last executing test programs: 3m0.555739197s ago: executing program 2 (id=3702): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 3m0.436660586s ago: executing program 2 (id=3706): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m0.374060039s ago: executing program 2 (id=3708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) 3m0.274479298s ago: executing program 2 (id=3711): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f300000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) 3m0.142794932s ago: executing program 2 (id=3717): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x20, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) 2m59.975384344s ago: executing program 2 (id=3722): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x7d, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m44.971036158s ago: executing program 32 (id=3722): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x7d, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m33.524383183s ago: executing program 4 (id=4524): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x0, 0x0, 0x0) 2m33.359642451s ago: executing program 4 (id=4530): r0 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r0, 0x29, 0x24, 0x0, 0x2000005d) 2m33.232631743s ago: executing program 4 (id=4534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2m33.089519334s ago: executing program 4 (id=4537): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000140)) 2m32.910441212s ago: executing program 4 (id=4544): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) 2m32.789535223s ago: executing program 4 (id=4549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 2m17.710365654s ago: executing program 33 (id=4549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 1.367342395s ago: executing program 6 (id=8799): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.267994296s ago: executing program 6 (id=8802): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.16124691s ago: executing program 5 (id=8804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9, 0x100, @val=0x80}}}}}}}}, 0x36) 1.152729656s ago: executing program 6 (id=8805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 1.017786671s ago: executing program 6 (id=8807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) close(0x3) 958.53087ms ago: executing program 6 (id=8809): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) 803.875635ms ago: executing program 5 (id=8814): syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaa5da75f15b5508004a040038"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x3, 0x8, 0x7, 0x140}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x8, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 734.514422ms ago: executing program 1 (id=8816): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r1, 0x4, 0x0, 0x0, 0xe, 0x0, 0x5f, 0x1, 0x81, 0x1, 0x2, 'syz0\x00'}) 713.310732ms ago: executing program 0 (id=8817): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe40c}, &(0x7f00000000c0)=0x18) 654.875728ms ago: executing program 5 (id=8818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 652.799959ms ago: executing program 3 (id=8819): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 625.5125ms ago: executing program 0 (id=8820): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r1, &(0x7f0000001840)=""/4096, 0x1003, 0x1) 622.77421ms ago: executing program 1 (id=8821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c4}, 0x4004080) 540.850327ms ago: executing program 1 (id=8822): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x5f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 518.611393ms ago: executing program 3 (id=8823): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) 509.215144ms ago: executing program 5 (id=8824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2c, 0x25cfdb79, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x100}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c885}, 0x4000080) 461.652634ms ago: executing program 0 (id=8825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x0, 0x500, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @private0, 0x0, 0x6, 0x0, 0x500, 0x6, 0x1a0107, r1}) 431.489401ms ago: executing program 3 (id=8826): socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 420.711632ms ago: executing program 1 (id=8827): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70b52a, 0x2001, {0x0, 0x0, 0x0, r1, {0x7}, {0xffff, 0xffff}, {0x5, 0xffe0}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 355.590005ms ago: executing program 5 (id=8828): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003c80)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="17de22530c", 0x5}], 0x1}], 0x1, 0x40080) 326.808129ms ago: executing program 0 (id=8829): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 323.014155ms ago: executing program 3 (id=8830): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 319.223419ms ago: executing program 1 (id=8831): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 217.413629ms ago: executing program 0 (id=8832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000a10ff02000000000000000000000000000189"], 0x340a) 201.444769ms ago: executing program 1 (id=8833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)={@void, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@generic={0x4305}}}}, 0x12) 200.723475ms ago: executing program 3 (id=8834): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x3c, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc}, @broadcast, @broadcast, @random="7aba05c5d6f1", {0x6, 0x7fb}}, 0xb, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 92.809513ms ago: executing program 5 (id=8835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 23.315719ms ago: executing program 3 (id=8836): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003dc0)=[{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000500)="3baf07d5757e90cf8176cebcb694417a3f845b178b5064f39380248c35de59c7691dfc38ad339086eaf86500d1a4c9f64a5f946473f3f50687abf3f9625655a94eebeb401507d90ecef43bf941df9931b247c42827cde5d64297ccbeaccd120a75631e4b310912d6d8141a227371bfd0ca6a070024882ac20aec102d8645ec1ca13ed97cb84ba5ac58c1b2b31716b5cb", 0x90}, {&(0x7f00000006c0)="ff971fad9a9f147f3fa04f1e7c7abf0b53afc21bc18fce4b1b246318e8695950be34831cee38c148d79af4bebdfb32d8704ace23e1e5bf79e19912b27c631cb25e55660348d162b8a7c6c04df9c94f8670ab9e188296dd03da5acc78e05ffca1c3c6876cbf3ff830b8f629819cad3ce73cdf51aafb26d2fb8f7f0a7885231d367cfbc744e45c324947f3a19e640dd846d4c9052f3d439914535a7fe8c0932d9e67de270b3f4ed3959b5fd835ee49e9b8815da13514f2b0de76b1e8b4241791789ee2ae11d47b93c31a6090bf42530cc89737773524945152b16c90", 0xdb}, {&(0x7f00000007c0)="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", 0x2a5}], 0x3, 0x0, 0x0, 0x4040}], 0x1, 0x8000) 23.130951ms ago: executing program 0 (id=8837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) 0s ago: executing program 6 (id=8838): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): nterface activated: batadv_slave_1 [ 77.266991][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.304415][ T5834] veth1_vlan: entered promiscuous mode [ 77.311440][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.321692][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.334288][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.353582][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.366210][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.385016][ T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.409673][ T145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.424377][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.424584][ T145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.443734][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.463706][ T145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.473915][ T145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.547336][ T3422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.556193][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.565348][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.574066][ T3422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.663233][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.678812][ T5838] Bluetooth: hci0: command tx timeout [ 77.688194][ T52] Bluetooth: hci2: command tx timeout [ 77.688203][ T5832] Bluetooth: hci1: command tx timeout [ 77.693980][ T5838] Bluetooth: hci3: command tx timeout [ 77.714552][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.718258][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.755683][ T5834] veth0_macvtap: entered promiscuous mode [ 77.761973][ T5838] Bluetooth: hci4: command tx timeout [ 77.776677][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.790553][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.814622][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.826997][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.879776][ T5834] veth1_macvtap: entered promiscuous mode [ 77.943856][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.959455][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.015111][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.049775][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.102639][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.151909][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.212029][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.244291][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.535107][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.596468][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.706400][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.763375][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.758093][ T5838] Bluetooth: hci1: command tx timeout [ 79.763572][ T5838] Bluetooth: hci3: command tx timeout [ 79.769184][ T5838] Bluetooth: hci2: command tx timeout [ 79.774597][ T5838] Bluetooth: hci0: command tx timeout [ 79.838165][ T5832] Bluetooth: hci4: command tx timeout [ 80.792270][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.982386][ T6081] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 85.002177][ T6284] IPv6: addrconf: prefix option has invalid lifetime [ 86.672521][ T130] cfg80211: failed to load regulatory.db [ 115.615319][ T8261] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 118.873391][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.902061][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.909320][ T8450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.955258][ T8457] ip6erspan0: entered promiscuous mode [ 118.995736][ T8457] ip6erspan0: entered allmulticast mode [ 119.309215][ T8481] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 119.537364][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1266'. [ 119.872283][ T8517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.941657][ T8523] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 120.788244][ T8577] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 120.796021][ T8577] netlink: 'syz.4.1307': attribute type 3 has an invalid length. [ 120.849046][ T8577] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1307'. [ 121.085148][ T8594] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 121.097963][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 121.153343][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 121.186284][ T8601] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 121.235968][ T8601] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1318'. [ 121.287825][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 121.348552][ T8610] bond0: entered promiscuous mode [ 121.353686][ T8610] bond_slave_0: entered promiscuous mode [ 121.378199][ T8610] bond_slave_1: entered promiscuous mode [ 121.490978][ T8621] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.536637][ T8688] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 122.572423][ T8688] netlink: 'syz.2.1361': attribute type 11 has an invalid length. [ 122.585831][ T8688] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1361'. [ 122.715459][ T8698] sctp: [Deprecated]: syz.4.1366 (pid 8698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.715459][ T8698] Use struct sctp_sack_info instead [ 122.961803][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 123.096755][ T8719] veth3: entered allmulticast mode [ 123.102551][ T8725] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.159497][ T8725] No such timeout policy "syz0" [ 123.318045][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 123.835668][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 123.875638][ T8774] netlink: 'syz.2.1403': attribute type 21 has an invalid length. [ 124.136153][ T8787] SET target dimension over the limit! [ 124.412189][ T8810] warning: `syz.2.1420' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.424188][ T8811] nftables ruleset with unbound set [ 124.535290][ T8817] openvswitch: netlink: Missing key (keys=40, expected=80) [ 125.138896][ T8861] xt_TPROXY: Can be used only with -p tcp or -p udp [ 125.536394][ T8887] xt_recent: Unsupported userspace flags (000000b1) [ 125.568432][ T8894] __nla_validate_parse: 2 callbacks suppressed [ 125.568451][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1462'. [ 126.146309][ T8933] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1482'. [ 126.388456][ T8950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.451739][ T8956] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1495'. [ 126.594566][ T8964] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 126.923772][ T8986] netlink: 'syz.2.1508': attribute type 6 has an invalid length. [ 126.949759][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.958128][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.102314][ T8995] s5: renamed from vlan1 (while UP) [ 127.228467][ T9001] tunl0: entered promiscuous mode [ 127.245624][ T9001] netlink: 'syz.4.1516': attribute type 3 has an invalid length. [ 127.246626][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'. [ 127.263980][ T9001] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1516'. [ 127.481804][ T9020] syz.3.1526 uses obsolete (PF_INET,SOCK_PACKET) [ 127.701567][ T9039] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1534'. [ 127.727887][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'. [ 127.747882][ T9039] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1534'. [ 127.766598][ T9039] netlink: 'syz.4.1534': attribute type 2 has an invalid length. [ 127.793715][ T9039] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1534'. [ 127.857995][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 127.889635][ T9049] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 128.393530][ T9087] vlan1: entered allmulticast mode [ 128.408010][ T9087] veth0_vlan: entered allmulticast mode [ 128.524071][ T9097] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.578424][ T9097] xt_SECMARK: invalid mode: 9 [ 128.637055][ T9103] netlink: 'syz.3.1566': attribute type 21 has an invalid length. [ 128.707596][ T9103] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 128.750071][ T9103] bond1 (unregistering): Released all slaves [ 129.178185][ T9144] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 129.755081][ T9186] netlink: 'syz.3.1608': attribute type 1 has an invalid length. [ 130.324302][ T9210] netlink: 'syz.1.1619': attribute type 12 has an invalid length. [ 130.517978][ T9219] netlink: 'syz.4.1623': attribute type 16 has an invalid length. [ 130.813005][ T9238] __nla_validate_parse: 7 callbacks suppressed [ 130.813025][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'. [ 131.060845][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 