last executing test programs: 2m46.748785027s ago: executing program 1 (id=4506): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, 0x0, 0x0) 2m46.617974034s ago: executing program 1 (id=4511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) 2m46.373494764s ago: executing program 1 (id=4518): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x8000a4ff, 0x4) 2m46.289789044s ago: executing program 1 (id=4520): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 2m46.159177023s ago: executing program 1 (id=4525): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x2c, &(0x7f0000000840)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x4}]}, &(0x7f00000008c0)=0x10) 2m45.938781298s ago: executing program 1 (id=4532): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) 2m38.418993696s ago: executing program 0 (id=4780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 2m38.230486644s ago: executing program 0 (id=4783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4) 2m38.072575631s ago: executing program 0 (id=4788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) 2m37.877050382s ago: executing program 0 (id=4794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delqdisc={0x24, 0x26, 0x309, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffe0, 0xb}, {0x4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000d0) 2m37.785136573s ago: executing program 0 (id=4798): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xffffff1f}}]}}, &(0x7f0000000f40)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 2m37.679317864s ago: executing program 0 (id=4800): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 2m30.895782629s ago: executing program 32 (id=4532): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) 2m22.627418776s ago: executing program 33 (id=4800): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 2m17.884228166s ago: executing program 3 (id=5328): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0000000290001000000000004000000fc000000000000000000000000000001fc0200000000000000000000000000ff00000005000000020a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100ee8000000200000000000000000000aaac1e0001000000000000000000000000200100000000000000000000000000008b1414040000000435"], 0xa0}}, 0x0) 2m17.678474578s ago: executing program 3 (id=5335): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100080c10000000000000000000", 0x58}], 0x1) 2m17.572253175s ago: executing program 3 (id=5336): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) 2m17.413697805s ago: executing program 3 (id=5341): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b8109008cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000086fb13b5be0263b7b63a532d6566cb4601000000008f2b9010f22425e4097ed62cbc89106101d79d2ff3592246e07cfa6fa26fa7088c60897d4a6148a1c1070000001bde60beac671e8e8fdeb003588aa623fa71f31bf0f871ab5c2ff8a6fc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bff85db772a85f0d2114252581567acae715cbe326c2ed0a432b2c310400623d24195405f2e76ccb7b37b59f8f5c89d6b051991ec0c2eb06c41f1a7dadb13471af920c5e4dbfb1ed2f495a7a5108d6f728dbb62376d454ea187a819a1789fc1f164512f3e7ac44643b6f7be84bfbe01fac8b6651b8ff3db7bcc604aff37152d7c7cb67b555e5228d85d7a926c2c49ce02497c0faf1bb9572ad1ec0e3da311b2e77ffb187e4732759b1f07096849b2c135cb42be26e6d9837170b8f73305a79c53f3857311a93fca"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26, 0x7}, 0x10) 2m17.300652886s ago: executing program 3 (id=5344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @remote}]}}}]}, 0x3c}}, 0x20004804) 2m16.949356254s ago: executing program 3 (id=5350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0xc}}, 0x14}}, 0x4000080) 2m1.909588003s ago: executing program 34 (id=5350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0xc}}, 0x14}}, 0x4000080) 2.50583027s ago: executing program 4 (id=9282): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002000)="ed", 0x1}], 0x1, 0x0, 0x0, 0x24008040}], 0x1, 0x62048800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x3000, 0x4) 1.7513799s ago: executing program 7 (id=9299): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r0, r1, 0x0, 0x7feff000) 1.578004508s ago: executing program 7 (id=9303): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x78}}, 0x8800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.427480272s ago: executing program 4 (id=9307): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) 1.32728964s ago: executing program 4 (id=9310): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="4c875ca1829a", 0x6}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x807, 0x41}}], 0x20, 0x4048801}, 0x6050) 1.305825758s ago: executing program 7 (id=9312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) shutdown(r0, 0x1) 1.034084614s ago: executing program 2 (id=9317): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffcb, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) 955.459193ms ago: executing program 6 (id=9319): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 913.139951ms ago: executing program 5 (id=9320): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) 870.72893ms ago: executing program 6 (id=9321): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1]) 839.68456ms ago: executing program 2 (id=9322): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], 0x0, 0x3c}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r2}, 0x20) 770.937681ms ago: executing program 5 (id=9323): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 673.064779ms ago: executing program 6 (id=9324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) close(0x3) 633.013219ms ago: executing program 2 (id=9325): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendto$unix(r1, &(0x7f00000004c0)="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", 0x140, 0x4c010, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 618.961668ms ago: executing program 5 (id=9326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0)="01", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000680)=""/17, &(0x7f00000000c0)=0x11) 469.613935ms ago: executing program 5 (id=9327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 469.040536ms ago: executing program 2 (id=9328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c00028005000100000000000800074000000004080003400065c53c"], 0x90}, 0x1, 0xbb1414ac}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) 448.941475ms ago: executing program 6 (id=9329): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 354.979194ms ago: executing program 2 (id=9330): unshare(0x22020400) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000400)=ANY=[], 0x4) 352.833745ms ago: executing program 4 (id=9331): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 322.735009ms ago: executing program 5 (id=9332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x50}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) 316.127521ms ago: executing program 7 (id=9333): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) close(r0) 241.073996ms ago: executing program 6 (id=9334): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x8}, 0x8) 197.303856ms ago: executing program 4 (id=9335): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) 173.485522ms ago: executing program 7 (id=9336): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0x9) 160.128387ms ago: executing program 2 (id=9337): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX], 0x27) 125.191569ms ago: executing program 5 (id=9338): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b40000000000000079b03f0000000000620040000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 19.076723ms ago: executing program 6 (id=9339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) 17.463485ms ago: executing program 7 (id=9340): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 0s ago: executing program 4 (id=9341): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) kernel console output (not intermixed with test programs): ghatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.791549][ T8997] lowmem_reserve[]: 0 0 0 0 0 [ 138.796317][ T8997] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 138.799966][ T9007] ip6gre1: entered allmulticast mode [ 138.809678][ T8997] Node 0 DMA32: 1139*4kB (UME) 869*8kB (UME) 279*16kB (UM) 215*32kB (UME) 96*64kB (UME) 83*128kB (UME) 53*256kB (UM) 23*512kB (UM) 11*1024kB (UM) 5*2048kB (UME) 316*4096kB (UM) = 1380804kB [ 138.859328][ T8997] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 138.876746][ T8997] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 9*16kB (UM) 9*32kB (UM) 8*64kB (UM) 5*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941728kB [ 138.914148][ T9009] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 138.914941][ T8997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.958795][ T8997] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.993096][ T8997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.027211][ T8997] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.055726][ T8997] 43836 total pagecache pages [ 139.094146][ T8997] 0 pages in swap cache [ 139.119590][ T8997] Free swap = 124996kB [ 139.127929][ T9017] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 139.152020][ T8997] Total swap = 124996kB [ 139.154038][ T9017] __nla_validate_parse: 5 callbacks suppressed [ 139.154051][ T9017] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1573'. [ 139.156342][ T8997] 2097051 pages RAM [ 139.178138][ T8997] 0 pages HighMem/MovableOnly [ 139.185172][ T8997] 428251 pages reserved [ 139.192934][ T8997] 0 pages cma reserved [ 139.201715][ T9021] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.454613][ T9033] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 139.605225][ T9042] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 139.785668][ T9053] netlink: 524 bytes leftover after parsing attributes in process `syz.2.1589'. [ 140.068757][ T58] bond0: (slave bond_slave_0): interface is now down [ 140.104105][ T58] bond0: (slave bond_slave_1): interface is now down [ 140.149527][ T58] bond0: now running without any active interface! [ 141.032947][ T9128] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 141.661427][ T9157] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 142.587211][ T9212] xt_TPROXY: Can be used only with -p tcp or -p udp [ 143.274667][ T9248] netlink: 'syz.4.1674': attribute type 12 has an invalid length. [ 143.283441][ T9250] xt_TCPMSS: Only works on TCP SYN packets [ 144.049963][ T9287] openvswitch: netlink: EtherType 300 is less than min 600 [ 144.249287][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 144.656137][ T9321] ip6t_srh: unknown srh invflags 4000 [ 144.804140][ T9328] No such timeout policy "syz0" [ 145.485310][ T9370] bond0: option ad_select: unable to set because the bond device is up [ 146.294031][ T9417] netlink: 'syz.4.1756': attribute type 2 has an invalid length. [ 146.317170][ T9417] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1756'. [ 146.378246][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1758'. [ 146.395840][ T9423] netlink: 'syz.1.1759': attribute type 3 has an invalid length. [ 146.418948][ T9422] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1758'. [ 146.709328][ T9441] netlink: 'syz.1.1768': attribute type 13 has an invalid length. [ 146.727454][ T9441] netlink: 'syz.1.1768': attribute type 17 has an invalid length. [ 146.955288][ T9452] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1773'. [ 147.232627][ T9454] 8021q: VLANs not supported on lo [ 147.393797][ T9472] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 147.425427][ T9473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.698063][ T9488] netlink: 'syz.4.1791': attribute type 6 has an invalid length. [ 148.388179][ T9528] netlink: 'syz.4.1810': attribute type 4 has an invalid length. [ 148.499517][ T9536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1814'. [ 148.510148][ T9537] netlink: 'syz.0.1815': attribute type 12 has an invalid length. [ 148.769393][ T9551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.306506][ T9582] tc_dump_action: action bad kind [ 149.464371][ T9592] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1842'. [ 149.482159][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1844'. [ 149.657492][ T9600] bond0: Error: Cannot enslave bond to itself. [ 150.027174][ T9624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.175009][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 150.254951][ T9638] xt_TCPMSS: Only works on TCP SYN packets [ 150.317185][ T9637] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 150.359473][ T9637] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 150.400826][ T9637] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 150.474111][ T9637] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.518936][ T9637] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 150.855628][ T9662] netlink: 'syz.3.1875': attribute type 39 has an invalid length. [ 151.529534][ T9690] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1887'. [ 151.558040][ T9689] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 152.016541][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1902'. [ 152.387448][ T9741] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 152.485844][ T9745] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 153.121512][ T9783] mac80211_hwsim hwsim10 : renamed from wlan1 (while UP) [ 153.409209][ T9797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1940'. [ 153.458934][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'. [ 153.902172][ T9823] xt_l2tp: v2 doesn't support IP mode [ 153.969264][ T9829] xt_hashlimit: invalid interval [ 154.248563][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1966'. [ 154.472097][ T9857] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 154.573383][ T9865] netlink: 'syz.0.1975': attribute type 32 has an invalid length. [ 154.663782][ T9870] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1978'. [ 155.045910][ T9892] netlink: 'syz.0.1989': attribute type 7 has an invalid length. [ 155.101600][ T9892] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1989'. [ 155.314903][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 155.443647][ T9913] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 155.826065][ T9935] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.488055][ T9973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.763004][ T9989] netlink: 'syz.0.2037': attribute type 7 has an invalid length. [ 156.960250][T10001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2042'. [ 157.403311][T10026] netlink: 'syz.3.2054': attribute type 1 has an invalid length. [ 157.436335][T10026] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2054'. [ 157.446232][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2056'. [ 157.485869][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2056'. [ 157.773553][T10047] ipt_REJECT: ECHOREPLY no longer supported. [ 157.822159][T10051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2068'. [ 157.840772][T10050] netlink: 'syz.2.2067': attribute type 1 has an invalid length. [ 157.849504][T10051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2068'. [ 157.882090][T10050] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2067'. [ 157.992064][T10051] gretap1: entered promiscuous mode [ 158.058639][T10059] TCP: TCP_TX_DELAY enabled [ 158.061123][T10051] gretap1: entered allmulticast mode [ 158.606109][T10083] syz.3.2084 (10083) used greatest stack depth: 19648 bytes left [ 158.775135][T10101] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 159.346304][T10134] netlink: 'syz.1.2109': attribute type 32 has an invalid length. [ 159.691254][T10154] __nla_validate_parse: 1 callbacks suppressed [ 159.691271][T10154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2120'. [ 159.814116][T10161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2123'. [ 159.851622][T10161] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2123'. [ 