last executing test programs: 3m8.700113577s ago: executing program 0 (id=3817): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) 3m8.387045676s ago: executing program 0 (id=3824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x7000000, 0xe, 0x0, &(0x7f00000002c0)="428280f46aa1d3f08a90b1e2e0dc", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3m8.138403216s ago: executing program 0 (id=3829): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) 3m7.905514649s ago: executing program 0 (id=3834): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "b2be4bc53e13496458a584878298a2d3700dcd538a87e8351c1a6bd53d255bd04d"}}]}, 0x160}}, 0x0) 3m7.660219936s ago: executing program 0 (id=3840): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_lifetime={0x4, 0xd2565b52721f9b5f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x68}}, 0x0) 3m7.400174817s ago: executing program 0 (id=3846): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) 2m52.342040298s ago: executing program 32 (id=3846): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) 2m36.409556285s ago: executing program 5 (id=4377): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2m36.112039601s ago: executing program 5 (id=4382): r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x3, 0xa29, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x64, 0x4, 0x0, 0x4, 0x0, @multicast1}}}}) 2m35.890295895s ago: executing program 5 (id=4386): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a00000afe0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x1b) 2m35.656822478s ago: executing program 5 (id=4390): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7fffffff, 'syz1\x00', @null, 0x9, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) 2m35.45568575s ago: executing program 5 (id=4394): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1fc, 0x0, 0x5}}) 2m35.244083015s ago: executing program 5 (id=4399): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 2m20.118681595s ago: executing program 33 (id=4399): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 4.052768045s ago: executing program 2 (id=7003): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) 2.862263082s ago: executing program 2 (id=7021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a05000000000000000000010000050900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) 1.198681598s ago: executing program 6 (id=7045): unshare(0x20000400) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x16) 1.197851042s ago: executing program 1 (id=7046): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES32=r0], 0x48}}, 0x840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.111172733s ago: executing program 4 (id=7047): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000003c0)={0x3, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e20, @multicast1}}]}, 0x110) 1.072802025s ago: executing program 3 (id=7048): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) 1.041683453s ago: executing program 6 (id=7049): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002) 981.826078ms ago: executing program 1 (id=7050): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x4000003, @private2={0xfc, 0x2, '\x00', 0x1}, 0x43}, 0x1c) 896.920584ms ago: executing program 3 (id=7051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0) 896.16536ms ago: executing program 4 (id=7052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x5, 0xe, 0xffff, 0x14, 0x6}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x30, 0x28, 0x66, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x42, 0x0, 0x0, 0x46}}}}}, 0x36) 805.5334ms ago: executing program 1 (id=7053): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000300)=0xfd3d) 749.441572ms ago: executing program 2 (id=7054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0xff1a, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x200003}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40280a1}, 0x8004) 683.013238ms ago: executing program 6 (id=7055): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0xb, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0xb}], 0x10, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600080600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 682.503887ms ago: executing program 3 (id=7056): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24) close(r0) 632.589055ms ago: executing program 4 (id=7057): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @remote, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 584.331035ms ago: executing program 1 (id=7058): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 526.920756ms ago: executing program 3 (id=7059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded72407080001"], 0x150}}, 0x0) 517.433909ms ago: executing program 2 (id=7060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, r1, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}]}, 0x54}}, 0x0) 420.905092ms ago: executing program 3 (id=7061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x6, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 420.177856ms ago: executing program 6 (id=7062): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) 395.689042ms ago: executing program 4 (id=7063): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x4000) 260.017755ms ago: executing program 2 (id=7064): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) 251.755382ms ago: executing program 3 (id=7065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x33, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 238.359394ms ago: executing program 6 (id=7066): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x4001000) 200.964558ms ago: executing program 1 (id=7067): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001cc0)) 200.279639ms ago: executing program 4 (id=7068): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 114.333231ms ago: executing program 2 (id=7069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) 113.506571ms ago: executing program 6 (id=7070): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07022cbd7000000000000100000008000880040007012c0004800500030001000000050003000000000005000300010000000500030080ff0000050003000200000008000100030000000800020001"], 0x58}}, 0x880) 67.417082ms ago: executing program 1 (id=7071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) 0s ago: executing program 4 (id=7072): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) kernel console output (not intermixed with test programs): 4.416656][ T6090] veth1_vlan: entered promiscuous mode [ 104.426683][ T6084] veth1_macvtap: entered promiscuous mode [ 104.503600][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.523821][ T6086] veth0_vlan: entered promiscuous mode [ 104.532356][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.543003][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.553502][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.578356][ T1011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.604362][ T1011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.614367][ T1011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.625791][ T1011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.643090][ T6086] veth1_vlan: entered promiscuous mode [ 104.673646][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.708374][ T6090] veth0_macvtap: entered promiscuous mode [ 104.732948][ T6090] veth1_macvtap: entered promiscuous mode [ 104.740830][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.755958][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.766251][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.823502][ T6086] veth0_macvtap: entered promiscuous mode [ 104.834961][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.852568][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.925643][ T6086] veth1_macvtap: entered promiscuous mode [ 104.939685][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.975705][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.010710][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.024133][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.043906][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.049088][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.185777][ T1011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.204188][ T1011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.234273][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.278900][ T1011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.302009][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.306859][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.322611][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.381240][ T1011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.426629][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.447665][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.476875][ T3573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.495276][ T3573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.556265][ T3573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.584638][ T3573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.619734][ T6088] Bluetooth: hci0: command tx timeout [ 105.724930][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.745286][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.778141][ T6088] Bluetooth: hci1: command tx timeout [ 105.858562][ T6088] Bluetooth: hci2: command tx timeout [ 105.882859][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.935078][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.935086][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.956965][ T6088] Bluetooth: hci3: command tx timeout [ 105.973177][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.017726][ T6088] Bluetooth: hci4: command tx timeout [ 106.205824][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.233874][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.390505][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.416372][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.716603][ T6442] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 115.125538][ T6583] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 122.068607][ T6854] IPv6: addrconf: prefix option has invalid lifetime [ 122.075538][ T6854] IPv6: addrconf: prefix option has invalid lifetime [ 122.082301][ T6854] IPv6: addrconf: prefix option has invalid lifetime [ 132.987943][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.994464][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.071366][ T7357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.789133][ T7513] IPv6: addrconf: prefix option has invalid lifetime [ 146.800971][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.577997][ T8710] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 170.220856][ T8736] IPv6: addrconf: prefix option has invalid lifetime [ 173.708922][ T8874] IPv6: addrconf: prefix option has invalid lifetime [ 178.211240][ T9062] IPv6: addrconf: prefix option has invalid lifetime [ 186.255117][ T9420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1750'. [ 186.914600][ T9442] IPv6: sit1: Disabled Multicast RS [ 186.942894][ T9442] sit1: entered allmulticast mode [ 188.947658][ T9533] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1805'. [ 188.977819][ T9533] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1805'. [ 189.741368][ T9553] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.902769][ T9559] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1816'. [ 190.902545][ T9592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.949871][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'. [ 192.777865][ T9668] openvswitch: netlink: IP tunnel dst address not specified [ 193.305554][ T9690] team0: entered promiscuous mode [ 193.334270][ T9690] team_slave_0: entered promiscuous mode [ 193.360672][ T9690] team_slave_1: entered promiscuous mode [ 193.386963][ T9690] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 194.442502][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.453283][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.717676][ T9726] netlink: 'syz.2.1895': attribute type 1 has an invalid length. [ 194.731670][ T9726] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1895'. [ 195.269798][ T9745] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1906'. [ 195.809143][ T9760] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 195.916745][ T9763] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.693801][ T9790] ip6gre1: entered allmulticast mode [ 196.826285][ T9794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1926'. [ 196.864121][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 196.905396][ T9798] netlink: 'syz.4.1928': attribute type 6 has an invalid length. [ 197.324759][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 197.382212][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 197.561711][ T9818] netlink: 'syz.3.1936': attribute type 21 has an invalid length. [ 197.599174][ T9818] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 197.614366][ T9818] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1936'. [ 198.608468][ T9845] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1947'. [ 198.787833][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 199.099361][ T9861] netlink: 'syz.3.1953': attribute type 7 has an invalid length. [ 199.132110][ T9861] netlink: 'syz.3.1953': attribute type 8 has an invalid length. [ 199.309208][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'. [ 199.848364][ T9889] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 200.512972][ T9886] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 201.774688][ T9948] IPv6: sit2: Disabled Multicast RS [ 201.807165][ T9948] sit2: entered allmulticast mode [ 202.312616][ T9966] netlink: 'syz.3.1993': attribute type 37 has an invalid length. [ 202.805324][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2001'. [ 202.861699][ T9984] tipc: Can't bind to reserved service type 2 [ 203.389562][ T9998] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2009'. [ 203.401158][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2011'. [ 204.009108][T10026] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2020'. [ 204.663741][T10049] netlink: 'syz.3.2029': attribute type 2 has an invalid length. [ 204.698773][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 204.726528][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 204.737571][T10049] netlink: 'syz.3.2029': attribute type 8 has an invalid length. [ 204.745370][T10049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2029'. [ 205.662585][T10083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2044'. [ 206.602506][T10121] syz.1.2063 uses obsolete (PF_INET,SOCK_PACKET) [ 206.606108][T10122] netlink: 'syz.2.2062': attribute type 1 has an invalid length. [ 206.658196][T10122] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2062'. [ 206.686266][T10125] netlink: 'syz.4.2065': attribute type 3 has an invalid length. [ 206.736264][T10125] netlink: 'syz.4.2065': attribute type 1 has an invalid length. [ 207.309805][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2073'. [ 207.342589][T10147] netlink: 'syz.3.2075': attribute type 5 has an invalid length. [ 207.816197][T10162] nft_compat: unsupported protocol 0 [ 207.933152][T10168] __nla_validate_parse: 1 callbacks suppressed [ 207.933172][T10168] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2084'. [ 208.337739][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 208.387491][T10183] netlink: 'syz.0.2092': attribute type 1 has an invalid length. [ 208.463080][T10186] netlink: 'syz.2.2093': attribute type 10 has an invalid length. [ 208.568092][T10186] batman_adv: batadv0: Adding interface: netdevsim0 [ 208.623318][T10186] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.681290][T10196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2098'. [ 208.697952][T10186] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 208.771176][T10191] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 209.096225][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 210.858408][T10262] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 211.017651][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 211.795625][T10295] Illegal XDP return value 4294967274 on prog (id 280) dev N/A, expect packet loss! [ 212.397881][T10317] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2153'. [ 212.457072][T10319] warning: `syz.2.2155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 212.607633][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'. [ 212.886397][T10335] sctp: [Deprecated]: syz.3.2163 (pid 10335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.886397][T10335] Use struct sctp_sack_info instead [ 213.013968][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2165'. [ 213.326060][T10352] netlink: 'syz.0.2170': attribute type 10 has an invalid length. [ 213.459971][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'. [ 214.155967][T10379] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 214.434735][T10390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2189'. [ 214.465244][T10390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2189'. [ 214.527571][T10393] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2191'. [ 214.553330][T10391] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 214.603132][T10391] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 214.631726][T10395] ±ÿ: renamed from batadv_slave_1 (while UP) [ 215.293866][T10421] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 215.337644][T10422] netlink: 'syz.2.2205': attribute type 9 has an invalid length. [ 215.371510][T10422] netlink: 'syz.2.2205': attribute type 7 has an invalid length. [ 215.394449][T10422] netlink: 'syz.2.2205': attribute type 8 has an invalid length. [ 215.432786][T10425] bridge0: port 3(netdevsim2) entered blocking state [ 215.469546][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 215.505725][T10425] bridge0: port 3(netdevsim2) entered disabled state [ 