131.736452][ T9306] IPv6: NLM_F_REPLACE set, but no existing node found! [ 131.801840][ T9310] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 132.074284][ T9326] netlink: 'syz.3.1674': attribute type 8 has an invalid length. [ 132.168337][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 132.228457][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1679'. [ 132.348115][ T9345] xt_hashlimit: size too large, truncated to 1048576 [ 132.721778][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.738106][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.750526][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 132.844167][ T9378] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.310441][ T9415] netlink: 'syz.2.1719': attribute type 1 has an invalid length. [ 133.321499][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 133.428310][ T9420] ieee802154 phy0 wpan0: encryption failed: -90 [ 133.954316][ T9461] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1741'. [ 133.990816][ T9465] netlink: 'syz.2.1743': attribute type 64 has an invalid length. [ 134.021210][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1743'. [ 134.584747][ T9511] netlink: 'syz.2.1764': attribute type 1 has an invalid length. [ 134.618935][ T9511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1764'. [ 134.798455][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 134.943736][ T9537] unsupported nla_type 33542 [ 135.049865][ T9542] openvswitch: netlink: IP tunnel dst address not specified [ 135.167554][ T9550] netlink: 'syz.1.1786': attribute type 1 has an invalid length. [ 135.338471][ T9565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.490882][ T9574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.727051][ T9584] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 135.765307][ T9584] bond1 (unregistering): Released all slaves [ 136.109750][ T9616] xt_TPROXY: Can be used only with -p tcp or -p udp [ 136.581984][ T9653] __nla_validate_parse: 3 callbacks suppressed [ 136.582004][ T9653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1833'. [ 136.923112][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1843'. [ 137.131001][ T9693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.140351][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 137.389010][ T9708] netlink: 'syz.3.1859': attribute type 4 has an invalid length. [ 137.462833][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1863'. [ 137.533041][ T9720] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1865'. [ 137.590625][ T9724] Illegal XDP return value 35701542 on prog (id 220) dev N/A, expect packet loss! [ 138.052097][ T9751] openvswitch: netlink: EtherType 50a is less than min 600 [ 138.417270][ T9767] netlink: 'syz.1.1888': attribute type 21 has an invalid length. [ 138.435540][ T9767] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.801578][ T9778] netlink: 'syz.0.1893': attribute type 2 has an invalid length. [ 140.283006][ T9887] lo: entered promiscuous mode [ 140.302590][ T9889] tipc: Can't bind to reserved service type 2 [ 140.303883][ T9887] tunl0: entered promiscuous mode [ 140.340845][ T9887] gre0: entered promiscuous mode [ 140.386521][ T9887] gretap0: entered promiscuous mode [ 140.406391][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 140.416306][ T9887] erspan0: entered promiscuous mode [ 140.457155][ T9887] ip_vti0: entered promiscuous mode [ 141.003011][ T9932] bond2: entered promiscuous mode [ 141.009134][ T9932] bond2: entered allmulticast mode [ 141.037482][ T9932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.296685][ T9957] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 141.337703][ T9959] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1983'. [ 141.354239][ T9959] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 141.362836][ T9961] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1982'. [ 141.577338][ T9971] bond1: entered allmulticast mode [ 141.583907][ T9971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.625077][ T9920] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 141.852580][ T9993] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 142.140224][T10013] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 142.199302][T10018] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.471703][ T5937] IPVS: starting estimator thread 0... [ 142.586661][T10033] bond2: Removing last arp target with arp_interval on [ 142.594300][T10043] IPVS: using max 31 ests per chain, 74400 per kthread [ 142.801945][T10063] netlink: 'syz.4.2032': attribute type 2 has an invalid length. [ 142.857913][T10063] netlink: 'syz.4.2032': attribute type 8 has an invalid length. [ 142.871823][T10063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2032'. [ 142.881240][ T5832] Bluetooth: hci0: command 0x0c20 tx timeout [ 143.774683][T10120] tc_dump_action: action bad kind [ 144.041370][T10133] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2068'. [ 144.174795][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 144.198283][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2070'. [ 145.078015][T10206] netlink: zone id is out of range [ 145.088002][T10206] netlink: del zone limit has 4 unknown bytes [ 145.853086][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2131'. [ 145.953429][T10271] netlink: 'syz.4.2135': attribute type 1 has an invalid length. [ 146.361148][T10299] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 146.388896][T10299] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 147.062945][T10351] delete_channel: no stack [ 147.421608][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 147.865004][T10407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.957587][T10413] netlink: 'syz.3.2203': attribute type 21 has an invalid length. [ 148.008863][T10413] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2203'. [ 148.034678][T10413] netlink: 'syz.3.2203': attribute type 5 has an invalid length. [ 148.066712][T10413] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2203'. [ 148.341504][T10436] bond2: Removing last ns target with arp_interval on [ 148.350781][T10443] sctp: [Deprecated]: syz.2.2217 (pid 10443) Use of int in maxseg socket option. [ 148.350781][T10443] Use struct sctp_assoc_value instead [ 148.418404][T10447] netlink: 'syz.0.2220': attribute type 32 has an invalid length. [ 149.406720][T10514] netlink: 'syz.3.2251': attribute type 2 has an invalid length. [ 149.442097][T10514] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2251'. [ 149.453312][T10517] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2250'. [ 149.708140][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 149.792186][T10541] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 149.812143][T10541] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2264'. [ 149.842230][T10541] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2264'. [ 149.867783][T10541] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2264'. [ 150.015106][T10557] netlink: 'syz.2.2273': attribute type 3 has an invalid length. [ 150.189565][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.440431][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2286'. [ 150.473029][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'. [ 151.522599][T10668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.720230][T10681] gre0: entered allmulticast mode [ 151.950533][T10696] netlink: 'syz.0.2337': attribute type 6 has an invalid length. [ 151.988820][T10699] netlink: 'syz.3.2339': attribute type 1 has an invalid length. [ 152.154471][T10709] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 152.173808][T10709] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 152.654856][T10742] bond4: option primary_reselect: invalid value (255) [ 152.670360][T10742] bond4 (unregistering): Released all slaves [ 153.489321][T10808] openvswitch: netlink: Message has 1 unknown bytes. [ 153.496508][T10808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.606536][T10815] xt_addrtype: ipv6 does not support BROADCAST matching [ 153.754907][T10827] __nla_validate_parse: 2 callbacks suppressed [ 153.754926][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2403'. [ 153.948659][ T5898] IPVS: starting estimator thread 0... [ 154.068235][T10843] IPVS: using max 37 ests per chain, 88800 per kthread [ 154.164210][T10857] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 154.223663][T10860] ipt_ECN: cannot use operation on non-tcp rule [ 154.420725][T10872] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.539833][T10880] validate_nla: 5 callbacks suppressed [ 154.539852][T10880] netlink: 'syz.2.2427': attribute type 28 has an invalid length. [ 154.555901][T10880] netlink: 'syz.2.2427': attribute type 3 has an invalid length. [ 154.570244][T10880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2427'. [ 154.835267][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 155.362611][T10932] lo: entered promiscuous mode [ 155.396119][T10932] netlink: 'syz.1.2450': attribute type 2 has an invalid length. [ 155.408657][T10932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.559064][T10941] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.610391][T10947] Cannot find add_set index 1 as target [ 155.772912][T10955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.219914][T10988] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.347319][T10995] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2481'. [ 157.011152][T11043] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.318137][T11067] xt_l2tp: v2 doesn't support IP mode [ 157.580758][T11085] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 158.060793][T11121] openvswitch: netlink: Flow actions attr not present in new flow. [ 158.114077][T11125] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 158.344165][T11143] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.721134][T11169] openvswitch: netlink: IPv6 tunnel dst address is zero [ 158.867399][T11180] netlink: 'syz.4.2573': attribute type 9 has an invalid length. [ 158.948480][T11186] wg1: entered promiscuous mode [ 158.980813][T11189] x_tables: unsorted entry at hook 3 [ 158.988038][T11186] wg1: entered allmulticast mode [ 159.162027][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2583'. [ 159.376933][T11219] pimreg: entered allmulticast mode [ 159.447316][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'. [ 159.477622][T11222] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2594'. [ 159.495630][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'. [ 159.506750][T11222] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2594'. [ 159.516764][T11222] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2594'. [ 159.670595][T11238] netlink: 'syz.3.2601': attribute type 4 has an invalid length. [ 159.760189][T11244] netlink: 'syz.4.2605': attribute type 5 has an invalid length. [ 159.872049][T11253] : renamed from bond_slave_0 (while UP) [ 160.036450][T11261] netlink: 'syz.2.2613': attribute type 1 has an invalid length. [ 160.071387][T11261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2613'. [ 160.472897][T11295] set match dimension is over the limit! [ 160.509474][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 160.618486][T11305] netlink: 'syz.3.2633': attribute type 4 has an invalid length. [ 160.651447][T11310] netlink: 'syz.1.2635': attribute type 1 has an invalid length. [ 160.843481][T11322] netlink: 'syz.1.2641': attribute type 2 has an invalid length. [ 161.229717][T11354] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 161.312655][T11358] netlink: 'syz.2.2659': attribute type 1 has an invalid length. [ 162.011846][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'. [ 162.085371][T11416] netlink: 'syz.3.2688': attribute type 11 has an invalid length. [ 162.093960][T11417] xt_hashlimit: max too large, truncated to 1048576 [ 162.361235][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 162.709027][T11463] ksmbd: Unknown IPC event: 3, ignore. [ 163.616214][T11529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.629159][T11528] netlink: 'syz.0.2746': attribute type 4 has an invalid length. [ 163.749412][T11538] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 164.256455][T11576] __nla_validate_parse: 2 callbacks suppressed [ 164.256476][T11576] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2765'. [ 164.394083][T11584] tipc: Trying to set illegal importance in message [ 164.720928][T11608] netlink: 'syz.4.2780': attribute type 1 has an invalid length. [ 164.767932][T11608] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2780'. [ 165.660331][T11673] : entered promiscuous mode [ 166.412450][T11730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2830'. [ 166.455708][T11733] openvswitch: netlink: Multiple metadata blocks provided [ 166.592489][T11743] bond0: Error: Cannot enslave bond to itself. [ 166.600760][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'. [ 166.650474][T11747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2839'. [ 166.831034][T11761] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.837856][T11761] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.221620][T11785] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 168.266075][T11867] netlink: 'syz.4.2896': attribute type 1 has an invalid length. [ 168.716903][T11902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2913'. [ 168.848228][T11910] netlink: 'syz.1.2918': attribute type 2 has an invalid length. [ 168.870174][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2918'. [ 168.876808][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2917'. [ 168.897045][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2917'. [ 168.932139][T11918] netlink: 'syz.3.2920': attribute type 1 has an invalid length. [ 169.181744][T11934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.532348][T11958] openvswitch: netlink: IP tunnel dst address not specified [ 170.010740][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2960'. [ 170.175798][T12008] netlink: 'syz.2.2965': attribute type 2 has an invalid length. [ 170.198227][T12008] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2965'. [ 170.339039][T12019] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.529089][T12033] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2977'. [ 171.232153][T12083] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 171.328150][T12090] netlink: 'syz.2.3005': attribute type 11 has an invalid length. [ 171.465754][T12104] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3011'. [ 171.737238][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3020'. [ 171.792887][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3022'. [ 171.812698][T12126] netlink: 'syz.0.3022': attribute type 8 has an invalid length. [ 171.814336][T12129] x_tables: duplicate entry at hook 3 [ 171.915133][T12134] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 171.962856][T12136] gre0: entered promiscuous mode [ 172.111166][T12153] netlink: 'syz.4.3034': attribute type 1 has an invalid length. [ 172.131106][T12153] netlink: 'syz.4.3034': attribute type 1 has an invalid length. [ 172.156906][T12153] netlink: 'syz.4.3034': attribute type 1 has an invalid length. [ 172.180496][T12153] netlink: 'syz.4.3034': attribute type 2 has an invalid length. [ 172.196443][T12153] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3034'. [ 172.808901][T12199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.966260][T12211] bond0: option ad_select: unable to set because the bond device is up [ 173.900756][T12282] netlink: 'syz.1.3096': attribute type 7 has an invalid length. [ 173.914718][T12282] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3096'. [ 