159.877115][T10161] netlink: 'syz.2.2123': attribute type 6 has an invalid length. [ 159.902776][T10161] netlink: 'syz.2.2123': attribute type 5 has an invalid length. [ 159.903554][T10167] netlink: zone id is out of range [ 159.919222][T10161] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2123'. [ 159.924405][T10165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.928776][T10167] netlink: del zone limit has 4 unknown bytes [ 160.244502][T10181] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 160.334102][T10189] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.2137'. [ 161.247490][T10242] netlink: 'syz.0.2160': attribute type 11 has an invalid length. [ 161.288907][T10242] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2160'. [ 161.730158][T10273] ipt_rpfilter: unknown options [ 161.820797][T10277] Cannot find map_set index 2 as target [ 162.144890][T10294] netlink: 'syz.4.2181': attribute type 9 has an invalid length. [ 162.184421][T10300] Unsupported ieee802154 address type: 0 [ 162.322963][T10306] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2186'. [ 162.560175][T10321] netlink: 'syz.4.2192': attribute type 2 has an invalid length. [ 162.766775][ T5274] veth0_vlan: left promiscuous mode [ 162.796855][ T5832] IPVS: starting estimator thread 0... [ 162.826051][ T5832] veth0_vlan: entered promiscuous mode [ 162.920204][T10335] IPVS: using max 34 ests per chain, 81600 per kthread [ 163.648082][T10386] netlink: 400 bytes leftover after parsing attributes in process `syz.2.2219'. [ 163.755099][T10393] netlink: 'syz.0.2222': attribute type 21 has an invalid length. [ 163.764926][T10392] netlink: 'syz.3.2223': attribute type 9 has an invalid length. [ 163.798299][T10393] netlink: 'syz.0.2222': attribute type 1 has an invalid length. [ 163.840125][T10392] netlink: 'syz.3.2223': attribute type 4 has an invalid length. [ 164.317145][T10376] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 165.170420][T10471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.355097][T10484] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 165.550190][ T5716] Bluetooth: hci0: command 0x0c20 tx timeout [ 166.173581][T10531] netlink: 'syz.4.2287': attribute type 11 has an invalid length. [ 166.879783][T10574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2307'. [ 167.278108][T10597] netlink: 'syz.4.2317': attribute type 5 has an invalid length. [ 167.497799][T10611] ipt_REJECT: TCP_RESET invalid for non-tcp [ 167.910111][T10640] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 167.957659][T10640] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 168.424300][T10670] tipc: Trying to set illegal importance in message [ 168.626270][T10683] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 169.391313][T10724] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 169.411738][T10724] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 169.523680][T10735] netlink: 'syz.1.2385': attribute type 21 has an invalid length. [ 169.543089][T10735] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.979995][T10758] netlink: 768 bytes leftover after parsing attributes in process `syz.1.2395'. [ 170.454126][T10783] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 170.487522][T10783] bond1 (unregistering): Released all slaves [ 170.763961][T10802] nft_compat: unsupported protocol 0 [ 170.950096][T10812] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 170.970296][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2424'. [ 170.991859][T10819] netlink: 'syz.0.2426': attribute type 10 has an invalid length. [ 171.021683][T10819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2426'. [ 171.081383][T10819] team0: entered allmulticast mode [ 171.096800][T10819] team_slave_0: entered allmulticast mode [ 171.118378][T10819] team_slave_1: entered allmulticast mode [ 171.137794][T10819] bridge0: port 3(team0) entered blocking state [ 171.169594][T10819] bridge0: port 3(team0) entered disabled state [ 171.186870][T10819] team0: entered promiscuous mode [ 171.193681][T10819] team_slave_0: entered promiscuous mode [ 171.201469][T10819] team_slave_1: entered promiscuous mode [ 171.221741][T10819] bridge0: port 3(team0) entered blocking state [ 171.228561][T10819] bridge0: port 3(team0) entered forwarding state [ 171.533532][T10845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.643212][T10848] geneve2: entered promiscuous mode [ 171.672282][T10848] geneve2: entered allmulticast mode [ 171.834310][T10863] netlink: 6208 bytes leftover after parsing attributes in process `syz.1.2444'. [ 171.857590][T10860] netlink: 420 bytes leftover after parsing attributes in process `syz.4.2445'. [ 172.549450][T10906] : renamed from bond_slave_0 (while UP) [ 172.804052][T10922] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2475'. [ 172.829574][T10924] netlink: 'syz.0.2474': attribute type 7 has an invalid length. [ 172.916107][T10926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2476'. [ 172.955048][T10926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2476'. [ 172.987956][T10926] netlink: 'syz.2.2476': attribute type 4 has an invalid length. [ 173.415699][T10956] netlink: 'syz.1.2491': attribute type 11 has an invalid length. [ 173.535796][T10961] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 173.884458][T10979] tc_dump_action: action bad kind [ 173.907783][T10983] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2504'. [ 174.081197][T10991] netlink: 'syz.0.2508': attribute type 10 has an invalid length. [ 174.146964][T10991] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 174.335113][T11005] Cannot find add_set index 65532 as target [ 174.424228][T11011] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2518'. [ 174.528504][T11015] netlink: 'syz.1.2519': attribute type 10 has an invalid length. [ 174.632209][T11015] team0: Device veth0_macvtap failed to register rx_handler [ 175.096327][T11050] netlink: 'syz.0.2533': attribute type 2 has an invalid length. [ 176.053989][T11096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.079822][T11102] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 176.364334][T11124] Cannot find set identified by id 65534 to match [ 177.280943][T11179] netlink: 'syz.2.2587': attribute type 1 has an invalid length. [ 177.530289][T11196] netlink: 'syz.3.2594': attribute type 3 has an invalid length. [ 177.753110][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2599'. [ 178.279719][T11240] netlink: 'syz.3.2615': attribute type 1 has an invalid length. [ 178.515029][T11254] ipt_ECN: cannot use operation on non-tcp rule [ 178.590775][ T36] bond0: (slave veth0_to_bond): interface is now down [ 178.638406][ T36] bond0: now running without any active interface! [ 179.027714][T11284] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 179.040761][T11284] netlink: 'syz.3.2635': attribute type 11 has an invalid length. [ 179.082515][T11284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2635'. [ 179.114765][T11289] netlink: set zone limit has 4 unknown bytes [ 179.666119][T11321] openvswitch: netlink: IPv6 tunnel dst address is zero [ 179.793438][T11330] netlink: 'syz.0.2658': attribute type 6 has an invalid length. [ 180.465897][T11363] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 180.503551][T11369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.804520][T11384] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 180.925589][T11382] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 180.973841][T11382] bond1 (unregistering): Released all slaves [ 181.133797][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2693'. [ 181.723798][T11433] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 182.587268][T11489] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2737'. [ 182.857904][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 182.887454][T11507] netlink: 'syz.2.2745': attribute type 10 has an invalid length. [ 182.897951][T11505] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2744'. [ 182.919947][T11505] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2744'. [ 182.966474][T11507] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 182.981131][T11507] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 183.264776][T11528] netlink: 'syz.4.2753': attribute type 2 has an invalid length. [ 183.306162][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2755'. [ 183.331795][T11531] netlink: 'syz.3.2755': attribute type 3 has an invalid length. [ 183.520658][T11544] xt_hashlimit: size too large, truncated to 1048576 [ 184.065659][T11575] ipvlan1: entered promiscuous mode [ 184.085191][T11575] ipvlan1: entered allmulticast mode [ 184.098900][T11575] veth0_vlan: entered allmulticast mode [ 184.366197][T11593] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2787'. [ 184.476194][T11600] netlink: 'syz.1.2791': attribute type 13 has an invalid length. [ 184.508887][T11600] gretap0: refused to change device tx_queue_len [ 184.530522][T11600] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.998434][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2804'. [ 185.028338][T11627] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2804'. [ 185.067187][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2804'. [ 185.099617][T11627] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2804'. [ 185.132262][T11627] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2804'. [ 185.285547][T11643] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2812'. [ 185.390989][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2815'. [ 185.456833][T11652] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2817'. [ 185.471021][T11648] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2815'. [ 186.217795][T11699] netlink: 'syz.3.2840': attribute type 21 has an invalid length. [ 186.244065][T11699] netlink: 'syz.3.2840': attribute type 6 has an invalid length. [ 187.635896][T11782] netlink: 'syz.1.2877': attribute type 29 has an invalid length. [ 188.010163][T11805] netlink: 'syz.3.2889': attribute type 2 has an invalid length. [ 188.030559][T11805] netlink: 'syz.3.2889': attribute type 11 has an invalid length. [ 189.436488][T11895] __nla_validate_parse: 13 callbacks suppressed [ 189.436503][T11895] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2930'. [ 189.718109][T11911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2938'. [ 189.947155][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 190.280168][T11943] netlink: 'syz.1.2953': attribute type 7 has an invalid length. [ 190.833352][T11978] wg1: entered promiscuous mode [ 190.840756][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2970'. [ 190.854658][T11978] wg1: entered allmulticast mode [ 190.885709][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2972'. [ 191.185074][T11997] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 191.228354][T12002] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2983'. [ 191.392255][T12009] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 191.562411][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 192.173831][T12054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3009'. [ 192.211465][T12054] unsupported nlmsg_type 40 [ 192.403368][T12064] netlink: 'syz.1.3014': attribute type 15 has an invalid length. [ 192.453557][T12064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3014'. [ 192.579433][T12080] netlink: 'syz.4.3022': attribute type 49 has an invalid length. [ 192.705842][T12085] netlink: 'syz.3.3025': attribute type 11 has an invalid length. [ 192.716385][T12085] netlink: 'syz.3.3025': attribute type 11 has an invalid length. [ 192.725766][T12085] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3025'. [ 192.747008][T12080] ip6gretap0: entered promiscuous mode [ 192.753623][T12080] ip6gretap0: entered allmulticast mode [ 192.806836][T12083] netlink: 'syz.1.3023': attribute type 4 has an invalid length. [ 193.427080][T12122] netlink: 'syz.0.3041': attribute type 4 has an invalid length. [ 194.114299][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.123698][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.461910][T12184] netlink: 'syz.2.3066': attribute type 2 has an invalid length. [ 194.488424][T12184] __nla_validate_parse: 1 callbacks suppressed [ 194.488439][T12184] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3066'. [ 195.184086][T12224] netlink: 'syz.3.3084': attribute type 12 has an invalid length. [ 195.884123][T12268] netlink: 'syz.1.3106': attribute type 1 has an invalid length. [ 195.902349][T12268] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3106'. [ 196.441578][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3121'. [ 196.496614][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3121'. [ 196.532582][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3121'. [ 196.843657][T12322] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 197.182319][T12343] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 197.584328][T12365] netlink: 'syz.4.3151': attribute type 5 has an invalid length. [ 197.685656][T12371] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 197.754352][T12378] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 197.970398][T12389] Cannot find set identified by id 65534 to match [ 198.045057][T12394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3164'. [ 198.078162][T12394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3164'. [ 198.184795][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3167'. [ 198.237520][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'. [ 198.253795][T12406] netlink: 'syz.2.3168': attribute type 21 has an invalid length. [ 198.503215][T12419] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3175'. [ 198.578351][T12422] xt_hashlimit: size too large, truncated to 1048576 [ 198.717811][T12431] xt_hashlimit: max too large, truncated to 1048576 [ 198.736914][T12431] No such timeout policy "syz1" [ 199.128116][T12457] netlink: 'syz.3.3194': attribute type 21 has an invalid length. [ 199.371681][T12471] openvswitch: netlink: Duplicate or invalid key (type 0). [ 199.580620][T12483] netlink: 'syz.0.3206': attribute type 2 has an invalid length. [ 200.024071][T12508] veth0_vlan: left promiscuous mode [ 201.267153][T12583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3254'. [ 201.308934][T12462] Bluetooth: hci3: command 0x0406 tx timeout [ 201.320228][T12462] Bluetooth: hci0: command 0x0c20 tx timeout [ 201.326274][T12462] Bluetooth: hci1: command 0x0406 tx timeout [ 201.332427][T12462] Bluetooth: hci2: command 0x0406 tx timeout [ 201.333282][T12461] Bluetooth: hci4: command 0x0406 tx timeout [ 201.713305][T12610] netlink: 'syz.3.3266': attribute type 1 has an invalid length. [ 202.472897][T12659] xt_NFQUEUE: number of total queues is 0 [ 202.648676][T12667] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3295'. [ 202.672458][T12669] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 203.485970][T12720] x_tables: unsorted underflow at hook 1 [ 203.494403][T12723] netlink: 'syz.4.3319': attribute type 1 has an invalid length. [ 203.927221][T12748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3331'. [ 204.687197][T12790] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.721239][T12791] netlink: 'syz.4.3352': attribute type 64 has an invalid length. [ 204.975120][T12802] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3356'. [ 204.998586][T12805] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3359'. [ 205.565304][T12834] set match dimension is over the limit! [ 205.817383][T12853] netlink: 'syz.2.3378': attribute type 30 has an invalid length. [ 205.878528][T12857] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.020712][T12853] bond1: option arp_missed_max: invalid value (0) [ 206.027550][T12853] bond1: option arp_missed_max: allowed values 1 - 255 [ 206.051211][T12853] bond1 (unregistering): Released all slaves [ 206.305493][T12879] netlink: 'syz.4.3387': attribute type 1 has an invalid length. [ 206.331526][T12879] netlink: 756 bytes leftover after