last executing test programs: 2.766489033s ago: executing program 3 (id=12033): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="93a4e5590ae6", 0x6}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00h'], 0x9) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000004c0), 0x1}, 0x0) 2.616284024s ago: executing program 3 (id=12041): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.748312296s ago: executing program 0 (id=12058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' '], 0xfe4f}}, 0x0) 1.58611765s ago: executing program 3 (id=12061): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.519736493s ago: executing program 0 (id=12063): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008000f", 0x1f) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 1.39157466s ago: executing program 3 (id=12065): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) 1.301800323s ago: executing program 0 (id=12066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b0000002c002c8008"], 0x5c}}, 0x0) 1.196958798s ago: executing program 4 (id=12070): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x7fffffff) sendmmsg$inet_sctp(r0, &(0x7f0000001580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=[@dstaddrv6={0x20, 0x84, 0x8, @private1}], 0x20}], 0x1, 0x0) 1.195830356s ago: executing program 3 (id=12080): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000700000000000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000001240)="b9ff0307680426", 0x0, 0xafffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.14556752s ago: executing program 0 (id=12072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newlink={0x30, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2c120}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x30}}, 0x0) 1.121986839s ago: executing program 1 (id=12073): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 1.026332434s ago: executing program 4 (id=12074): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) 998.375317ms ago: executing program 2 (id=12075): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r1}]}, 0x1c}}, 0x0) 929.736262ms ago: executing program 1 (id=12076): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d252", 0x2}], 0x1}}], 0x1, 0x1) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 813.828542ms ago: executing program 0 (id=12077): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 813.645814ms ago: executing program 2 (id=12078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r0}, 0x38) 802.654255ms ago: executing program 1 (id=12079): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 737.607829ms ago: executing program 4 (id=12081): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) 634.933019ms ago: executing program 1 (id=12082): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 605.439782ms ago: executing program 2 (id=12083): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="25acc7fe0aaa6cbfc6b0da6998cf0344b861acea0e82bb779196f56dfb35984ef00cb39c88d00b4375e1b964ab88c21a7a69ee051d2e7c64692cd1e9d63fcacf9994ca2ab6d025979e1e902069e2d9da142359a22d8a903abf2ac849cd1875b8ad86c0c2fc6d0cd3846815661511e6bdff789b74f28785ed1592098ea57b0e11d41962cbc638fe5e3f52b71504912dda3356e4678c2e3bd290da15cc8fdc5c5f0f264760167c014ec3c67b33e9cbc6e323ab44f2160ff6bc924d72497842af78ef2d13cb3e085e66143b69cc1f21056c030b70fef8759d82f9c01bc147c25da6b7b197ac5b", 0xe5}, {&(0x7f0000000200)="76d37aa03d781582c3704df94b91116e2bddae9aae3c61a78150bf9e6adc5beb64132485ad33ff89724e7abc433ace16138bc110cfacb21dc2fab6e802c193a9197b7ceb427cc767ddf2b2c850c1e13b23f0fd62d7a68e80b0ce", 0x5a}, {&(0x7f00000002c0)="16", 0x1}, {&(0x7f0000000300)='\r', 0x1}], 0x4}], 0x1, 0x0) 537.67022ms ago: executing program 4 (id=12084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x2, 0x4}]}}}}}}}}, 0x0) 443.46315ms ago: executing program 2 (id=12085): socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, [0x3, 0x4, 0x0, 0x6, 0xff3666f, 0xffffffffffffffff, 0x1, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x7fffffff, 0xffffffffffff8001, 0x6, 0x676635c1, 0x5, 0x8000000000000000]}, 0x0) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 442.81927ms ago: executing program 1 (id=12086): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 341.667986ms ago: executing program 4 (id=12087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) 277.104313ms ago: executing program 1 (id=12088): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) 257.468446ms ago: executing program 2 (id=12089): unshare(0x60480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000040)='syzkaller\x00', 0x8}, 0x90) 178.808707ms ago: executing program 3 (id=12090): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d252", 0x2}], 0x1}}], 0x1, 0x1) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 127.829981ms ago: executing program 0 (id=12091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffe, 0x7, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 122.18635ms ago: executing program 2 (id=12092): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0xa}, 0x90) 0s ago: executing program 4 (id=12093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r0}, 0x38) kernel console output (not intermixed with test programs): lan1 added [ 279.474781][T14626] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4450'. [ 279.815814][T14640] vxcan2: entered allmulticast mode [ 280.223574][T14655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.558322][T14666] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4470'. [ 280.792161][T14680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4476'. [ 280.804628][T14680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4476'. [ 280.915225][T14686] x_tables: unsorted entry at hook 3 [ 281.497774][T14715] validate_nla: 6 callbacks suppressed [ 281.497793][T14715] netlink: 'syz.0.4494': attribute type 3 has an invalid length. [ 281.549542][T14715] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4494'. [ 281.589214][T14725] netlink: 'syz.2.4499': attribute type 1 has an invalid length. [ 281.771466][T14734] netlink: 'syz.0.4503': attribute type 1 has an invalid length. [ 282.470352][T14775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4524'. [ 282.538049][T14777] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4525'. [ 282.900721][T14797] ebt_limit: overflow, try lower: 0/0 [ 283.527871][T14831] netlink: 'syz.0.4552': attribute type 1 has an invalid length. [ 283.658338][T14839] ipt_ECN: cannot use operation on non-tcp rule [ 283.906843][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4561'. [ 283.956038][T14851] unsupported nlmsg_type 40 [ 284.359627][T14866] netlink: 'syz.0.4569': attribute type 4 has an invalid length. [ 285.096675][T14909] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.589961][T14937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4602'. [ 285.593058][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4603'. [ 285.625766][T14937] netlink: 'syz.1.4602': attribute type 1 has an invalid length. [ 285.865105][T14950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4609'. [ 285.975272][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4610'. [ 286.067755][T14962] netlink: 'syz.1.4615': attribute type 2 has an invalid length. [ 286.442501][T14977] TCP: TCP_TX_DELAY enabled [ 286.679581][T14989] netlink: 'syz.0.4630': attribute type 1 has an invalid length. [ 286.705440][T14989] netlink: 'syz.0.4630': attribute type 2 has an invalid length. [ 286.838915][T15000] ɶƣ0GC¦: entered promiscuous mode [ 287.549359][T15040] netlink: 'syz.0.4651': attribute type 1 has an invalid length. [ 287.830263][T15056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.970515][T15063] netlink: 'syz.4.4665': attribute type 20 has an invalid length. [ 287.996835][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4664'. [ 288.398501][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4676'. [ 288.867335][T15112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4688'. [ 289.699368][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4706'. [ 290.099290][T15166] IPv6: sit1: Disabled Multicast RS [ 290.732391][T15201] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.875310][T15208] Unknown options in mask 1f4 [ 290.902308][T15211] sctp: [Deprecated]: syz.2.4738 (pid 15211) Use of int in max_burst socket option. [ 290.902308][T15211] Use struct sctp_assoc_value instead [ 291.343576][T15237] netlink: 'syz.1.4751': attribute type 2 has an invalid length. [ 291.368837][T15237] netlink: 'syz.1.4751': attribute type 1 has an invalid length. [ 291.585308][T15248] netlink: 'syz.1.4757': attribute type 21 has an invalid length. [ 292.104700][T15280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.237654][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4774'. [ 292.304146][T15290] netlink: 'syz.2.4778': attribute type 8 has an invalid length. [ 292.344911][T15290] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4778'. [ 293.269687][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4805'. [ 293.490001][T15359] netlink: 'syz.3.4812': attribute type 16 has an invalid length. [ 293.503080][T15359] netlink: 'syz.3.4812': attribute type 3 has an invalid length. [ 293.523963][T15359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4812'. [ 293.659980][T15366] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4817'. [ 293.675279][T15366] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4817'. [ 293.765724][T15370] netlink: 'syz.0.4816': attribute type 1 has an invalid length. [ 293.814900][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4816'. [ 294.178772][T15392] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4829'. [ 294.264236][T15400] netlink: 'syz.4.4830': attribute type 5 has an invalid length. [ 294.372422][T15404] netlink: 'syz.3.4835': attribute type 2 has an invalid length. [ 294.384996][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4835'. [ 294.394159][T15405] netlink: 'syz.1.4836': attribute type 49 has an invalid length. [ 295.711164][T15480] netlink: 'syz.2.4871': attribute type 1 has an invalid length. [ 295.900363][T15488] netlink: 'syz.4.4876': attribute type 10 has an invalid length. [ 295.913137][T15488] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4876'. [ 295.926629][T15488] batman_adv: batadv0: Adding interface: virt_wifi0 [ 295.933355][T15488] batman_adv: batadv0: Interface activated: virt_wifi0 [ 295.943199][T15491] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 296.164638][T15501] netlink: 'syz.2.4882': attribute type 10 has an invalid length. [ 296.199030][T15501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.227236][T15501] team0: Port device batadv0 added [ 296.400394][T15511] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.424012][T15511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.431322][T15511] IPv6: NLM_F_CREATE should be set when creating new route [ 296.438669][T15511] IPv6: NLM_F_CREATE should be set when creating new route [ 296.445951][T15511] IPv6: NLM_F_CREATE should be set when creating new route [ 297.616892][T15581] __nla_validate_parse: 2 callbacks suppressed [ 297.616911][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4922'. [ 297.655114][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4922'. [ 297.857998][T15592] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.877917][T15592] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.965983][T15590] validate_nla: 2 callbacks suppressed [ 297.966003][T15590] netlink: 'syz.0.4926': attribute type 2 has an invalid length. [ 298.173174][T15609] netlink: 'syz.3.4935': attribute type 1 has an invalid length. [ 298.281074][T15613] No such timeout policy "syz0" [ 298.481838][T15625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4944'. [ 299.148746][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 299.435145][T15677] netlink: 'syz.4.4970': attribute type 1 has an invalid length. [ 299.535122][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'. [ 299.587533][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'. [ 299.623154][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'. [ 299.639965][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'. [ 299.650196][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'. [ 299.662739][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'. [ 299.745068][T15692] netlink: 'syz.3.4976': attribute type 9 has an invalid length. [ 299.975713][T15702] netlink: 'syz.4.4981': attribute type 1 has an invalid length. [ 300.393370][T15724] netlink: 'syz.1.4993': attribute type 1 has an invalid length. [ 300.427061][T15724] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 300.460815][T15724] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 300.482550][T15724] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 301.069569][T15759] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 302.278528][T15824] netlink: 'syz.4.5039': attribute type 1 has an invalid length. [ 302.298066][T15821] netlink: 'syz.3.5037': attribute type 1 has an invalid length. [ 302.324912][T15825] netlink: 'syz.1.5038': attribute type 1 has an invalid length. [ 302.683431][T15846] __nla_validate_parse: 95 callbacks suppressed [ 302.683453][T15846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5047'. [ 302.827947][T15846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5047'. [ 303.183946][T15872] netlink: 'syz.1.5063': attribute type 3 has an invalid length. [ 303.195790][T15872] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5063'. [ 303.427902][T15886] xt_hashlimit: max too large, truncated to 1048576 [ 303.588000][T15893] netlink: 'syz.1.5075': attribute type 6 has an invalid length. [ 303.612940][T15896] xt_time: unknown flags 0x4 [ 304.482211][T15940] rdma_rxe: rxe_newlink: failed to add lo [ 304.701163][T15954] netlink: 'syz.4.5103': attribute type 10 has an invalid length. [ 304.729476][T15958] ieee802154 phy1 wpan1: encryption failed: -22 [ 304.743951][T15954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.755586][T15956] xt_NFQUEUE: number of total queues is 0 [ 304.801731][T15954] batadv0: entered promiscuous mode [ 304.831448][T15954] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 304.963989][T15966] xt_TCPMSS: Only works on TCP SYN packets [ 305.418586][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5121'. [ 305.462950][T15990] tc_dump_action: action bad kind [ 305.588699][T16003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.701931][T16010] netlink: 404 bytes leftover after parsing attributes in process `syz.3.5130'. [ 305.712826][T16009] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 305.756293][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5130'. [ 305.771953][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5130'. [ 305.791450][T16010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5130'. [ 305.796055][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5132'. [ 305.906656][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5135'. [ 306.216012][T16038] cannot load conntrack support for proto=3 [ 306.376978][T16043] xt_CT: No such helper "snmp_trap" [ 306.527212][T16054] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 306.554983][T16054] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 306.577325][ T9] IPVS: starting estimator thread 0... [ 306.684914][T16059] IPVS: using max 20 ests per chain, 48000 per kthread [ 307.034267][T16088] netlink: 'syz.3.5168': attribute type 3 has an invalid length. [ 307.786563][T16131] __nla_validate_parse: 3 callbacks suppressed [ 307.786582][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5190'. [ 307.816335][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5190'. [ 