174.076418][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'. [ 174.103602][T12298] netlink: 'syz.0.3107': attribute type 1 has an invalid length. [ 174.111632][T12298] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3107'. [ 174.392458][T12315] bridge_slave_0: left allmulticast mode [ 174.437913][T12315] bridge_slave_0: left promiscuous mode [ 174.444740][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.491975][T12315] bridge_slave_1: left allmulticast mode [ 174.500567][T12315] bridge_slave_1: left promiscuous mode [ 174.506404][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.577321][T12315] bond0: (slave bond_slave_0): Releasing backup interface [ 174.610068][T12329] netlink: 'syz.0.3120': attribute type 4 has an invalid length. [ 174.618739][T12315] bond0: (slave bond_slave_1): Releasing backup interface [ 174.665741][T12315] team0: Port device team_slave_0 removed [ 174.705085][T12315] team0: Port device team_slave_1 removed [ 174.726637][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.742276][T12315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.756441][T12336] netlink: 'syz.2.3123': attribute type 2 has an invalid length. [ 174.763224][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.772201][T12315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.782724][T12315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.959444][T12346] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 175.399634][T12372] __nla_validate_parse: 1 callbacks suppressed [ 175.399653][T12372] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3143'. [ 175.752691][T12398] xt_cgroup: path and classid specified [ 175.778041][T12402] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 176.107241][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'. [ 176.125995][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3171'. [ 176.140798][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3171'. [ 176.374248][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3177'. [ 176.392036][T12445] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3176'. [ 176.741188][T12469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.990250][T12487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3200'. [ 177.007002][T12487] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3200'. [ 177.016586][T12487] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3200'. [ 177.026286][T12489] netlink: 'syz.0.3201': attribute type 1 has an invalid length. [ 177.113252][T12493] netlink: 'syz.1.3203': attribute type 12 has an invalid length. [ 177.507979][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'. [ 177.913869][T12552] netlink: 'syz.4.3232': attribute type 1 has an invalid length. [ 179.344170][T12664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.807996][T12694] openvswitch: netlink: IP tunnel dst address not specified [ 180.121206][T12718] netlink: 'syz.1.3316': attribute type 1 has an invalid length. [ 180.126467][T12720] vlan0: entered promiscuous mode [ 180.153826][T12720] vlan0: entered allmulticast mode [ 180.156927][T12718] netlink: 'syz.1.3316': attribute type 1 has an invalid length. [ 180.167865][T12720] veth0_vlan: entered allmulticast mode [ 180.192223][T12718] netlink: 'syz.1.3316': attribute type 2 has an invalid length. [ 180.210241][T12724] xt_policy: output policy not valid in PREROUTING and INPUT [ 180.339700][T12732] unsupported nlmsg_type 40 [ 180.421901][T12737] netlink: 'syz.0.3324': attribute type 11 has an invalid length. [ 180.583986][T12748] netlink: 'syz.4.3330': attribute type 1 has an invalid length. [ 180.600768][T12748] __nla_validate_parse: 8 callbacks suppressed [ 180.600786][T12748] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3330'. [ 180.822729][T12765] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 180.846422][T12765] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3339'. [ 181.536100][ T9290] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.558753][ T9290] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.579007][ T9290] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.616880][ T9290] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.638075][T12822] netlink: 'syz.3.3367': attribute type 6 has an invalid length. [ 182.281659][T12864] vxcan1 speed is unknown, defaulting to 1000 [ 182.313918][T12864] vxcan1 speed is unknown, defaulting to 1000 [ 182.350239][T12864] vxcan1 speed is unknown, defaulting to 1000 [ 182.443221][T12878] netlink: 'syz.2.3394': attribute type 3 has an invalid length. [ 182.476700][T12878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3394'. [ 182.728853][T12864] infiniband syz2: set active [ 182.733872][T12864] infiniband syz2: added vxcan1 [ 182.749359][ T5876] vxcan1 speed is unknown, defaulting to 1000 [ 182.891542][T12864] RDS/IB: syz2: added [ 182.912478][T12864] smc: adding ib device syz2 with port count 1 [ 182.919264][T12864] smc: ib device syz2 port 1 has no pnetid [ 182.931742][ T5980] vxcan1 speed is unknown, defaulting to 1000 [ 182.942853][T12864] vxcan1 speed is unknown, defaulting to 1000 [ 183.037512][T12909] xt_hashlimit: invalid rate [ 183.188051][T12916] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3411'. [ 183.197139][T12916] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3411'. [ 183.247831][T12916] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3411'. [ 183.387199][T12928] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3416'. [ 183.447659][T12928] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3416'. [ 183.489529][T12928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3416'. [ 183.520998][T12864] vxcan1 speed is unknown, defaulting to 1000 [ 183.722464][T12948] xt_ecn: cannot match TCP bits for non-tcp packets [ 184.065048][T12864] vxcan1 speed is unknown, defaulting to 1000 [ 184.168004][T12972] Cannot find add_set index 2 as target [ 184.293388][T12976] pimreg: left allmulticast mode [ 184.466290][T12864] vxcan1 speed is unknown, defaulting to 1000 [ 184.538870][T12988] bridge5: entered promiscuous mode [ 184.544123][T12988] bridge5: entered allmulticast mode [ 184.598821][T12994] netlink: 'syz.2.3449': attribute type 5 has an invalid length. [ 184.844199][T13006] openvswitch: netlink: IP tunnel dst address not specified [ 184.991445][T13015] netlink: 'syz.4.3460': attribute type 21 has an invalid length. [ 185.017906][T13015] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3460'. [ 185.079655][T12864] vxcan1 speed is unknown, defaulting to 1000 [ 185.624489][T13051] netlink: 'syz.2.3478': attribute type 9 has an invalid length. [ 187.520698][T13183] netlink: 'syz.0.3541': attribute type 1 has an invalid length. [ 187.529300][T13183] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3541'. [ 187.549657][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3543'. [ 187.745667][T13198] sctp: [Deprecated]: syz.1.3549 (pid 13198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.745667][T13198] Use struct sctp_sack_info instead [ 187.749328][T13199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3551'. [ 188.230416][T13232] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.275901][T13237] siw: device registration error -23 [ 188.654620][T13264] netlink: 'syz.2.3580': attribute type 3 has an invalid length. [ 188.688990][T13269] openvswitch: netlink: IP tunnel dst address not specified [ 188.729625][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3585'. [ 188.942202][T13285] netlink: 'syz.3.3593': attribute type 3 has an invalid length. [ 188.967246][T13285] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3593'. [ 189.073537][T13290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.125385][T13296] netlink: 'syz.3.3597': attribute type 13 has an invalid length. [ 189.154040][T13296] gre0: left promiscuous mode [ 189.168343][T13301] delete_channel: no stack [ 189.248400][T13296] wg1: left promiscuous mode [ 189.253204][T13296] wg1: left allmulticast mode [ 189.346108][T13296] vlan0: left promiscuous mode [ 189.368120][T13296] vlan0: left allmulticast mode [ 189.374189][T13296] veth0_vlan: left allmulticast mode [ 189.437242][T13296] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 189.523621][T13296] bond1: left allmulticast mode [ 189.547885][ T5937] vxcan1 speed is unknown, defaulting to 1000 [ 189.594051][T13323] netlink: 'syz.1.3612': attribute type 30 has an invalid length. [ 189.666652][T13323] bond3: option arp_missed_max: invalid value (0) [ 189.674388][T13323] bond3: option arp_missed_max: allowed values 1 - 255 [ 189.693457][T13323] bond3 (unregistering): Released all slaves [ 189.715075][T13327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3613'. [ 189.741661][T13327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3613'. [ 190.033115][T13351] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 190.058538][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3624'. [ 190.084687][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3624'. [ 190.130364][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3627'. [ 190.354963][T13369] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.222959][T13434] netlink: 'syz.0.3665': attribute type 9 has an invalid length. [ 191.273603][T13439] netlink: 'syz.2.3666': attribute type 21 has an invalid length. [ 191.480753][T13453] openvswitch: netlink: Flow key attribute not present in set flow. [ 191.943913][T13487] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 192.416513][T13517] netlink: 'syz.0.3705': attribute type 3 has an invalid length. [ 192.625512][T13536] __nla_validate_parse: 6 callbacks suppressed [ 192.625531][T13536] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3715'. [ 192.886157][T13552] bond3: option lp_interval: invalid value (0) [ 192.892836][T13552] bond3: option lp_interval: allowed values 1 - 2147483647 [ 192.930304][T13552] bond3 (unregistering): Released all slaves [ 192.981127][T13558] IPv6: sit1: Disabled Multicast RS [ 193.331369][T13585] netlink: 'syz.0.3739': attribute type 1 has an invalid length. [ 193.768825][T13618] netlink: 'syz.1.3753': attribute type 1 has an invalid length. [ 193.787089][T13618] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3753'. [ 193.797941][T13618] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3753'. [ 193.807004][T13618] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3753'. [ 194.026884][T13634] netlink: 'syz.0.3762': attribute type 21 has an invalid length. [ 194.035061][T13634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3762'. [ 194.163397][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.175955][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.567140][T13667] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 194.575112][T13667] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3780'. [ 194.578641][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3778'. [ 194.609171][T13668] netlink: 'syz.3.3778': attribute type 3 has an invalid length. [ 194.923168][T13694] netlink: 'syz.1.3793': attribute type 8 has an invalid length. [ 194.985508][T13698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.208625][T13713] xt_hashlimit: size too large, truncated to 1048576 [ 195.235878][T13716] ip6t_srh: unknown srh invflags 4000 [ 195.548030][T13739] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3813'. [ 195.567927][T13739] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3813'. [ 195.634227][T13743] netlink: 'syz.3.3816': attribute type 1 has an invalid length. [ 195.720368][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'. [ 195.759869][T13749] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 195.771657][T13749] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 195.780592][T13749] gretap1: entered promiscuous mode [ 195.786770][T13749] gretap1: entered allmulticast mode [ 195.873253][T13758] netlink: 'syz.1.3823': attribute type 24 has an invalid length. [ 196.239537][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 196.239982][ T5148] Bluetooth: hci0: command 0x0c20 tx timeout [ 196.248734][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 196.251735][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 196.576876][T13805] openvswitch: : Dropping previously announced user features [ 196.708135][T13816] netlink: 'syz.3.3852': attribute type 7 has an invalid length. [ 197.031917][T13842] tc_dump_action: action bad kind [ 197.329281][T13864] netlink: 'syz.4.3875': attribute type 10 has an invalid length. [ 197.371404][T13864] team0: Device veth0_macvtap failed to register rx_handler [ 197.960487][T13910] __nla_validate_parse: 1 callbacks suppressed [ 197.960506][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3893'. [ 198.640812][T13962] xt_connbytes: Forcing CT accounting to be enabled [ 198.664960][T13963] validate_nla: 1 callbacks suppressed [ 198.664982][T13963] netlink: 'syz.1.3918': attribute type 10 has an invalid length. [ 198.706837][T13963] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3918'. [ 198.713659][T13966] x_tables: unsorted underflow at hook 2 [ 198.721900][T13963] team0: entered promiscuous mode [ 198.727485][T13963] bridge0: port 1(team0) entered blocking state [ 198.745401][T13963] bridge0: port 1(team0) entered disabled state [ 198.754317][T13963] team0: entered allmulticast mode [ 198.763685][T13969] : renamed from hsr0 (while UP) [ 199.379636][T14013] netlink: 'syz.1.3944': attribute type 1 has an invalid length. [ 199.388166][T14013] netlink: 'syz.1.3944': attribute type 2 has an invalid length. [ 199.443866][T14016] openvswitch: netlink: IPv4 tunnel dst address is zero [ 199.857457][T14049] ip6t_REJECT: ECHOREPLY is not supported [ 199.912296][T14053] netlink: 401 bytes leftover after parsing attributes in process `syz.1.3963'. [ 200.018187][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3967'. [ 200.050526][T14064] xt_cgroup: invalid path, errno=-2 [ 200.396136][T14088] siw: device registration error -23 [ 200.523103][T14096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.534637][T14099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3986'. [ 200.587546][T14099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3986'. [ 200.901176][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4000'. [ 201.041268][T14138] netlink: 'syz.1.4006': attribute type 1 has an invalid length. [ 201.068695][T14138] netlink: 'syz.1.4006': attribute type 1 has an invalid length. [ 201.084308][T14138] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.4006'. [ 201.391903][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4014'. [ 201.455451][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4014'. [ 201.771753][T14182] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 201.799649][T14182] bond3 (unregistering): Released all slaves [ 201.838833][T14188] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 202.402216][T14228] netlink: 'syz.3.4047': attribute type 21 has an invalid length. [ 202.953531][T14270] Cannot find del_set index 4 as target [ 203.058063][T14278] __nla_validate_parse: 2 callbacks suppressed [ 203.058082][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 203.928882][T14341] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 204.055797][T14349] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4106'. [ 204.061286][T14352] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 204.839942][T14401] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 204.927538][T14406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4135'. [ 204.939188][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4135'. [ 204.959912][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4135'. [ 205.140258][T14418] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4142'. [ 