parsing attributes in process `syz.4.3387'. [ 206.417359][T12885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.853184][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3401'. [ 207.821903][T12967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3428'. [ 207.975028][T12976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3432'. [ 208.017332][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 208.062667][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'. [ 208.379802][T13000] SET target dimension over the limit! [ 208.412650][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 208.771307][T13023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3456'. [ 208.913528][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3460'. [ 209.270908][T13054] netlink: 'syz.3.3469': attribute type 2 has an invalid length. [ 209.297088][T13055] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3471'. [ 211.371701][T13179] netlink: 'syz.3.3526': attribute type 21 has an invalid length. [ 211.407435][T13179] __nla_validate_parse: 6 callbacks suppressed [ 211.407450][T13179] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3526'. [ 211.494738][T13185] xt_cluster: node mask cannot exceed total number of nodes [ 211.627491][T13191] bridge2: entered allmulticast mode [ 211.678442][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3534'. [ 211.974035][T13213] netlink: 'syz.4.3542': attribute type 24 has an invalid length. [ 212.143830][T13219] netlink: 'syz.4.3547': attribute type 2 has an invalid length. [ 212.173862][T13219] netlink: 'syz.4.3547': attribute type 8 has an invalid length. [ 212.188946][T13219] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3547'. [ 212.519466][T13241] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3557'. [ 212.658206][T13251] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3562'. [ 213.118362][T13280] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 213.193192][T13283] openvswitch: netlink: Message has 1 unknown bytes. [ 213.460532][T13297] netlink: 'syz.0.3585': attribute type 7 has an invalid length. [ 213.616609][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3590'. [ 214.363318][T13353] lo: left promiscuous mode [ 214.386321][T13353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.588181][T13366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.047400][T13395] sctp: [Deprecated]: syz.1.3633 (pid 13395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.047400][T13395] Use struct sctp_sack_info instead [ 215.171070][T13392] bond4: option fail_over_mac: invalid value (16) [ 215.215667][T13392] bond4 (unregistering): Released all slaves [ 215.356768][T13412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3640'. [ 215.646144][T13427] xt_l2tp: invalid flags combination: 8 [ 215.697432][T13431] netlink: 'syz.0.3650': attribute type 5 has an invalid length. [ 215.940845][T13443] gre1: entered promiscuous mode [ 215.957766][T13443] gre1: entered allmulticast mode [ 216.042270][T13451] xt_bpf: check failed: parse error [ 216.042816][T13440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.212503][T13456] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 216.238729][T13457] netlink: 'syz.3.3662': attribute type 21 has an invalid length. [ 216.304625][T13457] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3662'. [ 216.437609][T13469] netlink: 'syz.1.3669': attribute type 2 has an invalid length. [ 216.483280][T13469] netlink: 'syz.1.3669': attribute type 1 has an invalid length. [ 216.857664][T13493] netlink: 'syz.2.3681': attribute type 2 has an invalid length. [ 216.912925][T13500] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 217.721662][T13548] netlink: 'syz.4.3708': attribute type 21 has an invalid length. [ 217.758966][T13548] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.786964][T13548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.795363][T13548] IPv6: NLM_F_CREATE should be set when creating new route [ 217.802662][T13548] IPv6: NLM_F_CREATE should be set when creating new route [ 217.809941][T13548] IPv6: NLM_F_CREATE should be set when creating new route [ 217.913835][T13559] Cannot find del_set index 3 as target [ 218.546775][T13599] IPVS: Unknown mcast interface: nr0 [ 218.836210][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 218.837302][T13615] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 219.282054][T13640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3751'. [ 219.315856][T13640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3751'. [ 219.444427][T13651] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 219.542130][T13658] openvswitch: netlink: ct_state flags ffffffff unsupported [ 219.560314][T13659] netlink: 'syz.4.3759': attribute type 21 has an invalid length. [ 219.591034][T13659] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.636308][T13659] netlink: 'syz.4.3759': attribute type 1 has an invalid length. [ 219.658292][T13664] openvswitch: netlink: Actions may not be safe on all matching packets [ 219.772394][T13668] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3764'. [ 219.792251][T13669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.826660][T13670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3763'. [ 219.848852][T13670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3763'. [ 219.866694][T13673] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 220.049166][T13683] xt_cgroup: xt_cgroup: no path or classid specified [ 220.114906][T13687] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 220.127823][T13684] bridge3: entered promiscuous mode [ 220.157657][T13684] bridge3: entered allmulticast mode [ 221.292570][T13752] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.353384][T13756] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 221.553393][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3814'. [ 221.603379][T13770] netlink: 'syz.4.3814': attribute type 5 has an invalid length. [ 221.651395][T13770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3814'. [ 221.760452][T13770] geneve2: entered promiscuous mode [ 221.782662][T13770] geneve2: entered allmulticast mode [ 221.812381][T13778] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 221.832678][T13784] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 221.851858][T13778] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 221.879110][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 221.909885][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 221.941406][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 221.977940][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 222.684572][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3844'. [ 223.394559][T13873] netlink: 'syz.3.3862': attribute type 11 has an invalid length. [ 223.441103][T13873] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.3862'. [ 223.697867][T13891] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 223.714929][T13893] netlink: 'syz.1.3872': attribute type 1 has an invalid length. [ 224.284653][T13929] __nla_validate_parse: 1 callbacks suppressed [ 224.284669][T13929] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3890'. [ 224.431602][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3894'. [ 224.621876][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3900'. [ 224.813985][T13961] netlink: 'syz.3.3907': attribute type 4 has an invalid length. [ 224.825075][T13962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.475414][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3925'. [ 226.195230][T14043] netlink: 'syz.0.3947': attribute type 11 has an invalid length. [ 226.228243][T14043] netlink: 'syz.0.3947': attribute type 4 has an invalid length. [ 226.265699][T14043] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3947'. [ 226.532540][T14064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3957'. [ 226.561056][T14064] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 226.792307][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3963'. [ 227.017504][T14092] netlink: 'syz.3.3971': attribute type 1 has an invalid length. [ 227.047238][T14092] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3971'. [ 227.232587][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3976'. [ 227.484751][T14118] lo: entered allmulticast mode [ 227.502643][T14118] tunl0: entered allmulticast mode [ 227.513954][T14118] gre0: entered allmulticast mode [ 227.537278][T14118] gretap0: entered allmulticast mode [ 227.571119][T14118] erspan0: entered allmulticast mode [ 227.583661][T14123] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3986'. [ 227.599506][T14118] ip_vti0: entered allmulticast mode [ 227.626043][T14118] ip6_vti0: entered allmulticast mode [ 227.641777][T14118] sit0: left promiscuous mode [ 227.646614][T14118] sit0: entered allmulticast mode [ 227.653934][T14118] ip6tnl0: entered allmulticast mode [ 227.670679][T14118] ip6gre0: entered allmulticast mode [ 227.686549][T14118] syz_tun: entered allmulticast mode [ 227.744531][T14131] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.752464][T14129] netlink: 'syz.3.3989': attribute type 1 has an invalid length. [ 228.545352][T14174] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 228.580370][T14177] SET target dimension over the limit! [ 229.260026][T14219] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 230.159768][T14272] netlink: zone id is out of range [ 230.635432][T14301] netlink: 'syz.3.4075': attribute type 3 has an invalid length. [ 230.705320][T14304] netlink: 'syz.1.4076': attribute type 8 has an invalid length. [ 230.854200][T14311] hsr0: entered allmulticast mode [ 230.869999][T14311] hsr_slave_0: entered allmulticast mode [ 230.888870][T14311] hsr_slave_1: entered allmulticast mode [ 231.055478][T14331] __nla_validate_parse: 2 callbacks suppressed [ 231.055494][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4089'. [ 231.072111][T14331] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 231.120980][T14324] bond1: option resend_igmp: invalid value (32767) [ 231.140706][T14334] netlink: 'syz.3.4091': attribute type 2 has an invalid length. [ 231.153349][T14324] bond1: option resend_igmp: allowed values 0 - 255 [ 231.162898][T14324] bond1 (unregistering): Released all slaves [ 231.200376][T14337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.662447][T14359] netlink: Conntrack attr has 4 unknown bytes [ 231.712609][T14359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.953239][T14377] netlink: 'syz.1.4109': attribute type 10 has an invalid length. [ 232.020498][T14377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.065212][T14377] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 232.854631][T14427] veth0_macvtap: entered allmulticast mode [ 232.892181][T14427] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 233.241314][T14450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4149'. [ 233.748903][T14480] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4163'. [ 234.717058][T14544] netlink: 'syz.1.4193': attribute type 21 has an invalid length. [ 234.752312][T14545] pim6reg: entered allmulticast mode [ 234.868179][T14550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.005540][T14554] bond4: Removing last ns target with arp_interval on [ 235.585589][T14597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4219'. [ 235.942096][T14619] IPv6: sit1: Disabled Multicast RS [ 236.076906][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4232'. [ 236.262932][T14642] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4240'. [ 236.576063][T14658] netlink: 'syz.4.4249': attribute type 3 has an invalid length. [ 236.583123][T14660] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4250'. [ 236.629263][T14660] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4250'. [ 236.631757][T14658] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4249'. [ 237.668358][T14729] openvswitch: netlink: Duplicate or invalid key (type 0). [ 239.088231][T14817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.203076][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4329'. [ 239.221867][T14828] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 239.649832][T14852] geneve3: entered promiscuous mode [ 239.665504][T14852] geneve3: entered allmulticast mode [ 239.698933][ T58] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 239.734285][ T58] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 239.774935][ T58] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 239.806605][ T58] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 239.842372][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4344'. [ 239.903863][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4344'. [ 239.971863][T14872] netlink: 'syz.1.4348': attribute type 2 has an invalid length. [ 240.172637][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4353'. [ 240.853860][T14927] sctp: [Deprecated]: syz.3.4375 (pid 14927) Use of int in maxseg socket option. [ 240.853860][T14927] Use struct sctp_assoc_value instead [ 241.050705][T14936] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4380'. [ 241.309832][T14950] netlink: 'syz.0.4387': attribute type 23 has an invalid length. [ 241.545452][T14967] ipt_REJECT: TCP_RESET invalid for non-tcp [ 241.558424][T14968] netlink: 344 bytes leftover after parsing attributes in process `syz.1.4396'. [ 241.628118][T14970] netlink: 'syz.3.4397': attribute type 11 has an invalid length. [ 241.670152][T14970] netlink: 'syz.3.4397': attribute type 11 has an invalid length. [ 241.699437][T14970] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4397'. [ 242.106860][T14995] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.277728][T15009] netlink: 'syz.0.4415': attribute type 5 has an invalid length. [ 242.440195][T15016] netlink: 'syz.0.4420': attribute type 23 has an invalid length. [ 243.221912][T15067] netlink: 'syz.2.4438': attribute type 21 has an invalid length. [ 243.276672][T15067] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4438'. [ 243.299768][T15067] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4438'. [ 243.365318][T15072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.530973][T15083] siw: device registration error -23 [ 243.677066][T15084] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 243.694760][T15092] netlink: 'syz.0.4449': attribute type 4 has an invalid length. [ 243.720932][T15092] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4449'. [ 243.737078][T15084] bond1 (unregistering): Released all slaves [ 243.829065][ T5274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.148555][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4459'. [ 244.186992][T15119] bridge_slave_1: left allmulticast mode [ 244.218144][T15119] bridge_slave_1: left promiscuous mode [ 244.253408][T15119] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.292452][T15119] bridge_slave_0: left allmulticast mode [ 244.301307][T15119] bridge_slave_0: left promiscuous mode [ 244.321571][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.913753][T15158] netlink: 'syz.0.4481': attribute type 24 has an invalid length. [ 245.341008][T15184] netlink: 'syz.1.4494': attribute type 2 has an invalid length. [ 245.398514][T15184] netlink: 'syz.1.4494': attribute type 2 has an invalid length. [ 245.800361][T15213] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4509'. [ 245.828749][T15213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4509'. [ 245.846712][T15213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4509'. [ 245.860087][T15213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4509'. [ 245.896747][T15217] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 246.300050][T15246] netlink: 'syz.4.4526': attribute type 3 has an invalid length. [ 246.540515][T15262] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 247.393203][T15319] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.408987][T15320] __nla_validate_parse: 3 callbacks suppressed [ 