ 196.673430][T12262] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3016'. [ 197.312139][T12306] netlink: 'syz.4.3032': attribute type 33 has an invalid length. [ 197.361597][T12306] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3032'. [ 197.924844][T12338] netlink: 'syz.3.3047': attribute type 1 has an invalid length. [ 198.129223][T12352] netlink: 'syz.0.3054': attribute type 1 has an invalid length. [ 198.553051][T12376] !: renamed from dummy0 (while UP) [ 198.591651][T12377] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 199.529129][T12431] siw: device registration error -23 [ 199.758515][T12441] netlink: 'syz.0.3096': attribute type 11 has an invalid length. [ 200.048651][T12451] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 200.347272][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'. [ 200.792224][T12491] gre1: entered promiscuous mode [ 200.831517][T12491] gre1: entered allmulticast mode [ 201.011099][T12509] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 201.071560][T12513] IPVS: Unknown mcast interface: nicvf0 [ 201.669979][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3148'. [ 201.705266][T12549] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3148'. [ 201.724749][T12549] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3148'. [ 201.839448][T12559] 8021q: VLANs not supported on lo [ 203.344626][T12649] netlink: 'syz.2.3193': attribute type 1 has an invalid length. [ 203.376835][T12649] netlink: 'syz.2.3193': attribute type 1 has an invalid length. [ 203.518323][T12658] netlink: 'syz.4.3196': attribute type 3 has an invalid length. [ 203.565602][T12658] netlink: 'syz.4.3196': attribute type 1 has an invalid length. [ 203.610042][T12665] netlink: 'syz.2.3200': attribute type 7 has an invalid length. [ 204.304194][T12705] netlink: 'syz.3.3215': attribute type 11 has an invalid length. [ 204.345672][T12705] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3215'. [ 204.713690][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3224'. [ 204.759818][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'. [ 204.842023][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'. [ 205.116858][T12743] IPv6: sit1: Disabled Multicast RS [ 205.123135][T12743] sit1: entered allmulticast mode [ 205.428217][T12761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.557378][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 205.604167][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3241'. [ 207.011357][T12850] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 207.019680][T12850] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3278'. [ 207.160259][T12855] openvswitch: netlink: Flow key attribute not present in set flow. [ 207.841619][T12893] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 207.873561][T12893] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3297'. [ 207.885607][T12895] vxcan1 speed is unknown, defaulting to 1000 [ 208.061954][T12905] netlink: 'syz.0.3302': attribute type 2 has an invalid length. [ 208.194151][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3305'. [ 208.613786][T12938] netlink: 'syz.3.3318': attribute type 10 has an invalid length. [ 208.635607][T12938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3318'. [ 208.644649][T12938] !: entered promiscuous mode [ 208.656089][T12938] bridge0: port 3(0!) entered blocking state [ 208.674953][T12938] bridge0: port 3(0!) entered disabled state [ 208.694990][T12938] !: entered allmulticast mode [ 208.708996][T12938] bridge0: port 3(0!) entered blocking state [ 208.715545][T12938] bridge0: port 3(0!) entered forwarding state [ 209.393855][T12981] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.807885][T13004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.974793][T13012] __nla_validate_parse: 1 callbacks suppressed [ 209.974810][T13012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3355'. [ 210.195401][T13024] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 210.705830][T13056] netlink: 'syz.4.3378': attribute type 33 has an invalid length. [ 210.713680][T13056] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3378'. [ 210.850566][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3382'. [ 211.290907][T13092] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 211.330077][T13092] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 211.691509][T13115] batadv1: entered allmulticast mode [ 212.000680][T13136] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3413'. [ 212.526569][T13163] netlink: 512 bytes leftover after parsing attributes in process `syz.0.3423'. [ 212.864845][T13183] netlink: 'syz.2.3432': attribute type 2 has an invalid length. [ 213.404956][T13213] netlink: 'syz.0.3444': attribute type 15 has an invalid length. [ 213.442341][T13213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3444'. [ 213.752916][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3456'. [ 213.811493][T13236] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 213.890188][T13236] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 213.900794][T13244] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3461'. [ 213.910624][T13236] gretap1: entered promiscuous mode [ 213.947957][T13236] gretap1: entered allmulticast mode [ 214.970458][T13309] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3492'. [ 214.984119][T13309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.029409][T13313] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3494'. [ 215.373131][T13331] netlink: 'syz.1.3503': attribute type 4 has an invalid length. [ 215.439060][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'. [ 215.847551][T13360] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 215.868688][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 216.196394][T13383] openvswitch: netlink: Missing key (keys=40, expected=80) [ 216.273791][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3532'. [ 216.538354][T13403] netlink: 'syz.1.3538': attribute type 5 has an invalid length. [ 216.575703][T13403] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3538'. [ 216.715108][T13415] netlink: 'syz.2.3546': attribute type 10 has an invalid length. [ 216.739693][T13415] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 216.779524][T13415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.162638][T13443] netlink: 'syz.1.3560': attribute type 10 has an invalid length. [ 217.569108][T13468] netlink: 'syz.0.3571': attribute type 1 has an invalid length. [ 217.647740][T13476] netlink: 'syz.4.3574': attribute type 1 has an invalid length. [ 217.678261][T13478] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 217.689679][T13476] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3574'. [ 217.699762][T13478] netlink: 'syz.3.3573': attribute type 2 has an invalid length. [ 218.990785][T13565] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 219.047060][T13568] openvswitch: netlink: Duplicate or invalid key (type 0). [ 219.074767][T13568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.201518][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'. [ 219.434227][T13592] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3623'. [ 219.609331][T13601] nbd: couldn't find a device at index -373156329 [ 219.742821][T13611] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3634'. [ 219.923119][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3639'. [ 220.048543][T13629] netlink: 'syz.0.3643': attribute type 1 has an invalid length. [ 220.081374][T13629] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3643'. [ 221.166222][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 221.194244][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3680'. [ 221.491978][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3689'. [ 221.549216][T13727] netlink: 'syz.0.3689': attribute type 1 has an invalid length. [ 221.583043][ T5895] IPVS: starting estimator thread 0... [ 221.595085][T13727] netlink: 'syz.0.3689': attribute type 1 has an invalid length. [ 221.635750][T13727] netlink: 'syz.0.3689': attribute type 2 has an invalid length. [ 221.664398][T13727] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3689'. [ 221.675708][T13733] IPVS: using max 31 ests per chain, 74400 per kthread [ 221.755980][T13739] netlink: 'syz.3.3696': attribute type 3 has an invalid length. [ 221.963439][T13749] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 222.242718][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 222.688752][T13789] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3721'. [ 222.710250][T13793] netlink: 'syz.0.3722': attribute type 10 has an invalid length. [ 222.712551][T13795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3723'. [ 222.739107][T13789] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3721'. [ 222.790546][T13789] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3721'. [ 223.414793][T13839] netlink: 'syz.2.3746': attribute type 1 has an invalid length. [ 223.426852][T13839] netlink: 'syz.2.3746': attribute type 2 has an invalid length. [ 223.752963][T13859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.012359][T13876] netlink: 'syz.1.3762': attribute type 1 has an invalid length. [ 224.050783][T13876] netlink: 'syz.1.3762': attribute type 2 has an invalid length. [ 224.169537][T13886] tc_dump_action: action bad kind [ 224.294177][T13893] netlink: 'syz.3.3771': attribute type 1 has an invalid length. [ 225.697883][T13984] ipvlan0: entered promiscuous mode [ 225.703224][T13984] ipvlan0: entered allmulticast mode [ 225.716333][T13984] veth0_vlan: entered allmulticast mode [ 225.843861][T13996] __nla_validate_parse: 6 callbacks suppressed [ 225.843881][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3824'. [ 226.255762][T14020] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 226.375372][T14030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3841'. [ 227.200108][T14085] validate_nla: 2 callbacks suppressed [ 227.200125][T14085] netlink: 'syz.2.3867': attribute type 1 has an invalid length. [ 228.067796][T14133] netlink: 'syz.4.3891': attribute type 33 has an invalid length. [ 228.082680][T14133] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3891'. [ 228.106812][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3895'. [ 228.291872][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 229.132445][T14206] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 229.270765][T14214] nft_compat: unsupported protocol 0 [ 229.365130][T14220] sit0: entered promiscuous mode [ 