307.839240][T16131] netlink: 'syz.4.5190': attribute type 3 has an invalid length. [ 307.854148][T16132] IPv6: Can't replace route, no match found [ 308.676908][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5215'. [ 308.696032][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5215'. [ 308.820546][T16180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5214'. [ 308.827666][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5218'. [ 308.978486][T16191] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 309.277738][T16209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5228'. [ 309.307906][T16210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.404433][T16218] netlink: 816 bytes leftover after parsing attributes in process `syz.4.5232'. [ 309.584219][T16228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5236'. [ 309.881732][T16244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5245'. [ 309.986921][T16252] SET target dimension over the limit! [ 310.204008][T16258] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 310.381822][T16271] xt_limit: Overflow, try lower: 65536/2147483648 [ 310.711138][T16293] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.883495][T16304] netlink: 'syz.4.5273': attribute type 1 has an invalid length. [ 310.927442][T16304] netlink: 'syz.4.5273': attribute type 1 has an invalid length. [ 311.516364][T16338] netlink: 'syz.1.5293': attribute type 30 has an invalid length. [ 311.784515][T16352] ɶƣ0GC¦: entered promiscuous mode [ 312.889177][T16419] xt_l2tp: invalid flags combination: 4 [ 312.983389][T16423] netlink: 'syz.2.5332': attribute type 10 has an invalid length. [ 313.020101][T16423] __nla_validate_parse: 5 callbacks suppressed [ 313.020130][T16423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5332'. [ 313.070855][T16423] ipvlan1: entered promiscuous mode [ 313.095027][T16423] ipvlan1: entered allmulticast mode [ 313.105522][T16423] veth0_vlan: entered allmulticast mode [ 313.126057][T16423] infiniband syz2: set active [ 313.147929][T16423] infiniband syz2: set active [ 313.166128][T16433] xt_CONNSECMARK: invalid mode: 0 [ 313.171815][T16423] bridge0: port 3(ipvlan1) entered blocking state [ 313.190008][T16423] bridge0: port 3(ipvlan1) entered disabled state [ 313.214331][T16423] infiniband syz2: set active [ 313.245084][T16423] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 314.345028][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5372'. [ 314.447842][T16506] netlink: 'syz.1.5374': attribute type 21 has an invalid length. [ 314.470583][T16506] netlink: 'syz.1.5374': attribute type 6 has an invalid length. [ 314.506870][T16506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5374'. [ 315.272239][T16544] netlink: 'syz.4.5393': attribute type 309 has an invalid length. [ 315.507247][T16558] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5400'. [ 315.781501][T16572] xfrm1: entered allmulticast mode [ 315.895051][T16579] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5410'. [ 316.015130][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5416'. [ 316.034580][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5416'. [ 316.065074][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5416'. [ 316.652903][T16628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.821588][T16635] xt_hashlimit: max too large, truncated to 1048576 [ 317.242587][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.555596][T16677] netlink: 'syz.0.5458': attribute type 7 has an invalid length. [ 317.942272][T16698] SET target dimension over the limit! [ 318.083510][T16706] netlink: 'syz.1.5472': attribute type 21 has an invalid length. [ 318.182583][T16710] xt_hashlimit: size too large, truncated to 1048576 [ 318.201719][T16713] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 318.207044][T16714] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 318.412956][T16722] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 319.841765][T16801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5519'. [ 319.870269][T16801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5519'. [ 320.148095][T16820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5527'. [ 320.192046][T16820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5527'. [ 320.216107][T16823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5529'. [ 320.324195][T16831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5534'. [ 320.368663][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5533'. [ 320.564044][T16843] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 320.759963][T16856] netlink: 'syz.3.5548': attribute type 4 has an invalid length. [ 320.784451][T16859] netlink: 'syz.1.5547': attribute type 11 has an invalid length. [ 320.795001][T16856] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5548'. [ 320.806170][T16859] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5547'. [ 321.410910][T16889] netlink: 'syz.4.5561': attribute type 10 has an invalid length. [ 321.489007][T16889] team0: Cannot enslave team device to itself [ 321.524148][T16895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5564'. [ 321.706981][T16905] x_tables: duplicate underflow at hook 4 [ 321.875942][T16914] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 322.331368][T16940] xt_limit: Overflow, try lower: 2147483649/128 [ 322.664139][T16957] batadv1: entered allmulticast mode [ 322.824658][T16968] bridge0: entered promiscuous mode [ 322.832217][T16968] bridge0: entered allmulticast mode [ 322.908572][T16972] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 323.725118][T17022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.274284][T17046] netlink: 'syz.4.5638': attribute type 21 has an invalid length. [ 324.311868][T17046] netlink: 'syz.4.5638': attribute type 6 has an invalid length. [ 325.113557][T17098] SET target dimension over the limit! [ 325.316959][T17107] __nla_validate_parse: 5 callbacks suppressed [ 325.316980][T17107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5668'. [ 325.711889][T17131] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5680'. [ 326.036726][T17153] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 326.083540][T17156] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 326.265789][T17164] netlink: 'syz.3.5697': attribute type 5 has an invalid length. [ 326.425741][T17172] netlink: 'syz.2.5700': attribute type 10 has an invalid length. [ 326.442236][T17172] hsr0: entered promiscuous mode [ 326.472010][T17172] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 326.497847][T17180] netlink: 'syz.4.5704': attribute type 30 has an invalid length. [ 326.504888][T17172] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 326.518270][T17172] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 326.532130][T17172] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 326.540969][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5702'. [ 326.550868][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5702'. [ 326.604857][T17182] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5706'. [ 326.696517][T17186] netlink: 'syz.4.5707': attribute type 10 has an invalid length. [ 326.724359][T17186] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 326.738991][T17186] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 326.767828][T17186] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 326.783534][T17186] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 326.929285][T17197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5712'. [ 327.108764][T17207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5718'. [ 327.137930][T17209] netlink: 'syz.0.5717': attribute type 1 has an invalid length. [ 328.624248][T17294] netlink: 'syz.1.5755': attribute type 10 has an invalid length. [ 328.675529][T17294] syz_tun: entered promiscuous mode [ 328.740757][T17294] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 329.161373][T17322] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.279927][T17330] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5773'. [ 329.512622][T17346] €Â: renamed from bridge_slave_0 (while UP) [ 329.730495][T17360] netlink: 'syz.3.5787': attribute type 27 has an invalid length. [ 329.762210][T17360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 329.959304][T17378] ieee802154 phy1 wpan1: encryption failed: -90 [ 330.301911][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5807'. [ 330.544390][T17410] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5813'. [ 330.598546][T17414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5815'. [ 330.627769][T17414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5815'. [ 330.655062][T17414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5815'. [ 330.755220][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5818'. [ 330.779600][T17424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5818'. [ 331.166615][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5831'. [ 331.365331][T17461] C: renamed from team_slave_0 (while UP) [ 331.423877][T17461] netlink: 'syz.3.5838': attribute type 1 has an invalid length. [ 331.454455][T17461] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 332.036388][T17505] xt_TPROXY: Can be used only with -p tcp or -p udp [ 332.071892][T17507] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 333.012280][T17563] netlink: 'syz.0.5888': attribute type 11 has an invalid length. [ 333.189218][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5893'. [ 333.224950][T17573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5893'. [ 333.501560][T17544] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 333.743997][T17598] netlink: 'syz.0.5906': attribute type 21 has an invalid length. [ 333.762885][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5906'. [ 333.878689][T17607] netlink: 'syz.1.5910': attribute type 267 has an invalid length. [ 333.903017][T17609] ebt_among: dst integrity fail: 101 [ 334.022467][T17615] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 334.335047][T17634] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 334.500810][T17646] xt_hashlimit: size too large, truncated to 1048576 [ 334.519966][T17646] xt_hashlimit: max too large, truncated to 1048576 [ 334.543746][T17646] xt_hashlimit: overflow, try lower: 0/0 [ 334.755489][ T5322] Bluetooth: hci0: command 0x0406 tx timeout [ 335.023808][T17683] netlink: 'syz.3.5947': attribute type 23 has an invalid length. [ 335.090072][T17686] IPVS: length: 157 != 24 [ 335.134365][T17689] sit0: entered promiscuous mode [ 335.167102][T17689] netlink: 'syz.0.5951': attribute type 1 has an invalid length. [ 335.231694][T17697] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 335.305099][T17700] netlink: 'syz.2.5956': attribute type 21 has an invalid length. [ 335.345765][T17700] netlink: 'syz.2.5956': attribute type 1 has an invalid length. [ 335.472619][T17711] netlink: 'syz.4.5961': attribute type 16 has an invalid length. [ 335.512458][T17711] netlink: 'syz.4.5961': attribute type 17 has an invalid length. [ 335.660452][T17717] netlink: 'syz.3.5963': attribute type 5 has an invalid length. [ 335.774732][T17726] xt_cgroup: invalid path, errno=-2 [ 336.097904][T17746] __nla_validate_parse: 1 callbacks suppressed [ 336.097925][T17746] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5979'. [ 336.124664][T17749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5980'. [ 336.160734][T17749] tc_dump_action: action bad kind [ 336.365584][T17763] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 336.584965][T17777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5994'. [ 336.664987][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5996'. [ 337.346509][T17828] netlink: 'syz.3.6019': attribute type 10 has an invalid length. [ 337.362517][T17828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6019'. [ 337.519371][T17838] netlink: 'syz.3.6023': attribute type 1 has an invalid length. [ 337.571535][T17838] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6023'. [ 338.340387][T17889] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6049'. [ 338.537733][T17901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.652125][T17911] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6060'. [ 338.822643][T17917] netlink: 'syz.1.6063': attribute type 21 has an invalid length. [ 339.357943][T17950] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6078'. [ 339.437677][T17954] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6080'. [ 341.194173][T18060] __nla_validate_parse: 6 callbacks suppressed [ 341.194191][T18060] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6132'. [ 341.374281][T18069] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6136'. [ 341.398359][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6136'. [ 341.635202][T18089] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6147'. [ 341.655637][T18089] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 341.671987][T18089] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.779738][T18097] Cannot find map_set index 0 as target [ 341.875531][T18099] validate_nla: 1 callbacks suppressed [ 341.875551][T18099] netlink: 'syz.3.6152': attribute type 11 has an invalid length. [ 342.180574][T18122] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6163'. [ 342.215621][T18122] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6163'. [ 342.364395][T18133] netlink: 'syz.4.6169': attribute type 9 has an invalid length. [ 342.394974][T18135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6170'. [ 342.706280][T18151] netlink: 'syz.3.6179': attribute type 5 has an invalid length. [ 343.452226][T18205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6205'. [ 343.485029][T18207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6206'. [ 343.565146][T18211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6208'. [ 343.854369][T18231] netlink: 'syz.4.6217': attribute type 10 has an invalid length. [ 344.486634][T18267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.532458][T18269] IPVS: Error connecting to the multicast addr [ 345.145617][T18310] netlink: 'syz.3.6258': attribute type 7 has an invalid length. [ 345.978685][T18366] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (129) [ 346.541005][T18397] __nla_validate_parse: 2 callbacks suppressed [ 346.541024][T18397] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6301'. [ 346.824540][T18414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6310'. [ 346.835403][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6310'. [ 346.987564][T18421] netlink: 'syz.4.6313': attribute type 13 has an invalid length. [ 347.229377][T18439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6323'. [ 347.375348][T18447] netlink: 644 bytes leftover after parsing attributes in process `syz.0.6326'. [ 347.683158][T18464] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 348.012926][T18483] (unnamed net_device) (uninitialized): option lacp_active: invalid value (127) [ 348.097607][T18488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6345'. [ 348.165998][T18491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6346'. [ 348.184714][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6347'. [ 348.280807][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6351'. [ 348.283009][T18498] bridge5: entered promiscuous mode [ 349.127066][T18543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6372'. [ 349.172101][T18549] netlink: 'syz.1.6374': attribute type 13 has an invalid length. [ 349.941043][T18599] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 349.976545][T18601] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 350.443888][T18631] netlink: 