247.409002][T15320] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4561'. [ 247.481515][T15320] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4561'. [ 247.508477][T15320] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4561'. [ 247.715425][T15340] netlink: 'syz.0.4570': attribute type 24 has an invalid length. [ 247.832164][T15348] netlink: 'syz.0.4574': attribute type 27 has an invalid length. [ 248.543094][T15398] xt_hashlimit: size too large, truncated to 1048576 [ 248.566155][T15398] xt_hashlimit: max too large, truncated to 1048576 [ 248.596780][T15398] xt_hashlimit: invalid rate [ 248.631796][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4602'. [ 248.742340][T15410] netlink: 'syz.0.4605': attribute type 4 has an invalid length. [ 248.803849][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4608'. [ 248.923344][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4613'. [ 249.129053][T15437] netlink: 'syz.0.4618': attribute type 4 has an invalid length. [ 249.142377][T15437] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4618'. [ 249.210636][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4621'. [ 249.237484][T15442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4621'. [ 249.260321][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4621'. [ 249.740657][T15479] netlink: 'syz.4.4639': attribute type 32 has an invalid length. [ 249.742388][T15480] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.139753][T15501] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 250.264655][T15510] xt_hashlimit: size too large, truncated to 1048576 [ 250.720521][T15540] netlink: 'syz.3.4669': attribute type 1 has an invalid length. [ 251.939400][T15623] x_tables: unsorted entry at hook 1 [ 252.382482][T15656] netlink: 'syz.3.4725': attribute type 23 has an invalid length. [ 252.469049][T15658] openvswitch: netlink: IP tunnel dst address not specified [ 252.580711][T15668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.042174][T15696] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 253.137479][T15706] xt_nat: multiple ranges no longer supported [ 253.180795][T15708] : renamed from virt_wifi0 [ 253.555077][T15734] Driver unsupported XDP return value 0 on prog (id 329) dev N/A, expect packet loss! [ 253.652203][T15738] __nla_validate_parse: 4 callbacks suppressed [ 253.652219][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4766'. [ 254.411754][T15782] bond0: Error: CAN devices cannot be enslaved [ 254.680866][T15797] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 254.695016][T15797] bond1 (unregistering): Released all slaves [ 254.785002][T15809] netlink: 'syz.4.4801': attribute type 32 has an invalid length. [ 255.165749][T15834] netlink: 'syz.2.4814': attribute type 2 has an invalid length. [ 255.228990][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4816'. [ 255.254150][T15839] netlink: 'syz.2.4816': attribute type 5 has an invalid length. [ 255.263921][T15839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4816'. [ 255.281767][T15839] geneve4: entered promiscuous mode [ 255.287511][T15839] geneve4: entered allmulticast mode [ 255.299258][ T1174] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 255.327912][ T1174] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 255.359828][ T1174] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 255.368571][ T1174] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 255.514542][T15855] netlink: 'syz.4.4824': attribute type 1 has an invalid length. [ 255.539415][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4824'. [ 255.564421][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.571268][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.759083][T15873] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4833'. [ 255.768363][T15873] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4833'. [ 256.024196][T15890] Unknown options in mask 4 [ 256.966424][T15957] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 257.057515][T15963] openvswitch: netlink: IP tunnel TTL not specified. [ 257.356467][T15984] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4885'. [ 257.374993][T15984] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4885'. [ 257.398969][T15984] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4885'. [ 257.451410][T15990] Unsupported ieee802154 address type: 0 [ 257.541726][T15998] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4892'. [ 257.903952][T16024] Cannot find del_set index 3 as target [ 258.412373][T16060] netlink: 'syz.3.4923': attribute type 21 has an invalid length. [ 258.782658][T16088] __nla_validate_parse: 3 callbacks suppressed [ 258.782673][T16088] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.4936'. [ 258.840485][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4939'. [ 258.849907][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4939'. [ 258.860928][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4939'. [ 258.916849][T16095] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4940'. [ 258.928064][T16095] 8021q: VLANs not supported on gre0 [ 259.003835][T16103] netlink: 'syz.2.4943': attribute type 9 has an invalid length. [ 259.282947][T16121] veth3: entered allmulticast mode [ 259.438280][T16132] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 259.442485][T16133] netlink: 'syz.2.4959': attribute type 16 has an invalid length. [ 259.468944][T16133] netlink: 'syz.2.4959': attribute type 3 has an invalid length. [ 259.482704][T16133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4959'. [ 259.969576][T16169] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 259.998057][T16173] IPv6: NLM_F_REPLACE set, but no existing node found! [ 260.073221][T16177] openvswitch: netlink: Flow key attribute not present in set flow. [ 260.094179][T16179] xt_socket: unknown flags 0x50 [ 260.153375][T16182] netlink: 'syz.3.4983': attribute type 28 has an invalid length. [ 260.171272][T16182] netlink: 'syz.3.4983': attribute type 3 has an invalid length. [ 260.182445][T16182] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4983'. [ 260.416047][T16197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.989200][T16183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.007901][T16183] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 261.058858][T16183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.067575][T16183] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 261.083110][T16183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.104481][T16183] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 261.147882][T16183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.159549][T16183] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 261.834840][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.845141][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.854165][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.864675][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.878540][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.912068][T16269] netlink: 'syz.3.5009': attribute type 1 has an invalid length. [ 261.943419][ T5715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.957367][ T5715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.967675][ T5715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.981282][ T5715] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.991645][ T5715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.494180][T16304] SET target dimension over the limit! [ 262.761384][T16320] netlink: 'syz.4.5026': attribute type 2 has an invalid length. [ 262.887240][T16322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.003910][T16335] netlink: 'syz.4.5030': attribute type 6 has an invalid length. [ 263.630119][T16264] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.653035][T16264] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.660345][T16264] bridge_slave_0: entered allmulticast mode [ 263.668042][T16264] bridge_slave_0: entered promiscuous mode [ 263.677639][T16264] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.689343][T16264] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.696595][T16264] bridge_slave_1: entered allmulticast mode [ 263.720257][T16264] bridge_slave_1: entered promiscuous mode [ 263.755821][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5047'. [ 263.806988][T16264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.842340][T16264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.934150][T16264] team0: Port device team_slave_0 added [ 263.969740][T16264] team0: Port device team_slave_1 added [ 264.030156][ T50] Bluetooth: hci5: command tx timeout [ 264.038606][T16264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.067795][T16264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.146038][T16264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.198255][T16264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.218509][T16264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.252243][T16264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.428591][T16264] hsr_slave_0: entered promiscuous mode [ 264.435352][T16264] hsr_slave_1: entered promiscuous mode [ 264.447570][T16264] debugfs: 'hsr0' already exists in 'hsr' [ 264.460515][T16264] Cannot create hsr debugfs directory [ 264.603170][T16428] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5064'. [ 264.616405][T16428] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5064'. [ 264.627775][T16428] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5064'. [ 264.746610][T16434] tc_dump_action: action bad kind [ 264.788632][T16442] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5068'. [ 264.958647][T16449] netlink: 'syz.2.5070': attribute type 2 has an invalid length. [ 265.187678][T16264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.235217][T16264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.263686][T16264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.293182][T16264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.315580][T16264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.342237][T16264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.358622][T16264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.395613][T16264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.577687][T16264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.628739][T16264] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.654074][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.661248][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.725793][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.732970][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.109168][ T50] Bluetooth: hci5: command tx timeout [ 266.539935][T16535] netlink: 'syz.2.5104': attribute type 1 has an invalid length. [ 266.568231][T16540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.656057][T16544] netlink: 'syz.3.5107': attribute type 1 has an invalid length. [ 266.698896][T16544] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5107'. [ 266.732282][T16264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.241829][T16264] veth0_vlan: entered promiscuous mode [ 267.270548][T16264] veth1_vlan: entered promiscuous mode [ 267.294802][T16588] netlink: 'syz.4.5127': attribute type 3 has an invalid length. [ 267.345286][T16589] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 267.365542][T16589] bond2 (unregistering): Released all slaves [ 267.416131][T16264] veth0_macvtap: entered promiscuous mode [ 267.455572][T16264] veth1_macvtap: entered promiscuous mode [ 267.502300][T16264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.521190][T16264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.609102][ T1174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.628525][ T1174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.640705][T16606] openvswitch: netlink: IPv4 tun info is not correct [ 267.711864][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.734320][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.821410][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.845482][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.855762][T16615] netlink: 'syz.2.5139': attribute type 1 has an invalid length. [ 267.889968][ T157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.894020][T16615] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5139'. [ 267.915033][ T157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.189770][ T50] Bluetooth: hci5: command tx timeout [ 268.419059][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5155'. [ 268.599587][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5162'. [ 268.676975][T16669] sctp: [Deprecated]: syz.2.5165 (pid 16669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.676975][T16669] Use struct sctp_sack_info instead [ 268.995036][T16691] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 269.824374][T16752] openvswitch: netlink: IPv4 tunnel dst address is zero [ 269.982918][T16760] C: renamed from lo (while UP) [ 270.023055][T16760] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 270.027188][ T5715] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.054302][ T5715] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.067161][T16762] : renamed from vlan1 (while UP) [ 270.067418][ T5715] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.081579][ T5715] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.091944][ T5715] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.269106][ T50] Bluetooth: hci5: command tx timeout [ 270.480443][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5224'. [ 270.762623][T16812] netlink: 'syz.4.5231': attribute type 8 has an invalid length. [ 271.308354][T16848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5245'. [ 271.521933][T16763] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.529589][T16763] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.536800][T16763] bridge_slave_0: entered allmulticast mode [ 271.545400][T16763] bridge_slave_0: entered promiscuous mode [ 271.555997][T16763] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.563380][T16763] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.572412][T16763] bridge_slave_1: entered allmulticast mode [ 271.581194][T16763] bridge_slave_1: entered promiscuous mode [ 271.695116][T16763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.737583][T16763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.844236][T16763] team0: Port device team_slave_0 added [ 271.868130][T16763] team0: Port device team_slave_1 added [ 271.994217][T16763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.010145][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.065806][T16763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.090663][T16763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.106247][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.135187][T16763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.189991][ T50] Bluetooth: hci6: command tx timeout [ 272.239731][T16763] hsr_slave_0: entered promiscuous mode [ 272.246362][T16763] hsr_slave_1: entered promiscuous mode [ 272.253478][T16763] debugfs: 'hsr0' already exists in 'hsr' [ 272.259286][T16763] Cannot create hsr debugfs directory [ 272.869462][T16921] netlink: 'syz.3.5282': attribute type 21 has an invalid length. [ 272.914587][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5284'. [ 272.926333][T16921] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5282'. [ 273.004693][T16763] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 273.026958][T16763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.040918][T16763] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 273.067814][T16763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.098679][T16763] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 273.142569][T16763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.168521][T16763] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 