229.419371][T14220] netlink: 'syz.2.3934': attribute type 1 has an invalid length. [ 229.447577][T14220] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3934'. [ 229.540977][T14230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.695853][T14240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.866804][T14252] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3951'. [ 230.642923][T14304] netlink: 'syz.3.3976': attribute type 8 has an invalid length. [ 230.698511][T14306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.775633][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 230.813984][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 230.864450][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 230.896670][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 231.232707][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3994'. [ 231.265805][T14341] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3994'. [ 231.373896][T14350] openvswitch: netlink: Flow key attr not present in new flow. [ 231.510457][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'. [ 231.532407][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4004'. [ 231.684150][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4008'. [ 231.993975][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4018'. [ 232.036015][T14390] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4018'. [ 232.219105][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4024'. [ 233.016950][T14459] netlink: 808 bytes leftover after parsing attributes in process `syz.3.4052'. [ 233.027074][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4051'. [ 233.163146][T14467] openvswitch: netlink: IP tunnel dst address not specified [ 233.346224][T14479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.441403][T14485] syz.2.4064: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.475893][T14485] CPU: 1 UID: 0 PID: 14485 Comm: syz.2.4064 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 233.475921][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.475939][T14485] Call Trace: [ 233.475947][T14485] [ 233.475959][T14485] dump_stack_lvl+0x189/0x250 [ 233.475997][T14485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.476015][T14485] ? __pfx__printk+0x10/0x10 [ 233.476037][T14485] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.476058][T14485] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.476080][T14485] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 233.476103][T14485] warn_alloc+0x214/0x310 [ 233.476121][T14485] ? stack_depot_save_flags+0x429/0x900 [ 233.476143][T14485] ? __pfx_warn_alloc+0x10/0x10 [ 233.476163][T14485] ? kasan_save_track+0x4f/0x80 [ 233.476192][T14485] ? xskq_create+0x56/0x170 [ 233.476214][T14485] ? xsk_init_queue+0xb0/0x110 [ 233.476232][T14485] ? xsk_setsockopt+0x4dc/0x8d0 [ 233.476250][T14485] ? do_sock_setsockopt+0x179/0x1b0 [ 233.476265][T14485] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 233.476278][T14485] ? do_syscall_64+0xfa/0x3b0 [ 233.476299][T14485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.476325][T14485] __vmalloc_node_range_noprof+0x125/0x12f0 [ 233.476371][T14485] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.476396][T14485] ? __kasan_kmalloc+0x93/0xb0 [ 233.476423][T14485] vmalloc_user_noprof+0xad/0xf0 [ 233.476441][T14485] ? xskq_create+0xbf/0x170 [ 233.476464][T14485] xskq_create+0xbf/0x170 [ 233.476489][T14485] xsk_init_queue+0xb0/0x110 [ 233.476513][T14485] xsk_setsockopt+0x4dc/0x8d0 [ 233.476535][T14485] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.476555][T14485] ? __pfx_aa_sk_perm+0x10/0x10 [ 233.476579][T14485] ? aa_sock_opt_perm+0x74/0x110 [ 233.476604][T14485] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 233.476622][T14485] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.476643][T14485] do_sock_setsockopt+0x179/0x1b0 [ 233.476665][T14485] __x64_sys_setsockopt+0x13f/0x1b0 [ 233.476688][T14485] do_syscall_64+0xfa/0x3b0 [ 233.476709][T14485] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.476732][T14485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.476746][T14485] ? clear_bhb_loop+0x60/0xb0 [ 233.476766][T14485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.476783][T14485] RIP: 0033:0x7fb66ff8eb69 [ 233.476808][T14485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.476823][T14485] RSP: 002b:00007fb670dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 233.476844][T14485] RAX: ffffffffffffffda RBX: 00007fb6701b5fa0 RCX: 00007fb66ff8eb69 [ 233.476857][T14485] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 233.476867][T14485] RBP: 00007fb670011df1 R08: 0000000000000004 R09: 0000000000000000 [ 233.476878][T14485] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.476888][T14485] R13: 0000000000000000 R14: 00007fb6701b5fa0 R15: 00007fff3920cf08 [ 233.476916][T14485] [ 233.476928][T14485] Mem-Info: [ 233.794601][T14485] active_anon:5869 inactive_anon:0 isolated_anon:0 [ 233.794601][T14485] active_file:1140 inactive_file:39889 isolated_file:0 [ 233.794601][T14485] unevictable:768 dirty:230 writeback:0 [ 233.794601][T14485] slab_reclaimable:11033 slab_unreclaimable:114944 [ 233.794601][T14485] mapped:29158 shmem:1371 pagetables:1653 [ 233.794601][T14485] sec_pagetables:0 bounce:0 [ 233.794601][T14485] kernel_misc_reclaimable:0 [ 233.794601][T14485] free:1316999 free_pcp:12250 free_cma:0 [ 233.881261][T14485] Node 0 active_anon:23476kB inactive_anon:0kB active_file:4560kB inactive_file:159360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116632kB dirty:916kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12020kB pagetables:5660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.916638][T14485] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.999507][T14485] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.046976][T14510] netlink: 'syz.0.4077': attribute type 5 has an invalid length. [ 234.054882][T14485] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 234.065554][T14485] Node 0 DMA32 free:1347396kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23528kB inactive_anon:0kB active_file:4560kB inactive_file:157540kB unevictable:1536kB writepending:916kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:35608kB local_pcp:16480kB free_cma:0kB [ 234.165664][T14485] lowmem_reserve[]: 0 0 1 1 1 [ 234.181102][T14485] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 234.245310][T14485] lowmem_reserve[]: 0 0 0 0 0 [ 234.295605][T14485] Node 1 Normal free:3905096kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14528kB local_pcp:6048kB free_cma:0kB [ 234.402497][T14526] xfrm1: entered allmulticast mode [ 234.412701][T14485] lowmem_reserve[]: 0 0 0 0 0 [ 234.435605][T14485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.466222][T14485] Node 0 DMA32: 747*4kB (UME) 1743*8kB (UME) 886*16kB (UM) 809*32kB (UM) 673*64kB (UME) 542*128kB (UM) 443*256kB (UM) 257*512kB (UME) 107*1024kB (UME) 4*2048kB (ME) 199*4096kB (UM) = 1347300kB [ 234.518664][T14485] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 234.567836][T14485] Node 1 Normal: 168*4kB (UME) 51*8kB (UME) 39*16kB (UME) 121*32kB (UME) 26*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 950*4096kB (UM) = 3905096kB [ 234.652304][T14485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.674786][T14485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.684799][T14485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.698578][T14485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.709788][T14485] 42396 total pagecache pages [ 234.714484][T14485] 0 pages in swap cache [ 234.723099][T14485] Free swap = 124996kB [ 234.730045][T14485] Total swap = 124996kB [ 234.780400][T14485] 2097051 pages RAM [ 234.787714][T14485] 0 pages HighMem/MovableOnly [ 234.792406][T14485] 424872 pages reserved [ 234.801240][T14485] 0 pages cma reserved [ 235.666095][T14602] openvswitch: netlink: Missing key (keys=40, expected=80) [ 236.093310][T14626] : entered promiscuous mode [ 236.474538][T14653] netlink: 'syz.0.4147': attribute type 33 has an invalid length. [ 236.540659][T14656] IPv6: Can't replace route, no match found [ 236.602336][T14658] bond0: option ad_select: unable to set because the bond device is up [ 236.771444][T14668] __nla_validate_parse: 4 callbacks suppressed [ 236.771461][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4156'. [ 236.812917][T14668] !: left allmulticast mode [ 236.818881][T14668] bridge0: port 3(0!) entered disabled state [ 236.894604][T14668] bridge_slave_1: left allmulticast mode [ 236.928878][T14668] bridge_slave_1: left promiscuous mode [ 236.934691][T14668] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.953490][T14668] bridge_slave_0: left allmulticast mode [ 236.978738][T14668] bridge_slave_0: left promiscuous mode [ 236.995874][T14668] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.127650][T14668] bond0: (slave bridge0): Releasing backup interface [ 237.633975][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 237.803783][T14740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4187'. [ 237.833422][T14742] netlink: 'syz.3.4188': attribute type 24 has an invalid length. [ 237.843763][T14740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4187'. [ 238.252692][T14765] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 238.269259][T14771] netlink: zone id is out of range [ 238.278832][T14771] netlink: zone id is out of range [ 238.283959][T14771] netlink: zone id is out of range [ 238.295414][T14771] netlink: zone id is out of range [ 238.301178][T14771] netlink: zone id is out of range [ 238.346110][T14771] netlink: zone id is out of range [ 238.370089][T14771] netlink: zone id is out of range [ 238.391110][T14771] netlink: zone id is out of range [ 238.419151][T14771] netlink: zone id is out of range [ 239.471732][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4241'. [ 239.574857][T14855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4243'. [ 240.642163][T14929] netlink: 'syz.3.4280': attribute type 7 has an invalid length. [ 240.867193][T14944] netlink: 'syz.2.4288': attribute type 4 has an invalid length. [ 241.015385][T14953] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4292'. [ 241.029805][T14953] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 241.228663][T14965] netlink: 'syz.0.4298': attribute type 2 has an invalid length. [ 241.536260][T14986] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 241.600025][T14988] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4309'. [ 