'syz.3.6414': attribute type 1 has an invalid length. [ 350.898429][T18661] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 350.923369][T18661] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 350.986956][T18668] xt_TCPMSS: Only works on TCP SYN packets [ 351.301796][T18687] x_tables: duplicate underflow at hook 3 [ 351.497543][T18701] netlink: 'syz.3.6449': attribute type 1 has an invalid length. [ 351.754190][T18717] __nla_validate_parse: 10 callbacks suppressed [ 351.754210][T18717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6457'. [ 351.772913][T18719] netlink: 'syz.1.6458': attribute type 9 has an invalid length. [ 351.806119][T18719] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6458'. [ 352.112109][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6468'. [ 352.191090][T18745] ebt_among: src integrity fail: 30a [ 352.317536][T18753] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6474'. [ 352.335337][T18753] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 352.487948][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6479'. [ 352.869982][T18784] ieee802154 phy1 wpan1: encryption failed: -90 [ 353.428778][T18825] delete_channel: no stack [ 353.546794][T18833] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6516'. [ 353.561410][T18833] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 353.576235][T18833] 0ªX¹¦Dö»: entered allmulticast mode [ 353.591955][T18836] netlink: 'syz.2.6517': attribute type 21 has an invalid length. [ 353.641954][T18836] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6517'. [ 353.669450][T18836] netlink: 'syz.2.6517': attribute type 4 has an invalid length. [ 353.695644][T18836] netlink: 'syz.2.6517': attribute type 3 has an invalid length. [ 353.713428][T18836] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6517'. [ 353.811645][T18849] netlink: 'syz.0.6523': attribute type 3 has an invalid length. [ 353.960288][T18860] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6528'. [ 354.464613][T18890] netlink: 'syz.3.6542': attribute type 2 has an invalid length. [ 354.493900][T18893] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 354.494031][T18890] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6542'. [ 354.622695][T18897] netlink: 'syz.0.6545': attribute type 2 has an invalid length. [ 355.593590][T18963] netlink: 'syz.3.6578': attribute type 2 has an invalid length. [ 355.620671][T18963] netlink: 'syz.3.6578': attribute type 8 has an invalid length. [ 355.680529][T18967] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20003 [ 356.513330][T19015] netlink: 'syz.1.6602': attribute type 7 has an invalid length. [ 356.885168][T19040] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 357.043953][T19050] xt_l2tp: wrong L2TP version: 0 [ 357.432881][T19076] __nla_validate_parse: 2 callbacks suppressed [ 357.432902][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6633'. [ 357.464704][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6633'. [ 357.544133][T19083] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6635'. [ 357.770024][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6644'. [ 357.888231][T19104] netlink: 'syz.1.6646': attribute type 7 has an invalid length. [ 357.970967][T19109] x_tables: unsorted entry at hook 2 [ 358.366122][T19134] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.6662'. [ 358.856064][T19164] validate_nla: 2 callbacks suppressed [ 358.856084][T19164] netlink: 'syz.3.6677': attribute type 1 has an invalid length. [ 358.895183][T19164] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6677'. [ 359.177576][T19186] netlink: 'syz.0.6688': attribute type 1 has an invalid length. [ 359.506601][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6699'. [ 360.392837][T19266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.913539][T19303] netlink: 'syz.1.6746': attribute type 10 has an invalid length. [ 360.945085][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6747'. [ 361.002709][T19303] team0: Port device wlan1 removed [ 361.026514][T19303] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 361.041252][T19310] netlink: 'syz.4.6750': attribute type 21 has an invalid length. [ 361.051501][T19310] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6750'. [ 361.115055][T19312] netlink: 'syz.2.6751': attribute type 6 has an invalid length. [ 361.175202][T19315] netlink: 'syz.1.6753': attribute type 4 has an invalid length. [ 361.202309][T19320] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6755'. [ 361.560451][T19340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.893736][T19365] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 361.916530][T19365] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 361.935462][T19365] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 361.961748][T19365] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 361.987096][T19364] netlink: 'syz.1.6775': attribute type 30 has an invalid length. [ 362.432642][T19391] netlink: 'syz.3.6788': attribute type 3 has an invalid length. [ 362.524168][T19394] xt_CT: No such helper "snmp" [ 362.619500][T19402] netlink: 'syz.3.6794': attribute type 3 has an invalid length. [ 362.645473][T19402] __nla_validate_parse: 2 callbacks suppressed [ 362.645506][T19402] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6794'. [ 362.674180][T19407] netlink: 'syz.4.6796': attribute type 1 has an invalid length. [ 362.705530][T19407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6796'. [ 362.792415][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6799'. [ 362.812844][T19413] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6799'. [ 362.982574][T19423] team0: Device hsr_slave_0 failed to register rx_handler [ 363.484757][T19454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6818'. [ 363.661426][T19466] sctp: [Deprecated]: syz.0.6824 (pid 19466) Use of int in maxseg socket option. [ 363.661426][T19466] Use struct sctp_assoc_value instead [ 363.849429][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6831'. [ 364.118455][T19495] validate_nla: 2 callbacks suppressed [ 364.118475][T19495] netlink: 'syz.4.6839': attribute type 1 has an invalid length. [ 364.142326][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6839'. [ 364.198008][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6840'. [ 364.392808][T19512] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6846'. [ 364.532911][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6851'. [ 364.680978][T19530] netlink: 'syz.2.6854': attribute type 1 has an invalid length. [ 364.816949][T19542] netlink: 'syz.2.6859': attribute type 1 has an invalid length. [ 365.222047][T19569] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 365.247726][T19567] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 365.617069][T19589] SET target dimension over the limit! [ 366.522222][T19653] netlink: 'syz.2.6917': attribute type 21 has an invalid length. [ 366.739909][T19664] netlink: 'syz.1.6922': attribute type 3 has an invalid length. [ 367.012935][T19681] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 367.593837][T19722] netlink: 'syz.0.6949': attribute type 4 has an invalid length. [ 368.224951][T19751] __nla_validate_parse: 11 callbacks suppressed [ 368.224970][T19751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6965'. [ 368.442499][T19764] openvswitch: netlink: Port 16777216 exceeds max allowable 65535 [ 368.480299][T19768] netlink: 'syz.0.6973': attribute type 24 has an invalid length. [ 368.724140][T19779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6978'. [ 368.747479][T19779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6978'. [ 368.932904][T19797] netlink: 'syz.0.6985': attribute type 27 has an invalid length. [ 368.953401][T19797] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6985'. [ 368.983058][T19797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 369.568495][T19836] netlink: 'syz.0.7005': attribute type 1 has an invalid length. [ 369.975111][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7019'. [ 369.997740][T19864] lo speed is unknown, defaulting to 1000 [ 370.006323][T19868] netlink: 'syz.1.7021': attribute type 1 has an invalid length. [ 370.471012][T19895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.668095][T19904] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7040'. [ 371.531996][T19965] SET target dimension over the limit! [ 371.719395][T19977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7073'. [ 371.815216][T19979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7075'. [ 371.934114][T19990] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.138982][T20001] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (56182) [ 372.183019][T20001] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 372.214498][T20007] netlink: 'syz.3.7088': attribute type 3 has an invalid length. [ 372.583427][T20030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7099'. [ 372.614949][T20030] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7099'. [ 372.768431][T20042] netlink: 'syz.3.7107': attribute type 29 has an invalid length. [ 373.931445][T20105] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 374.178079][T20123] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 374.215343][T20125] netlink: 'syz.1.7147': attribute type 32 has an invalid length. [ 374.416258][T20135] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 374.455097][T20135] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 374.485055][T20135] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 374.558431][T20146] __nla_validate_parse: 1 callbacks suppressed [ 374.558453][T20146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7157'. [ 375.168135][T20182] sock: sock_timestamping_bind_phc: sock not bind to device [ 375.386495][T20196] : renamed from bond0 (while UP) [ 375.640718][T20210] netlink: 'syz.0.7189': attribute type 1 has an invalid length. [ 375.665182][T20210] netlink: 'syz.0.7189': attribute type 2 has an invalid length. [ 376.280259][T20251] netlink: 'syz.4.7209': attribute type 11 has an invalid length. [ 376.504735][T20268] IPv6: sit1: Disabled Multicast RS [ 376.877362][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7228'. [ 376.894232][T20289] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 376.955224][T20295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7231'. [ 376.978829][T20295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7231'. [ 377.397110][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7244'. [ 378.053750][T20367] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7267'. [ 378.082277][T20367] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7267'. [ 378.279285][T20382] netlink: 'syz.2.7274': attribute type 1 has an invalid length. [ 378.472077][T20395] netlink: 'syz.4.7280': attribute type 8 has an invalid length. [ 378.679048][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.915164][T20417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7290'. [ 379.331815][T20445] openvswitch: netlink: Key type 12592 is out of range max 32 [ 379.583556][T20464] netlink: 'syz.1.7314': attribute type 1 has an invalid length. [ 379.780509][T20476] netlink: 'syz.3.7319': attribute type 10 has an invalid length. [ 379.817396][T20476] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.826168][T20476] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.905240][T20476] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.912481][T20476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.920077][T20476] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.927316][T20476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.955591][T20476] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 380.399031][T20515] tc_dump_action: action bad kind [ 380.665856][T20528] netlink: 'syz.0.7343': attribute type 10 has an invalid length. [ 380.695386][T20528] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.7343'. [ 380.730976][T20528] openvswitch: netlink: Flow key attr not present in new flow. [ 381.080188][T20555] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 381.164622][T20561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7361'. [ 381.366054][T20572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7366'. [ 381.519198][T20582] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 381.615384][T20589] netlink: 'syz.3.7374': attribute type 10 has an invalid length. [ 381.649280][T20589] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7374'. [ 381.743261][T20595] netlink: 'syz.2.7377': attribute type 5 has an invalid length. [ 381.876234][T20606] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.7383'. [ 381.934728][T20608] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7384'. [ 382.189109][T20624] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 382.316793][T20634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7397'. [ 382.343720][T20634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7397'. [ 382.718013][T20663] (unnamed net_device) (uninitialized): option mode: invalid value (16) [ 383.268350][T20695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7427'. [ 383.462568][T20709] netlink: 'syz.1.7433': attribute type 1 has an invalid length. [ 383.555954][T20714] IPv6: sit2: Disabled Multicast RS [ 383.810437][T20728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7444'. [ 383.838152][T20728] gre1: entered allmulticast mode [ 384.470520][T20772] netlink: 'syz.2.7464': attribute type 8 has an invalid length. [ 384.599004][T20777] x_tables: unsorted underflow at hook 3 [ 385.212969][T20817] netlink: 'syz.2.7487': attribute type 3 has an invalid length. [ 385.838828][T20859] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 386.055755][T20871] netlink: 'syz.3.7514': attribute type 1 has an invalid length. [ 386.154937][T20879] __nla_validate_parse: 2 callbacks suppressed [ 386.154956][T20879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7518'. [ 386.349398][T20889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7523'. [ 386.598768][T20907] netlink: 'syz.1.7531': attribute type 3 has an invalid length. [ 386.632145][T20907] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7531'. [ 386.714963][T20914] netlink: 'syz.4.7536': attribute type 1 has an invalid length. [ 386.723323][T20914] netlink: 'syz.4.7536': attribute type 2 has an invalid length. [ 386.837854][T20921] netlink: 'syz.3.7539': attribute type 1 has an invalid length. [ 386.868002][T20921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7539'. [ 387.440944][T20960] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 387.521512][T20965] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 388.194094][T21004] xt_ipvs: protocol family 7 not supported [ 388.223054][T21012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7583'. [ 388.239313][T21013] xt_cluster: node mask cannot exceed total number of nodes [ 388.596641][T21033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 388.672963][T21036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7594'. [ 388.889093][T21053] netlink: 'syz.3.7603': attribute type 4 has an invalid length. [ 389.367747][T21069] netlink: 'syz.4.7611': attribute type 3 has an invalid length. [ 389.415374][T21071] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 389.468002][T21075] sctp: [Deprecated]: syz.1.7614 (pid 21075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.468002][T21075] Use struct sctp_sack_info instead [ 389.702332][T21083] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 390.208511][T21108] netlink: 'syz.1.7631': attribute type 1 has an invalid length. [ 390.216384][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7631'. [ 