273.196590][T16763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.293994][T16949] openvswitch: netlink: Multiple metadata blocks provided [ 273.442697][T16763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.492187][T16963] xt_TPROXY: Can be used only with -p tcp or -p udp [ 273.500271][T16763] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.532476][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.539657][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.596632][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.603816][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.833609][T16982] netlink: 'syz.3.5310': attribute type 1 has an invalid length. [ 273.866895][T16982] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5310'. [ 273.891883][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5309'. [ 274.001540][T16993] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5312'. [ 274.273035][ T50] Bluetooth: hci6: command tx timeout [ 274.536726][T16763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.611773][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5328'. [ 275.128298][T17063] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 275.142172][T17063] bond1 (unregistering): Released all slaves [ 275.145904][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5345'. [ 275.157486][T17071] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5345'. [ 275.241635][T17069] bond3 (unregistering): Released all slaves [ 275.306262][T16763] veth0_vlan: entered promiscuous mode [ 275.331980][T16763] veth1_vlan: entered promiscuous mode [ 275.406609][T16763] veth0_macvtap: entered promiscuous mode [ 275.450815][T16763] veth1_macvtap: entered promiscuous mode [ 275.494585][T16763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.517610][T16763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.609392][ T1174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.633814][ T1174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.659564][ T1174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.679824][ T1156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.762131][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.784015][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.828219][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.837386][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.073667][T17108] __nla_validate_parse: 1 callbacks suppressed [ 276.073683][T17108] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5206'. [ 276.305796][T17116] gre1: entered promiscuous mode [ 276.348922][ T50] Bluetooth: hci6: command tx timeout [ 276.575572][T17136] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 276.631277][T17140] xt_policy: output policy not valid in PREROUTING and INPUT [ 277.133568][T17171] netlink: 'syz.6.5393': attribute type 11 has an invalid length. [ 277.608603][T17206] netlink: 'syz.6.5408': attribute type 11 has an invalid length. [ 277.619309][T17206] netlink: 'syz.6.5408': attribute type 4 has an invalid length. [ 277.627260][T17206] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5408'. [ 278.429261][ T50] Bluetooth: hci6: command tx timeout [ 278.740637][T17269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.851180][T17279] IPv6: sit1: Disabled Multicast RS [ 279.719687][T17335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.007347][T17348] openvswitch: netlink: Key type 31 is not supported [ 280.077961][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5469'. [ 280.334922][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5474'. [ 280.359069][T17366] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 281.451969][T17435] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 281.660950][T17450] ksmbd: Unknown IPC event: 1, ignore. [ 281.691760][T17455] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5521'. [ 281.701523][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5521'. [ 282.052805][T17479] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 282.620637][T17522] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5552'. [ 283.691536][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5588'. [ 284.015586][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.119774][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5605'. [ 284.319897][ T24] IPVS: starting estimator thread 0... [ 284.362836][T17647] netlink: 'syz.6.5613': attribute type 2 has an invalid length. [ 284.409509][T17645] IPVS: using max 31 ests per chain, 74400 per kthread [ 284.503295][T17657] netlink: 'syz.2.5618': attribute type 29 has an invalid length. [ 284.568387][T17662] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5620'. [ 285.031582][T17690] netlink: 'syz.4.5633': attribute type 10 has an invalid length. [ 285.046612][T17690] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.061941][T17690] bond0: (slave team0): Enslaving as an active interface with an up link [ 285.241431][T17698] ip_tables: iptables: counters copy to user failed while replacing table [ 285.251819][T17698] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x1 [ 285.429318][T17711] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5643'. [ 285.753548][T17735] Bluetooth: MGMT ver 1.23 [ 285.916290][T17745] netlink: 'syz.5.5660': attribute type 3 has an invalid length. [ 286.097508][T17753] netlink: 'syz.5.5664': attribute type 1 has an invalid length. [ 286.127787][T17753] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5664'. [ 286.144882][T17753] netlink: 'syz.5.5664': attribute type 1 has an invalid length. [ 286.551061][T17780] netlink: 'syz.5.5674': attribute type 25 has an invalid length. [ 286.937936][T17803] ip_tables: iptables: counters copy to user failed while replacing table [ 287.121624][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5689'. [ 287.131136][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5689'. [ 287.266391][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5694'. [ 287.309476][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5694'. [ 287.479278][T17843] openvswitch: netlink: Missing key (keys=40, expected=100) [ 287.696762][T17862] netlink: 'syz.4.5712': attribute type 4 has an invalid length. [ 287.705358][T17862] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5712'. [ 287.756590][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 287.796530][T17867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5709'. [ 288.098631][T17885] netlink: 'syz.5.5723': attribute type 13 has an invalid length. [ 288.116288][T17885] veth1_macvtap: left promiscuous mode [ 288.158863][T17885] macsec0: entered allmulticast mode [ 288.297446][T17893] netlink: 'syz.6.5727': attribute type 25 has an invalid length. [ 288.656671][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5735'. [ 288.678701][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5735'. [ 288.894034][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5744'. [ 288.960795][T17934] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 289.569730][T17986] tipc: Enabling of bearer rejected, failed to enable media [ 290.017030][T18021] IPVS: ip_vs_edit_dest(): server weight less than zero [ 290.024297][ T5810] IPVS: starting estimator thread 0... [ 290.121419][T18023] IPVS: using max 28 ests per chain, 67200 per kthread [ 290.739238][ T5715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 290.751838][ T5715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 290.763265][ T5715] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 290.775873][ T5715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 290.783643][ T5715] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 291.270523][T18109] IPVS: length: 8 != 1152 [ 291.701936][T18133] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 292.141559][T18074] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.165488][T18074] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.187538][T18074] bridge_slave_0: entered allmulticast mode [ 292.215285][T18074] bridge_slave_0: entered promiscuous mode [ 292.230166][T18161] netlink: 'syz.6.5845': attribute type 1 has an invalid length. [ 292.264438][T18074] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.292212][T18074] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.306237][T18074] bridge_slave_1: entered allmulticast mode [ 292.315760][T18074] bridge_slave_1: entered promiscuous mode [ 292.320160][T18168] __nla_validate_parse: 10 callbacks suppressed [ 292.320174][T18168] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5846'. [ 292.365990][T18074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.399613][T18074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.452959][T18173] netlink: 'syz.5.5850': attribute type 3 has an invalid length. [ 292.467078][T18074] team0: Port device team_slave_0 added [ 292.481503][T18074] team0: Port device team_slave_1 added [ 292.494183][T18177] netlink: NAT attribute has 4 unknown bytes [ 292.507521][T18177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.538031][T18074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.549410][T18074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.594101][T18074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.613860][T18074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.629282][T18074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.678153][T18074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.773911][T18187] macsec1: entered promiscuous mode [ 292.831122][ T5715] Bluetooth: hci7: command tx timeout [ 292.902208][T18074] hsr_slave_0: entered promiscuous mode [ 292.921635][T18074] hsr_slave_1: entered promiscuous mode [ 292.948992][T18074] debugfs: 'hsr0' already exists in 'hsr' [ 292.966473][T18074] Cannot create hsr debugfs directory [ 293.156632][T18195] nbd: must specify an index to disconnect [ 293.301883][T18200] netlink: 199784 bytes leftover after parsing attributes in process `syz.6.5863'. [ 293.320134][T18200] netlink: 'syz.6.5863': attribute type 1 has an invalid length. [ 293.471512][T18074] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 293.494939][T18074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.511175][T18074] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 293.534322][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5869'. [ 293.555508][T18074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.577504][T18074] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 293.611580][T18074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.626903][T18074] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 293.645330][T18074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.776279][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5876'. [ 293.815497][T18074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.866260][T18074] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.910374][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.917598][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.959534][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.966752][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.258206][T18267] netlink: 272 bytes leftover after parsing attributes in process `syz.5.5885'. [ 294.262018][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5887'. [ 294.901195][T18074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.909287][ T5715] Bluetooth: hci7: command tx timeout [ 294.983447][T18311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.421357][T18074] veth0_vlan: entered promiscuous mode [ 295.454997][T18074] veth1_vlan: entered promiscuous mode [ 295.529940][T18074] veth0_macvtap: entered promiscuous mode [ 295.553919][T18074] veth1_macvtap: entered promiscuous mode [ 295.573051][T18350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5919'. [ 295.584380][T18350] Zero length message leads to an empty skb [ 295.627745][T18074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.673127][T18074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.709968][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.735427][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.738453][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5923'. [ 295.767035][T18357] wg1 speed is unknown, defaulting to 1000 [ 295.780760][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5923'. [ 295.800368][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5923'. [ 295.811976][ T1156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.853988][T18357] wg1 speed is unknown, defaulting to 1000 [ 295.861616][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.876204][T18357] wg1 speed is unknown, defaulting to 1000 [ 295.900087][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.923805][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.017636][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.041252][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.390841][ T5818] wg1 speed is unknown, defaulting to 1000 [ 296.404724][T18357] infiniband syz2: set active [ 296.414116][T18357] infiniband syz2: added wg1 [ 296.439500][T18357] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 296.458395][T18357] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 296.476109][T18357] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 296.538110][T18357] RDS/IB: syz2: added [ 296.547020][T18357] smc: adding ib device syz2 with port count 1 [ 296.558113][T18357] smc: ib device syz2 port 1 has no pnetid [ 296.567581][ T24] wg1 speed is unknown, defaulting to 1000 [ 296.580339][T18357] wg1 speed is unknown, defaulting to 1000 [ 296.880922][T18357] wg1 speed is unknown, defaulting to 1000 [ 296.990016][ T50] Bluetooth: hci7: command tx timeout [ 297.328275][T18357] wg1 speed is unknown, defaulting to 1000 [ 297.422772][T18422] ip_tables: iptables: counters copy to user failed while replacing table [ 297.452128][T18426] ip_tables: iptables: counters copy to user failed while replacing table [ 297.638423][T18434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.945479][T18452] __nla_validate_parse: 39 callbacks suppressed [ 297.945496][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5966'. [ 298.000169][T18452] netlink: 'syz.4.5966': attribute type 5 has an invalid length. [ 298.008247][T18357] wg1 speed is unknown, defaulting to 1000 [ 298.022583][T18452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5966'. [ 298.039653][ T5715] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 298.216230][T18457] syz.7.5968 (18457) used greatest stack depth: 18280 bytes left [ 298.767741][T18357] wg1 speed is unknown, defaulting to 1000 [ 298.928616][T18502] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5990'. [ 299.069922][ T5715] Bluetooth: hci7: command tx timeout [ 299.268294][T18357] wg1 speed is unknown, defaulting to 1000 [ 299.902426][T18357] wg1 speed is unknown, defaulting to 1000 [ 299.983797][T18541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6007'. [ 300.105964][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6010'. [ 300.164381][T18547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6010'. [ 300.363893][T18561] netlink: 'syz.4.6017': attribute type 32 has an invalid length. [ 300.417977][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6017'. [ 300.481827][T18561] bond3: option coupled_control: invalid value (192) [ 300.506615][T18561] bond3 (unregistering): Released all slaves [ 300.522854][T18573] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 300.540484][T18357] wg1 speed is unknown, defaulting to 1000 [ 300.648626][T18577] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6024'. [ 300.698520][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.732060][ T5810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.751378][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.842267][T18585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.913543][T18589] tipc: MTU too low for tipc bearer [ 301.009253][T18593] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 301.062699][T18595] netlink: 'syz.2.6033': attribute type 2 has an