241.655071][T14993] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 241.681677][T14993] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 241.855621][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4316'. [ 242.965353][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4341'. [ 242.987768][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4341'. [ 243.278361][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4350'. [ 243.318303][T15073] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 243.428517][T15081] netlink: 'syz.0.4354': attribute type 2 has an invalid length. [ 243.461103][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4354'. [ 243.645223][T15096] net_ratelimit: 395 callbacks suppressed [ 243.645241][T15096] openvswitch: netlink: IP tunnel dst address not specified [ 243.873229][T15113] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 243.957472][T15113] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 244.003352][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'. [ 244.897034][T15173] bond1: entered promiscuous mode [ 244.902235][T15173] bond1: entered allmulticast mode [ 244.910648][T15173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.919239][T15180] netlink: 'syz.3.4401': attribute type 11 has an invalid length. [ 244.961361][T15180] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4401'. [ 245.285839][T15149] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 245.637816][T15224] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 245.893480][T15240] netlink: 'syz.4.4431': attribute type 11 has an invalid length. [ 245.915644][T15240] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4431'. [ 246.226504][T15262] netlink: 'syz.0.4444': attribute type 1 has an invalid length. [ 246.268530][T15262] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4444'. [ 246.403513][T15272] netlink: 'syz.3.4448': attribute type 21 has an invalid length. [ 246.495762][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 246.696463][T15292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4462'. [ 246.815729][T15302] netlink: 'syz.1.4463': attribute type 21 has an invalid length. [ 246.971423][T15309] dvmrp0: entered allmulticast mode [ 247.084732][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4471'. [ 247.391153][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.423857][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.448589][T15342] lo speed is unknown, defaulting to 1000 [ 247.454408][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.471002][T15345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.476389][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.510937][T15342] lo speed is unknown, defaulting to 1000 [ 247.525233][T15342] lo speed is unknown, defaulting to 1000 [ 247.836296][T15364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4494'. [ 247.845274][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4494'. [ 247.984296][T15364] veth5: entered allmulticast mode [ 248.045123][T15342] infiniband syz0: set active [ 248.050146][ T10] lo speed is unknown, defaulting to 1000 [ 248.062467][T15342] infiniband syz0: added lo [ 248.127142][T15342] RDS/IB: syz0: added [ 248.131231][T15342] smc: adding ib device syz0 with port count 1 [ 248.138009][T15342] smc: ib device syz0 port 1 has pnetid [ 248.144942][ T10] lo speed is unknown, defaulting to 1000 [ 248.153895][T15342] lo speed is unknown, defaulting to 1000 [ 248.170119][T15378] netlink: 'syz.0.4502': attribute type 11 has an invalid length. [ 248.209993][T15378] netlink: 'syz.0.4502': attribute type 11 has an invalid length. [ 248.245881][T15378] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4502'. [ 248.580413][T15342] lo speed is unknown, defaulting to 1000 [ 249.186372][T15436] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4529'. [ 249.249033][T15342] lo speed is unknown, defaulting to 1000 [ 249.328463][T15442] netlink: 'syz.0.4532': attribute type 1 has an invalid length. [ 249.367674][T15444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4534'. [ 249.370980][T15446] netlink: 'syz.1.4533': attribute type 24 has an invalid length. [ 249.500982][T15450] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 249.662474][T15458] netlink: 'syz.0.4540': attribute type 1 has an invalid length. [ 250.001114][T15342] lo speed is unknown, defaulting to 1000 [ 250.341692][T15492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4557'. [ 250.439701][T15494] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.568187][T15342] lo speed is unknown, defaulting to 1000 [ 251.064670][T15488] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 251.264905][T15530] netlink: set zone limit has 8 unknown bytes [ 251.291537][T15532] netlink: 'syz.0.4574': attribute type 12 has an invalid length. [ 251.324208][T15532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4574'. [ 251.382209][T15538] netlink: 'syz.1.4580': attribute type 4 has an invalid length. [ 251.494056][T15544] Unsupported ieee802154 address type: 0 [ 252.317150][T15601] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 252.336163][T15601] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 252.448732][T15609] openvswitch: netlink: Key type 29 is not supported [ 252.551380][T15614] netlink: 'syz.4.4618': attribute type 23 has an invalid length. [ 252.634618][T15620] netlink: 'syz.0.4619': attribute type 1 has an invalid length. [ 252.654576][T15620] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4619'. [ 252.698867][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4619'. [ 252.716971][T15626] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4624'. [ 252.839236][T15631] netlink: 'syz.4.4625': attribute type 5 has an invalid length. [ 252.894805][T15634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4628'. [ 253.792987][T15695] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4658'. [ 253.936155][T15704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.501526][T15743] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4682'. [ 254.695786][T15752] netlink: 'syz.4.4686': attribute type 1 has an invalid length. [ 254.724438][T15752] netlink: 'syz.4.4686': attribute type 1 has an invalid length. [ 254.863933][T15764] netlink: 'syz.2.4693': attribute type 11 has an invalid length. [ 254.897339][T15764] netlink: 'syz.2.4693': attribute type 4 has an invalid length. [ 254.905258][T15764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4693'. [ 255.211969][T15784] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4702'. [ 255.265990][T15790] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4703'. [ 255.442398][T15800] netlink: 'syz.4.4710': attribute type 2 has an invalid length. [ 255.466404][T15800] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4710'. [ 255.621418][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.659936][T15790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.685118][T15790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.741834][T15790] bond0 (unregistering): Released all slaves [ 256.066720][T15835] netlink: 'syz.3.4728': attribute type 1 has an invalid length. [ 256.939604][T15893] openvswitch: netlink: Actions may not be safe on all matching packets [ 257.393602][T15923] netlink: 'syz.3.4771': attribute type 2 has an invalid length. [ 257.423222][T15923] netlink: 'syz.3.4771': attribute type 8 has an invalid length. [ 257.888232][T15955] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 257.919572][T15958] __nla_validate_parse: 5 callbacks suppressed [ 257.919588][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4790'. [ 257.922866][T15960] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 258.163912][T15974] netlink: 'syz.2.4797': attribute type 1 has an invalid length. [ 258.235204][T15976] netlink: 'syz.4.4798': attribute type 1 has an invalid length. [ 258.310139][T15976] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4798'. [ 258.322159][T15984] openvswitch: netlink: EtherType 257 is less than min 600 [ 258.901245][T16017] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 258.969452][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4819'. [ 259.077843][T16027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4822'. [ 259.293171][T16043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.331921][ T976] lo speed is unknown, defaulting to 1000 [ 260.150901][T16092] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 260.240828][T16096] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4849'. [ 260.579753][T16111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.725866][T16122] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4860'. [ 260.803368][T16127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4863'. [ 260.813430][T16128] netlink: 'syz.0.4862': attribute type 1 has an invalid length. [ 260.815095][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4864'. [ 260.868189][T16128] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4862'. [ 260.872542][T16130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4864'. [ 260.940880][T16130] gretap1: entered promiscuous mode [ 260.956063][T16130] gretap1: entered allmulticast mode [ 260.965333][T16134] : renamed from hsr0 [ 262.005729][T16196] netlink: 'syz.3.4890': attribute type 5 has an invalid length. [ 262.040361][T16196] geneve3: entered promiscuous mode [ 262.045945][T16196] geneve3: entered allmulticast mode [ 262.065282][ T13] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 262.183947][T16200] bridge_slave_0: left allmulticast mode [ 262.202940][T16200] bridge_slave_0: left promiscuous mode [ 262.210579][T16200] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.224473][T16207] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.236008][T16200] bridge_slave_1: left allmulticast mode [ 262.241885][T16200] bridge_slave_1: left promiscuous mode [ 262.250168][T16200] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.273577][T16200] bond0: (slave bond_slave_0): Releasing backup interface [ 262.338512][T16200] bond0: (slave bond_slave_1): Releasing backup interface [ 262.360676][T16200] team0: Port device team_slave_0 removed [ 262.369482][T16213] netlink: 'syz.3.4899': attribute type 8 has an invalid length. [ 262.379527][T16200] team0: Port device team_slave_1 removed [ 262.389396][T16200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.422974][T16200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.447431][ T1098] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 262.465973][ T1098] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 262.531284][T16220] openvswitch: netlink: Missing key (keys=40, expected=100) [ 262.621812][ T1098] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 262.850096][T16237] netlink: 'syz.0.4910': attribute type 7 has an invalid length. [ 263.093833][T16249] __nla_validate_parse: 5 callbacks suppressed [ 263.093851][T16249] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4915'. [ 263.180449][T16255] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 263.470188][ T1570] lo speed is unknown, defaulting to 1000 [ 263.501316][ T1570] syz0: Port: 1 Link DOWN [ 263.504895][T16276] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4925'. [ 263.518245][ T1570] lo speed is unknown, defaulting to 1000 [ 263.551750][T16276] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 263.630714][T16276] 0ªî{X¹¦: entered allmulticast mode [ 263.661739][T16276] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 263.734965][T16288] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4930'. [ 264.187631][T16317] netlink: 'syz.1.4942': attribute type 4 has an invalid length. [ 264.350567][T16325] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4947'. [ 264.618301][T16341] netlink: 'syz.1.4952': attribute type 2 has an invalid length. [ 264.650952][T16341] netlink: 'syz.1.4952': attribute type 1 has an invalid length. [ 264.738709][T16348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4956'. [ 265.238233][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4967'. [ 265.566630][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4977'. [ 265.585136][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4977'. [ 265.720939][T16407] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 265.785763][T16410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4982'. [ 265.925388][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4985'. [ 266.383124][T16441] delete_channel: no stack [ 266.777047][T16461] netlink: ct family unspecified [ 266.819660][T16461] openvswitch: netlink: Actions may not be safe on all matching packets [ 266.866997][T16468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.062345][T16477] sctp: [Deprecated]: syz.3.5010 (pid 16477) Use of int in max_burst socket option. [ 267.062345][T16477] Use struct sctp_assoc_value instead [ 267.119504][T16483] netlink: 'syz.4.5014': attribute type 11 has an invalid length. [ 267.553646][T16508] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.736072][T16518] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 268.467811][T16563] netlink: 'syz.2.5046': attribute type 1 has an invalid length. [ 268.499239][T16563] __nla_validate_parse: 5 callbacks suppressed [ 268.499256][T16563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5046'. [ 268.721842][T16579] netlink: 'syz.1.5053': attribute type 58 has an invalid length. [ 268.760314][T16579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5053'. [ 269.021189][T16594] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 269.203098][T16603] pim6reg527: entered allmulticast mode [ 269.516484][T16621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5071'. [ 269.624621][T16624] tipc: Started in network mode [ 269.657383][T16624] tipc: Node identity ac1414aa, cluster identity 4711 [ 269.664861][T16624] tipc: Enabling of bearer rejected, failed to enable media [ 270.061582][T16647] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5081'. [ 270.624288][T16682] siw: device registration error -23 [ 270.863475][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5102'. [ 270.893225][T16698] tipc: Invalid UDP bearer configuration [ 270.893283][T16698] tipc: Enabling of bearer rejected, failed to enable media [ 271.442988][T16735] Bluetooth: MGMT ver 1.23 [ 271.518328][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5120'. [ 271.814600][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5128'. [ 271.838910][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5128'. [ 271.882429][T16757] netlink: 'syz.2.5128': attribute type 14 has an invalid length. [ 271.944964][T16757] netlink: 'syz.2.5128': attribute type 13 has an invalid length. [ 272.233146][T16780] netlink: 'syz.0.5136': attribute type 2 has an invalid length. [ 272.495922][T16793] Bluetooth: MGMT ver 1.23 [ 272.588137][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5144'. [ 272.794627][T16807] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5148'. [ 272.824051][T16812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.232000][T16833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.702822][T16863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5173'. [ 273.803093][T16870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5177'. [ 274.005159][T16881] tipc: Enabling of bearer rejected, failed to enable media [ 274.461790][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5196'. [ 274.563026][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5198'. [ 276.526774][T17037] netlink: 'syz.0.5257': attribute type 11 has an invalid length. [ 276.872455][T17065] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5272'. [ 277.024795][T17074] netlink: 'syz.2.5275': attribute type 29 has an invalid length. [ 277.037616][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 277.055742][T17074] netlink: 'syz.2.5275': attribute type 29 has an invalid length. [ 277.085644][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 277.341392][T17092] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5284'. [ 277.375876][T17092] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5284'. [ 277.401095][T17092] netlink: 'syz.3.5284': attribute type 5 has an invalid length. [ 277.419484][T17092] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5284'. [ 277.778084][T17119] netlink: 'syz.4.5298': attribute type 2 has an invalid length. [ 277.891102][T17126] block nbd2: not configured, cannot reconfigure [ 278.645064][T17172] veth0_to_bond: entered allmulticast mode [ 279.209821][T17200] __nla_validate_parse: 1 callbacks suppressed [ 279.209840][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5333'. [ 279.262981][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5333'. [ 279.332246][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5333'. [ 280.352429][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5363'. [ 280.361937][T17268] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 280.369904][T17268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.391819][T17333] openvswitch: netlink: IPv6 tunnel dst address is zero [ 281.565952][T17343] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 281.633080][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5403'. [ 282.083991][T17376] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5416'. [ 282.117595][T17376] netlink: zone id is out of range [ 282.122812][T17376] netlink: get zone limit has 8 unknown bytes [ 282.158604][T17379] netlink: 'syz.0.5418': attribute type 1 has an invalid length. [ 282.194339][T17379] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5418'. [ 283.124844][T17431] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5442'. [ 283.159759][T17431] vlan2: entered allmulticast mode [ 283.170451][T17431] gretap0: entered allmulticast mode [ 283.705533][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 283.816101][T17468] netlink: 'syz.4.5459': attribute type 1 has an invalid length. [ 283.823875][T17468] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5459'. [ 284.325840][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5472'. [ 284.849769][T17526] netlink: 'syz.2.5483': attribute type 2 has an invalid length. [ 284.880435][T17532] netlink: 'syz.1.5486': attribute type 2 has an invalid length. [ 284.922735][T17530] team0: Device vti0 is of different type [ 284.941849][T17534] netlink: 'syz.1.5488': attribute type 2 has an invalid length. [ 285.162580][T17550] netlink: 'syz.3.5494': attribute type 1 has an invalid length. [ 286.083473][T17607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5521'. [ 286.671681][T17643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5539'. [ 286.689738][T17642] delete_channel: no stack [ 286.734971][T17647] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5540'. [ 287.080109][T17667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.055971][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5569'. [ 288.124132][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5572'. [ 288.325720][T17745] netlink: 'syz.4.5577': attribute type 83 has an invalid length. [ 289.342548][T17807] IPVS: Error joining to the multicast group [ 289.595686][T17828] vxcan1 speed is unknown, defaulting to 1000 [ 290.061807][T17855] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.5620'. [ 290.155820][T17860] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5621'. [ 290.485841][T17873] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5626'. [ 290.555681][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5627'. [ 290.723544][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5629'. [ 290.790455][T17887] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 290.825588][T17887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.836580][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5632'. [ 290.877351][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5632'. [ 291.861011][T17964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5667'. [ 292.014889][T17976] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 292.162014][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5676'. [ 292.278944][T17991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5680'. [ 292.481031][T18006] netlink: 'syz.3.5687': attribute type 1 has an invalid length. [ 292.500670][T18006] netlink: 'syz.3.5687': attribute type 1 has an invalid length. [ 292.728384][T18019] x_tables: ip_tables: udp match: only valid for protocol 17 [ 293.691629][T18079] openvswitch: netlink: Unknown key attributes 2 [ 293.950065][T18093] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 294.728522][T18144] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 294.773517][T18146] tipc: Enabling not permitted [ 294.795021][T18146] tipc: Enabling of bearer rejected, failed to enable media [ 294.813585][T18148] netlink: 'syz.4.5757': attribute type 1 has an invalid length. [ 295.209637][T18170] netlink: 'syz.4.5767': attribute type 1 has an invalid length. [ 295.263813][T18176] netlink: 'syz.0.5770': attribute type 1 has an invalid length. [ 295.780426][T18206] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 