205.158687][T14418] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4142'. [ 205.575821][T14453] netlink: 'syz.1.4159': attribute type 1 has an invalid length. [ 205.607835][T14453] netlink: 'syz.1.4159': attribute type 2 has an invalid length. [ 205.705101][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4162'. [ 205.726999][T14462] netlink: 'syz.1.4163': attribute type 5 has an invalid length. [ 205.736572][T14464] netlink: 'syz.4.4164': attribute type 3 has an invalid length. [ 205.765793][T14464] netlink: 'syz.4.4164': attribute type 1 has an invalid length. [ 205.950697][T14479] xt_l2tp: invalid flags combination: 8 [ 206.167885][T14494] xt_TCPMSS: Only works on TCP SYN packets [ 206.214132][T14499] netlink: 'syz.3.4181': attribute type 21 has an invalid length. [ 206.222340][T14499] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4181'. [ 206.440452][T14513] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.761964][T14538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.895079][T14546] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.001910][T14553] netlink: 808 bytes leftover after parsing attributes in process `syz.3.4207'. [ 207.487606][T14587] gre1: entered promiscuous mode [ 207.517414][T14587] gre1: entered allmulticast mode [ 208.035647][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.045081][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.053958][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.063648][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.071553][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.122066][T14628] openvswitch: netlink: IP tunnel dst address not specified [ 208.191614][T14623] vxcan1 speed is unknown, defaulting to 1000 [ 208.497971][T14650] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4255'. [ 208.664688][T14659] netlink: 'syz.4.4260': attribute type 1 has an invalid length. [ 208.701623][T14659] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4260'. [ 208.712498][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4261'. [ 209.050126][T14623] chnl_net:caif_netlink_parms(): no params data found [ 209.177099][T14687] ip6gre1: entered allmulticast mode [ 209.289166][T14697] bond6: Unable to set up delay as MII monitoring is disabled [ 209.302393][T14697] bond6 (unregistering): Released all slaves [ 209.454361][T14623] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.487910][T14623] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.508659][T14623] bridge_slave_0: entered allmulticast mode [ 209.542463][T14623] bridge_slave_0: entered promiscuous mode [ 209.564137][T14623] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.588348][T14623] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.608490][T14623] bridge_slave_1: entered allmulticast mode [ 209.616221][T14623] bridge_slave_1: entered promiscuous mode [ 209.617502][T14718] netlink: 'syz.4.4285': attribute type 1 has an invalid length. [ 209.659758][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4282'. [ 209.751571][T14623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.770972][T14623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.853582][T14623] team0: Port device team_slave_0 added [ 209.874119][T14623] team0: Port device team_slave_1 added [ 209.914761][T14733] netlink: 'syz.4.4292': attribute type 10 has an invalid length. [ 209.923827][T14733] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4292'. [ 210.116270][T14746] xt_l2tp: missing protocol rule (udp|l2tpip) [ 210.158216][ T5835] Bluetooth: hci5: command tx timeout [ 210.253825][T14623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.277567][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.284985][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4301'. [ 210.306019][T14623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.349856][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4301'. [ 210.350823][T14623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.375350][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.402404][T14623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.533789][T14763] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4303'. [ 210.705274][T14623] hsr_slave_0: entered promiscuous mode [ 210.756022][T14623] hsr_slave_1: entered promiscuous mode [ 210.799219][T14776] netlink: 412 bytes leftover after parsing attributes in process `syz.1.4307'. [ 211.128466][T14797] netlink: 'syz.4.4317': attribute type 75 has an invalid length. [ 211.475225][T14623] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.505730][T14623] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.555084][T14623] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.593050][T14623] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.890083][T14623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.985739][T14623] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.027309][T14855] xt_TCPMSS: Only works on TCP SYN packets [ 212.036494][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.044014][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.095378][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.102686][ T7224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.123745][T14859] netlink: 'syz.4.4338': attribute type 11 has an invalid length. [ 212.132920][T14859] netlink: 'syz.4.4338': attribute type 11 has an invalid length. [ 212.156005][T14859] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4338'. [ 212.239693][ T5835] Bluetooth: hci5: command tx timeout [ 212.300605][T14866] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2 [ 212.488026][T14879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.692854][T14623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.702764][T14890] netlink: 'syz.3.4349': attribute type 16 has an invalid length. [ 212.736361][T14890] netlink: 'syz.3.4349': attribute type 17 has an invalid length. [ 213.056661][T14890] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.064124][T14890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.071908][T14890] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.079201][T14890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.117466][T14890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.333691][T14925] : renamed from veth1_vlan (while UP) [ 213.621359][T14942] __nla_validate_parse: 1 callbacks suppressed [ 213.621377][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4366'. [ 213.675287][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4366'. [ 213.752283][T14623] veth0_vlan: entered promiscuous mode [ 213.803908][T14623] veth1_vlan: entered promiscuous mode [ 213.891430][T14623] veth0_macvtap: entered promiscuous mode [ 213.927596][T14623] veth1_macvtap: entered promiscuous mode [ 213.991489][T14623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.032583][T14623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.058013][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4375'. [ 214.074687][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.104381][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.134231][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.186598][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.317934][ T5835] Bluetooth: hci5: command tx timeout [ 214.353009][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4380'. [ 214.437253][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.478313][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.585634][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.608172][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.379638][T15037] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4403'. [ 215.399059][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4406'. [ 215.421611][T15041] openvswitch: netlink: IP tunnel dst address not specified [ 215.601743][T15051] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.877377][T15067] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 216.304254][T15095] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4428'. [ 216.397969][ T5835] Bluetooth: hci5: command tx timeout [ 217.240123][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4458'. [ 217.393992][T15166] netlink: 'syz.3.4464': attribute type 12 has an invalid length. [ 217.565587][T15180] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4471'. [ 218.226366][T15223] bond0: (slave caif0): Error: Device type is different from other slaves [ 218.247900][T15225] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4491'. [ 218.386847][T15231] openvswitch: netlink: Actions may not be safe on all matching packets [ 218.572948][T15243] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 218.748805][T15254] netlink: zone id is out of range [ 218.753968][T15254] netlink: zone id is out of range [ 218.768131][T15254] netlink: zone id is out of range [ 218.773303][T15254] netlink: zone id is out of range [ 218.791001][T15254] netlink: zone id is out of range [ 218.796268][T15254] netlink: zone id is out of range [ 218.829369][T15254] netlink: zone id is out of range [ 218.849849][T15254] netlink: set zone limit has 4 unknown bytes [ 218.859228][T15261] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 218.942207][T15269] __nla_validate_parse: 1 callbacks suppressed [ 218.943255][T15269] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4513'. [ 220.024460][T15341] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4548'. [ 220.597206][T15383] x_tables: duplicate underflow at hook 3 [ 220.749220][T15393] delete_channel: no stack [ 220.917181][T15403] netlink: 'syz.0.4579': attribute type 1 has an invalid length. [ 221.047015][T15414] netlink: zone id is out of range [ 221.064792][T15417] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4586'. [ 221.391720][T15437] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4595'. [ 221.535621][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4602'. [ 221.535967][T15445] geneve2: entered promiscuous mode [ 221.604118][T15449] bond6: option xmit_hash_policy: invalid value (64) [ 221.633512][T15449] bond6 (unregistering): Released all slaves [ 221.673246][T15454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4604'. [ 221.693299][T15454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4604'. [ 221.814774][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4609'. [ 221.960968][T15472] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4613'. [ 222.204798][T15492] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4623'. [ 222.253394][T15495] netlink: 'syz.3.4625': attribute type 1 has an invalid length. [ 222.265366][T15495] netlink: 'syz.3.4625': attribute type 2 has an invalid length. [ 222.714244][T15528] 8021q: VLANs not supported on gre0 [ 222.775600][T15530] C: renamed from team_slave_0 (while UP) [ 222.801005][T15530] netlink: 'syz.0.4642': attribute type 1 has an invalid length. [ 223.152393][T15554] netlink: 'syz.1.4655': attribute type 8 has an invalid length. [ 224.025006][T15613] Unknown options in mask b7f2 [ 224.142837][T15622] IPv6: Can't replace route, no match found [ 224.622753][T15657] netlink: 'syz.1.4705': attribute type 1 has an invalid length. [ 224.740903][T15665] net_ratelimit: 14 callbacks suppressed [ 224.740922][T15665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.795308][T15667] netlink: 'syz.5.4710': attribute type 9 has an invalid length. [ 225.435158][T15713] veth1_macvtap: left promiscuous mode [ 225.455069][T15713] macsec0: entered promiscuous mode [ 225.470238][T15713] macsec0: entered allmulticast mode [ 225.483705][T15718] tipc: Enabling of bearer rejected, failed to enable media [ 225.502590][T15713] veth1_macvtap: entered promiscuous mode [ 225.508900][T15713] veth1_macvtap: entered allmulticast mode [ 225.528572][T15713] macsec0: left promiscuous mode [ 225.533785][T15713] macsec0: left allmulticast mode [ 225.548466][T15713] veth1_macvtap: left allmulticast mode [ 225.591207][T15722] lo: entered allmulticast mode [ 225.608647][T15722] lo: left allmulticast mode [ 226.115450][T15760] netlink: 'syz.0.4756': attribute type 1 has an invalid length. [ 226.180233][T15762] __nla_validate_parse: 1 callbacks suppressed [ 226.180252][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4757'. [ 226.424247][T15777] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.683898][T15796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.989329][T15817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.202091][T15831] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4783'. [ 227.314648][T15836] nbd: must specify an index to disconnect [ 227.394131][T15842] tipc: Started in network mode [ 227.399307][T15842] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 227.409064][T15842] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 227.417635][T15842] tipc: Enabled bearer , priority 10 [ 227.506934][T15848] pimreg3: entered allmulticast mode [ 228.511013][T15889] netlink: 'syz.0.4810': attribute type 58 has an invalid length. [ 228.535573][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4810'. [ 228.546953][ T5898] tipc: Node number set to 1 [ 228.708879][ T5883] IPVS: starting estimator thread 0... [ 228.721787][T15901] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 228.817836][T15903] IPVS: using max 32 ests per chain, 76800 per kthread [ 229.060041][T15923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4828'. [ 229.272373][T15939] sock: sock_set_timeout: `syz.5.4835' (pid 15939) tries to set negative timeout [ 229.894985][T15986] netlink: 'syz.1.4858': attribute type 29 has an invalid length. [ 229.908330][T15986] netlink: 'syz.1.4858': attribute type 29 has an invalid length. [ 230.014914][T15994] netlink: 'syz.5.4861': attribute type 11 has an invalid length. [ 230.025537][T15994] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.4861'. [ 231.320515][T16088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.459913][T16098] netlink: 'syz.0.4908': attribute type 1 has an invalid length. [ 231.469255][T16098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.529634][T16102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4911'. [ 231.546329][T16100] delete_channel: no stack [ 231.658013][T16108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4914'. [ 231.700014][T16112] netlink: 'syz.5.4915': attribute type 33 has an invalid length. [ 231.882254][T16121] Bluetooth: MGMT ver 1.23 [ 231.988602][T16133] delete_channel: no stack [ 232.223556][T16149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4933'. [ 232.291753][T16153] netlink: 'syz.3.4936': attribute type 3 has an invalid length. [ 232.373127][T16157] vlan2: entered allmulticast mode [ 232.536619][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4943'. [ 232.617121][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4946'. [ 232.629214][T16174] openvswitch: netlink: Unknown nsh attribute 0 [ 233.479004][T16239] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 233.684912][T16255] tipc: Started in network mode [ 233.691373][T16255] tipc: Node identity 002e0000000000000000000000000001, cluster identity 4711 [ 233.701291][T16255] tipc: Enabling of bearer rejected, failed to enable media [ 234.390231][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5009'. [ 234.423131][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5009'. [ 234.712164][T16323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5019'. [ 234.877992][ T5832] Bluetooth: hci0: command 0x0c20 tx timeout [ 234.884553][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 235.105675][T16352] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5033'. [ 