invalid length. [ 301.149228][ T5715] Bluetooth: hci7: command tx timeout [ 301.284290][ T5810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.324027][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.386147][T18616] SET target dimension over the limit! [ 301.501873][T18624] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 301.945725][T18658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6060'. [ 301.978903][T18658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6060'. [ 302.130468][T18666] tipc: Enabling of bearer rejected, failed to enable media [ 302.796075][T18716] rdma_op ffff888034ebe9f0 conn xmit_rdma 0000000000000000 [ 302.913503][T18722] netlink: 'syz.4.6086': attribute type 7 has an invalid length. [ 304.336581][T18816] tipc: Enabling of bearer rejected, media not registered [ 304.582068][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6131'. [ 304.604484][T18834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6131'. [ 304.883163][T18854] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6140'. [ 305.231470][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.263802][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6151'. [ 305.402450][ T1093] tipc: Subscription rejected, illegal request [ 305.493640][T18892] raw_sendmsg: syz.7.6159 forgot to set AF_INET. Fix it! [ 305.717886][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 305.725822][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 305.733778][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 305.741680][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 305.749561][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 305.757414][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 305.765327][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 305.773240][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 305.781146][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 305.789033][T18905] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 306.072776][T18927] netlink: 'syz.2.6177': attribute type 1 has an invalid length. [ 306.113888][T18927] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6177'. [ 306.291186][T18942] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6182'. [ 306.877207][T18984] netlink: 'syz.5.6204': attribute type 11 has an invalid length. [ 307.008455][T18994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6208'. [ 307.055039][T18994] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6208'. [ 307.066352][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6208'. [ 307.194704][T19004] bridge0: port 3(ipvlan2) entered blocking state [ 307.211713][T19004] bridge0: port 3(ipvlan2) entered disabled state [ 307.228732][T19004] ipvlan2: entered allmulticast mode [ 307.242146][T19004] bridge0: entered allmulticast mode [ 307.264176][T19004] ipvlan2: left allmulticast mode [ 307.271479][T19004] bridge0: left allmulticast mode [ 307.628583][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6229'. [ 307.855081][T19046] xt_HMARK: proto mask must be zero with L3 mode [ 307.884373][T19049] Bluetooth: MGMT ver 1.23 [ 308.903529][T19107] vlan1: entered allmulticast mode [ 308.916975][T19107] bond0: entered allmulticast mode [ 308.922686][T19107] : entered allmulticast mode [ 308.928114][T19107] bond_slave_1: entered allmulticast mode [ 309.147304][T19120] netlink: 'syz.5.6270': attribute type 142 has an invalid length. [ 309.770163][T19164] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 310.398413][T19209] __nla_validate_parse: 5 callbacks suppressed [ 310.398430][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6312'. [ 310.464325][T19214] Bluetooth: MGMT ver 1.23 [ 311.215926][T19267] macvlan0: entered promiscuous mode [ 311.872431][T19315] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 312.315066][T19345] vlan2: entered promiscuous mode [ 312.333827][T19349] netlink: 'syz.7.6382': attribute type 2 has an invalid length. [ 312.334225][T19345] geneve1: entered promiscuous mode [ 312.353462][T19345] vlan2: entered allmulticast mode [ 312.358998][T19345] geneve1: entered allmulticast mode [ 312.372171][T19350] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6380'. [ 312.688650][T19373] IPVS: Error connecting to the multicast addr [ 312.821670][T19383] team0: Device is already in use. [ 312.968666][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6403'. [ 313.503573][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6422'. [ 313.547373][T19437] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6424'. [ 313.594220][T19439] net_ratelimit: 46 callbacks suppressed [ 313.594236][T19439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.709929][T19446] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 313.788917][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.966928][T19463] netlink: 'syz.4.6433': attribute type 62 has an invalid length. [ 314.023540][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6440'. [ 314.697781][T19514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6461'. [ 314.711580][ T5896] IPVS: starting estimator thread 0... [ 314.803791][T19521] netlink: 'syz.6.6464': attribute type 9 has an invalid length. [ 314.819455][T19517] IPVS: using max 31 ests per chain, 74400 per kthread [ 314.833502][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6464'. [ 315.053975][T19536] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6472'. [ 315.436320][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6487'. [ 315.446066][T19568] netlink: 'syz.5.6487': attribute type 3 has an invalid length. [ 315.681149][T19586] netlink: 'syz.6.6496': attribute type 2 has an invalid length. [ 315.805426][T19594] netlink: 'syz.5.6500': attribute type 3 has an invalid length. [ 315.818437][T19594] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6500'. [ 316.057029][T19612] tipc: Started in network mode [ 316.081755][T19612] tipc: Node identity , cluster identity 4711 [ 316.091382][T19612] tipc: Failed to set node id, please configure manually [ 316.113525][T19612] tipc: Enabling of bearer rejected, failed to enable media [ 316.234251][T19620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6512'. [ 316.238949][T19623] nftables ruleset with unbound set [ 316.648017][T19650] sctp: [Deprecated]: syz.7.6527 (pid 19650) Use of int in max_burst socket option deprecated. [ 316.648017][T19650] Use struct sctp_assoc_value instead [ 316.974938][T19676] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.994506][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.110124][T19684] geneve2: entered promiscuous mode [ 318.427851][T19766] nbd: must specify a device to reconfigure [ 318.479623][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6579'. [ 318.525744][T19769] bond2: Invalid ad_actor_system MAC address. [ 318.532014][T19769] bond2: option ad_actor_system: invalid value (1) [ 318.547328][T19769] bond2 (unregistering): Released all slaves [ 319.003188][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6596'. [ 319.146786][T19817] netlink: 'syz.7.6603': attribute type 1 has an invalid length. [ 319.156406][T19817] netlink: 'syz.7.6603': attribute type 3 has an invalid length. [ 319.165680][T19817] netlink: 172 bytes leftover after parsing attributes in process `syz.7.6603'. [ 319.175195][T19817] NCSI netlink: No device for ifindex 813332851 [ 319.342088][T19826] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 320.048268][T19883] netlink: 'syz.2.6634': attribute type 4 has an invalid length. [ 320.087129][T19883] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6634'. [ 320.121838][T19889] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 320.307956][T19895] wg1 speed is unknown, defaulting to 1000 [ 320.357414][T19902] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 320.472993][T19910] xt_hashlimit: size too large, truncated to 1048576 [ 320.963759][T19936] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6659'. [ 321.005634][T19936] netlink: 35 bytes leftover after parsing attributes in process `syz.5.6659'. [ 321.035718][T19936] netlink: 'syz.5.6659': attribute type 5 has an invalid length. [ 321.055554][T19936] netlink: 'syz.5.6659': attribute type 6 has an invalid length. [ 321.065881][T19940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.070875][T19936] netlink: 35 bytes leftover after parsing attributes in process `syz.5.6659'. [ 321.356437][T19948] smc: net device team0 applied user defined pnetid SYZ2 [ 321.485682][T19961] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6671'. [ 321.777272][T19975] ip_tables: iptables: counters copy to user failed while replacing table [ 322.073386][T19994] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6687'. [ 322.104276][T19994] bridge: RTM_NEWNEIGH with invalid ether address [ 322.375531][T20015] netlink: 'syz.5.6696': attribute type 2 has an invalid length. [ 322.502143][T20015] : entered promiscuous mode [ 322.592460][T20022] xt_CT: No such helper "snmp" [ 322.672816][T20024] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6702'. [ 322.720142][T20024] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6702'. [ 322.726443][T20037] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6708'. [ 322.888681][T20046] nbd: must specify at least one socket [ 322.893582][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6712'. [ 322.937139][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6712'. [ 322.949007][T20047] netlink: 'syz.6.6712': attribute type 14 has an invalid length. [ 322.983123][T20047] netlink: 'syz.6.6712': attribute type 13 has an invalid length. [ 323.940379][T20123] netlink: 'syz.7.6750': attribute type 1 has an invalid length. [ 323.961648][T20125] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 324.915054][T20192] vcan1: entered promiscuous mode [ 324.940486][T20192] vcan1: entered allmulticast mode [ 325.196138][T20213] team0: Port device vlan0 added [ 325.385195][T20223] team0: Device veth1_macvtap failed to register rx_handler [ 325.887077][T20257] sock: sock_set_timeout: `syz.4.6815' (pid 20257) tries to set negative timeout [ 326.037450][T20270] netlink: 'syz.5.6821': attribute type 11 has an invalid length. [ 326.221028][T20284] xt_l2tp: missing protocol rule (udp|l2tpip) [ 326.227838][T20285] netlink: 'syz.4.6828': attribute type 1 has an invalid length. [ 326.753811][T20324] __nla_validate_parse: 5 callbacks suppressed [ 326.753830][T20324] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6844'. [ 326.859858][T20330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.867155][T20330] IPv6: NLM_F_CREATE should be set when creating new route [ 326.874446][T20330] IPv6: NLM_F_CREATE should be set when creating new route [ 326.880755][T20332] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6849'. [ 326.882759][T20330] IPv6: NLM_F_CREATE should be set when creating new route [ 326.891769][T20332] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6849'. [ 326.913163][T20330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.928687][T20332] netlink: 'syz.2.6849': attribute type 6 has an invalid length. [ 326.942187][T20332] netlink: 'syz.2.6849': attribute type 5 has an invalid length. [ 326.961625][T20332] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6849'. [ 328.121297][T20386] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6874'. [ 328.568388][T20419] xt_hashlimit: size too large, truncated to 1048576 [ 328.579362][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6892'. [ 329.201827][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6912'. [ 329.308424][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6915'. [ 329.328356][T20473] netlink: 'syz.4.6917': attribute type 1 has an invalid length. [ 329.352939][T20473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6917'. [ 329.919829][T20522] netlink: 'syz.5.6939': attribute type 1 has an invalid length. [ 329.927675][T20522] netlink: 'syz.5.6939': attribute type 2 has an invalid length. [ 330.065256][T20532] smc: net device lo applied user defined pnetid SYZ0 [ 330.085870][T20532] smc: smcd device lo applied user defined pnetid SYZ0 [ 330.285982][T20549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6953'. [ 330.556568][T20568] netlink: 'syz.4.6963': attribute type 4 has an invalid length. [ 330.910527][T20594] netlink: 'syz.2.6977': attribute type 5 has an invalid length. [ 331.708927][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.805759][T20656] gretap0: entered promiscuous mode [ 331.821655][T20659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 331.832167][T20656] vlan2: entered promiscuous mode [ 332.427175][T20699] netlink: 'syz.7.7024': attribute type 1 has an invalid length. [ 334.284303][T20830] __nla_validate_parse: 8 callbacks suppressed [ 334.284319][T20830] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7080'. [ 334.453222][T20837] block nbd0: not configured, cannot reconfigure [ 335.341600][T20907] netlink: 'syz.7.7117': attribute type 2 has an invalid length. [ 335.378384][T20907] : entered promiscuous mode [ 335.788433][T20941] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 335.809558][T20941] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 335.870891][T20941] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 335.920455][T20941] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 336.152109][T20964] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 336.907092][T21019] netlink: 'syz.7.7171': attribute type 18 has an invalid length. [ 336.965821][T21023] Bluetooth: hci0: unsupported parameter 5134 [ 337.008833][T21023] Bluetooth: hci0: unsupported parameter 8192 [ 337.008941][ T1156] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.024040][T21023] Bluetooth: hci0: unsupported parameter 5134 [ 337.047392][ T1156] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.056331][T21023] Bluetooth: hci0: unsupported parameter 8192 [ 337.068015][ T1156] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.100649][ T1156] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.237660][T21039] nbd: socks must be embedded in a SOCK_ITEM attr [ 337.296914][T21045] atomic_op ffff88807f007998 conn xmit_atomic 0000000000000000 [ 337.376173][T21050] netlink: 'syz.7.7187': attribute type 1 has an invalid length. [ 337.403801][T21050] netlink: 240 bytes leftover after parsing attributes in process `syz.7.7187'. [ 337.431920][T21050] netlink: 'syz.7.7187': attribute type 1 has an invalid length. [ 337.557216][T21062] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7192'. [ 337.732753][T21075] netlink: 'syz.5.7199': attribute type 1 has an invalid length. [ 337.741204][T21078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.987283][T21096] netlink: 'syz.2.7208': attribute type 46 has an invalid length. [ 338.540707][T21137] netlink: 'syz.6.7228': attribute type 29 has an invalid length. [ 338.580517][T21137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7228'. [ 338.615113][T21137] netlink: 'syz.6.7228': attribute type 29 has an invalid length. [ 338.636259][T21137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7228'. [ 339.174636][T21179] vlan3: entered allmulticast mode [ 339.196768][T21179] bond0: entered allmulticast mode [ 339.207804][T21179] bond_slave_0: entered allmulticast mode [ 339.215496][T21179] bond_slave_1: entered allmulticast mode [ 339.297887][T21191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.380525][T21198] IPVS: Error connecting to the multicast addr [ 340.317331][T21262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.523234][T21278] tipc: Started in network mode [ 340.546378][T21278] tipc: Node identity e0000001, cluster identity 4711 [ 340.569803][T21278] tipc: Enabling of bearer rejected, failed to enable media [ 340.769203][T21295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.278268][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7321'. [ 341.283759][T21333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.452757][T21420] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7365'. [ 