296.055292][T18226] __nla_validate_parse: 10 callbacks suppressed [ 296.055311][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5793'. [ 296.180745][T18216] "syz.2.5790" (18216) uses obsolete ecb(arc4) skcipher [ 296.340879][T18240] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5800'. [ 296.468752][T18248] Bluetooth: MGMT ver 1.23 [ 296.501271][T18255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.070637][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5821'. [ 297.107862][T18291] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5824'. [ 297.287269][T18302] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 297.563684][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5837'. [ 297.697343][T18326] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 298.108669][T18355] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 299.124843][T18422] net veth1_virt_wifi .: renamed from virt_wifi0 [ 299.288845][T18435] netlink: 'syz.0.5890': attribute type 33 has an invalid length. [ 299.463086][T18447] tipc: Enabling of bearer rejected, failed to enable media [ 299.760803][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5908'. [ 300.523792][T18510] Bluetooth: MGMT ver 1.23 [ 301.840516][T18578] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5957'. [ 301.878399][T18578] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5957'. [ 301.902723][T18578] netlink: 'syz.2.5957': attribute type 5 has an invalid length. [ 301.931578][T18578] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5957'. [ 302.101226][T18591] smc: net device erspan0 applied user defined pnetid SYZ0 [ 302.531217][T18618] netlink: 'syz.2.5974': attribute type 7 has an invalid length. [ 302.703988][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5980'. [ 302.718699][T18630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5980'. [ 303.161092][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5995'. [ 303.172021][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5995'. [ 303.764932][T18686] bridge_slave_0: left allmulticast mode [ 303.798539][T18686] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.868969][T18686] bridge_slave_1: left allmulticast mode [ 303.879395][T18686] bridge_slave_1: left promiscuous mode [ 303.894537][T18686] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.934867][T18686] team0: Port device team_slave_0 removed [ 303.962263][T18686] team0: Port device team_slave_1 removed [ 303.970483][T18686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.978301][T18686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.009137][T18686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.024572][T18686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.100497][T18700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.108756][T18700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.118870][T18700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.128886][T18700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.208226][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6016'. [ 304.240682][T18707] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 304.251801][T18707] tipc: Enabled bearer , priority 10 [ 304.685619][T18732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6028'. [ 304.954571][T18748] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6036'. [ 305.155019][T18763] nbd: must specify at least one socket [ 305.366970][ T5894] tipc: Node number set to 2886997162 [ 305.655783][T18787] Zero length message leads to an empty skb [ 305.657685][T18791] netlink: 'syz.1.6055': attribute type 32 has an invalid length. [ 306.548425][T18827] team0 (unregistering): Port device team_slave_0 removed [ 306.580002][T18827] team0 (unregistering): Port device team_slave_1 removed [ 306.897225][T18861] bridge_slave_0: default FDB implementation only supports local addresses [ 307.149005][T18876] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.183627][T18878] rdma_op ffff888021b579f0 conn xmit_rdma 0000000000000000 [ 307.194129][T18876] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 307.218161][T18876] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 307.860243][T18916] __nla_validate_parse: 5 callbacks suppressed [ 307.860262][T18916] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6111'. [ 307.886423][T18916] nbd: illegal input index -8454144 [ 308.381792][T18946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.930588][T18979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6141'. [ 309.231728][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6151'. [ 309.262205][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6151'. [ 309.315602][T18999] netlink: 'syz.0.6151': attribute type 5 has an invalid length. [ 309.926790][T19041] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 310.394235][T19072] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6186'. [ 310.575920][T19080] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 311.482474][T19125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6213'. [ 311.745041][T19145] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6223'. [ 312.095601][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 312.319263][T19186] netlink: 'syz.3.6242': attribute type 2 has an invalid length. [ 312.330720][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6242'. [ 313.653146][T19271] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 313.918054][T19282] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 314.266423][T19308] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6299'. [ 314.621624][T19329] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 315.120052][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6325'. [ 315.131808][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6325'. [ 315.263678][T19374] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6330'. [ 315.409102][T19383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6336'. [ 315.433989][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6336'. [ 315.632319][T19397] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6343'. [ 315.807774][T19407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6348'. [ 315.821187][T19407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6348'. [ 316.732170][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6380'. [ 317.315347][T19515] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 317.734209][T19544] netlink: 'syz.1.6416': attribute type 2 has an invalid length. [ 317.872519][T19553] netem: change failed [ 318.529989][T19593] macvlan2: entered promiscuous mode [ 318.535320][T19593] macvlan2: entered allmulticast mode [ 320.071513][T19706] tipc: Enabled bearer , priority 10 [ 320.563917][T19743] netlink: 'syz.2.6508': attribute type 4 has an invalid length. [ 320.573394][T19743] __nla_validate_parse: 3 callbacks suppressed [ 320.573410][T19743] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6508'. [ 320.576137][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 320.579950][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 320.989114][T19767] netlink: 'syz.2.6519': attribute type 23 has an invalid length. [ 321.067551][T19771] netlink: 'syz.1.6522': attribute type 29 has an invalid length. [ 321.078136][T19771] netlink: 'syz.1.6522': attribute type 29 has an invalid length. [ 321.222473][T19779] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6526'. [ 321.252468][T19779] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6526'. [ 321.351847][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6530'. [ 322.577216][T19871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6567'. [ 322.923016][T19895] Bluetooth: MGMT ver 1.23 [ 322.930608][T19893] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.6579'. [ 322.942707][T19896] IPVS: length: 8 != 1152 [ 322.971131][T19893] openvswitch: netlink: Message has 5 unknown bytes. [ 323.355111][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6594'. [ 324.333289][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6623'. [ 324.622666][T20010] netlink: 'syz.0.6630': attribute type 1 has an invalid length. [ 324.644268][T20010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.822909][T20020] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6636'. [ 325.035644][T20033] netlink: 'syz.0.6640': attribute type 1 has an invalid length. [ 325.082759][T20035] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6641'. [ 325.112992][T20035] NCSI netlink: No device for ifindex 0 [ 325.722414][T20070] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6653'. [ 326.523142][T20110] netlink: 'syz.3.6665': attribute type 2 has an invalid length. [ 326.553419][T20110] netlink: 'syz.3.6665': attribute type 2 has an invalid length. [ 327.556367][T20167] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 327.980748][T20193] tipc: Enabling of bearer rejected, already enabled [ 328.287020][T20211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6714'. [ 328.594944][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6725'. [ 328.605102][T20234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6725'. [ 328.977352][T20259] netlink: 'syz.0.6737': attribute type 142 has an invalid length. [ 329.013899][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6740'. [ 329.036838][T20267] netlink: 'syz.4.6740': attribute type 3 has an invalid length. [ 329.077794][T20265] team0: Device xfrm1 is up. Set it down before adding it as a team port [ 329.250929][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6746'. [ 329.356557][T20280] bond0: (slave bond_slave_0): Releasing backup interface [ 329.365105][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6750'. [ 329.391927][T20284] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 329.407400][T20280] bond0: (slave bond_slave_1): Releasing backup interface [ 329.417126][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.455246][T20280] team0: Port device team_slave_0 removed [ 329.490513][T20280] team0: Port device team_slave_1 removed [ 329.546127][ T976] syz1: Port: 1 Link DOWN [ 329.908690][ T5894] IPVS: starting estimator thread 0... [ 330.007707][T20317] IPVS: using max 33 ests per chain, 79200 per kthread [ 330.085145][T20327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6766'. [ 330.609727][T20360] netlink: 'syz.4.6780': attribute type 1 has an invalid length. [ 330.616596][T20362] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 330.626255][ T1570] IPVS: starting estimator thread 