235.248522][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.261450][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.284194][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.293418][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.302037][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.412282][T16359] vxcan1 speed is unknown, defaulting to 1000 [ 235.520811][T16376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.751594][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5048'. [ 235.791320][T16390] ۜ}JX: renamed from lo (while UP) [ 236.165005][T16359] chnl_net:caif_netlink_parms(): no params data found [ 236.445858][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.459398][T16359] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.469793][T16359] bridge_slave_0: entered allmulticast mode [ 236.480076][T16359] bridge_slave_0: entered promiscuous mode [ 236.489528][T16359] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.496889][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.506608][T16359] bridge_slave_1: entered allmulticast mode [ 236.518103][T16359] bridge_slave_1: entered promiscuous mode [ 236.626297][T16359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.668993][T16359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.708955][T16441] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 236.738376][T16441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.752707][T16359] team0: Port device team_slave_0 added [ 236.778436][T16359] team0: Port device team_slave_1 added [ 236.857205][T16359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.865535][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.897261][T16359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.913097][T16359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.920567][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.947094][T16359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.039261][T16359] hsr_slave_0: entered promiscuous mode [ 237.051521][T16359] hsr_slave_1: entered promiscuous mode [ 237.059943][T16453] xt_l2tp: wrong L2TP version: 0 [ 237.073990][T16359] debugfs: 'hsr0' already exists in 'hsr' [ 237.083399][T16359] Cannot create hsr debugfs directory [ 237.357871][ T5832] Bluetooth: hci6: command tx timeout [ 237.416308][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5089'. [ 237.596107][T16485] IPVS: ip_vs_edit_dest(): server weight less than zero [ 237.700043][T16359] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.721702][T16359] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.740898][T16492] netlink: 'syz.3.5096': attribute type 11 has an invalid length. [ 237.752819][T16359] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.774030][T16359] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.945878][T16359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.984837][T16359] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.009776][T14378] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.016981][T14378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.077122][T14378] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.084343][T14378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.111985][T16511] tipc: Enabling of bearer rejected, failed to enable media [ 238.504028][T16534] netlink: 'syz.3.5110': attribute type 1 has an invalid length. [ 238.564769][T16534] netlink: 'syz.3.5110': attribute type 3 has an invalid length. [ 238.585781][T16359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.604064][T16534] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5110'. [ 238.640330][T16534] NCSI netlink: No device for ifindex 813332851 [ 239.088296][T16560] gretap0: entered promiscuous mode [ 239.104622][T16560] vlan2: entered promiscuous mode [ 239.163251][T16359] veth0_vlan: entered promiscuous mode [ 239.200594][T16359] veth1_vlan: entered promiscuous mode [ 239.268875][T16566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.290632][T16359] veth0_macvtap: entered promiscuous mode [ 239.321678][T16359] veth1_macvtap: entered promiscuous mode [ 239.371747][T16359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.415086][T16359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.439471][ T5832] Bluetooth: hci6: command tx timeout [ 239.469345][T14378] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.500869][T14378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.513221][T14378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.524259][T14378] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.715212][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.753579][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.817623][T16591] tipc: Started in network mode [ 239.832859][T16591] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 239.852560][T16591] tipc: Enabling of bearer rejected, failed to enable media [ 239.886266][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.903407][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.251500][T16610] vcan1: entered promiscuous mode [ 240.256590][T16610] vcan1: entered allmulticast mode [ 240.717427][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5152'. [ 241.159279][T16660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5166'. [ 241.187316][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5167'. [ 241.360511][T16671] netlink: 'syz.1.5172': attribute type 11 has an invalid length. [ 241.387902][T16671] netlink: 'syz.1.5172': attribute type 4 has an invalid length. [ 241.405999][T16671] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.5172'. [ 241.518251][ T5832] Bluetooth: hci6: command tx timeout [ 241.750737][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5183'. [ 241.779868][T16691] syz.3.5182 (16691) used greatest stack depth: 16888 bytes left [ 241.962843][T16708] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5190'. [ 242.100213][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5193'. [ 242.126439][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5193'. [ 242.318683][T16731] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.996233][T16772] netlink: 'syz.1.5219': attribute type 11 has an invalid length. [ 243.056819][T16772] __nla_validate_parse: 1 callbacks suppressed [ 243.056836][T16772] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.5219'. [ 243.598782][ T5832] Bluetooth: hci6: command tx timeout [ 244.222852][T16843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.572787][T16865] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5267'. [ 245.035864][T16895] netlink: 'syz.3.5280': attribute type 3 has an invalid length. [ 245.043976][T16895] netlink: 'syz.3.5280': attribute type 1 has an invalid length. [ 245.057986][T16895] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5280'. [ 245.283211][T16907] netlink: 'syz.0.5285': attribute type 11 has an invalid length. [ 245.322733][T16907] netlink: 'syz.0.5285': attribute type 11 has an invalid length. [ 245.354322][T16907] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5285'. [ 246.277167][T16969] vcan0: entered allmulticast mode [ 246.414502][T16980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5317'. [ 246.810089][T17004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5329'. [ 247.142080][ T130] IPVS: starting estimator thread 0... [ 247.240155][T17022] IPVS: using max 27 ests per chain, 64800 per kthread [ 248.274402][T17088] veth0_to_bond: entered allmulticast mode [ 248.480100][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5374'. [ 248.496345][T17098] netlink: 'syz.5.5374': attribute type 5 has an invalid length. [ 248.519710][T17098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5374'. [ 249.274333][T17125] netlink: 'syz.1.5387': attribute type 3 has an invalid length. [ 249.723795][T17153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5401'. [ 250.078779][T17178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.322474][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5417'. [ 250.344885][T17196] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 250.357656][T17189] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 250.407816][T17194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5417'. [ 250.434565][T17189] bond2 (unregistering): Released all slaves [ 250.625095][T17209] Bluetooth: MGMT ver 1.23 [ 250.713637][T17213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.864899][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5431'. [ 250.925660][T17226] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 251.196925][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5441'. [ 251.230611][T17244] vxcan1 speed is unknown, defaulting to 1000 [ 251.357886][ T5835] Bluetooth: hci6: command 0x0405 tx timeout [ 251.381479][T17254] veth0_to_team: entered promiscuous mode [ 251.938875][T17285] Zero length message leads to an empty skb [ 252.090303][T17294] vlan1: left allmulticast mode [ 252.100869][T17294] veth0_vlan: left allmulticast mode [ 252.184426][T17299] tipc: Enabling not permitted [ 252.193256][T17299] tipc: Enabling of bearer rejected, failed to enable media [ 252.487441][T17320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.780785][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5489'. [ 252.793452][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5489'. [ 252.822655][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5490'. [ 253.106442][T17358] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 253.124760][ T39] IPVS: starting estimator thread 0... [ 253.228222][T17361] IPVS: using max 27 ests per chain, 64800 per kthread [ 253.641010][T17396] __nla_validate_parse: 2 callbacks suppressed [ 253.641031][T17396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5516'. [ 253.718602][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5517'. [ 253.827581][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5519'. [ 253.855712][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5519'. [ 254.488999][T17451] netlink: 'syz.6.5542': attribute type 3 has an invalid length. [ 254.548904][T17453] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5543'. [ 255.205823][T17493] netlink: 'syz.6.5563': attribute type 4 has an invalid length. [ 255.489330][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5572'. [ 255.508869][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5572'. [ 255.611473][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.617918][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.915269][T17589] netlink: 'syz.3.5609': attribute type 4 has an invalid length. [ 256.931360][T17589] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5609'. [ 256.995270][T17594] sctp: [Deprecated]: syz.0.5612 (pid 17594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.995270][T17594] Use struct sctp_sack_info instead [ 257.021837][T17594] sctp: [Deprecated]: syz.0.5612 (pid 17594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.021837][T17594] Use struct sctp_sack_info instead [ 257.956855][T17653] netlink: 'syz.5.5640': attribute type 25 has an invalid length. [ 258.111020][T17664] ipvlan2: entered promiscuous mode [ 259.459790][T17744] netlink: 165 bytes leftover after parsing attributes in process `syz.6.5681'. [ 259.626003][T17748] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.664799][T17759] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5688'. [ 259.762976][T17748] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.910931][T17748] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.028251][T17775] netlink: 'syz.6.5696': attribute type 11 has an invalid length. [ 260.040514][T17748] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.131625][T17779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5698'. [ 260.725207][T17786] team0: Device gtp0 is up. Set it down before adding it as a team port [ 260.921911][T17798] netlink: 'syz.1.5707': attribute type 18 has an invalid length. [ 260.968556][ T145] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.037221][ T1322] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.080609][ T1322] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.132095][ T1322] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.339786][T17821] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5716'. [ 261.561318][T17832] pim6reg527: entered allmulticast mode [ 261.583315][T17834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5724'. [ 261.706157][T17840] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5727'. [ 261.740011][T17845] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 261.994341][T17858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5734'. [ 262.028239][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5738'. [ 262.051451][T17868] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 262.245629][T17880] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5744'. [ 262.410148][T17893] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5748'. [ 262.770812][T17914] hsr_slave_0: left promiscuous mode [ 262.785885][T17914] hsr_slave_1: left promiscuous mode [ 263.131601][T17938] netlink: 'syz.5.5770': attribute type 1 has an invalid length. [ 263.394916][T17959] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 263.508656][T17966] netlink: 'syz.0.5785': attribute type 10 has an invalid length. [ 263.660861][T17976] netlink: 'syz.1.5788': attribute type 2 has an invalid length. [ 264.571386][T18021] __nla_validate_parse: 2 callbacks suppressed [ 264.571407][T18021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5809'. [ 265.270748][T18056] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 265.405030][T18068] IPVS: ip_vs_add_dest(): server weight less than zero [ 265.634887][T18077] netlink: 'syz.6.5832': attribute type 4 has an invalid length. [ 265.665551][T18077] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5832'. [ 265.908426][T18091] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5842'. [ 265.953866][T18091] xt_policy: neither incoming nor outgoing policy selected [ 266.076078][T18096] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5845'. [ 267.068104][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5873'. [ 267.335318][T18169] xt_hashlimit: size too large, truncated to 1048576 [ 268.874687][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5927'. [ 269.014309][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5933'. [ 269.023600][T18276] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5933'. [ 269.033346][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5933'. [ 269.583358][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5947'. [ 270.110333][T18332] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5959'. [ 270.978947][T18388] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.5988'. [ 271.153735][T18396] atomic_op ffff88807b4b8198 conn xmit_atomic 0000000000000000 [ 272.404865][T18482] netlink: 'syz.0.6034': attribute type 1 has an invalid length. [ 272.475327][T18472] team0 (unregistering): Port device team_slave_0 removed [ 272.489443][T18472] team0 (unregistering): Port device team_slave_1 removed [ 272.880130][ T5835] Bluetooth: hci6: command 0x0405 tx timeout [ 272.952252][T18508] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 273.038670][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 273.214070][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6055'. [ 273.257406][T18531] netlink: 'syz.1.6056': attribute type 142 has an invalid length. [ 273.593847][T18556] tipc: Started in network mode [ 273.603831][T18556] tipc: Node identity e0000002, cluster identity 4711 [ 273.617658][T18556] tipc: Enabling of bearer rejected, failed to enable media [ 273.797993][T18569] tipc: MTU too low for tipc bearer [ 273.876422][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6079'. [ 273.954508][T18575] bond4: Invalid ad_actor_system MAC address. [ 273.963415][T18575] bond4: option ad_actor_system: invalid value (1) [ 273.980862][T18575] bond4 (unregistering): Released all slaves [ 274.274428][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6090'. [ 274.295144][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6094'. [ 274.430519][T18612] Bluetooth: MGMT ver 1.23 [ 274.747614][T18634] IPVS: Scheduler module ip_vs_sip not found [ 275.480696][T18689] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 275.488986][T18689] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.568319][T18692] veth3: entered allmulticast mode [ 275.877155][T18715] netlink: 288 bytes leftover after parsing attributes in process `syz.3.6147'. [ 276.001332][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6149'. [ 276.190767][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6157'. [ 276.339281][T18745] netlink: 'syz.3.6159': attribute type 11 has an invalid length. [ 276.407950][T18748] lo: left promiscuous mode [ 276.644382][T18748] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 276.886431][T18780] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 277.057920][T18791] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6184'. [ 277.066918][T18791] netlink: 35 bytes leftover after parsing attributes in process `syz.5.6184'. [ 277.087063][T18791] netlink: 'syz.5.6184': attribute type 5 has an invalid length. [ 277.095728][T18791] netlink: 'syz.5.6184': attribute type 6 has an invalid length. [ 277.107031][T18791] netlink: 35 bytes leftover after parsing attributes in process `syz.5.6184'. [ 277.259360][T18803] netlink: 'syz.6.6192': attribute type 1 has an invalid length. [ 277.532272][T18823] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6198'. [ 277.563738][T18823] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6198'. [ 277.590180][T18827] IPVS: Error connecting to the multicast addr [ 277.608465][T18823] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6198'. [ 277.618676][T18823] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6198'. [ 278.425461][T18883] syz_tun: entered allmulticast mode [ 279.133414][T18937] netlink: 'syz.5.6254': attribute type 1 has an invalid length. [ 279.267461][T18947] netlink: 'syz.5.6260': attribute type 3 has an invalid length. [ 281.071268][T19044] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.079052][T19044] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.187560][T19044] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 281.215743][T19052] tipc: Enabled bearer , priority 10 [ 281.755625][T19093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.804929][T19100] __nla_validate_parse: 3 callbacks suppressed [ 281.804949][T19100] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6333'. [ 282.327800][ T5883] tipc: Node number set to 3014657 [ 282.639538][T19150] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.781799][T19157] team0: Device ip6gre4 is of different type [ 283.036638][T19170] netlink: 'syz.0.6367': attribute type 2 has an invalid length. [ 283.399039][T19196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.406329][T19196] IPv6: NLM_F_CREATE should be set when creating new route [ 283.413650][T19196] IPv6: NLM_F_CREATE should be set when creating new route [ 283.420922][T19196] IPv6: NLM_F_CREATE should be set when creating new route [ 283.441577][T19196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.606457][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6387'. [ 283.635482][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6387'. [ 284.298976][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6411'. [ 284.343660][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6411'. [ 284.549659][T19275] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6419'. [ 284.784864][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6425'. [ 284.980288][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6431'. [ 285.000145][T19304] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6431'. [ 285.018005][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6431'. [ 285.281176][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 285.319461][T19320] netlink: 'syz.1.6439': attribute type 10 has an invalid length. [ 285.610905][T19338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.857200][T19356] tipc: Invalid UDP bearer configuration [ 285.857255][T19356] tipc: Enabling of bearer rejected, failed to enable media [ 286.085422][T19375] netlink: 'syz.5.6466': attribute type 1 has an invalid length. [ 286.112695][T19375] netlink: 'syz.5.6466': attribute type 2 has an invalid length. [ 286.152653][T19375] netlink: 'syz.5.6466': attribute type 1 has an invalid length. [ 286.787227][T19418] netlink: 'syz.6.6486': attribute type 178 has an invalid length. [ 287.224904][T19439] __nla_validate_parse: 10 callbacks suppressed [ 287.224926][T19439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6495'. [ 287.775274][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 288.135926][T19499] netlink: 'syz.1.6524': attribute type 10 has an invalid length. [ 288.169644][T19499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.741782][T19540] netlink: 'syz.1.6544': attribute type 1 has an invalid length. [ 288.933528][T19549] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6549'. [ 288.974368][T19549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6549'. [ 290.346662][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6592'. [ 290.432323][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6595'. [ 290.948430][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6612'. [ 290.968111][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6612'. [ 291.191337][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6620'. [ 291.209590][T19698] netlink: 'syz.5.6621': attribute type 83 has an invalid length. [ 291.373114][T19709] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6626'. [ 291.645491][T19727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6635'. [ 292.240549][T19768] __nla_validate_parse: 3 callbacks suppressed [ 292.240567][T19768] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6653'. [ 292.653127][T19796] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6666'. [ 293.998540][T19880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6701'. [ 294.020576][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6701'. [ 294.247240][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6707'. [ 294.260217][T19893] netlink: 'syz.1.6708': attribute type 12 has an invalid length. [ 294.278550][T19893] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.6708'. [ 294.293945][T19891] vlan2: entered allmulticast mode [ 294.308085][T19891] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 294.566285][T19908] netlink: 'syz.6.6716': attribute type 29 has an invalid length. [ 294.616166][T19908] netlink: 'syz.6.6716': attribute type 29 has an invalid length. [ 294.645720][T19908] netlink: 'syz.6.6716': attribute type 29 has an invalid length. [ 294.656832][T19915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6719'. [ 294.766801][T19922] sctp: [Deprecated]: syz.1.6722 (pid 19922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.766801][T19922] Use struct sctp_sack_info instead [ 294.927101][T19908] netlink: 'syz.6.6716': attribute type 29 has an invalid length. [ 294.940822][T19908] netlink: 'syz.6.6716': attribute type 29 has an invalid length. [ 294.961224][T19908] netlink: 'syz.6.6716': attribute type 29 has an invalid length. [ 295.122411][T19938] vxlan0: entered promiscuous mode [ 295.156364][T19938] vxlan0: entered allmulticast mode [ 295.169064][ T50] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 295.177487][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.227150][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.269507][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.379410][T19956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6738'. [ 295.458796][T19960] blkio.reset_stats is deprecated [ 295.655671][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6746'. [ 296.307038][T20009] netlink: 'syz.6.6761': attribute type 83 has an invalid length. [ 296.387170][T20011] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6763'. [ 296.684420][ T30] audit: type=1804 audit(1767764515.821:2): pid=20028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6771" name="/newroot/506/cgroup.controllers" dev="tmpfs" ino=2553 res=1 errno=0 [ 296.739314][ T30] audit: type=1800 audit(1767764515.821:3): pid=20028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6771" name="cgroup.controllers" dev="tmpfs" ino=2553 res=0 errno=0 [ 297.021337][T20047] netem: invalid attributes len -24 [ 297.028230][T20047] netem: change failed [ 297.543524][T20074] __nla_validate_parse: 1 callbacks suppressed [ 297.543541][T20074] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6793'. [ 298.039191][T20106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6805'. [ 298.609583][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6818'. [ 299.098322][T20159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6828'. [ 299.154767][T20165] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6830'. [ 299.401590][T20179] netlink: 'syz.5.6837': attribute type 19 has an invalid length. [ 299.572009][T20193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.579352][T20193] IPv6: NLM_F_CREATE should be set when creating new route [ 299.587475][T20193] IPv6: NLM_F_CREATE should be set when creating new route [ 299.621042][T20193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.090716][T20229] nbd: couldn't find a device at index 0 [ 300.282267][T20235] tipc: New replicast peer: 255.255.255.255 [ 300.318772][T20235] tipc: Enabled bearer , priority 10 [ 300.505385][T20245] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 301.070830][T20277] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6880'. [ 301.164775][T20283] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.6883'. [ 301.179992][T20281] sctp: [Deprecated]: syz.6.6885 (pid 20281) Use of int in maxseg socket option. [ 301.179992][T20281] Use struct sctp_assoc_value instead [ 301.866074][T20329] netlink: 'syz.0.6904': attribute type 1 has an invalid length. [ 301.884973][T20329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.892325][T20329] IPv6: NLM_F_CREATE should be set when creating new route [ 302.695807][T20375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6923'. [ 303.629695][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6946'. [ 304.183965][T20456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6963'. [ 304.561110][T20485] netlink: 'syz.0.6976': attribute type 8 has an invalid length. [ 305.141401][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6991'. [ 305.168104][T20522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6991'. [ 305.363753][T20532] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.371424][T20532] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.572788][T20545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7003'. [ 305.722576][T20555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7007'. [ 305.816464][T20562] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7009'. [ 306.055369][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7014'. [ 306.436807][T20594] bridge_slave_0: invalid flags given to default FDB implementation [ 306.970476][T20623] bond7 (unregistering): Released all slaves [ 307.421655][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7049'. [ 308.661166][T20731] __nla_validate_parse: 1 callbacks suppressed [ 308.661186][T20731] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7090'. [ 308.700386][T20731] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7090'. [ 308.718618][ T79] wlan0: Trigger new scan to find an IBSS to join [ 309.324235][T20772] netlink: 'syz.3.7109': attribute type 12 has an invalid length. [ 309.421940][T20778] ieee802154 phy1 wpan1: encryption failed: -126 [ 309.565719][T20786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7117'. [ 309.682023][T20794] tap0: tun_chr_ioctl cmd 1074025676 [ 309.690694][T20794] tap0: owner set to 0 [ 310.256939][T20836] netlink: 'syz.0.7138': attribute type 83 has an invalid length. [ 311.758261][ T9290] wlan0: Trigger new scan to find an IBSS to join [ 312.201326][T20927] bond4: ARP target 1.0.0.0 is already present [ 312.229085][T20927] bond4: option arp_ip_target: invalid value (1) [ 312.260591][T20927] bond4 (unregistering): Released all slaves [ 312.317949][T20925] nbd1: detected capacity change from 0 to 127 [ 312.352980][ T5835] block nbd1: Receive control failed (result -32) [ 312.417990][T20933] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7183'. [ 312.629737][T20931] block nbd1: Dead connection, failed to find a fallback [ 312.681315][T20931] block nbd1: shutting down sockets [ 312.703910][T20931] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.737608][T20931] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.764778][T20931] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.784877][T20931] Buffer I/O error on dev nbd1, logical block 1, async page read [ 312.816790][T20931] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.843897][T20931] Buffer I/O error on dev nbd1, logical block 2, async page read [ 312.867984][T20931] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.893303][T20931] Buffer I/O error on dev nbd1, logical block 3, async page read [ 312.923495][T20931] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.947847][T20931] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.968643][T20931] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.996502][T20931] Buffer I/O error on dev nbd1, logical block 1, async page read [ 313.016379][T20931] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.035637][T20931] Buffer I/O error on dev nbd1, logical block 2, async page read [ 313.043868][T20931] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.053591][T20931] Buffer I/O error on dev nbd1, logical block 3, async page read [ 313.080875][T20931] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.102308][T20931] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.143221][T20931] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.158912][T20931] Buffer I/O error on dev nbd1, logical block 1, async page read [ 313.171474][T20931] ldm_validate_partition_table(): Disk read failed. [ 313.181362][T20931] Dev nbd1: unable to read RDB block 0 [ 313.188363][T20931] nbd1: unable to read partition table [ 313.201219][T20931] ldm_validate_partition_table(): Disk read failed. [ 313.223983][T20931] Dev nbd1: unable to read RDB block 0 [ 313.230833][T20931] nbd1: unable to read partition table [ 313.252395][T20967] netlink: 'syz.1.7198': attribute type 4 has an invalid length. [ 313.430454][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7205'. [ 313.506504][T20983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7206'. [ 313.849303][T21006] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.857376][T21006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.261810][T21038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7233'. [ 314.326709][T21040] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.335178][T21040] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.425726][T21044] netlink: 'syz.0.7236': attribute type 2 has an invalid length. [ 314.801483][ T79] wlan0: Creating new IBSS network, BSSID a6:22:40:6a:fe:39 [ 315.230077][T21103] team0: Cannot enslave team device to itself [ 315.381968][ T10] hid-generic 0005:0458:0007.0001: item fetching failed at offset 0/1 [ 315.392123][ T10] hid-generic 0005:0458:0007.0001: probe with