390.768535][T21139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7647'. [ 390.832028][T21144] netlink: 'syz.3.7648': attribute type 9 has an invalid length. [ 390.852996][T21144] netlink: 'syz.3.7648': attribute type 6 has an invalid length. [ 391.328238][T21173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7662'. [ 391.494386][T21176] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 391.523231][T21185] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7668'. [ 391.705267][T21198] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.7675'. [ 391.725042][T21198] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.7675'. [ 391.745106][T21198] netlink: 640 bytes leftover after parsing attributes in process `syz.0.7675'. [ 391.939717][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7680'. [ 391.964160][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7680'. [ 392.094969][T21218] netlink: 'syz.1.7684': attribute type 1 has an invalid length. [ 392.107178][T21222] xt_bpf: check failed: parse error [ 392.116953][T21218] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7684'. [ 392.256206][T21226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7688'. [ 392.877884][T21257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7702'. [ 393.213713][T21278] pimreg3: entered allmulticast mode [ 393.982111][T21325] Zero length message leads to an empty skb [ 394.880983][T21379] netlink: 'syz.1.7758': attribute type 8 has an invalid length. [ 394.892469][T21379] netlink: 'syz.1.7758': attribute type 1 has an invalid length. [ 396.541097][T21475] __nla_validate_parse: 10 callbacks suppressed [ 396.541120][T21475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7805'. [ 397.051478][T21503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.853576][T21552] sctp: [Deprecated]: syz.1.7844 (pid 21552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.853576][T21552] Use struct sctp_sack_info instead [ 398.155269][T21568] tipc: Failed to obtain node identity [ 398.161006][T21568] tipc: Enabling of bearer rejected, failed to enable media [ 398.295071][T21575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7855'. [ 398.335377][T21581] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7856'. [ 398.363717][T21581] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7856'. [ 398.396145][T21581] netlink: 'syz.4.7856': attribute type 5 has an invalid length. [ 398.429986][T21581] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7856'. [ 398.738751][T21601] atomic_op ffff88807d90c998 conn xmit_atomic 0000000000000000 [ 399.404459][T21640] netlink: 'syz.4.7885': attribute type 2 has an invalid length. [ 399.427187][T21640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7885'. [ 399.996430][T21672] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7901'. [ 400.017803][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7902'. [ 400.022712][T21678] batadv_slave_1: default FDB implementation only supports local addresses [ 400.194398][T21685] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7905'. [ 400.302513][T21695] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 400.510651][T21705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7918'. [ 400.917309][T21725] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 401.150726][T21742] tipc: Invalid UDP bearer configuration [ 401.150803][T21742] tipc: Enabling of bearer rejected, failed to enable media [ 401.396580][T21758] netlink: 'syz.1.7944': attribute type 13 has an invalid length. [ 402.900441][T21850] tipc: Started in network mode [ 402.915742][T21850] tipc: Node identity , cluster identity 4711 [ 403.062690][T21860] tipc: Started in network mode [ 403.074829][T21860] tipc: Node identity , cluster identity 4711 [ 403.280287][T21870] __nla_validate_parse: 4 callbacks suppressed [ 403.280307][T21870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7996'. [ 403.794419][T21902] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8012'. [ 403.813632][T21904] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8013'. [ 404.239953][T21932] atomic_op ffff88804a61d198 conn xmit_atomic 0000000000000000 [ 404.256222][T21936] tipc: Started in network mode [ 404.261119][T21936] tipc: Node identity 7f000001, cluster identity 4711 [ 404.274133][T21936] tipc: Enabling of bearer rejected, failed to enable media [ 404.423871][T21942] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8033'. [ 404.456117][T21942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8033'. [ 404.499638][T21947] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8035'. [ 404.765777][T21962] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8042'. [ 404.803822][T21962] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 404.834204][T21962] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 405.091628][T21982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8052'. [ 405.112480][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8052'. [ 405.164515][T21986] smc: ib device syz2 ibport 2 applied user defined pnetid S [ 405.434512][T22002] tipc: Cannot configure node identity twice [ 406.013785][T22041] netlink: 'syz.0.8080': attribute type 1 has an invalid length. [ 406.362301][T22060] Bluetooth: MGMT ver 1.23 [ 406.510325][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8093'. [ 406.918829][T22095] lo: entered promiscuous mode [ 406.935230][T22095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.722229][T22140] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 408.063211][T22163] netlink: 'syz.4.8139': attribute type 3 has an invalid length. [ 408.589955][T22191] netlink: 'syz.0.8152': attribute type 29 has an invalid length. [ 408.623518][T22191] __nla_validate_parse: 1 callbacks suppressed [ 408.623537][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8152'. [ 408.952753][T22208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8160'. [ 408.993872][T22208] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8160'. [ 409.125865][T22215] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 409.982577][T22274] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8190'. [ 410.016053][T22273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.136268][T22280] Bluetooth: MGMT ver 1.23 [ 410.140858][T22280] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 410.566125][T22306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8208'. [ 410.608933][T22308] tipc: Failed to obtain node identity [ 410.614483][T22308] tipc: Enabling of bearer rejected, failed to enable media [ 410.628678][T22312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8211'. [ 410.649591][T22312] vlan0: left promiscuous mode [ 410.665330][T22312] netlink: 'syz.1.8211': attribute type 2 has an invalid length. [ 410.687530][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8211'. [ 410.715062][T22312] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 411.298425][T22347] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8228'. [ 411.331985][T22347] tipc: Enabled bearer , priority 10 [ 411.451663][T22353] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8231'. [ 411.463844][T22353] tipc: Invalid UDP bearer configuration [ 411.463962][T22353] tipc: Enabling of bearer rejected, failed to enable media [ 411.962049][T22384] netlink: 'syz.4.8246': attribute type 10 has an invalid length. [ 411.993576][T22384] netlink: 181292 bytes leftover after parsing attributes in process `syz.4.8246'. [ 412.020825][T22384] openvswitch: netlink: Message has 4 unknown bytes. [ 412.289120][T22405] netlink: 'syz.4.8256': attribute type 13 has an invalid length. [ 412.325644][ T5488] tipc: Node number set to 2130706433 [ 412.689723][T22429] IPVS: stopping backup sync thread 14542 ... [ 413.371687][T22470] ieee802154 phy1 wpan1: encryption failed: -90 [ 413.703044][T22486] __nla_validate_parse: 3 callbacks suppressed [ 413.703064][T22486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8295'. [ 414.331738][T22516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8310'. [ 415.070164][T22561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8329'. [ 415.618369][T22585] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8342'. [ 415.682379][T22585] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 416.126022][T22618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8358'. [ 416.155139][T22618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8358'. [ 416.274000][T22623] tipc: Started in network mode [ 416.293755][T22623] tipc: Node identity , cluster identity 4711 [ 416.334885][T22623] tipc: Failed to set node id, please configure manually [ 416.341992][T22623] tipc: Enabling of bearer rejected, failed to enable media [ 416.444555][T22635] netlink: 'syz.3.8366': attribute type 2 has an invalid length. [ 416.824680][T22658] netlink: 'syz.4.8378': attribute type 21 has an invalid length. [ 416.839404][T22658] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8378'. [ 417.086985][ T5322] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 417.094236][ T5322] Bluetooth: hci0: command 0x0406 tx timeout [ 417.123272][T22674] tipc: Started in network mode [ 417.128438][T22674] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 417.144852][T22674] tipc: Enabling of bearer rejected, failed to enable media [ 417.165364][T22675] tipc: MTU too low for tipc bearer [ 417.495281][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8396'. [ 417.533159][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8396'. [ 417.579068][T22701] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 417.596892][T22699] IPVS: stopping backup sync thread 22701 ... [ 417.742179][T22710] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8401'. [ 417.753597][T22710] netlink: 'syz.2.8401': attribute type 5 has an invalid length. [ 417.797835][T22711] netlink: 'syz.1.8403': attribute type 16 has an invalid length. [ 418.038366][T22728] netlink: 'syz.3.8409': attribute type 29 has an invalid length. [ 418.072307][T22721] netlink: 'syz.3.8409': attribute type 29 has an invalid length. [ 418.549938][ T5488] IPVS: starting estimator thread 0... [ 418.596180][T22762] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 418.657343][T22760] IPVS: using max 18 ests per chain, 43200 per kthread [ 418.745281][ T944] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 418.745300][ T944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 418.825031][ T944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 418.875488][ T5488] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 418.925213][ T5488] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 418.975970][ T944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 419.045906][T22784] __nla_validate_parse: 3 callbacks suppressed [ 419.045927][T22784] netlink: 134716 bytes leftover after parsing attributes in process `syz.2.8437'. [ 419.071804][T22784] openvswitch: netlink: Message has 5 unknown bytes. [ 419.101724][ T944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 419.155328][ T944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 419.224193][T22792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8441'. [ 419.245100][T22794] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8442'. [ 419.265067][ T944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 419.276780][T22794] netlink: 'syz.3.8442': attribute type 2 has an invalid length. [ 419.289264][T22794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8442'. [ 419.335271][ T944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 419.385088][ T944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 419.560726][T22812] netlink: 'syz.4.8451': attribute type 3 has an invalid length. [ 419.641020][T22820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8454'. [ 419.927313][T22832] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8461'. [ 419.948069][T22832] netlink: 'syz.4.8461': attribute type 9 has an invalid length. [ 421.350959][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8503'. [ 421.374103][T22923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8504'. [ 422.064267][T22963] tipc: Enabling of bearer rejected, failed to enable media [ 422.498839][T22989] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8538'. [ 422.838310][T23005] netpci0: renamed from team0 [ 422.852329][T23005] netpci0: Cannot enslave team device to itself [ 422.864858][T23005] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check. [ 423.380110][T23041] netlink: 'syz.3.8564': attribute type 21 has an invalid length. [ 423.391059][T23041] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.8564'. [ 424.125617][ T9] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 424.125636][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.159857][T23071] __nla_validate_parse: 2 callbacks suppressed [ 424.159875][T23071] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8579'. [ 424.185232][T23071] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 424.715576][T23098] nbd: socks must be embedded in a SOCK_ITEM attr [ 424.762177][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 425.179252][T23126] netlink: 'syz.4.8607': attribute type 1 has an invalid length. [ 425.204865][T23126] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.8607'. [ 425.214036][T23126] netlink: 'syz.4.8607': attribute type 1 has an invalid length. [ 425.273507][T23128] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8606'. [ 425.478258][T23145] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8615'. [ 425.505142][T23145] netlink: 'syz.3.8615': attribute type 1 has an invalid length. [ 425.645709][T23154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8618'. [ 425.766092][T23160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8622'. [ 426.031473][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8631'. [ 426.335309][T23195] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8640'. [ 426.356193][T23195] openvswitch: Êü: Dropping previously announced user features [ 426.523462][T23206] netlink: 'syz.4.8645': attribute type 1 has an invalid length. [ 426.544844][T23206] netlink: 'syz.4.8645': attribute type 3 has an invalid length. [ 426.552608][T23206] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8645'. [ 426.585062][T23209] netlink: 'syz.1.8646': attribute type 30 has an invalid length. [ 427.940814][T23290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.219970][T23306] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8693'. [ 428.231134][T23306] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 429.722779][T23391] smc: net device lo applied user defined pnetid SYZ2 [ 429.884263][T23401] __nla_validate_parse: 2 callbacks suppressed [ 429.884282][T23401] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8740'. [ 430.756633][T23446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8761'. [ 431.583068][T23488] netlink: 'syz.0.8782': attribute type 1 has an invalid length. [ 431.600224][T23488] netlink: 'syz.0.8782': attribute type 3 has an invalid length. [ 431.608758][T23488] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8782'. [ 431.618041][T23488] NCSI netlink: No device for ifindex 131080 [ 431.654628][T23491] netlink: 264 bytes leftover after parsing attributes in process `syz.1.8783'. [ 432.470485][T23532] netlink: 'syz.1.8804': attribute type 5 has an invalid length. [ 432.760788][ T5330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.798570][ T5330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.808381][ T5330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.816947][ T5330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.824677][ T5330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 432.833373][ T5330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.523913][T23542] chnl_net:caif_netlink_parms(): no params data found [ 433.761956][T23542] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.793998][T23542] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.825433][T23542] bridge_slave_0: entered allmulticast mode [ 433.854417][T23542] bridge_slave_0: entered promiscuous mode [ 433.877509][T23542] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.906617][T23542] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.913877][T23542] bridge_slave_1: entered allmulticast mode [ 433.937756][T23542] bridge_slave_1: entered promiscuous mode [ 434.052345][T23542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.092066][T23542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.223923][T23542] team0: Port device team_slave_0 added [ 434.251907][T23542] team0: Port device team_slave_1 added [ 434.382117][T23542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.406793][T23542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.471624][T23542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.496412][T23609] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 434.576444][T23542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.613622][T23542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.705115][T23542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.850014][T23542] hsr_slave_0: entered promiscuous mode [ 434.881663][T23542] hsr_slave_1: entered promiscuous mode [ 434.903694][T23542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.915416][ T5330] Bluetooth: hci1: command tx timeout [ 434.924977][T23542] Cannot create hsr debugfs directory [ 435.005680][T23630] rdma_op ffff88802362f9f0 conn xmit_rdma 0000000000000000 [ 435.242429][T23638] hsr0: entered promiscuous mode [ 435.401589][T23542] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.536067][T23542] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.664039][T23542] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.823832][T23542] team0: Port device netdevsim0 removed [ 435.837486][T23542] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.158680][T23542] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.224320][T23542] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 436.265987][T23542] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 436.322486][T23542] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 436.493157][T23679] IPVS: stopping master sync thread 23680 ... [ 436.500482][T23680] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 436.640483][T23542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.711894][T23542] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.752132][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.759333][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.811740][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.818949][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.997191][ T5330] Bluetooth: hci1: command tx timeout [ 437.281604][T23542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.404620][T23542] veth0_vlan: entered promiscuous mode [ 437.451494][T23542] veth1_vlan: entered promiscuous mode [ 437.508478][T23542] veth0_macvtap: entered promiscuous mode [ 437.520788][T23542] veth1_macvtap: entered promiscuous mode [ 437.562927][T23542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.588354][T23542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.598841][T23542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.613416][T23542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.624297][T23542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.646275][T23542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.661390][T23542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.690169][T23542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.701956][T23542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.712406][T23542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.727742][T23542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.740535][T23542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.751107][T23542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.768124][T23542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.786775][T23542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.809342][T23542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.820300][T23542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.835581][T23542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.859248][T23542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.880631][T23542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.900354][T23542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.921351][T23542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.062705][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.080900][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.141613][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.151157][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.504335][T23754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8902'. [ 438.966508][T23777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8911'. [ 439.075159][ T5330] Bluetooth: hci1: command tx timeout [ 439.718269][T23820] netlink: 'syz.0.8933': attribute type 142 has an invalid length. [ 440.124708][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.257088][T23847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8946'. [ 440.398530][T23855] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.8949'. [ 440.418917][T23855] openvswitch: netlink: Actions may not be safe on all matching packets [ 440.536131][T23861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8952'. [ 440.586756][T23867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8954'. [ 440.668291][T23869] netlink: 'syz.3.8956': attribute type 3 has an invalid length. [ 440.779536][T23879] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 441.165205][ T5330] Bluetooth: hci1: command tx timeout [ 441.210517][T23901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8974'. [ 441.404245][T23912] netlink: 'syz.2.8977': attribute type 29 has an invalid length. [ 441.455629][T23912] netlink: 'syz.2.8977': attribute type 29 has an invalid length. [ 442.482162][T23980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9006'. [ 442.679942][T23989] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 444.389061][T24077] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9053'. [ 444.519404][T24077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.562869][T24086] tipc: Started in network mode [ 444.583585][T24086] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 444.615468][T24086] tipc: Enabling of bearer rejected, failed to enable media [ 444.719776][T24077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.883635][T24077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.043073][T24077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.059043][T24110] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.9068'. [ 445.089179][T24110] openvswitch: netlink: Message has 6332 unknown bytes. [ 445.301558][T24077] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.368258][T24077] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.412627][T24077] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.447791][T24077] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.474353][T24131] netlink: 'syz.1.9078': attribute type 10 has an invalid length. [ 445.559364][T24133] openvswitch: netlink: Unknown nsh attribute 0 [ 445.764148][T24147] netlink: 'syz.4.9086': attribute type 62 has an invalid length. [ 445.878311][T24151] netlink: 'syz.3.9088': attribute type 1 has an invalid length. [ 445.916355][T24153] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9089'. [ 446.760358][T24201] netlink: 'syz.0.9112': attribute type 3 has an invalid length. [ 446.800726][T24204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9114'. [ 446.818577][T24205] pimreg: entered allmulticast mode [ 446.952032][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9117'. [ 447.422699][T24238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9129'. [ 447.452276][T24238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9129'. [ 447.718851][T24251] tipc: Enabled bearer , priority 0 [ 448.836122][ T944] tipc: Node number set to 16385 [ 450.295133][T24388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9204'. [ 450.322716][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9205'. [ 450.335128][T24388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9204'. [ 450.385832][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9206'. [ 450.636892][T24405] netlink: 'syz.2.9212': attribute type 3 has an invalid length. [ 450.802254][T24415] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9216'. [ 451.161476][T24429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9221'. [ 451.367464][T24436] pimreg: entered allmulticast mode [ 451.415039][T24436] pimreg: left allmulticast mode [ 451.441644][T24439] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9226'. [ 451.473723][T24439] netlink: 'syz.0.9226': attribute type 1 has an invalid length. [ 453.286791][T24530] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 453.513162][T24545] netlink: 'syz.3.9278': attribute type 1 has an invalid length. [ 453.539854][T24545] netlink: 9396 bytes leftover after parsing attributes in process `syz.3.9278'. [ 453.668551][T24549] tipc: Enabling of bearer rejected, failed to enable media [ 454.602261][T24588] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9293'. [ 454.778783][T24588] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.801158][T24588] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 454.957605][T24588] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.975127][T24588] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 455.020312][T24605] tipc: Enabling of bearer rejected, failed to enable media [ 455.206208][T24588] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.245144][T24588] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 455.283790][T24622] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9314'. [ 455.309387][T24622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9314'. [ 455.434386][T24628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9318'. [ 455.452933][T24627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9316'. [ 455.630068][T24588] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.663988][T24588] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 455.727176][T24588] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.759529][T24588] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 455.810176][T24588] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.839672][T24588] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 455.883602][T24588] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.903630][T24588] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.248925][T24667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9337'. [ 456.624470][T24685] netlink: 'syz.1.9345': attribute type 7 has an invalid length. [ 456.654829][T24685] netlink: 'syz.1.9345': attribute type 8 has an invalid length. [ 456.912257][T24705] netlink: 'syz.1.9352': attribute type 3 has an invalid length. [ 456.955781][T24705] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9352'. [ 457.753284][T24754] nftables ruleset with unbound chain [ 458.236667][T24782] netlink: 'syz.2.9391': attribute type 4 has an invalid length. [ 459.416692][T24844] netlink: 'syz.3.9420': attribute type 2 has an invalid length. [ 459.483117][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9422'. [ 459.535499][T24853] netlink: 'syz.4.9424': attribute type 3 has an invalid length. [ 459.620970][T24857] netlink: 'syz.3.9426': attribute type 1 has an invalid length. [ 459.644978][T24857] netlink: 4076 bytes leftover after parsing attributes in process `syz.3.9426'. [ 459.670928][T24857] netlink: 13 bytes leftover after parsing attributes in process `syz.3.9426'. [ 460.127741][T24887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9442'. [ 460.469412][T24903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9448'. [ 461.259760][T24952] sock: sock_timestamping_bind_phc: sock not bind to device [ 461.642833][T24976] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 461.719263][T24980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9487'. [ 461.947943][T24992] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9493'. [ 461.972938][T24992] 0·: renamed from hsr_slave_1 (while UP) [ 461.990829][T24992] 0·: entered allmulticast mode [ 462.000712][T24992] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 462.172304][T25002] netlink: 'syz.3.9498': attribute type 1 has an invalid length. [ 462.185446][T25002] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.9498'. [ 462.722884][T25034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9513'. [ 462.772699][T25034] netlink: 136 bytes leftover after parsing attributes in process `syz.3.9513'. [ 463.129288][T25058] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9524'. [ 463.808349][T25090] tipc: Started in network mode [ 463.833781][T25090] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 463.855700][T25090] tipc: Enabled bearer , priority 10 [ 464.369469][T25117] tipc: Started in network mode [ 464.374488][T25117] tipc: Node identity ac1414, cluster identity 4711 [ 464.403628][T25122] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.9554'. [ 464.413975][T25117] tipc: New replicast peer: 0.0.0.0 [ 464.422297][T25117] tipc: Enabled bearer , priority 10 [ 464.645708][T25131] netlink: 'syz.1.9558': attribute type 3 has an invalid length. [ 464.985003][ T5395] tipc: Node number set to 4269801642 [ 465.314473][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9573'. [ 465.343999][T25162] IPVS: Error joining to the multicast group [ 465.535187][ T944] tipc: Node number set to 2886996992 [ 465.873110][T25191] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 466.048651][T25197] netlink: 'syz.0.9591': attribute type 1 has an invalid length. [ 466.074917][T25197] netlink: 9388 bytes leftover after parsing attributes in process `syz.0.9591'. [ 467.901892][T25275] pim6reg527: entered allmulticast mode [ 468.114469][T25285] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9633'. [ 468.133351][T25285] nbd: illegal input index 61504 [ 468.892543][T25316] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.901598][T25316] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.910495][T25316] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.920058][T25316] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.093649][T25323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9651'. [ 469.123993][T25323] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9651'. [ 469.152769][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9651'. [ 469.183601][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9651'. [ 469.204241][T25323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9651'. [ 469.244938][T25323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9651'. [ 469.539893][T25343] netlink: 'syz.1.9661': attribute type 3 has an invalid length. [ 470.075378][T25368] macvlan2: entered promiscuous mode [ 470.080735][T25368] macvlan2: entered allmulticast mode [ 470.799850][T25402] netlink: 'syz.2.9692': attribute type 3 has an invalid length. [ 471.116615][T25416] netlink: 277 bytes leftover after parsing attributes in process `syz.4.9698'. [ 471.991009][T25453] netlink: 'syz.2.9716': attribute type 1 has an invalid length. [ 472.214586][T25465] IPVS: Error connecting to the multicast addr [ 473.756646][T25536] netlink: 13 bytes leftover after parsing attributes in process `syz.1.9751'. [ 474.234615][T25556] netlink: 'syz.4.9757': attribute type 12 has an invalid length. [ 474.257445][T25556] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9757'. [ 475.964722][T25622] netlink: 'syz.0.9791': attribute type 1 has an invalid length. [ 475.993341][T25622] netlink: 9364 bytes leftover after parsing attributes in process `syz.0.9791'. [ 476.024638][T25622] netlink: 'syz.0.9791': attribute type 1 has an invalid length. [ 476.122829][T25629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9793'. [ 476.181766][T25629] netlink: 124 bytes leftover after parsing attributes in process `syz.2.9793'. [ 476.212863][ T5322] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 476.223320][ T5322] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 476.236041][ T5322] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 476.254046][ T5322] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 476.267182][ T5322] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 476.274698][ T5322] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 476.930328][T25652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9802'. [ 477.176461][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9805'. [ 477.195770][T25630] chnl_net:caif_netlink_parms(): no params data found [ 477.670200][T25676] tipc: Enabling of bearer rejected, failed to enable media [ 477.705248][T25630] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.722704][T25630] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.755014][T25630] bridge_slave_0: entered allmulticast mode [ 477.786795][T25630] bridge_slave_0: entered promiscuous mode [ 477.816708][T25630] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.823885][T25630] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.854313][T25630] bridge_slave_1: entered allmulticast mode [ 477.887144][T25630] bridge_slave_1: entered promiscuous mode [ 478.202764][T25630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.247060][T25630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.268119][T25699] IPVS: Error connecting to the multicast addr [ 478.356064][ T5322] Bluetooth: hci6: command tx timeout [ 478.400429][T25630] team0: Port device team_slave_0 added [ 478.423667][T25630] team0: Port device team_slave_1 added [ 478.588152][T25630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.610173][T25630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.661597][T25630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.727816][T25630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.749077][T25630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.833343][T25630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.884437][T25715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.891805][T25715] IPv6: NLM_F_CREATE should be set when creating new route [ 479.092886][T25630] hsr_slave_0: entered promiscuous mode [ 479.109515][T25630] hsr_slave_1: entered promiscuous mode [ 479.120992][T25630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.145020][T25630] Cannot create hsr debugfs directory [ 479.859080][T25630] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.046505][T25630] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.188932][T25630] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.328290][T25630] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.435046][ T5322] Bluetooth: hci6: command tx timeout [ 480.762151][T25630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.781339][T25630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.820771][T25630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.862926][T25630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.108553][T25781] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 481.225627][T25785] tipc: Can't bind to reserved service type 1 [ 481.265263][T25630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.332224][T25630] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.411900][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.419125][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.461996][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.469274][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.614664][T25630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.657240][T25798] netlink: 'syz.1.9867': attribute type 4 has an invalid length. [ 481.785339][T25802] netlink: 'syz.1.9867': attribute type 4 has an invalid length. [ 482.138543][T25630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.207259][T25819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9874'. [ 482.234307][T25820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9876'. [ 482.321797][T25630] veth0_vlan: entered promiscuous mode [ 482.369403][T25630] veth1_vlan: entered promiscuous mode [ 482.476347][T25630] veth0_macvtap: entered promiscuous mode [ 482.511951][T25630] veth1_macvtap: entered promiscuous mode [ 482.515252][ T5322] Bluetooth: hci6: command tx timeout [ 482.614451][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.648131][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.681910][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.717555][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.749923][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.786121][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.811560][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.833281][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.866021][T25630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.893366][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.954809][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.990764][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.033911][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.054347][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.080025][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.101551][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.130730][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.160302][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.199496][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.219029][T25630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.243036][T25630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.279459][T25630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.283572][T25851] netlink: 'syz.2.9891': attribute type 11 has an invalid length. [ 483.374418][T25630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.415104][T25630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.423846][T25630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.486630][T25630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.830247][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.859278][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.945130][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.974402][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.249694][T25877] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9904'. [ 484.462019][T25886] netlink: 'syz.0.9908': attribute type 196 has an invalid length. [ 484.596686][ T5322] Bluetooth: hci6: command tx timeout [ 484.638772][T25893] netlink: 'syz.4.9910': attribute type 4 has an invalid length. [ 484.667387][T25893] netlink: 'syz.4.9910': attribute type 1 has an invalid length. [ 484.695679][T25893] netlink: 88156 bytes leftover after parsing attributes in process `syz.4.9910'. [ 485.257465][T25922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9924'. [ 485.851370][T25940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9933'. [ 485.880710][T25940] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9933'. [ 485.911498][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9933'. [ 486.442967][T25968] netlink: 'syz.3.9945': attribute type 10 has an invalid length. [ 486.531820][T25968] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.588483][T25968] bond0: (slave team0): Enslaving as an active interface with an up link [ 486.655939][T25973] netlink: 'syz.3.9945': attribute type 10 has an invalid length. [ 486.696070][T25973] bond0: (slave team0): Releasing backup interface [ 486.742032][T25973] bridge0: port 3(team0) entered blocking state [ 486.785080][T25973] bridge0: port 3(team0) entered disabled state [ 486.806968][T25973] team0: entered allmulticast mode [ 486.837277][T25973] team_slave_0: entered allmulticast mode [ 486.861541][T25973] team_slave_1: entered allmulticast mode [ 486.887217][T25973] team0: entered promiscuous mode [ 486.898339][T25973] team_slave_0: entered promiscuous mode [ 486.920107][T25973] team_slave_1: entered promiscuous mode [ 487.153340][T25990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9957'. [ 487.192260][T25993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9956'. [ 488.113946][T26027] smc: ib device syz2 ibport 2 erased user defined pnetid S [ 488.455386][T26048] netlink: 'syz.2.9981': attribute type 29 has an invalid length. [ 488.478584][T26043] netlink: 'syz.2.9981': attribute type 29 has an invalid length. [ 488.744331][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9989'. [ 488.745311][T26061] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9988'. [ 488.763791][T26064] nbd: socks must be embedded in a SOCK_ITEM attr [ 489.286360][T26081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9998'. [ 489.611276][T26093] netlink: 'syz.0.10004': attribute type 10 has an invalid length. [ 489.684974][T26093] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.706216][T26093] bond0: (slave team0): Enslaving as an active interface with an up link [ 489.984289][ T9] IPVS: starting estimator thread 0... [ 490.075556][T26109] IPVS: using max 17 ests per chain, 40800 per kthread [ 490.136750][T26116] rdma_op ffff88806261c1f0 conn xmit_rdma 0000000000000000 [ 490.949608][T26154] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.10030'. [ 490.959922][T26154] netlink: 18430 bytes leftover after parsing attributes in process `syz.4.10030'. [ 490.979530][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10029'. [ 491.004859][T26157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10029'. [ 491.388481][T26175] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 491.433766][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10040'. [ 492.018992][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10055'. [ 492.443393][T26231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10067'. [ 493.411142][T26272] netlink: 'syz.2.10086': attribute type 1 has an invalid length. [ 494.088359][T26296] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 495.183895][T26352] netlink: 'syz.3.10126': attribute type 29 has an invalid length. [ 495.200237][T26353] IPv6: sit2: Disabled Multicast RS [ 495.658209][T26372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10136'. [ 495.695325][T26372] netlink: 272 bytes leftover after parsing attributes in process `syz.4.10136'. [ 495.720702][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10136'. [ 495.756986][T26379] netlink: 125880 bytes leftover after parsing attributes in process `syz.1.10139'. [ 495.784560][T26379] netlink: 18430 bytes leftover after parsing attributes in process `syz.1.10139'. [ 496.139078][T26400] netlink: 'syz.1.10149': attribute type 32 has an invalid length. [ 496.155931][T26400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10149'. [ 496.185083][T26400] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 496.683581][T26424] netlink: 'syz.2.10162': attribute type 1 has an invalid length. [ 496.707826][T26424] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.10162'. [ 496.748760][T26424] netlink: 'syz.2.10162': attribute type 1 has an invalid length. [ 496.777334][T26424] netlink: 'syz.2.10162': attribute type 2 has an invalid length. [ 496.810690][T26424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10162'. [ 497.077266][T26443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10169'. [ 497.175299][T26448] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.10172'. [ 497.644254][T26472] netlink: 'syz.2.10182': attribute type 10 has an invalid length. [ 497.751729][T26472] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.822043][T26474] netlink: 'syz.2.10182': attribute type 10 has an invalid length. [ 497.863579][T26474] bridge0: port 3(team0) entered blocking state [ 497.908054][T26474] bridge0: port 3(team0) entered disabled state [ 497.940492][T26474] team0: entered allmulticast mode [ 497.954351][T26474] team_slave_0: entered allmulticast mode [ 497.973043][T26474] team_slave_1: entered allmulticast mode [ 497.993198][T26474] team0: entered promiscuous mode [ 498.009335][T26474] team_slave_0: entered promiscuous mode [ 498.022295][T26474] team_slave_1: entered promiscuous mode [ 498.064482][T26486] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 498.642139][T26507] pim6reg: entered allmulticast mode [ 498.700850][T26507] pim6reg: left allmulticast mode [ 499.052652][T26525] smc: net device ip6_vti0 erased user defined pnetid SYZ0 [ 499.082278][T26525] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 500.662614][T26591] NCSI netlink: No device for ifindex 0 [ 501.047487][T26608] __nla_validate_parse: 4 callbacks suppressed [ 501.047507][T26608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10248'. [ 501.085157][T26608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10248'. [ 501.251370][T26619] tipc: Enabled bearer , priority 10 [ 501.557039][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.115349][ T5322] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 502.126628][ T5322] Bluetooth: hci0: command 0x0406 tx timeout [ 502.193613][T26659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'. [ 502.954336][T26697] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10289'. [ 503.235551][T26707] netlink: 'syz.0.10295': attribute type 6 has an invalid length. [ 503.277559][T26707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10295'. [ 503.491622][T26714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10297'. [ 503.705037][T26719] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 505.016676][T26767] netlink: 'syz.3.10322': attribute type 1 has an invalid length. [ 505.075853][T26767] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.10322'. [ 505.140858][T26767] netlink: 'syz.3.10322': attribute type 1 has an invalid length. [ 506.007455][T26805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10341'. [ 507.159400][T26830] netlink: 'syz.0.10353': attribute type 322 has an invalid length. [ 507.177560][T26831] openvswitch: netlink: Missing key (keys=44, expected=10000000) [ 508.658058][T26877] tipc: Enabling of bearer rejected, failed to enable media [ 510.483931][T26941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10406'. [ 510.856154][T26957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10413'. [ 511.596309][T26999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10434'. [ 511.770522][T27005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10438'. [ 512.678221][T27038] RDS: rds_bind could not find a transport for ::c001:20:0:0, load rds_tcp or rds_rdma? [ 513.467597][T27070] ebtables: ebtables: counters copy to user failed while replacing table [ 514.321856][T27105] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.10484'. [ 514.389077][T27105] openvswitch: netlink: Actions may not be safe on all matching packets [ 514.701258][T27131] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.10497'. [ 514.799541][T27129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10494'. [ 