0... [ 330.669997][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 330.753885][T20363] IPVS: using max 27 ests per chain, 64800 per kthread [ 331.227969][T20392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6793'. [ 331.427100][T20407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6799'. [ 331.484073][T20410] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 332.117066][T20450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6819'. [ 332.457262][T20471] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.6829'. [ 332.506069][T20471] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 332.535669][T20471] openvswitch: netlink: Message has 6332 unknown bytes. [ 332.598177][T20481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.293355][T20524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6854'. [ 334.471210][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6895'. [ 334.714592][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6904'. [ 334.945045][T20639] netlink: 'syz.4.6910': attribute type 29 has an invalid length. [ 335.568898][T20678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6927'. [ 335.711600][T20686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.280182][T20717] syz.1.6946 (20717) used greatest stack depth: 15096 bytes left [ 336.669728][T20748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6961'. [ 337.739263][T20810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.746537][T20810] IPv6: NLM_F_CREATE should be set when creating new route [ 337.753818][T20810] IPv6: NLM_F_CREATE should be set when creating new route [ 337.761092][T20810] IPv6: NLM_F_CREATE should be set when creating new route [ 337.788835][T20815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.327137][T20848] netlink: 'syz.4.7006': attribute type 3 has an invalid length. [ 339.407465][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7044'. [ 339.622519][T20939] netlink: 'syz.0.7051': attribute type 1 has an invalid length. [ 339.640728][T20939] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7051'. [ 339.652555][T20939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7051'. [ 340.016548][T20960] pimreg: entered allmulticast mode [ 340.053406][T20960] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 340.066631][T20960] pimreg: left allmulticast mode [ 340.309665][T20975] tipc: Started in network mode [ 340.333782][T20979] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 340.339257][T20975] tipc: Node identity e0000002, cluster identity 4711 [ 340.351794][T20975] tipc: Enabling of bearer rejected, failed to enable media [ 340.993637][T21018] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7086'. [ 341.061300][T21022] : entered promiscuous mode [ 341.635661][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7106'. [ 342.405377][T21104] netlink: 'syz.4.7128': attribute type 3 has an invalid length. [ 342.421249][T21105] openvswitch: netlink: IPv6 tunnel dst address is zero [ 342.690943][T21122] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7136'. [ 342.705915][T21122] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7136'. [ 342.807930][T21128] tipc: Enabling of bearer rejected, failed to enable media [ 343.000268][T21142] netlink: 'syz.4.7146': attribute type 2 has an invalid length. [ 343.015628][T21142] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7146'. [ 343.573630][T21180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7165'. [ 343.878235][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7176'. [ 344.751520][T21262] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 344.882183][T21273] netlink: 'syz.0.7210': attribute type 1 has an invalid length. [ 344.899687][T21273] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7210'. [ 345.118977][T21289] netlink: 212388 bytes leftover after parsing attributes in process `syz.1.7218'. [ 345.157243][T21289] openvswitch: netlink: Message has 5 unknown bytes. [ 345.186281][T21295] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7220'. [ 345.262719][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7222'. [ 345.530284][T21312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7228'. [ 346.373279][T21376] tipc: Enabling of bearer rejected, failed to enable media [ 346.835603][T21408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.002649][T21417] netlink: 'syz.3.7281': attribute type 6 has an invalid length. [ 347.012518][T21417] netlink: 'syz.3.7281': attribute type 1 has an invalid length. [ 347.183107][ T10] IPVS: starting estimator thread 0... [ 347.285645][T21428] IPVS: using max 24 ests per chain, 57600 per kthread [ 347.667686][T21462] atomic_op ffff888077426998 conn xmit_atomic 0000000000000000 [ 348.334738][T21509] netlink: 'syz.2.7326': attribute type 1 has an invalid length. [ 349.075889][T21559] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 349.086709][T21560] xt_limit: Overflow, try lower: 604147548/4200216962 [ 349.328265][T21576] __nla_validate_parse: 6 callbacks suppressed [ 349.328286][T21576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7358'. [ 350.660456][T21667] netlink: zone id is out of range [ 350.690905][T21669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7405'. [ 350.708504][T21667] netlink: zone id is out of range [ 350.746321][T21667] netlink: zone id is out of range [ 350.751704][T21667] netlink: zone id is out of range [ 350.782797][T21667] netlink: zone id is out of range [ 350.796335][T21667] netlink: zone id is out of range [ 350.804607][T21667] netlink: zone id is out of range [ 350.833512][T21667] netlink: zone id is out of range [ 350.840694][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7412'. [ 350.858879][T21667] netlink: zone id is out of range [ 350.864132][T21682] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7412'. [ 350.886984][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7412'. [ 351.078519][T21692] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7416'. [ 351.650438][T21733] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7437'. [ 351.713184][T21733] unsupported nlmsg_type 40 [ 352.757076][T21808] bridge0: entered promiscuous mode [ 352.770290][T21808] macsec1: entered promiscuous mode [ 353.055288][T21828] netlink: 'syz.0.7484': attribute type 1 has an invalid length. [ 353.264240][T21838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7489'. [ 353.281118][T21838] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7489'. [ 353.309229][T21842] netlink: 'syz.2.7490': attribute type 1 has an invalid length. [ 353.336149][T21844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7491'. [ 353.856024][T21881] macsec0: entered promiscuous mode [ 353.863154][T21881] macsec0: entered allmulticast mode [ 353.909103][T21881] veth1_macvtap: entered allmulticast mode [ 353.915131][T21881] macsec0: left promiscuous mode [ 353.938907][T21881] macsec0: left allmulticast mode [ 353.943966][T21881] veth1_macvtap: left allmulticast mode [ 354.633852][T21921] bridge0: port 3(veth0_to_bridge) entered blocking state [ 354.649243][T21922] __nla_validate_parse: 1 callbacks suppressed [ 354.649261][T21922] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7529'. [ 354.668318][T21921] bridge0: port 3(veth0_to_bridge) entered disabled state [ 354.679887][T21921] veth0_to_bridge: entered allmulticast mode [ 354.690925][T21921] veth0_to_bridge: entered promiscuous mode [ 354.698204][T21921] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.712793][T21921] bridge0: port 3(veth0_to_bridge) entered blocking state [ 354.720289][T21921] bridge0: port 3(veth0_to_bridge) entered listening state [ 355.775821][ C0] net_ratelimit: 5 callbacks suppressed [ 355.775839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.793417][ C0] bridge0: BPDU received on blocked port 1(bridge_slave_0) [ 355.801409][ C0] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.809753][ C0] bridge0: port 3(veth0_to_bridge) entered blocking state [ 356.160450][T22005] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 356.320804][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7579'. [ 356.333364][T22022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7578'. [ 357.422910][T22069] netlink: 'syz.4.7601': attribute type 1 has an invalid length. [ 357.451838][T22069] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7601'. [ 357.461119][T22069] netlink: 'syz.4.7601': attribute type 1 has an invalid length. [ 357.469328][T22069] netlink: 'syz.4.7601': attribute type 2 has an invalid length. [ 357.478166][T22069] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7601'. [ 357.947097][T22105] netlink: 'syz.1.7619': attribute type 1 has an invalid length. [ 357.961766][T22105] netlink: 'syz.1.7619': attribute type 3 has an invalid length. [ 357.990270][T22105] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7619'. [ 358.287813][T22126] nbd: must specify a device to reconfigure [ 358.479417][T22139] netlink: 'syz.1.7637': attribute type 178 has an invalid length. [ 359.994085][T22235] netlink: 'syz.2.7680': attribute type 11 has an invalid length. [ 360.284553][T22256] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7690'. [ 360.300033][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7690'. [ 361.024128][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7709'. [ 361.054124][T22297] netlink: 'syz.3.7709': attribute type 5 has an invalid length. [ 361.073778][T22297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7709'. [ 361.477270][T22324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7722'. [ 361.562398][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7724'. [ 361.589807][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7724'. [ 361.888694][T22351] pimreg3: entered allmulticast mode [ 361.971921][T22355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7737'. [ 363.130950][T22437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7778'. [ 363.276996][T22445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7783'. [ 365.179417][T22563] veth0: entered promiscuous mode [ 365.201473][T22561] veth0: left promiscuous mode [ 365.413696][T22578] netlink: 'syz.2.7847': attribute type 1 has an invalid length. [ 365.472941][T22578] netlink: 'syz.2.7847': attribute type 4 has an invalid length. [ 365.481951][T22578] __nla_validate_parse: 3 callbacks suppressed [ 365.481969][T22578] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7847'. [ 365.765362][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7856'. [ 365.917247][T22611] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 