342.483737][T21419] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 342.995810][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7385'. [ 343.703089][T21512] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7410'. [ 343.918072][T21526] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7417'. [ 344.017069][T21533] netlink: 'syz.5.7421': attribute type 3 has an invalid length. [ 344.217815][T21546] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7427'. [ 344.401460][T21556] xt_l2tp: invalid flags combination: 0 [ 344.606594][T21572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7440'. [ 344.860355][T21590] tipc: Enabling of bearer rejected, media not registered [ 344.948909][T21598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7453'. [ 345.082361][T21606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7457'. [ 345.336291][T21619] lo: entered allmulticast mode [ 345.349641][T21619] lo: left allmulticast mode [ 345.810784][T21649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7478'. [ 345.917067][T21655] netlink: 'syz.5.7481': attribute type 1 has an invalid length. [ 345.925406][T21655] netlink: 'syz.5.7481': attribute type 1 has an invalid length. [ 346.066139][T21665] netlink: 'syz.6.7487': attribute type 1 has an invalid length. [ 346.074377][T21665] netlink: 'syz.6.7487': attribute type 3 has an invalid length. [ 346.083250][T21665] NCSI netlink: No device for ifindex 813332851 [ 346.121286][ T30] audit: type=1107 audit(1787039625.156:2): pid=21669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 346.489211][T21694] __nla_validate_parse: 4 callbacks suppressed [ 346.489229][T21694] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7500'. [ 346.927583][T21728] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7518'. [ 347.036858][T21735] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7521'. [ 347.153629][T21742] netlink: 'syz.2.7524': attribute type 1 has an invalid length. [ 347.325423][T21750] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 347.330883][T21752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7529'. [ 347.504161][T21765] sctp: [Deprecated]: syz.4.7535 (pid 21765) Use of int in maxseg socket option. [ 347.504161][T21765] Use struct sctp_assoc_value instead [ 347.575293][T21770] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7537'. [ 347.630210][T21776] ip6erspan1: entered allmulticast mode [ 347.636055][T21775] netlink: 'syz.4.7541': attribute type 12 has an invalid length. [ 347.661599][T21775] netlink: 'syz.4.7541': attribute type 29 has an invalid length. [ 347.670320][T21775] netlink: 'syz.4.7541': attribute type 2 has an invalid length. [ 347.683692][T21775] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7541'. [ 347.782313][T21783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7545'. [ 347.924566][T21793] netlink: 'syz.4.7550': attribute type 49 has an invalid length. [ 348.177148][T21812] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 349.074684][T21867] netlink: 'syz.5.7584': attribute type 33 has an invalid length. [ 349.193569][T21876] netlink: 'syz.4.7589': attribute type 58 has an invalid length. [ 349.202838][T21876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7589'. [ 349.588923][T21904] openvswitch: netlink: Unknown key attributes 20 [ 349.733477][T21915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.894133][T21926] gretap0: entered promiscuous mode [ 349.902133][T21926] vlan2: entered promiscuous mode [ 350.159003][T21943] tipc: Enabling of bearer rejected, failed to enable media [ 350.547485][T21972] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7634'. [ 350.577941][T21972] netlink: 'syz.4.7634': attribute type 9 has an invalid length. [ 350.772268][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7641'. [ 350.809195][T21992] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 350.836653][T21992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.336148][T22027] tipc: Invalid UDP bearer configuration [ 351.336198][T22027] tipc: Enabling of bearer rejected, failed to enable media [ 352.417597][T22102] openvswitch: netlink: Message has 5 unknown bytes. [ 352.514488][T22111] tipc: Started in network mode [ 352.530889][T22111] tipc: Node identity ac141441, cluster identity 4711 [ 352.575249][T22111] tipc: Enabled bearer , priority 10 [ 353.182740][T22154] netlink: 'syz.5.7723': attribute type 1 has an invalid length. [ 353.209918][T22154] __nla_validate_parse: 2 callbacks suppressed [ 353.209934][T22154] netlink: 220 bytes leftover after parsing attributes in process `syz.5.7723'. [ 353.290231][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7726'. [ 353.308360][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7726'. [ 353.343925][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7726'. [ 353.373757][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7726'. [ 353.403432][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7726'. [ 353.685352][ T5924] tipc: Node number set to 2886997057 [ 354.047628][T22210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7751'. [ 354.120818][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7754'. [ 354.146462][T22217] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7755'. [ 354.713299][T22254] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7773'. [ 355.303443][T22302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.497935][T22315] netlink: 'syz.2.7803': attribute type 1 has an invalid length. [ 355.519150][T22315] netlink: 'syz.2.7803': attribute type 1 has an invalid length. [ 356.662712][T22402] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 356.783342][T22409] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 357.124437][T22432] vlan2: entered allmulticast mode [ 357.130132][T22432] bond0: entered allmulticast mode [ 357.135425][T22432] bond_slave_0: entered allmulticast mode [ 357.141760][T22432] bond_slave_1: entered allmulticast mode [ 358.060446][T22492] pim6reg527: entered allmulticast mode [ 358.229026][T22506] netlink: 'syz.2.7895': attribute type 2 has an invalid length. [ 358.478320][T22525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 359.082234][T22568] tipc: Enabling of bearer rejected, failed to enable media [ 359.365444][T22588] __nla_validate_parse: 8 callbacks suppressed [ 359.365461][T22588] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7935'. [ 359.754664][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7950'. [ 360.003630][T22633] netlink: 248 bytes leftover after parsing attributes in process `syz.7.7958'. [ 360.014554][T22633] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7958'. [ 360.504852][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7973'. [ 360.651960][T22673] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 361.131862][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7995'. [ 361.525479][T22736] tipc: Started in network mode [ 361.532875][T22736] tipc: Node identity ac14142f, cluster identity 4711 [ 361.542019][T22736] tipc: New replicast peer: 0.0.0.0 [ 361.548178][T22736] tipc: Enabled bearer , priority 10 [ 361.635122][T22742] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8009'. [ 362.117401][T22723] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 362.137423][T22723] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 362.218537][T22781] netlink: 'syz.6.8029': attribute type 1 has an invalid length. [ 362.245049][T22781] netlink: 5120 bytes leftover after parsing attributes in process `syz.6.8029'. [ 362.274439][T22723] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 362.284737][T22723] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 362.446362][T22723] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 362.460063][T22723] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 362.674675][ T5897] tipc: Node number set to 2886997039 [ 363.297813][T22855] netlink: 'syz.7.8064': attribute type 11 has an invalid length. [ 363.308471][T22855] netlink: 4312 bytes leftover after parsing attributes in process `syz.7.8064'. [ 363.475464][T22869] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 363.802211][T22891] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 364.067675][T22910] ip_tables: iptables: counters copy to user failed while replacing table [ 364.205214][T22917] netlink: 'syz.6.8093': attribute type 3 has an invalid length. [ 364.242890][T22917] netlink: 'syz.6.8093': attribute type 1 has an invalid length. [ 364.269491][T22917] netlink: 204 bytes leftover after parsing attributes in process `syz.6.8093'. [ 364.499387][T22940] Bluetooth: hci0: unsupported parameter 5134 [ 364.520528][T22940] Bluetooth: hci0: unsupported parameter 8192 [ 364.534778][T22940] Bluetooth: hci0: unsupported parameter 5134 [ 364.552831][T22940] Bluetooth: hci0: unsupported parameter 8192 [ 364.618126][T22948] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 364.646103][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 365.145417][T22984] Bluetooth: hci0: unsupported parameter 5134 [ 365.165298][T22984] Bluetooth: hci0: unsupported parameter 8192 [ 365.176319][T22984] Bluetooth: hci0: unsupported parameter 5134 [ 365.185553][T22984] Bluetooth: hci0: unsupported parameter 8192 [ 365.435169][T23005] netlink: 'syz.4.8136': attribute type 3 has an invalid length. [ 365.455771][T23007] __nla_validate_parse: 1 callbacks suppressed [ 365.455788][T23007] netlink: 13 bytes leftover after parsing attributes in process `syz.7.8137'. [ 365.489092][T23010] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 365.597749][T23017] tipc: Failed to obtain node identity [ 365.609267][T23017] tipc: Enabling of bearer rejected, failed to enable media [ 366.088038][T23051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8159'. [ 366.502696][T23078] netlink: 'syz.4.8172': attribute type 10 has an invalid length. [ 366.584699][T23082] veth0_to_bond: entered allmulticast mode [ 366.939683][T23099] unsupported nla_type 256 [ 367.017589][T23104] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 367.086076][T23108] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8187'. [ 367.548967][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.604831][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8201'. [ 367.625707][T23137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8201'. [ 367.641329][T23137] netlink: 'syz.2.8201': attribute type 12 has an invalid length. [ 367.650381][T23137] netlink: 'syz.2.8201': attribute type 11 has an invalid length. [ 367.810409][T23151] netlink: 'syz.5.8209': attribute type 7 has an invalid length. [ 367.823941][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8209'. [ 367.856091][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8209'. [ 367.877131][T23157] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8211'. [ 369.465457][T23271] netlink: 'syz.4.8264': attribute type 1 has an invalid length. [ 369.542309][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8267'. [ 369.579175][T23282] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8268'. [ 369.595435][T23276] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 369.612201][T23276] bond1 (unregistering): Released all slaves [ 370.452922][T23338] netlink: 'syz.4.8297': attribute type 1 has an invalid length. [ 370.480496][T23338] __nla_validate_parse: 2 callbacks suppressed [ 370.480512][T23338] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8297'. [ 370.521625][T23338] netlink: 'syz.4.8297': attribute type 1 has an invalid length. [ 370.694967][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8301'. [ 370.879098][T23359] netlink: 'syz.6.8307': attribute type 178 has an invalid length. [ 371.041599][T23367] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 371.390574][T23391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8322'. [ 371.678006][T23405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.857247][T23413] xt_time: unknown flags 0xf4 [ 372.127773][ T24] IPVS: starting estimator thread 0... [ 372.219109][T23423] IPVS: using max 29 ests per chain, 69600 per kthread [ 372.369834][T23433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8341'. [ 372.391190][T23433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8341'. [ 372.676026][T23452] netlink: 170676 bytes leftover after parsing attributes in process `syz.5.8352'. [ 372.710642][T23452] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 372.735855][T23452] openvswitch: netlink: Message has 512 unknown bytes. [ 372.776567][T23458] netlink: 'syz.6.8355': attribute type 2 has an invalid length. [ 372.788599][T23458] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8355'. [ 372.915736][T23466] pim6reg: entered allmulticast mode [ 372.971154][T23466] pim6reg: left allmulticast mode [ 373.222758][T23487] netlink: 'syz.2.8369': attribute type 2 has an invalid length. [ 373.373189][T23500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8375'. [ 373.838455][T23527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8389'. [ 374.111848][T23542] netlink: 'syz.2.8396': attribute type 2 has an invalid length. [ 374.263295][T23551] netlink: zone id is out of range [ 374.282793][T23551] netlink: zone id is out of range [ 374.299692][T23551] netlink: zone id is out of range [ 374.318211][T23551] netlink: zone id is out of range [ 374.344113][T23551] netlink: zone id is out of range [ 374.356749][T23551] netlink: zone id is out of range [ 374.363033][T23551] netlink: zone id is out of range [ 374.514147][T23566] netlink: 'syz.6.8408': attribute type 3 has an invalid length. [ 374.523051][T23566] netlink: 'syz.6.8408': attribute type 1 has an invalid length. [ 374.540946][T23566] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8408'. [ 374.802453][T23582] veth5: entered allmulticast mode [ 375.887965][T23660] __nla_validate_parse: 1 callbacks suppressed [ 375.887982][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8455'. [ 375.904282][T23660] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8455'. [ 375.913779][T23660] netlink: 'syz.7.8455': attribute type 5 has an invalid length. [ 376.047835][T23669] tipc: Enabled bearer , priority 10 [ 376.175758][T23680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8465'. [ 376.198641][T23681] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8464'. [ 377.088373][T23740] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.162193][ T5896] tipc: Node number set to 3758096385 [ 378.087882][T23787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8516'. [ 378.125220][T23787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8516'. [ 378.316754][T23801] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 378.432814][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.546217][T23817] tipc: Enabling of bearer rejected, failed to enable media [ 378.600916][T23822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8532'. [ 378.818515][T23837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8541'. [ 378.860274][T23837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8541'. [ 378.946680][T23848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8544'. [ 379.538677][T23880] netlink: 'syz.2.8560': attribute type 23 has an invalid length. [ 380.159832][T23916] vlan2: entered promiscuous mode [ 380.179938][T23916] bridge0: entered promiscuous mode [ 380.349860][T23931] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.437834][T23934] netlink: 'syz.5.8586': attribute type 1 has an invalid length. [ 380.467285][T23934] netlink: 'syz.5.8586': attribute type 1 has an invalid length. [ 380.595238][T23948] net_ratelimit: 501 callbacks suppressed [ 380.595255][T23948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.136631][T23978] sit1: entered promiscuous mode [ 381.143187][T23978] sit1: entered allmulticast mode [ 381.522606][T24004] netlink: zone id is out of range [ 381.545794][T24004] netlink: zone id is out of range [ 381.562935][T24004] netlink: zone id is out of range [ 381.750834][T24023] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 381.992131][T24040] __nla_validate_parse: 2 callbacks