driver hid-generic failed with error -22 [ 315.558375][T21127] sctp: [Deprecated]: syz.3.7275 (pid 21127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.558375][T21127] Use struct sctp_sack_info instead [ 315.892830][T21148] netlink: 'syz.6.7284': attribute type 5 has an invalid length. [ 315.944153][T21151] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 316.142102][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7291'. [ 316.382080][T21176] sctp: [Deprecated]: syz.5.7298 (pid 21176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.382080][T21176] Use struct sctp_sack_info instead [ 317.042665][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.052316][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.064341][T21220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7317'. [ 317.079072][T21220] block nbd2: Unsupported socket: should be TCP or UNIX. [ 317.597455][T21256] netlink: 'syz.3.7337': attribute type 1 has an invalid length. [ 317.607444][T21256] netlink: 'syz.3.7337': attribute type 2 has an invalid length. [ 317.615405][T21256] netlink: 'syz.3.7337': attribute type 1 has an invalid length. [ 317.623825][T21256] netlink: 'syz.3.7337': attribute type 3 has an invalid length. [ 317.632158][T21256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7337'. [ 318.062669][T21282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7348'. [ 318.099269][T21282] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7348'. [ 318.140456][T21287] netem: change failed [ 318.451478][T21308] netlink: 'syz.5.7360': attribute type 1 has an invalid length. [ 318.678924][T21320] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7368'. [ 318.739519][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7371'. [ 318.790347][T21328] netlink: 'syz.6.7371': attribute type 1 has an invalid length. [ 318.807743][T21328] netlink: 'syz.6.7371': attribute type 2 has an invalid length. [ 319.244225][T21359] netlink: 232 bytes leftover after parsing attributes in process `syz.6.7382'. [ 319.490224][T21370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7387'. [ 319.618316][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7391'. [ 319.795575][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7395'. [ 319.816187][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7395'. [ 319.954978][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7399'. [ 320.253068][T21403] netlink: 'syz.1.7405': attribute type 10 has an invalid length. [ 320.988578][T21449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7422'. [ 321.106146][T21457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7430'. [ 321.276325][T21467] macvtap1: entered allmulticast mode [ 321.287748][T21467] veth0_macvtap: entered allmulticast mode [ 321.451446][T21479] netlink: 'syz.3.7439': attribute type 4 has an invalid length. [ 323.633989][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7491'. [ 323.672444][T21598] raw_sendmsg: syz.5.7492 forgot to set AF_INET. Fix it! [ 323.695646][T21604] netem: change failed [ 324.314015][T21643] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7513'. [ 324.918622][T21681] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7530'. [ 324.925452][T21685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7532'. [ 325.176401][T21702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7538'. [ 325.388991][T21713] tap0: tun_chr_ioctl cmd 1074025672 [ 325.394430][T21713] tap0: ignored: set checksum disabled [ 325.802687][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7559'. [ 325.969002][T21757] netlink: 'syz.1.7562': attribute type 5 has an invalid length. [ 326.089094][T21761] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7569'. [ 326.249847][T21776] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7573'. [ 326.273781][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7575'. [ 326.286894][T21778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7575'. [ 326.392142][T21781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7578'. [ 326.439850][T21787] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7577'. [ 327.141031][T21827] netlink: 'syz.5.7598': attribute type 1 has an invalid length. [ 327.247182][ T5835] Bluetooth: hci6: link tx timeout [ 327.253619][ T5835] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 327.263816][ T5835] Bluetooth: hci6: link tx timeout [ 327.269406][ T5835] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 327.876722][T21866] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 328.583708][ T30] audit: type=1107 audit(1767764547.721:4): pid=21911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 328.655586][T21919] netlink: 'syz.1.7640': attribute type 1 has an invalid length. [ 328.765129][T21919] netlink: 'syz.1.7640': attribute type 3 has an invalid length. [ 328.838500][T21919] netlink: 'syz.1.7640': attribute type 7 has an invalid length. [ 328.869287][T21919] netlink: 'syz.1.7640': attribute type 8 has an invalid length. [ 328.907576][T21919] NCSI netlink: No device for ifindex 131092 [ 329.279729][ T5835] Bluetooth: hci6: command 0x0405 tx timeout [ 329.371138][T21956] netlink: 'syz.5.7658': attribute type 6 has an invalid length. [ 329.419466][T21956] netlink: 'syz.5.7658': attribute type 6 has an invalid length. [ 330.860374][T22046] netlink: 'syz.3.7697': attribute type 10 has an invalid length. [ 330.950819][T22046] team0: Port device dummy0 added [ 331.139148][T22060] netlink: 'syz.3.7704': attribute type 6 has an invalid length. [ 331.319528][T22069] __nla_validate_parse: 7 callbacks suppressed [ 331.319547][T22069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7708'. [ 331.335422][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7709'. [ 331.348728][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7709'. [ 331.364339][ T5835] Bluetooth: hci6: command 0x0405 tx timeout [ 331.369285][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7709'. [ 331.716418][T22092] openvswitch: netlink: Duplicate key (type 1). [ 332.687869][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 332.952317][T22173] block nbd3: not configured, cannot reconfigure [ 333.083502][ T145] tipc: Subscription rejected, illegal request [ 333.240004][T22192] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7767'. [ 333.259941][T22193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7766'. [ 333.413062][T22203] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7771'. [ 333.542244][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7775'. [ 333.636659][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7778'. [ 333.825779][T22223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.838507][T22223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.983157][T22223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.007164][T22223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.203726][T22223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.218318][T22223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.362472][T22223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.410358][T22223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.686552][ T3518] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.706358][ T3518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.732793][ T3518] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.749880][ T3518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.809545][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.818129][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.855957][ T50] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.875863][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.099496][T22297] block nbd2: server does not support multiple connections per device. [ 335.125042][T22297] block nbd2: shutting down sockets [ 335.866714][T22358] netlink: 'syz.1.7841': attribute type 4 has an invalid length. [ 336.051355][T22372] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 336.695810][T22416] __nla_validate_parse: 4 callbacks suppressed [ 336.695832][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7869'. [ 337.437862][ T5835] Bluetooth: hci6: command 0x0405 tx timeout [ 338.214733][T22498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7906'. [ 338.220669][T22500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7907'. [ 338.288465][T22500] bridge_slave_0 (unregistering): left promiscuous mode [ 338.295656][T22500] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.387001][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806a4d2800: rx timeout, send abort [ 338.397397][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806a4d2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 338.661739][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7918'. [ 338.692020][T22529] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7920'. [ 339.638456][T22597] netlink: 'syz.1.7954': attribute type 14 has an invalid length. [ 339.926785][T22616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7962'. [ 340.431397][T22649] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7975'. [ 340.848402][T22678] netlink: 'syz.0.7990': attribute type 5 has an invalid length. [ 341.244468][T22708] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8005'. [ 342.012622][T22759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8028'. [ 342.041176][T22761] netlink: 165 bytes leftover after parsing attributes in process `syz.5.8031'. [ 342.449828][T22788] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8043'. [ 342.768754][T22800] block nbd2: Unsupported socket: should be TCP or UNIX. [ 343.182229][T22821] netem: unknown loss type 0 [ 343.187264][T22821] netem: change failed [ 345.242374][T22868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8078'. [ 345.393353][T22876] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.405332][T22876] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.405779][T22881] netlink: 'syz.0.8084': attribute type 16 has an invalid length. [ 345.464320][T22881] netlink: 'syz.0.8084': attribute type 17 has an invalid length. [ 345.598422][T22890] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8088'. [ 345.614538][T22881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.796578][T22903] tipc: Enabled bearer , priority 10 [ 345.886490][T22908] netlink: 'syz.1.8097': attribute type 1 has an invalid length. [ 345.959081][T22911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8096'. [ 346.128900][T22925] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8100'. [ 346.469407][T22933] : renamed from hsr0 (while UP) [ 347.219772][T22983] veth0: entered promiscuous mode [ 347.228980][T22981] veth0: left promiscuous mode [ 347.272502][T22984] bond0: entered promiscuous mode [ 347.290193][T22984] batadv0: entered promiscuous mode [ 347.319301][T22984] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 347.350663][T22984] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 347.372158][T22984] hsr1: entered allmulticast mode [ 347.377304][T22984] bond0: entered allmulticast mode [ 347.393229][T22984] batadv0: entered allmulticast mode [ 347.408307][T22984] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 347.435377][T22996] netlink: 'syz.3.8135': attribute type 1 has an invalid length. [ 347.447863][T22984] bond0: left promiscuous mode [ 347.461542][T22984] batadv0: left promiscuous mode [ 347.591757][T23002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.804898][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8145'. [ 347.814313][T23017] netlink: 'syz.0.8145': attribute type 1 has an invalid length. [ 347.826940][T23017] netlink: 'syz.0.8145': attribute type 2 has an invalid length. [ 348.355467][T23045] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.8160'. [ 348.392487][T23045] netlink: ct family unspecified [ 349.066493][T23092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8180'. [ 349.147556][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8183'. [ 349.341306][T23106] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8188'. [ 349.480059][T23115] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.8192'. [ 349.566547][T23123] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8195'. [ 349.840568][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 349.921168][T23149] syz_tun: left allmulticast mode [ 350.019820][T23155] af_packet: tpacket_rcv: packet too big, clamped from 3948 to 3944. macoff=96 [ 350.364810][T23172] IPv6: sit1: Disabled Multicast RS [ 350.382267][T23172] sit1: entered allmulticast mode [ 350.613799][T23187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8226'. [ 350.638263][T23187] netlink: 'syz.1.8226': attribute type 7 has an invalid length. [ 350.648440][T23187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8226'. [ 351.422175][T23240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8250'. [ 351.906934][T23265] smc: net device gre0 applied user defined pnetid SYZ1 [ 351.924602][T23268] smc: net device gre0 erased user defined pnetid SYZ1 [ 352.953837][T23342] netlink: 'syz.5.8295': attribute type 1 has an invalid length. [ 353.372672][T23367] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8308'. [ 354.097186][T23401] netlink: 'syz.0.8323': attribute type 12 has an invalid length. [ 354.114764][T23401] netlink: 'syz.0.8323': attribute type 29 has an invalid length. [ 354.173737][T23401] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8323'. [ 354.190385][T23401] netlink: 'syz.0.8323': attribute type 1 has an invalid length. [ 354.219096][T23405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8326'. [ 354.772525][T23442] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8342'. [ 355.145537][T23463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8354'. [ 355.155789][T23463] netlink: 'syz.5.8354': attribute type 7 has an invalid length. [ 355.165029][T23463] netlink: 'syz.5.8354': attribute type 8 has an invalid length. [ 355.173115][T23463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8354'. [ 355.212963][T23463] batadv_slave_1: entered promiscuous mode [ 355.219326][T23463] batadv_slave_1: left promiscuous mode [ 355.605681][T23488] macvtap1: entered promiscuous mode [ 355.616751][T23488] macvtap1: entered allmulticast mode [ 355.623468][T23488] veth1_vlan: entered allmulticast mode [ 355.646299][T23488] macvtap2: entered promiscuous mode [ 355.653890][T23488] macvtap2: entered allmulticast mode [ 355.895204][T23508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8375'. [ 355.933703][T23508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8375'. [ 356.071804][T23520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8380'. [ 356.120616][T23520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8380'. [ 357.152662][T23588] syzkaller1: entered promiscuous mode [ 357.159272][T23588] syzkaller1: entered allmulticast mode [ 357.539378][T23606] veth0: entered promiscuous mode [ 357.546246][T23606] veth0: left promiscuous mode [ 357.567319][T23608] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 357.591341][T23608] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 357.608178][T23608] gretap2: entered promiscuous mode [ 357.614000][T23608] gretap2: entered allmulticast mode [ 358.176340][ T5898] IPVS: starting estimator thread 0... [ 358.256696][T23648] netlink: 'syz.1.8439': attribute type 63 has an invalid length. [ 358.276208][T23648] netlink: 'syz.1.8439': attribute type 63 has an invalid length. [ 358.277894][T23644] IPVS: using max 28 ests per chain, 67200 per kthread [ 358.700663][T23676] __nla_validate_parse: 3 callbacks suppressed [ 358.700682][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8452'. [ 359.173658][T23705] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8465'. [ 