365.963342][T22615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.970723][T22615] IPv6: NLM_F_CREATE should be set when creating new route [ 365.978012][T22615] IPv6: NLM_F_CREATE should be set when creating new route [ 365.994764][T22615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.242118][T22633] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 366.281193][T22635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7875'. [ 366.443078][T22647] netlink: 'syz.1.7881': attribute type 3 has an invalid length. [ 366.456342][T22647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.770773][T22671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7892'. [ 367.999412][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7922'. [ 368.061947][T22734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7922'. [ 368.083897][T22739] vlan2: entered promiscuous mode [ 368.090606][T22739] bridge0: entered promiscuous mode [ 368.498703][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7929'. [ 368.789983][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7936'. [ 368.821892][T22777] netem: change failed [ 369.356624][T22812] tun0: tun_chr_ioctl cmd 1074025675 [ 369.361969][T22812] tun0: persist disabled [ 369.523567][T22823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7961'. [ 369.710289][T22838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7968'. [ 370.558673][T22890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7991'. [ 370.608399][T22894] netlink: 340 bytes leftover after parsing attributes in process `syz.2.7992'. [ 371.023306][T22915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8003'. [ 371.190584][T22923] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8007'. [ 371.343780][T22929] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8010'. [ 371.621041][T22945] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8018'. [ 371.713390][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8020'. [ 371.779592][T22954] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 371.907598][T22962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.204282][T22982] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.8033'. [ 372.808618][T23019] netlink: 'syz.0.8049': attribute type 1 has an invalid length. [ 372.832467][T23019] netlink: 'syz.0.8049': attribute type 2 has an invalid length. [ 372.843781][T23019] netlink: 'syz.0.8049': attribute type 1 has an invalid length. [ 372.852982][T23019] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.8049'. [ 372.921401][T23025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8053'. [ 373.463174][T23056] bond4: entered promiscuous mode [ 373.482885][T23056] bond4: entered allmulticast mode [ 373.489303][T23056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.723519][T23056] bond4 (unregistering): Released all slaves [ 373.751284][T23069] bond0: (slave team0): Releasing backup interface [ 373.759993][T23069] team0: left allmulticast mode [ 373.764973][T23069] team_slave_0: left allmulticast mode [ 373.771315][T23069] team_slave_1: left allmulticast mode [ 373.794267][T23069] team0: Cannot enslave team device to itself [ 374.638012][T23130] blkio.reset_stats is deprecated [ 374.996740][T23150] tipc: Started in network mode [ 375.010547][T23150] tipc: Node identity ac1414aa, cluster identity 4711 [ 375.027624][T23150] tipc: Enabled bearer , priority 10 [ 375.902691][T23215] __nla_validate_parse: 3 callbacks suppressed [ 375.902708][T23215] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.8140'. [ 375.935687][ C0] bridge0: port 3(veth0_to_bridge) neighbor 0000.aa:aa:aa:aa:aa:0c lost [ 375.945647][ C0] bridge0: port 3(veth0_to_bridge) entered listening state [ 376.147052][ T5894] tipc: Node number set to 2886997162 [ 376.244521][T23236] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8151'. [ 377.127339][T23283] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8172'. [ 377.396090][T23301] block nbd0: server does not support multiple connections per device. [ 377.406320][T23301] block nbd0: shutting down sockets [ 377.510129][T23311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8183'. [ 377.579530][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8186'. [ 377.655754][T23318] netlink: 'syz.3.8188': attribute type 1 has an invalid length. [ 377.675642][T23318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8188'. [ 378.238674][T23355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8206'. [ 378.498851][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.548292][T23376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8216'. [ 378.660537][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8219'. [ 378.672905][T23382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8219'. [ 378.695054][T23385] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 379.204555][T23420] 8021q: VLANs not supported on wg1 [ 379.511695][T23442] veth0: entered promiscuous mode [ 379.537210][T23439] veth0: left promiscuous mode [ 380.220050][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056830c00: rx timeout, send abort [ 380.230460][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056830c00: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 380.736256][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 380.886526][T23534] netlink: 'syz.2.8288': attribute type 4 has an invalid length. [ 381.150711][T23548] bridge4: entered promiscuous mode [ 381.175606][T23548] bridge4: entered allmulticast mode [ 381.301155][T23560] __nla_validate_parse: 10 callbacks suppressed [ 381.301174][T23560] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.8303'. [ 381.837664][ T30] audit: type=1804 audit(1754394561.988:2): pid=23594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8315" name="/newroot/1590/cgroup.controllers" dev="tmpfs" ino=7994 res=1 errno=0 [ 381.905998][ T30] audit: type=1800 audit(1754394561.998:3): pid=23594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8315" name="cgroup.controllers" dev="tmpfs" ino=7994 res=0 errno=0 [ 381.961638][T23598] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 382.080431][T23607] openvswitch: netlink: Multiple metadata blocks provided [ 382.337791][T23625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8329'. [ 382.503193][T23637] netlink: 'syz.3.8335': attribute type 11 has an invalid length. [ 382.580466][T23639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8336'. [ 382.924826][T23660] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.8347'. [ 382.953825][T23660] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 382.974300][T23660] openvswitch: netlink: Duplicate key (type 0). [ 383.112751][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8350'. [ 383.961011][T23727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8375'. [ 384.411080][T23754] openvswitch: netlink: Multiple metadata blocks provided [ 384.683701][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8397'. [ 384.786914][T23780] raw_sendmsg: syz.1.8410 forgot to set AF_INET. Fix it! [ 385.716469][T23835] tap0: tun_chr_ioctl cmd 1074025676 [ 385.726034][T23835] tap0: owner set to 0 [ 385.791197][T23842] siw: device registration error -23 [ 385.923183][T23852] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8433'. [ 386.541972][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8454'. [ 386.638719][T23901] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8455'. [ 386.666879][T23903] netlink: 165 bytes leftover after parsing attributes in process `syz.1.8457'. [ 386.986674][T23926] netlink: 'syz.3.8469': attribute type 1 has an invalid length. [ 386.994433][T23926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8469'. [ 387.081724][T23932] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8471'. [ 387.258902][T23944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8477'. [ 387.678996][T23968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8489'. [ 387.745389][T23974] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8492'. [ 388.320092][T24006] sctp: [Deprecated]: syz.3.8507 (pid 24006) Use of int in maxseg socket option. [ 388.320092][T24006] Use struct sctp_assoc_value instead [ 389.062276][T24049] openvswitch: netlink: IPv4 tunnel dst address is zero [ 389.424216][T24061] bridge0: port 3(veth0_to_bridge) entered disabled state [ 389.431737][T24061] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.499765][T24061] wg1: left promiscuous mode [ 389.504528][T24061] wg1: left allmulticast mode [ 389.529597][T24061] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 389.545033][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8538'. [ 390.011756][T24097] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8551'. [ 390.124831][T24108] netlink: 'syz.4.8557': attribute type 83 has an invalid length. [ 391.150442][T24174] netlink: 'syz.1.8588': attribute type 6 has an invalid length. [ 392.245085][T24218] __nla_validate_parse: 3 callbacks suppressed [ 392.245103][T24218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8609'. [ 392.438583][T24229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8614'. [ 392.499250][T24231] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 392.619854][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.640076][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.648831][ T5991] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.650002][T24240] netlink: 'syz.3.8618': attribute type 1 has an invalid length. [ 392.766547][ T5991] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.897189][T24255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8625'. [ 392.988125][T24255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8625'. [ 393.002959][T24261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8627'. [ 393.351652][T24274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8633'. [ 393.536560][ T5991] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.615937][T24276] sit0: left promiscuous mode [ 393.699071][T24276] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.706795][T24276] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.766818][T24276] bond0: left allmulticast mode [ 393.774497][T24276] bond_slave_0: left allmulticast mode [ 393.780720][T24276] bond_slave_1: left allmulticast mode [ 393.787836][T24276] batadv0: left allmulticast mode [ 393.854126][T24276] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 394.358115][T24317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8653'. [ 