suppressed [ 381.992148][T24040] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.8639'. [ 382.036034][T24040] netlink: 'syz.2.8639': attribute type 2 has an invalid length. [ 382.445233][T24065] netlink: 'syz.5.8650': attribute type 11 has an invalid length. [ 383.145054][T24110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.305623][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8678'. [ 383.315907][T24119] nbd: must specify a size in bytes for the device [ 383.612473][T24143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8689'. [ 383.923266][T24160] tipc: Started in network mode [ 383.935902][T24160] tipc: Node identity 1641fef24605, cluster identity 9 [ 383.968277][T24160] tipc: Enabled bearer , priority 11 [ 384.432769][T24192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8712'. [ 384.780311][T24212] syz.5.8720 (24212) used obsolete PPPIOCDETACH ioctl [ 385.073618][T24237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8730'. [ 385.085767][ T5897] tipc: Node number set to 1346698994 [ 386.550057][T24304] netlink: 'syz.6.8766': attribute type 3 has an invalid length. [ 387.696390][T24355] netlink: Invalid conntrack timeout [ 387.746327][T24355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.780598][T24357] lo: entered promiscuous mode [ 387.807479][T24357] lo: left promiscuous mode [ 388.556349][T24386] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 388.672484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.057015][T24408] openvswitch: netlink: Unknown nsh attribute 0 [ 390.312312][T24465] netlink: 'syz.5.8845': attribute type 83 has an invalid length. [ 390.494718][T24473] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8850'. [ 391.302943][T24516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8868'. [ 391.338813][T24516] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 392.773789][T24596] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 394.405666][T24662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.938584][T24690] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8954'. [ 394.991616][T24690] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8954'. [ 395.196351][T24697] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8958'. [ 396.150380][T24738] IPVS: ip_vs_add_dest(): server weight less than zero [ 396.363400][T24746] netlink: 'syz.4.8982': attribute type 2 has an invalid length. [ 396.790838][T24774] netlink: 'syz.2.8995': attribute type 29 has an invalid length. [ 396.837309][T24774] netlink: 'syz.2.8995': attribute type 29 has an invalid length. [ 396.862458][T24777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8996'. [ 397.216596][T24797] netlink: 'syz.5.9007': attribute type 1 has an invalid length. [ 397.888816][T24825] tipc: Enabling of bearer rejected, failed to enable media [ 398.451890][T24855] netlink: 332 bytes leftover after parsing attributes in process `syz.7.9034'. [ 398.636647][T24861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9037'. [ 399.673220][T24909] erspan0: entered promiscuous mode [ 399.905133][T24919] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9065'. [ 399.997688][T24925] tipc: New replicast peer: 127.0.0.2 [ 400.038142][T24925] tipc: Enabled bearer , priority 10 [ 400.376302][T24946] netlink: 'syz.4.9077': attribute type 33 has an invalid length. [ 400.503684][T24946] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 400.565415][T24946] bond4 (unregistering): Released all slaves [ 401.764383][T25008] xt_hashlimit: size too large, truncated to 1048576 [ 401.781573][T25009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9106'. [ 401.824272][T25009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9106'. [ 402.040185][T25020] netlink: 196 bytes leftover after parsing attributes in process `syz.2.9111'. [ 402.635571][T25024] team0: Port device vlan0 removed [ 403.740141][T25095] ip_tables: iptables: counters copy to user failed while replacing table [ 403.780439][T25097] erspan0: entered promiscuous mode [ 404.881558][T25149] openvswitch: netlink: Unknown key attributes 1 [ 405.094733][T25157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9174'. [ 405.275270][T25163] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9178'. [ 405.567067][T25177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9184'. [ 406.043445][T25201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9196'. [ 406.445490][T25221] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9204'. [ 406.455303][T25220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9205'. [ 406.485517][T25220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9205'. [ 406.916063][T25241] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9213'. [ 406.930788][T25242] vxcan0: tx address claim with dest, not broadcast [ 407.155976][T25254] netlink: 'syz.6.9220': attribute type 21 has an invalid length. [ 407.198484][T25254] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9220'. [ 407.238488][T25254] netlink: 'syz.6.9220': attribute type 4 has an invalid length. [ 407.271417][T25260] netlink: 'syz.6.9220': attribute type 21 has an invalid length. [ 407.285245][T25254] netlink: 'syz.6.9220': attribute type 5 has an invalid length. [ 407.295369][T25260] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9220'. [ 407.305250][T25254] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9220'. [ 407.324067][T25259] gtp0: entered promiscuous mode [ 407.331988][T25259] gtp0: entered allmulticast mode [ 407.352080][T25260] netlink: 'syz.6.9220': attribute type 4 has an invalid length. [ 407.376596][T25260] netlink: 'syz.6.9220': attribute type 5 has an invalid length. [ 407.396662][T25260] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9220'. [ 407.906841][T25283] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9235'. [ 407.952853][T25283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9235'. [ 408.553577][T25320] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 408.586866][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9255'. [ 409.982381][T25386] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9283'. [ 410.347548][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9293'. [ 410.439714][T25410] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 410.945235][T25434] openvswitch: netlink: IP tunnel TTL not specified. [ 410.974820][T25434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.432169][T25463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9317'. [ 412.353650][ T31] INFO: task syz.0.4800:15807 blocked for more than 143 seconds. [ 412.398390][ T31] Not tainted syzkaller #0 [ 412.420874][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.454879][ T31] task:syz.0.4800 state:D stack:27200 pid:15807 tgid:15806 ppid:5708 task_flags:0x400140 flags:0x00080002 [ 412.492425][ T31] Call Trace: [ 412.501811][ T31] [ 412.509260][ T31] __schedule+0x17d9/0x56c0 [ 412.516912][ T31] ? __lock_acquire+0x683/0x2cf0 [ 412.528912][ T31] ? __lock_acquire+0x683/0x2cf0 [ 412.540376][ T31] ? __pfx___schedule+0x10/0x10 [ 412.548581][T25511] __nla_validate_parse: 2 callbacks suppressed [ 412.548595][T25511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9341'. [ 412.565266][ T31] ? schedule+0x90/0x2b0 [ 412.570083][ T31] schedule+0x164/0x2b0 [ 412.574303][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.599706][T25511] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.610061][ T31] __mutex_lock+0x7bf/0x1550 [ 412.622556][ T31] ? __mutex_lock+0x5d4/0x1550 [ 412.627406][ T31] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 412.634118][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.639972][ T31] ? net_generic+0x1e/0x240 [ 412.644519][ T31] ? net_generic+0x1e/0x240 [ 412.650717][ T31] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 412.656583][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 412.663795][ T31] ? rcu_is_watching+0x15/0xb0 [ 412.668607][ T31] ? trace_kmalloc+0x2a/0xf0 [ 412.674738][ T31] ? __kmalloc_noprof+0x396/0x720 [ 412.693198][ T31] ? __nla_parse+0x40/0x60 [ 412.697656][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 412.705616][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 412.713848][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 412.722537][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 412.728657][ T31] ? bpf_lsm_capable+0x9/0x20 [ 412.735374][ T31] ? security_capable+0x7e/0x2c0 [ 412.741024][ T31] genl_rcv_msg+0x614/0x7a0 [ 412.745568][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.761713][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 412.768189][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.774336][ T31] ? __asan_memcpy+0x40/0x70 [ 412.780287][ T31] ? __skb_clone+0x5c/0x6c0 [ 412.784839][ T31] netlink_rcv_skb+0x226/0x4a0 [ 412.790324][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.795388][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.801661][ T31] ? down_read+0x2be/0x330 [ 412.806126][ T31] genl_rcv+0x28/0x40 [ 412.811742][ T31] netlink_unicast+0x7bb/0x940 [ 412.816554][ T31] netlink_sendmsg+0x813/0xb40 [ 412.823087][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.828414][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.835930][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.842857][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 412.847924][ T31] ____sys_sendmsg+0x54e/0x850 [ 412.853862][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.859890][ T31] ? import_iovec+0x73/0xa0 [ 412.864442][ T31] ___sys_sendmsg+0x2a5/0x360 [ 412.870777][ T31] ? __lock_acquire+0x683/0x2cf0 [ 412.875760][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.881770][ T31] ? futex_wait+0x2a2/0x390 [ 412.886339][ T31] ? __fget_files+0x2a/0x420 [ 412.892356][ T31] ? __fget_files+0x3a2/0x420 [ 412.897080][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 412.902766][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.908277][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.928109][ T31] do_syscall_64+0x174/0x580 [ 412.934354][ T31] ? trace_irq_disable+0x3b/0x140 [ 412.942396][ T31] ? clear_bhb_loop+0x70/0xc0 [ 412.947111][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.955017][ T31] RIP: 0033:0x7fd09879e0d9 [ 412.960214][ T31] RSP: 002b:00007fd0995b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.968659][ T31] RAX: ffffffffffffffda RBX: 00007fd098a25fa0 RCX: 00007fd09879e0d9 [ 412.977375][ T31] RDX: 0000000020040080 RSI: 0000200000000100 RDI: 0000000000000003 [ 412.987021][ T31] RBP: 00007fd098835024 R08: 0000000000000000 R09: 0000000000000000 [ 413.000078][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.008191][ T31] R13: 00007fd098a26038 R14: 00007fd098a25fa0 R15: 00007ffc8e9971a8 [ 413.016925][ T31] [ 413.020965][ T31] [ 413.020965][ T31] Showing all locks held in the system: [ 413.068037][ T31] 1 lock held by khungtaskd/31: [ 413.075556][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 413.086731][ T31] 2 locks held by getty/5368: [ 413.093009][ T31] #0: ffff8880358180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 413.103496][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 413.114606][ T31] 2 locks held by syz.1.4532/15258: [ 413.120069][ T31] #0: ffffffff90098ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 413.128304][ T31] #1: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 413.140754][ T31] 2 locks held by syz.0.4800/15807: [ 413.145976][ T31] #0: ffffffff90098ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 413.154892][ T31] #1: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 413.168254][ T31] 2 locks held by syz.3.5350/17083: [ 413.176989][ T31] #0: ffffffff90098ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 413.185894][ T31] #1: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 413.197437][ T31] [ 413.203779][ T31] ============================================= [ 413.203779][ T31] [ 413.213260][ T31] NMI backtrace for cpu 1 [ 413.213281][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 413.213307][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.213316][ T31] Call Trace: [ 413.213323][ T31] [ 413.213333][ T31] dump_stack_lvl+0xe8/0x150 [ 413.213360][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 413.213383][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 413.213411][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 413.213437][ T31] sys_info+0x135/0x170 [ 413.213461][ T31] watchdog+0xfd7/0x1030 [ 413.213486][ T31] ? watchdog+0x1c7/0x1030 [ 413.213513][ T31] kthread+0x388/0x470 [ 413.213534][ T31] ? __pfx_watchdog+0x10/0x10 [ 413.213550][ T31] ? __pfx_kthread+0x10/0x10 [ 413.213574][ T31] ret_from_fork+0x514/0xb70 [ 413.213597][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 413.213621][ T31] ? __switch_to+0xc89/0x1420 [ 413.213643][ T31] ? __pfx_kthread+0x10/0x10 [ 413.213665][ T31] ret_from_fork_asm+0x1a/0x30 [ 413.213705][ T31] [ 413.213711][ T31] Sending NMI from CPU 1 to CPUs 0: [ 413.330887][ C0] NMI backtrace for cpu 0 [ 413.330903][ C0] CPU: 0 UID: 0 PID: 1174 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 413.330922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.330932][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 413.330958][ C0] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 413.330983][ C0] Code: 89 df 48 c7 c6 e4 3d 4b 8e e8 87 93 f3 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d [ 413.330997][ C0] RSP: 0018:ffffc90005397a68 EFLAGS: 00000246 [ 413.331011][ C0] RAX: ffffffff8999036c RBX: 0000000000000000 RCX: ffffffff89990384 [ 413.331022][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90578f30 [ 413.331032][ C0] RBP: 0000000000000001 R08: ffff888053534ae7 R09: 1ffff1100a6a695c [ 413.331043][ C0] R10: dffffc0000000000 R11: ffffed100a6a695d R12: ffff888029210a18 [ 413.331055][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 413.331067][ C0] FS: 0000000000000000(0000) GS:ffff888124f49000(0000) knlGS:0000000000000000 [ 413.331080][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.331091][ C0] CR2: 00007f17e95f14b8 CR3: 00000000299e6000 CR4: 00000000003526f0 [ 413.331105][ C0] Call Trace: [ 413.331111][ C0] [ 413.331118][ C0] trace_consume_skb+0x54/0x1f0 [ 413.331138][ C0] consume_skb+0x59/0xb0 [ 413.331154][ C0] batadv_forw_packet_free+0x65/0x1f0 [ 413.331174][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 413.331191][ C0] process_scheduled_works+0xa8e/0x14e0 [ 413.331222][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 413.331242][ C0] ? assign_work+0x3cf/0x5d0 [ 413.331261][ C0] worker_thread+0xa47/0xfb0 [ 413.331284][ C0] ? __kthread_parkme+0x71/0x1f0 [ 413.331308][ C0] kthread+0x388/0x470 [ 413.331329][ C0] ? __pfx_worker_thread+0x10/0x10 [ 413.331345][ C0] ? __pfx_kthread+0x10/0x10 [ 413.331366][ C0] ret_from_fork+0x514/0xb70 [ 413.331389][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 413.331409][ C0] ? __switch_to+0xc89/0x1420 [ 413.331433][ C0] ? __pfx_kthread+0x10/0x10 [ 413.331454][ C0] ret_from_fork_asm+0x1a/0x30 [ 413.331485][ C0] [ 413.564641][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 413.571509][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 413.580618][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.590672][ T31] Call Trace: [ 413.593950][ T31] [ 413.596882][ T31] vpanic+0x56c/0xa60 [ 413.600877][ T31] ? __pfx_vpanic+0x10/0x10 [ 413.605387][ T31] ? irqentry_exit+0x218/0x8f0 [ 413.610158][ T31] panic+0xc5/0xd0 [ 413.613884][ T31] ? __pfx_panic+0x10/0x10 [ 413.618316][ T31] watchdog+0x1030/0x1030 [ 413.622651][ T31] ? watchdog+0x1c7/0x1030 [ 413.627062][ T31] kthread+0x388/0x470 [ 413.631119][ T31] ? __pfx_watchdog+0x10/0x10 [ 413.635782][ T31] ? __pfx_kthread+0x10/0x10 [ 413.640361][ T31] ret_from_fork+0x514/0xb70 [ 413.644944][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 413.650042][ T31] ? __switch_to+0xc89/0x1420 [ 413.654704][ T31] ? __pfx_kthread+0x10/0x10 [ 413.659281][ T31] ret_from_fork_asm+0x1a/0x30 [ 413.664047][ T31] [ 413.667323][ T31] Kernel Offset: disabled [ 413.671635][ T31] Rebooting in 86400 seconds..