359.480937][T23720] dvmrp6: entered allmulticast mode [ 359.555174][T23725] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.8475'. [ 359.891987][T23749] netlink: 'syz.3.8485': attribute type 10 has an invalid length. [ 359.905453][T23749] bridge_slave_1: left allmulticast mode [ 359.912003][T23749] bridge_slave_1: left promiscuous mode [ 359.925476][T23749] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.964309][T23749] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 360.729896][T23795] bridge5: entered promiscuous mode [ 360.733158][T23799] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 360.751165][T23795] bridge5: entered allmulticast mode [ 360.775371][T23795] team0: Port device bridge5 added [ 360.803339][T23795] bridge0: port 2(team0) entered blocking state [ 360.821533][T23795] bridge0: port 2(team0) entered disabled state [ 360.838420][T23795] team0: entered allmulticast mode [ 360.849455][T23795] team_slave_0: entered allmulticast mode [ 360.863958][T23795] team_slave_1: entered allmulticast mode [ 360.870463][T23795] dummy0: entered allmulticast mode [ 360.883375][T23795] team0: entered promiscuous mode [ 360.908118][T23795] team_slave_0: entered promiscuous mode [ 360.921985][T23795] team_slave_1: entered promiscuous mode [ 360.928088][T23795] dummy0: entered promiscuous mode [ 361.214949][T23829] netlink: 'syz.6.8523': attribute type 39 has an invalid length. [ 361.355588][T23835] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 361.500704][T23843] netlink: 'syz.3.8530': attribute type 11 has an invalid length. [ 362.133622][T23882] sock: sock_set_timeout: `syz.0.8551' (pid 23882) tries to set negative timeout [ 362.284939][T23893] syzkaller1: entered promiscuous mode [ 362.298802][T23893] syzkaller1: entered allmulticast mode [ 362.467284][T23905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8559'. [ 362.658753][T23915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8564'. [ 362.742175][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8567'. [ 362.834546][T23927] syzkaller1: entered promiscuous mode [ 362.848071][T23927] syzkaller1: entered allmulticast mode [ 362.918680][T23933] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8572'. [ 363.040454][T23938] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 363.110438][T23945] batadv_slave_1: entered promiscuous mode [ 363.117497][T23943] batadv_slave_1: left promiscuous mode [ 363.446865][T23969] Bluetooth: MGMT ver 1.23 [ 363.468470][T23968] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8588'. [ 363.524846][T23971] netlink: 'syz.3.8590': attribute type 3 has an invalid length. [ 363.535282][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8590'. [ 363.901311][T23996] sctp: [Deprecated]: syz.3.8601 (pid 23996) Use of int in max_burst socket option. [ 363.901311][T23996] Use struct sctp_assoc_value instead [ 363.974286][T24000] netlink: 'syz.3.8603': attribute type 4 has an invalid length. [ 364.137941][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8608'. [ 364.218779][T24018] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.233508][T24018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8610'. [ 365.520854][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 365.526969][ T5835] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 365.892410][T24119] netlink: 212324 bytes leftover after parsing attributes in process `syz.6.8655'. [ 366.144495][T24134] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 366.199848][T24140] netlink: 'syz.6.8663': attribute type 12 has an invalid length. [ 366.218375][T24140] netlink: 'syz.6.8663': attribute type 29 has an invalid length. [ 366.226556][T24140] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8663'. [ 366.258999][T24140] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8663'. [ 366.324536][T24142] syzkaller1: entered promiscuous mode [ 366.338335][T24142] syzkaller1: entered allmulticast mode [ 366.557332][T24160] netlink: 220 bytes leftover after parsing attributes in process `syz.6.8671'. [ 366.589071][T24160] netlink: 'syz.6.8671': attribute type 2 has an invalid length. [ 366.811326][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8681'. [ 366.890950][T24186] netlink: 'syz.1.8684': attribute type 10 has an invalid length. [ 366.905653][T24186] bridge_slave_1: entered allmulticast mode [ 366.915167][T24186] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 366.980196][T24188] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8685'. [ 367.158866][T24198] syzkaller1: entered promiscuous mode [ 367.164610][T24198] syzkaller1: entered allmulticast mode [ 367.350413][T24209] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.361548][T24206] netlink: 6 bytes leftover after parsing attributes in process `syz.6.8695'. [ 367.486860][T24215] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.8699'. [ 367.886097][T24243] syzkaller1: entered promiscuous mode [ 367.900339][T24243] syzkaller1: entered allmulticast mode [ 368.930185][T24286] udevd[24286]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 369.628537][T24351] sctp: [Deprecated]: syz.5.8751 (pid 24351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.628537][T24351] Use struct sctp_sack_info instead [ 370.297494][T24389] __nla_validate_parse: 7 callbacks suppressed [ 370.297514][T24389] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8765'. [ 370.304159][T24392] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.8768'. [ 370.320547][T24390] netlink: 'syz.1.8767': attribute type 2 has an invalid length. [ 370.922559][T24428] netlink: 'syz.3.8784': attribute type 17 has an invalid length. [ 370.931425][T24428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8784'. [ 370.943217][T24428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8784'. [ 371.181858][T24440] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.8788'. [ 371.395893][T24453] vxcan0: tx address claim with dlc 0 [ 371.494164][T24458] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 371.503255][T24458] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ1 [ 371.556627][T24462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8801'. [ 371.626058][T24464] syzkaller1: entered promiscuous mode [ 371.645406][T24464] syzkaller1: entered allmulticast mode [ 371.861625][T24479] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 372.453010][T24518] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8830'. [ 372.718256][ T31] INFO: task syz.4.4549:15343 blocked for more than 143 seconds. [ 372.737819][ T31] Not tainted syzkaller #0 [ 372.749483][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.763329][T24535] block nbd5: NBD_DISCONNECT [ 372.774457][ T31] task:syz.4.4549 state:D stack:27264 pid:15343 tgid:15342 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 372.788731][ T31] Call Trace: [ 372.792147][ T31] [ 372.795198][ T31] __schedule+0x149b/0x4fd0 [ 372.800235][ T31] ? __pfx___schedule+0x10/0x10 [ 372.805251][ T31] ? schedule+0x91/0x360 [ 372.809679][ T31] schedule+0x165/0x360 [ 372.814194][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.820134][ T31] __mutex_lock+0x7e6/0x1350 [ 372.825065][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.830284][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 372.836695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.844229][ T31] ? __nlmsg_put+0xef/0x1b0 [ 372.858881][ T31] ? genlmsg_put+0x137/0x2e0 [ 372.867255][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 372.872998][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 372.887720][ T31] ? dev_hard_start_xmit+0x793/0x800 [ 372.893076][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 372.898717][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 372.904832][ T31] genl_rcv_msg+0x60e/0x790 [ 372.909875][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.914931][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 372.921114][ T31] ? __asan_memcpy+0x40/0x70 [ 372.925707][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 372.931114][ T31] ? __skb_clone+0x63/0x7a0 [ 372.935620][ T31] netlink_rcv_skb+0x208/0x470 [ 372.940582][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.945600][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.950970][ T31] ? genl_rcv+0x19/0x40 [ 372.955133][ T31] ? down_read+0x274/0x2e0 [ 372.963180][ T31] ? genl_rcv+0xd/0x40 [ 372.967377][ T31] genl_rcv+0x28/0x40 [ 372.971740][ T31] netlink_unicast+0x82f/0x9e0 [ 372.976537][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 372.983646][ T31] ? __alloc_skb+0x198/0x3a0 [ 372.989265][ T31] ? netlink_sendmsg+0x642/0xb30 [ 372.994249][ T31] ? skb_put+0x11b/0x210 [ 372.998796][ T31] netlink_sendmsg+0x805/0xb30 [ 373.003571][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.008962][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.013929][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.019398][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.024711][ T31] __sock_sendmsg+0x21c/0x270 [ 373.029733][ T31] ____sys_sendmsg+0x505/0x820 [ 373.034701][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.040507][ T31] ? import_iovec+0x74/0xa0 [ 373.045031][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 373.050037][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.055261][ T31] ? futex_wait+0x285/0x360 [ 373.059942][ T31] ? __fget_files+0x2a/0x420 [ 373.064533][ T31] ? __fget_files+0x3a0/0x420 [ 373.069264][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 373.074201][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.079775][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.084692][ T31] do_syscall_64+0xec/0xf80 [ 373.089364][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.095425][ T31] ? trace_irq_disable+0x37/0x100 [ 373.100561][ T31] ? clear_bhb_loop+0x60/0xb0 [ 373.105279][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.111354][ T31] RIP: 0033:0x7f837178f749 [ 373.115797][ T31] RSP: 002b:00007f83726f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.124648][ T31] RAX: ffffffffffffffda RBX: 00007f83719e5fa0 RCX: 00007f837178f749 [ 373.132807][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 373.140818][ T31] RBP: 00007f8371813f91 R08: 0000000000000000 R09: 0000000000000000 [ 373.149153][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.157152][ T31] R13: 00007f83719e6038 R14: 00007f83719e5fa0 R15: 00007ffcbb833cb8 [ 373.165225][ T31] [ 373.168379][ T31] [ 373.168379][ T31] Showing all locks held in the system: [ 373.183098][ T31] 1 lock held by khungtaskd/31: [ 373.189418][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.202279][ T31] 2 locks held by getty/5580: [ 373.207013][ T31] #0: ffff8880346950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.217115][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 373.228515][ T31] 3 locks held by kworker/0:9/5980: [ 373.235176][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 373.245554][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 373.261530][ T31] #2: ffff88802489b158 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: srcu_reschedule+0x44/0x170 [ 373.272571][ T31] 2 locks held by syz.2.3722/13546: [ 373.277949][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.286376][ T31] #1: ffffffff8e237b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 373.296709][ T31] 2 locks held by syz.4.4549/15343: [ 373.302247][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.311328][ T31] #1: ffffffff8e237b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 373.321535][ T31] 2 locks held by syz.1.8833/24527: [ 373.326825][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 373.335973][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 373.347001][ T31] [ 373.354027][ T31] ============================================= [ 373.354027][ T31] [ 373.365342][ T31] NMI backtrace for cpu 1 [ 373.365372][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 373.365400][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.365416][ T31] Call Trace: [ 373.365427][ T31] [ 373.365439][ T31] dump_stack_lvl+0xe8/0x150 [ 373.365468][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 373.365491][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.365521][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 373.365547][ T31] sys_info+0x135/0x170 [ 373.365563][ T31] watchdog+0xf95/0xfe0 [ 373.365587][ T31] ? watchdog+0x20a/0xfe0 [ 373.365620][ T31] kthread+0x711/0x8a0 [ 373.365641][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.365661][ T31] ? __pfx_kthread+0x10/0x10 [ 373.365686][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.365708][ T31] ? __pfx_kthread+0x10/0x10 [ 373.365727][ T31] ret_from_fork+0x510/0xa50 [ 373.365743][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.365758][ T31] ? __switch_to+0xc9e/0x1480 [ 373.365781][ T31] ? __pfx_kthread+0x10/0x10 [ 373.365802][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.365834][ T31] [ 373.365840][ T31] Sending NMI from CPU 1 to CPUs 0: [ 373.487579][ C0] NMI backtrace for cpu 0 [ 373.487599][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 373.487618][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.487632][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 373.487654][ C0] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 373.487667][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2 [ 373.487683][ C0] RAX: 00000000000c3fb3 RBX: ffffffff819713ee RCX: 0000000080000001 [ 373.487696][ C0] RDX: 0000000000000001 RSI: ffffffff8d792037 RDI: ffffffff8bc083e0 [ 373.487708][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 373.487721][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270 [ 373.487734][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 373.487745][ C0] FS: 0000000000000000(0000) GS:ffff888125e21000(0000) knlGS:0000000000000000 [ 373.487759][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.487771][ C0] CR2: 00007f267fbb9358 CR3: 000000007e410000 CR4: 00000000003526f0 [ 373.487786][ C0] Call Trace: [ 373.487795][ C0] [ 373.487801][ C0] default_idle+0x13/0x20 [ 373.487821][ C0] default_idle_call+0x73/0xb0 [ 373.487841][ C0] do_idle+0x1be/0x4d0 [ 373.487860][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.487881][ C0] ? __pfx_do_idle+0x10/0x10 [ 373.487908][ C0] cpu_startup_entry+0x44/0x60 [ 373.487926][ C0] rest_init+0x2de/0x300 [ 373.487947][ C0] start_kernel+0x381/0x3d0 [ 373.487973][ C0] x86_64_start_reservations+0x24/0x30 [ 373.487995][ C0] x86_64_start_kernel+0x143/0x1c0 [ 373.488016][ C0] common_startup_64+0x13e/0x147 [ 373.488045][ C0] [ 373.490698][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 373.490716][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 373.490738][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.490751][ T31] Call Trace: [ 373.490759][ T31] [ 373.490767][ T31] vpanic+0x1e0/0x670 [ 373.490797][ T31] panic+0xb9/0xc0 [ 373.490819][ T31] ? __pfx_panic+0x10/0x10 [ 373.490844][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 373.490868][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 373.490899][ T31] watchdog+0xfdf/0xfe0 [ 373.490930][ T31] ? watchdog+0x20a/0xfe0 [ 373.490962][ T31] kthread+0x711/0x8a0 [ 373.490990][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.491015][ T31] ? __pfx_kthread+0x10/0x10 [ 373.491042][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.491069][ T31] ? __pfx_kthread+0x10/0x10 [ 373.491095][ T31] ret_from_fork+0x510/0xa50 [ 373.491117][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.491133][ T31] ? __switch_to+0xc9e/0x1480 [ 373.491163][ T31] ? __pfx_kthread+0x10/0x10 [ 373.491188][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.491229][ T31] [ 373.782386][ T31] Kernel Offset: disabled [ 373.786707][ T31] Rebooting in 86400 seconds..