514.862751][T27137] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.10501'. [ 514.911768][T27137] openvswitch: netlink: Actions may not be safe on all matching packets [ 515.340375][T27166] netlink: 288 bytes leftover after parsing attributes in process `syz.2.10513'. [ 515.576573][T27175] netlink: 'syz.1.10518': attribute type 1 has an invalid length. [ 515.738825][T27181] netlink: 'syz.1.10521': attribute type 46 has an invalid length. [ 516.680949][T27229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10542'. [ 516.690215][T27229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10542'. [ 516.725131][T27229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10542'. [ 516.752933][T27229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10542'. [ 517.181130][T27251] netlink: 'syz.0.10553': attribute type 29 has an invalid length. [ 517.217258][T27251] netlink: 'syz.0.10553': attribute type 29 has an invalid length. [ 518.045124][T27296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10574'. [ 519.017990][T27340] tipc: Enabled bearer , priority 0 [ 519.798101][T27378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10614'. [ 519.829529][T27378] netlink: 'syz.0.10614': attribute type 1 has an invalid length. [ 519.844034][T27378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10614'. [ 519.864220][T27378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10614'. [ 519.912984][T27383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10616'. [ 520.658749][T27418] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 522.744903][T27518] netlink: 'syz.2.10680': attribute type 1 has an invalid length. [ 522.763093][T27518] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.10680'. [ 522.783860][T27518] netlink: 'syz.2.10680': attribute type 1 has an invalid length. [ 522.825099][T27518] netlink: 'syz.2.10680': attribute type 2 has an invalid length. [ 522.855226][T27518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10680'. [ 522.905524][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10683'. [ 522.924915][T27523] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 523.263111][T27539] netlink: 'syz.1.10691': attribute type 3 has an invalid length. [ 523.284992][T27539] netlink: 'syz.1.10691': attribute type 1 has an invalid length. [ 523.292925][T27539] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.10691'. [ 524.103717][T27585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10714'. [ 524.145100][T27585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10714'. [ 524.372496][ T5395] IPVS: starting estimator thread 0... [ 524.403992][T27600] netlink: 'syz.2.10723': attribute type 3 has an invalid length. [ 524.474890][T27602] netlink: 'syz.0.10721': attribute type 1 has an invalid length. [ 524.495359][T27598] IPVS: using max 19 ests per chain, 45600 per kthread [ 524.619521][T27610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10726'. [ 524.665085][T27610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10726'. [ 524.674164][T27610] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10726'. [ 524.717391][T27610] vlan2: entered allmulticast mode [ 524.737779][T27610] gretap0: entered allmulticast mode [ 524.760569][T27617] netlink: 'syz.1.10729': attribute type 8 has an invalid length. [ 525.007072][T27626] netlink: 'syz.4.10734': attribute type 32 has an invalid length. [ 525.027211][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10734'. [ 525.050710][T27626] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 526.005497][T27654] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 526.203090][T27666] batman_adv: batadv0: adding TT local entry 02:04:00:bf:05:00 to non-existent VLAN 1280 [ 527.296484][T27725] lo speed is unknown, defaulting to 1000 [ 527.606409][T27739] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.727740][T27747] tipc: Enabling of bearer rejected, failed to enable media [ 527.815846][T27751] __nla_validate_parse: 3 callbacks suppressed [ 527.815867][T27751] netlink: 332 bytes leftover after parsing attributes in process `syz.2.10796'. [ 527.819122][T27753] netlink: 'syz.0.10797': attribute type 11 has an invalid length. [ 527.861409][T27751] netlink: 'syz.2.10796': attribute type 9 has an invalid length. [ 527.864429][T27753] netlink: 'syz.0.10797': attribute type 1 has an invalid length. [ 527.890057][T27751] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10796'. [ 527.905748][T27753] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.10797'. [ 527.938799][T27751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10796'. [ 528.050172][T27761] netlink: 'syz.1.10801': attribute type 1 has an invalid length. [ 528.139313][T27766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10802'. [ 528.241676][T27772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10806'. [ 529.080381][T27813] tipc: Enabling of bearer rejected, failed to enable media [ 529.162377][T27818] netlink: 'syz.0.10828': attribute type 10 has an invalid length. [ 529.257455][T27822] netlink: 'syz.0.10828': attribute type 10 has an invalid length. [ 529.302357][T27822] bond0: (slave team0): Releasing backup interface [ 529.340976][T27822] bridge0: port 3(team0) entered blocking state [ 529.355404][T27822] bridge0: port 3(team0) entered disabled state [ 529.385226][T27822] team0: entered allmulticast mode [ 529.390459][T27822] team_slave_0: entered allmulticast mode [ 529.411930][T27822] team_slave_1: entered allmulticast mode [ 529.439931][T27822] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 529.457182][T27822] team0: entered promiscuous mode [ 529.462775][T27822] team_slave_0: entered promiscuous mode [ 529.475965][T27822] team_slave_1: entered promiscuous mode [ 529.481812][T27822] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 530.107225][T27862] block nbd4: not configured, cannot reconfigure [ 530.195514][T27866] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10849'. [ 530.577363][T27886] netlink: 'syz.4.10859': attribute type 1 has an invalid length. [ 530.800727][T27896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10865'. [ 531.378950][T27922] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10878'. [ 532.010339][T27953] tipc: Enabling of bearer rejected, already enabled [ 532.334263][T27967] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10900'. [ 532.427974][T27970] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 533.430477][T28018] __nla_validate_parse: 1 callbacks suppressed [ 533.430496][T28018] netlink: 216 bytes leftover after parsing attributes in process `syz.0.10924'. [ 533.485628][T28018] netlink: 'syz.0.10924': attribute type 6 has an invalid length. [ 533.511085][T28021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10925'. [ 534.099466][T28044] netlink: 'syz.3.10935': attribute type 1 has an invalid length. [ 534.107862][T28044] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.10935'. [ 534.119394][T28044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10935'. [ 534.129838][T28044] netlink: 11 bytes leftover after parsing attributes in process `syz.3.10935'. [ 534.459295][T28060] netlink: 'syz.4.10944': attribute type 7 has an invalid length. [ 534.476009][T28060] Êü: entered promiscuous mode [ 534.570885][T28064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10946'. [ 534.581825][T28064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10946'. [ 536.044966][ T5322] Bluetooth: hci6: command 0x0405 tx timeout [ 536.674447][T28154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10989'. [ 536.902885][T28164] netlink: 'syz.3.10994': attribute type 1 has an invalid length. [ 536.922933][T28164] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.10994'. [ 537.079050][T28173] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10998'. [ 537.211696][T28180] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 537.341338][T28182] wlan1: mtu greater than device maximum [ 537.502858][ T5395] IPVS: starting estimator thread 0... [ 537.625019][T28197] IPVS: using max 17 ests per chain, 40800 per kthread [ 539.041200][T28278] pimreg: entered allmulticast mode [ 539.099068][T28278] pimreg: left allmulticast mode [ 539.704236][T28312] __nla_validate_parse: 3 callbacks suppressed [ 539.704256][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11065'. [ 539.941773][T28327] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11073'. [ 539.999647][T28327] gretap0: entered promiscuous mode [ 540.042927][T28329] netlink: 5 bytes leftover after parsing attributes in process `syz.0.11073'. [ 540.082904][T28329] 0ªX¹¦D: renamed from gretap0 [ 540.123371][T28329] 0ªX¹¦D: left promiscuous mode [ 540.137642][T28329] 0ªX¹¦D: entered allmulticast mode [ 540.160203][T28329] A link change request failed with some changes committed already. Interface 60ªX¹¦D may have been left with an inconsistent configuration, please check. [ 540.224985][T28336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11076'. [ 540.248491][T28340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11076'. [ 540.398862][T28347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11081'. [ 540.593221][T28359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11087'. [ 541.515178][T28414] netlink: 'syz.0.11113': attribute type 3 has an invalid length. [ 541.760794][T28430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11118'. [ 541.763394][T28428] netlink: 'syz.1.11120': attribute type 7 has an invalid length. [ 541.980553][T28435] tipc: Started in network mode [ 541.995010][T28435] tipc: Node identity , cluster identity 4711 [ 542.101901][T28443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11127'. [ 542.389327][T28460] netlink: 'syz.4.11136': attribute type 1 has an invalid length. [ 542.460633][T28466] netlink: 'syz.3.11137': attribute type 1 has an invalid length. [ 542.483774][T28460] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.11136'. [ 542.632497][T28475] netlink: 'syz.3.11143': attribute type 1 has an invalid length. [ 542.711348][T28481] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.720283][T28481] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.728995][T28481] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.737711][T28481] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.149121][T28562] netlink: 'syz.1.11182': attribute type 2 has an invalid length. [ 546.328287][T28674] __nla_validate_parse: 3 callbacks suppressed [ 546.328308][T28674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11240'. [ 546.667570][ T1851] IPVS: starting estimator thread 0... [ 546.766325][T28691] IPVS: using max 18 ests per chain, 43200 per kthread [ 546.941301][T28703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11254'. [ 546.965357][T28707] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 547.338739][T28728] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 548.578767][T28803] netlink: 'syz.3.11303': attribute type 3 has an invalid length. [ 549.086756][T28830] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11315'. [ 549.456023][T28853] netlink: 'syz.0.11327': attribute type 1 has an invalid length. [ 549.508391][T28857] netlink: 'syz.3.11329': attribute type 1 has an invalid length. [ 549.520177][T28857] netlink: 236 bytes leftover after parsing attributes in process `syz.3.11329'. [ 550.026491][T28888] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.11344'. [ 550.055248][T28888] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.11344'. [ 550.121979][T28892] lo: entered allmulticast mode [ 550.143357][T28892] lo: left allmulticast mode [ 550.155077][T28892] pimreg: left allmulticast mode [ 550.936664][T28939] netlink: 228 bytes leftover after parsing attributes in process `syz.4.11368'. [ 550.958857][T28939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11368'. [ 551.260955][T28952] bond0: entered promiscuous mode [ 551.274806][T28952] bond_slave_0: entered promiscuous mode [ 551.292975][T28952] bond_slave_1: entered promiscuous mode [ 551.300033][T28952] bond0: entered allmulticast mode [ 551.306928][T28952] bond_slave_0: entered allmulticast mode [ 551.312800][T28952] bond_slave_1: entered allmulticast mode [ 551.323569][T28952] team0: Port device bond0 added [ 551.479324][T28962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11378'. [ 551.829371][T28985] macvtap0: entered promiscuous mode [ 551.855184][T28985] macvtap0: entered allmulticast mode [ 551.860608][T28985] veth0_macvtap: entered allmulticast mode [ 553.331298][T29070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11430'. [ 553.354891][T29072] netlink: 'syz.4.11429': attribute type 4 has an invalid length. [ 553.392489][T29072] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11429'. [ 553.965660][T29105] tipc: Enabling of bearer rejected, failed to enable media [ 554.497045][T29137] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 554.887235][T29161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11475'. [ 554.907199][T29161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11475'. [ 554.927188][T29161] netlink: 'syz.0.11475': attribute type 2 has an invalid length. [ 555.826692][T29197] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.11493'. [ 555.838779][T29197] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.11493'. [ 555.848661][T29197] netlink: 572 bytes leftover after parsing attributes in process `syz.2.11493'. [ 556.244190][T29220] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11504'. [ 557.557092][T29294] tipc: Enabled bearer , priority 10 [ 557.580745][T29296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11539'. [ 558.029136][T29317] netlink: 'syz.1.11549': attribute type 10 has an invalid length. [ 558.798071][T29353] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11566'. [ 558.815426][T29356] netlink: 'syz.2.11567': attribute type 3 has an invalid length. [ 558.852026][T29356] netlink: 766 bytes leftover after parsing attributes in process `syz.2.11567'. [ 559.496392][T29397] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11589'. [ 560.240014][T29437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11609'. [ 560.275671][T29442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11611'. [ 560.396171][T29449] openvswitch: netlink: Unknown key attributes 2 [ 560.929345][T29480] netlink: 'syz.1.11631': attribute type 6 has an invalid length. [ 560.948469][T29480] netlink: 'syz.1.11631': attribute type 3 has an invalid length. [ 560.967587][T29480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11631'. [ 561.892522][T29532] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11654'. [ 561.909412][T29530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11653'. [ 561.948310][T29536] netlink: 'syz.0.11655': attribute type 3 has an invalid length. [ 561.981928][T29536] netlink: 'syz.0.11655': attribute type 1 has an invalid length. [ 562.010247][T29536] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.11655'. [ 562.859701][T29589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11681'. [ 563.178316][T29606] lo: entered allmulticast mode [ 563.184177][T29606] lo: left allmulticast mode [ 564.245018][T29665] netlink: 'syz.2.11715': attribute type 21 has an invalid length. [ 564.444786][T29676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11716'. [ 564.637059][T29682] netlink: 'syz.3.11721': attribute type 11 has an invalid length. [ 564.657865][T29683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11723'. [ 564.863895][T29690] netlink: 'syz.4.11726': attribute type 13 has an invalid length. [ 564.886127][T29690] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.11726'. [ 565.022449][T29699] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11730'. [ 