394.418848][T24319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.617919][T24335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8663'. [ 394.782613][T24346] tipc: Cannot configure node identity twice [ 395.616321][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8689'. [ 395.689447][T24399] netlink: 'syz.2.8689': attribute type 1 has an invalid length. [ 395.706207][T24399] netlink: 'syz.2.8689': attribute type 2 has an invalid length. [ 395.784432][T24405] tipc: Started in network mode [ 395.833260][T24405] tipc: Node identity ac14140f, cluster identity 4711 [ 395.843994][T24409] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8695'. [ 395.846738][T24405] tipc: New replicast peer: 255.255.255.255 [ 395.875305][T24405] tipc: Enabled bearer , priority 10 [ 396.229125][T24434] vxlan0: entered promiscuous mode [ 396.234273][T24434] vxlan0: entered allmulticast mode [ 396.261846][ T1085] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.289925][ T1085] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.321088][ T1085] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.360497][ T1085] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.524169][T24451] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 396.735823][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.989106][ T1570] tipc: Node number set to 2886997007 [ 397.340603][T24507] openvswitch: netlink: IP tunnel dst address not specified [ 397.474067][T24511] netlink: 'syz.1.8742': attribute type 1 has an invalid length. [ 397.484943][T24511] __nla_validate_parse: 3 callbacks suppressed [ 397.484960][T24511] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8742'. [ 397.607489][T24519] tipc: Enabled bearer , priority 10 [ 398.449360][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 398.460597][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 398.470413][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 398.480265][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 398.489850][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 398.501088][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 399.043757][T24596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8779'. [ 399.159523][T24604] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8782'. [ 399.764076][T24644] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8800'. [ 400.081728][T24665] netlink: 'syz.1.8812': attribute type 83 has an invalid length. [ 400.842894][T24713] netlink: 284 bytes leftover after parsing attributes in process `syz.1.8836'. [ 401.592218][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8857'. [ 401.604152][T24767] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8859'. [ 401.816599][T24779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8866'. [ 401.953190][T24790] netlink: 'syz.0.8871': attribute type 14 has an invalid length. [ 402.090791][T24794] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 402.364946][T24813] netlink: 'syz.3.8882': attribute type 4 has an invalid length. [ 402.743876][T24841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8892'. [ 403.213785][T24872] smc: net device bond0 applied user defined pnetid SYZ0 [ 403.222604][T24872] smc: net device erspan0 erased user defined pnetid SYZ0 [ 403.245701][T24872] smc: net device bond0 erased user defined pnetid SYZ0 [ 403.332832][T24876] team0: Mode changed to "loadbalance" [ 403.953787][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8933'. [ 403.982733][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8933'. [ 404.415694][T24951] netlink: 'syz.0.8945': attribute type 58 has an invalid length. [ 404.431732][T24951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8945'. [ 404.908196][T24984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8961'. [ 405.104625][T24999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8968'. [ 405.119871][T24999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8968'. [ 405.131900][T24999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8968'. [ 405.141712][T25001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8969'. [ 405.375613][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.506419][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8979'. [ 407.376325][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 408.230393][T25184] __nla_validate_parse: 6 callbacks suppressed [ 408.230410][T25184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9051'. [ 408.259581][T25182] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 408.422122][T25193] ip6gre0: Master is either lo or non-ether device [ 408.837314][T25223] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 408.849233][T25223] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 408.857643][T25223] CPU: 0 UID: 0 PID: 25223 Comm: syz.2.9069 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 408.869438][T25223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.879487][T25223] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 408.885550][T25223] Code: 18 00 74 08 4c 89 ef e8 3d 5d 0b f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 3a 5c 0b f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 11 5d 0b f8 4d 89 2e 41 80 3c 1f 00 [ 408.905153][T25223] RSP: 0018:ffffc9001d25f0e8 EFLAGS: 00010246 [ 408.911220][T25223] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 408.919179][T25223] RDX: ffffc9000c37a000 RSI: 0000000000000470 RDI: 0000000000000471 [ 408.927139][T25223] RBP: ffff8880583efbb0 R08: ffff88802f3f0000 R09: 0000000000000002 [ 408.935097][T25223] R10: 000000000000000a R11: 0000000000000002 R12: ffff88805a8e08a8 [ 408.943056][T25223] R13: ffff8880583efba8 R14: 0000000000000000 R15: 1ffff1100b51c116 [ 408.951012][T25223] FS: 00007fb670dc76c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 408.959933][T25223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.966501][T25223] CR2: 0000200000000200 CR3: 0000000073dae000 CR4: 00000000003526f0 [ 408.974459][T25223] Call Trace: [ 408.977729][T25223] [ 408.980656][T25223] ? xfrm_state_insert+0x44/0x60 [ 408.985587][T25223] xfrm_state_insert+0x54/0x60 [ 408.990346][T25223] ipcomp4_init_state+0x673/0xb20 [ 408.995362][T25223] __xfrm_init_state+0xa73/0x13f0 [ 409.000378][T25223] ? __xfrm_init_state+0x7ef/0x13f0 [ 409.005569][T25223] xfrm_add_sa+0x2f5b/0x4070 [ 409.010157][T25223] ? __pfx_xfrm_add_sa+0x10/0x10 [ 409.015111][T25223] ? apparmor_capable+0x137/0x1b0 [ 409.020128][T25223] ? __nla_parse+0x40/0x60 [ 409.024532][T25223] xfrm_user_rcv_msg+0x7a3/0xab0 [ 409.029459][T25223] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 409.034916][T25223] ? __pfx___mutex_trylock_common+0x10/0x10 [ 409.040794][T25223] ? rcu_is_watching+0x15/0xb0 [ 409.045548][T25223] ? trace_contention_end+0x39/0x120 [ 409.050817][T25223] ? __mutex_lock+0x335/0x1340 [ 409.055573][T25223] netlink_rcv_skb+0x205/0x470 [ 409.060327][T25223] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 409.065771][T25223] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.071050][T25223] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.076237][T25223] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.081426][T25223] xfrm_netlink_rcv+0x79/0x90 [ 409.086090][T25223] netlink_unicast+0x82c/0x9e0 [ 409.090849][T25223] ? __pfx_netlink_unicast+0x10/0x10 [ 409.096122][T25223] ? netlink_sendmsg+0x642/0xb30 [ 409.101047][T25223] ? skb_put+0x11b/0x210 [ 409.105271][T25223] netlink_sendmsg+0x805/0xb30 [ 409.110028][T25223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.115306][T25223] ? aa_sock_msg_perm+0x94/0x160 [ 409.120241][T25223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.125525][T25223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.130812][T25223] __sock_sendmsg+0x21c/0x270 [ 409.135481][T25223] ____sys_sendmsg+0x505/0x830 [ 409.140243][T25223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.145522][T25223] ? import_iovec+0x74/0xa0 [ 409.150030][T25223] ___sys_sendmsg+0x21f/0x2a0 [ 409.154699][T25223] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.159899][T25223] ? __fget_files+0x2a/0x420 [ 409.164474][T25223] ? __fget_files+0x3a0/0x420 [ 409.169138][T25223] __x64_sys_sendmsg+0x19b/0x260 [ 409.174064][T25223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.179512][T25223] ? rcu_is_watching+0x15/0xb0 [ 409.184271][T25223] ? do_syscall_64+0xbe/0x3b0 [ 409.188941][T25223] do_syscall_64+0xfa/0x3b0 [ 409.193439][T25223] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.198627][T25223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.204683][T25223] ? clear_bhb_loop+0x60/0xb0 [ 409.209343][T25223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.215230][T25223] RIP: 0033:0x7fb66ff8eb69 [ 409.219646][T25223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.239245][T25223] RSP: 002b:00007fb670dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.247654][T25223] RAX: ffffffffffffffda RBX: 00007fb6701b5fa0 RCX: 00007fb66ff8eb69 [ 409.255617][T25223] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 409.263583][T25223] RBP: 00007fb670011df1 R08: 0000000000000000 R09: 0000000000000000 [ 409.271540][T25223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.279494][T25223] R13: 0000000000000000 R14: 00007fb6701b5fa0 R15: 00007fff3920cf08 [ 409.287458][T25223] [ 409.290470][T25223] Modules linked in: [ 409.294505][T25223] ---[ end trace 0000000000000000 ]--- [ 409.299993][T25223] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 409.306087][T25223] Code: 18 00 74 08 4c 89 ef e8 3d 5d 0b f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 3a 5c 0b f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 11 5d 0b f8 4d 89 2e 41 80 3c 1f 00 [ 409.325737][T25223] RSP: 0018:ffffc9001d25f0e8 EFLAGS: 00010246 [ 409.331819][T25223] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 409.339828][T25223] RDX: ffffc9000c37a000 RSI: 0000000000000470 RDI: 0000000000000471 [ 409.347839][T25223] RBP: ffff8880583efbb0 R08: ffff88802f3f0000 R09: 0000000000000002 [ 409.355847][T25223] R10: 000000000000000a R11: 0000000000000002 R12: ffff88805a8e08a8 [ 409.363830][T25223] R13: ffff8880583efba8 R14: 0000000000000000 R15: 1ffff1100b51c116 [ 409.371840][T25223] FS: 00007fb670dc76c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 409.380801][T25223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.387427][T25223] CR2: 0000200000000200 CR3: 0000000073dae000 CR4: 00000000003526f0 [ 409.395448][T25223] Kernel panic - not syncing: Fatal exception in interrupt [ 409.402885][T25223] Kernel Offset: disabled [ 409.407194][T25223] Rebooting in 86400 seconds..