565.049312][T29705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11733'. [ 565.089047][T29707] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11734'. [ 565.119087][T29707] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 565.306457][T29717] netlink: 'syz.3.11739': attribute type 10 has an invalid length. [ 565.399230][T29717] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 565.420614][T29717] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 565.436109][T29717] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 565.669216][T29729] tap0: tun_chr_ioctl cmd 1074025694 [ 565.881508][T29746] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 565.985771][T29749] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.11754'. [ 566.158466][T29760] netlink: 'syz.0.11758': attribute type 1 has an invalid length. [ 566.202944][T29760] netlink: 9336 bytes leftover after parsing attributes in process `syz.0.11758'. [ 566.231654][T29760] netlink: 'syz.0.11758': attribute type 8 has an invalid length. [ 566.425371][T29771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11765'. [ 567.056407][T29808] netlink: 'syz.1.11784': attribute type 2 has an invalid length. [ 567.277048][T29821] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 569.415234][T29895] tap0: tun_chr_ioctl cmd 1074025677 [ 569.445159][T29895] tap0: linktype set to 778 [ 569.515654][T29903] netlink: 'syz.1.11829': attribute type 14 has an invalid length. [ 570.615162][T29961] __nla_validate_parse: 4 callbacks suppressed [ 570.615182][T29961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11857'. [ 570.671524][T29961] syz_tun: left allmulticast mode [ 570.685321][T29961] syz_tun: left promiscuous mode [ 570.690555][T29961] bridge0: port 3(syz_tun) entered disabled state [ 570.722624][T29961] bridge_slave_1: left allmulticast mode [ 570.745764][T29961] bridge_slave_1: left promiscuous mode [ 570.754502][T29961] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.776264][T29961] €Â: left allmulticast mode [ 570.780997][T29961] €Â: left promiscuous mode [ 570.795096][T29961] bridge0: port 1(€Â) entered disabled state [ 571.377608][T29999] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 572.622628][T30064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11904'. [ 572.756487][T30074] sctp: [Deprecated]: syz.0.11905 (pid 30074) Use of int in maxseg socket option. [ 572.756487][T30074] Use struct sctp_assoc_value instead [ 573.737048][T30107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.916906][T30116] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11926'. [ 574.016949][T30122] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11929'. [ 574.055491][T30122] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 574.104549][T30126] netem: incorrect gi model size [ 574.607612][T30148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11944'. [ 574.654171][T30152] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 574.828645][T30158] bond0: option lp_interval: invalid value (18446744073709551602) [ 574.851857][T30158] bond0: option lp_interval: allowed values 1 - 2147483647 [ 575.345907][T30187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11957'. [ 575.701303][T30206] netlink: 'syz.4.11968': attribute type 3 has an invalid length. [ 575.721681][T30206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11968'. [ 576.530027][T30253] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.11989'. [ 576.549292][T30253] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 576.716547][T30263] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 576.749315][T30263] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 577.313351][T30293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12009'. [ 578.004793][T30332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12027'. [ 579.516272][T30406] netlink: 'syz.0.12063': attribute type 2 has an invalid length. [ 579.543666][T30406] netlink: 16142 bytes leftover after parsing attributes in process `syz.0.12063'. [ 580.076329][T30432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12074'. [ 580.915601][ T30] INFO: task syz.2.8527:22966 blocked for more than 143 seconds. [ 580.923387][ T30] Not tainted 6.11.0-rc4-syzkaller-00161-g3a0504d54b3b #0 [ 580.952423][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.972200][ T30] task:syz.2.8527 state:D stack:22960 pid:22966 tgid:22965 ppid:5329 flags:0x00004004 [ 580.993126][ T30] Call Trace: [ 581.000843][ T30] [ 581.003959][ T30] __schedule+0x1800/0x4a60 [ 581.010443][ T30] ? __pfx___schedule+0x10/0x10 [ 581.022548][ T30] ? __pfx_lock_release+0x10/0x10 [ 581.033969][ T30] ? schedule+0x90/0x320 [ 581.043970][ T30] schedule+0x14b/0x320 [ 581.054244][ T30] schedule_timeout+0xb0/0x310 [ 581.079571][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 581.092189][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 581.103243][ T30] ? wait_for_completion+0x2fe/0x620 [ 581.109353][ T30] ? wait_for_completion+0x2fe/0x620 [ 581.115650][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.120906][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 581.126999][ T30] ? wait_for_completion+0x2fe/0x620 [ 581.132420][ T30] wait_for_completion+0x355/0x620 [ 581.137900][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 581.143661][ T30] ? remove_client_context+0xc0/0x1e0 [ 581.149229][ T30] disable_device+0x1c7/0x360 [ 581.155305][ T30] ? __pfx_disable_device+0x10/0x10 [ 581.160703][ T30] __ib_unregister_device+0x2ac/0x3c0 [ 581.167044][ T30] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 581.172996][ T30] ib_unregister_device_and_put+0xb9/0xf0 [ 581.179171][ T30] nldev_dellink+0x2d6/0x320 [ 581.183788][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 581.189067][ T30] ? apparmor_capable+0x13b/0x1b0 [ 581.194127][ T30] ? bpf_lsm_capable+0x9/0x10 [ 581.199317][ T30] ? security_capable+0x90/0xb0 [ 581.204296][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 581.209827][ T30] rdma_nl_rcv+0x6dd/0x9e0 [ 581.214286][ T30] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 581.219458][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 581.225082][ T30] netlink_unicast+0x7f6/0x990 [ 581.229901][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 581.235719][ T30] ? __check_heap_object+0x57/0x100 [ 581.240952][ T30] ? __check_object_size+0x49c/0x900 [ 581.246311][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 581.251466][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 581.256999][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.262326][ T30] ? __import_iovec+0x536/0x820 [ 581.267594][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 581.272660][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 581.278150][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 581.283651][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.289300][ T30] __sock_sendmsg+0x221/0x270 [ 581.294027][ T30] ____sys_sendmsg+0x525/0x7d0 [ 581.299200][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.304603][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 581.309340][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 581.314508][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 581.321444][ T30] ? do_syscall_64+0x100/0x230 [ 581.326567][ T30] ? do_syscall_64+0xb6/0x230 [ 581.331270][ T30] do_syscall_64+0xf3/0x230 [ 581.335976][ T30] ? clear_bhb_loop+0x35/0x90 [ 581.340691][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.347095][ T30] RIP: 0033:0x7f3b6cd79e79 [ 581.351528][ T30] RSP: 002b:00007f3b6dbf0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.360703][ T30] RAX: ffffffffffffffda RBX: 00007f3b6cf15f80 RCX: 00007f3b6cd79e79 [ 581.368861][ T30] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 581.377382][ T30] RBP: 00007f3b6cde793e R08: 0000000000000000 R09: 0000000000000000 [ 581.385698][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.393697][ T30] R13: 0000000000000000 R14: 00007f3b6cf15f80 R15: 00007ffcf7a0df38 [ 581.402201][ T30] [ 581.411230][ T30] [ 581.411230][ T30] Showing all locks held in the system: [ 581.425445][ T30] 1 lock held by khungtaskd/30: [ 581.430325][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 581.440580][ T30] 4 locks held by kworker/u8:5/64: [ 581.446073][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 581.457173][ T30] #1: ffffc900015f7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 581.468431][ T30] #2: ffffffff8fc77b50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 581.478770][ T30] #3: ffff88804b1e06b0 (&device->unregistration_lock){+.+.}-{3:3}, at: rdma_dev_change_netns+0x3a/0x2f0 [ 581.490234][ T30] 3 locks held by kworker/u8:10/3034: [ 581.495999][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 581.508235][ T30] #1: ffffc9000a2d7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 581.520132][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 581.531713][ T30] 2 locks held by getty/4984: [ 581.536871][ T30] #0: ffff88802ae150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 581.546731][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 581.557602][ T30] 2 locks held by syz.2.8527/22966: [ 581.563062][ T30] #0: ffffffff952d2df8 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv+0x32d/0x9e0 [ 581.573450][ T30] #1: ffff88804b1e06b0 (&device->unregistration_lock){+.+.}-{3:3}, at: __ib_unregister_device+0x264/0x3c0 [ 581.585282][ T30] 2 locks held by syz.1.12088/30460: [ 581.590569][ T30] #0: ffffffff8fc84708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 581.600393][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 581.611460][ T30] [ 581.623681][ T30] ============================================= [ 581.623681][ T30] [ 581.632577][ T30] NMI backtrace for cpu 0 [ 581.636922][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00161-g3a0504d54b3b #0 [ 581.647439][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 581.657512][ T30] Call Trace: [ 581.660788][ T30] [ 581.663717][ T30] dump_stack_lvl+0x241/0x360 [ 581.668410][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.673635][ T30] ? __pfx__printk+0x10/0x10 [ 581.678247][ T30] ? vprintk_emit+0x667/0x7c0 [ 581.682928][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 581.687977][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 581.692944][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 581.699295][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 581.704768][ T30] ? irqentry_exit+0x63/0x90 [ 581.709444][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 581.714665][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 581.720671][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 581.726656][ T30] watchdog+0xff4/0x1040 [ 581.730903][ T30] ? watchdog+0x1ea/0x1040 [ 581.735345][ T30] ? __pfx_watchdog+0x10/0x10 [ 581.740058][ T30] kthread+0x2f0/0x390 [ 581.744181][ T30] ? __pfx_watchdog+0x10/0x10 [ 581.748879][ T30] ? __pfx_kthread+0x10/0x10 [ 581.753485][ T30] ret_from_fork+0x4b/0x80 [ 581.757919][ T30] ? __pfx_kthread+0x10/0x10 [ 581.762516][ T30] ret_from_fork_asm+0x1a/0x30 [ 581.767303][ T30] [ 581.771465][ T30] Sending NMI from CPU 0 to CPUs 1: [ 581.776777][ C1] NMI backtrace for cpu 1 [ 581.776799][ C1] CPU: 1 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.11.0-rc4-syzkaller-00161-g3a0504d54b3b #0 [ 581.776817][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 581.776827][ C1] Workqueue: bat_events batadv_nc_worker [ 581.776851][ C1] RIP: 0010:batadv_nc_worker+0x215/0x610 [ 581.776874][ C1] Code: 70 12 f6 e8 1d c6 35 00 89 c3 31 ff 89 c6 e8 32 74 12 f6 85 db 74 15 e8 19 a9 f8 f5 84 c0 74 18 e8 e0 6f 12 f6 48 8b 5c 24 10 65 e8 d4 6f 12 f6 48 8b 5c 24 10 eb 59 e8 e8 c5 35 00 89 c3 31 [ 581.776887][ C1] RSP: 0018:ffffc900015e7b58 EFLAGS: 00000293 [ 581.776903][ C1] RAX: ffffffff8b811b60 RBX: ffffffff8b811a1b RCX: ffff888016b19e00 [ 581.776915][ C1] RDX: 0000000000000000 RSI: ffffffff8c606d20 RDI: ffffffff8c606ce0 [ 581.776925][ C1] RBP: 0000000000000000 R08: ffffffff8b811b4e R09: 1ffffffff26e6908 [ 581.776936][ C1] R10: dffffc0000000000 R11: fffffbfff26e6909 R12: ffff88806ea08cc0 [ 581.776947][ C1] R13: 00000000000002c8 R14: ffff88804a226500 R15: dffffc0000000000 [ 581.776958][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 581.776970][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.776981][ C1] CR2: 0000001b30219ff8 CR3: 000000002c53e000 CR4: 00000000003506f0 [ 581.776993][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 581.777002][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 581.777011][ C1] Call Trace: [ 581.777017][ C1] [ 581.777023][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 581.777041][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 581.777063][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 581.777081][ C1] ? nmi_handle+0x2a/0x5a0 [ 581.777103][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 581.777122][ C1] ? nmi_handle+0x14f/0x5a0 [ 581.777136][ C1] ? nmi_handle+0x2a/0x5a0 [ 581.777151][ C1] ? batadv_nc_worker+0x215/0x610 [ 581.777172][ C1] ? default_do_nmi+0x63/0x160 [ 581.777191][ C1] ? exc_nmi+0x123/0x1f0 [ 581.777209][ C1] ? end_repeat_nmi+0xf/0x53 [ 581.777250][ C1] ? batadv_nc_worker+0xcb/0x610 [ 581.777275][ C1] ? batadv_nc_worker+0x1fe/0x610 [ 581.777298][ C1] ? batadv_nc_worker+0x210/0x610 [ 581.777323][ C1] ? batadv_nc_worker+0x215/0x610 [ 581.777349][ C1] ? batadv_nc_worker+0x215/0x610 [ 581.777375][ C1] ? batadv_nc_worker+0x215/0x610 [ 581.777399][ C1] [ 581.777405][ C1] [ 581.777412][ C1] ? batadv_nc_worker+0xcb/0x610 [ 581.777438][ C1] ? process_scheduled_works+0x945/0x1830 [ 581.777461][ C1] process_scheduled_works+0xa2c/0x1830 [ 581.777502][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.777532][ C1] ? assign_work+0x364/0x3d0 [ 581.777558][ C1] worker_thread+0x86d/0xd40 [ 581.777591][ C1] ? __kthread_parkme+0x169/0x1d0 [ 581.777618][ C1] ? __pfx_worker_thread+0x10/0x10 [ 581.777642][ C1] kthread+0x2f0/0x390 [ 581.777668][ C1] ? __pfx_worker_thread+0x10/0x10 [ 581.777691][ C1] ? __pfx_kthread+0x10/0x10 [ 581.777718][ C1] ret_from_fork+0x4b/0x80 [ 581.777742][ C1] ? __pfx_kthread+0x10/0x10 [ 581.777768][ C1] ret_from_fork_asm+0x1a/0x30 [ 581.777803][ C1] [ 581.778989][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 582.093228][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00161-g3a0504d54b3b #0 [ 582.103728][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 582.113792][ T30] Call Trace: [ 582.117069][ T30] [ 582.120000][ T30] dump_stack_lvl+0x241/0x360 [ 582.124689][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.129981][ T30] ? __pfx__printk+0x10/0x10 [ 582.134575][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.140588][ T30] ? vscnprintf+0x5d/0x90 [ 582.144933][ T30] panic+0x349/0x860 [ 582.148833][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 582.154987][ T30] ? __pfx_panic+0x10/0x10 [ 582.159401][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 582.164773][ T30] ? __irq_work_queue_local+0x137/0x410 [ 582.170318][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 582.175689][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 582.181862][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 582.188035][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 582.194206][ T30] watchdog+0x1033/0x1040 [ 582.198542][ T30] ? watchdog+0x1ea/0x1040 [ 582.202984][ T30] ? __pfx_watchdog+0x10/0x10 [ 582.207688][ T30] kthread+0x2f0/0x390 [ 582.211772][ T30] ? __pfx_watchdog+0x10/0x10 [ 582.216452][ T30] ? __pfx_kthread+0x10/0x10 [ 582.221049][ T30] ret_from_fork+0x4b/0x80 [ 582.225471][ T30] ? __pfx_kthread+0x10/0x10 [ 582.230078][ T30] ret_from_fork_asm+0x1a/0x30 [ 582.234866][ T30] [ 582.238119][ T30] Kernel Offset: disabled [ 582.242450][ T30] Rebooting in 86400 seconds..