215.568524][T10425] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 215.583582][T10425] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 215.605039][T10425] bridge0: port 3(netdevsim2) entered blocking state [ 215.612130][T10425] bridge0: port 3(netdevsim2) entered forwarding state [ 216.148361][T10449] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 216.295858][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 216.523830][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'. [ 216.568410][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 216.946656][T10486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.086351][T10526] bond0: option use_carrier: invalid value (255) [ 218.372120][T10532] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 218.407892][T10534] netlink: 'syz.4.2254': attribute type 3 has an invalid length. [ 218.455681][T10534] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2254'. [ 219.307422][T10569] raw_sendmsg: syz.3.2267 forgot to set AF_INET. Fix it! [ 219.648373][T10581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2272'. [ 220.757707][T10627] bridge0: port 3(netdevsim2) entered blocking state [ 220.787749][T10627] bridge0: port 3(netdevsim2) entered disabled state [ 220.806451][T10627] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 220.852836][T10627] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 220.880229][T10627] bridge0: port 3(netdevsim2) entered blocking state [ 220.887146][T10627] bridge0: port 3(netdevsim2) entered forwarding state [ 221.732259][T10663] netlink: 'syz.1.2307': attribute type 13 has an invalid length. [ 222.070082][T10673] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.099708][T10601] Bluetooth: hci1: command 0x0406 tx timeout [ 222.100612][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 222.106499][T10601] Bluetooth: hci3: command 0x0406 tx timeout [ 222.555548][T10692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2319'. [ 222.861313][T10706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2327'. [ 223.478432][T10729] netlink: 'syz.1.2339': attribute type 32 has an invalid length. [ 223.508993][T10729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2339'. [ 224.326997][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2352'. [ 224.348488][T10763] bridge_slave_1: left allmulticast mode [ 224.367113][T10765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2352'. [ 224.376213][T10763] bridge_slave_1: left promiscuous mode [ 224.472103][T10763] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.512770][T10773] openvswitch: netlink: Message has 16 unknown bytes. [ 224.562642][T10763] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 224.656805][T10776] netlink: 'syz.3.2358': attribute type 11 has an invalid length. [ 225.001323][T10791] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2365'. [ 225.897631][T10828] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2383'. [ 225.906828][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 225.974460][T10828] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2383'. [ 226.636571][T10851] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 226.684109][T10851] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 226.890633][T10861] netlink: 'syz.1.2399': attribute type 1 has an invalid length. [ 226.927465][T10861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2399'. [ 227.070607][T10867] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 227.804311][T10890] netlink: set zone limit has 4 unknown bytes [ 227.922141][T10901] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 228.007793][T10901] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 228.698704][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2434'. [ 228.995550][T10935] openvswitch: netlink: Message has 1 unknown bytes. [ 229.033745][T10935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.497504][T10953] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 229.545306][T10953] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2444'. [ 229.986754][T10967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2452'. [ 230.832495][T10994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2465'. [ 231.550863][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2480'. [ 231.868449][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'. [ 232.572525][T11067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.949888][T11122] netlink: 'syz.1.2521': attribute type 21 has an invalid length. [ 233.993431][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 234.044476][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2525'. [ 234.334373][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'. [ 234.788360][T11158] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2537'. [ 234.872122][T11164] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 234.874817][T11158] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 234.895066][T11164] batman_adv: batadv0: Removing interface: netdevsim0 [ 234.902295][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 234.943245][T11158] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 234.965262][T11164] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 236.067621][T11210] netlink: 'syz.1.2557': attribute type 11 has an invalid length. [ 236.326226][T11222] netlink: 'syz.3.2565': attribute type 1 has an invalid length. [ 236.616512][T11237] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2570'. [ 236.847470][T11244] netlink: 704 bytes leftover after parsing attributes in process `syz.4.2572'. [ 237.396309][T11265] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2581'. [ 237.467567][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2583'. [ 237.575938][T11271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2584'. [ 237.711970][T11277] netlink: 'syz.0.2586': attribute type 3 has an invalid length. [ 238.984428][T11330] netlink: 'syz.3.2611': attribute type 21 has an invalid length. [ 239.046610][T11330] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.084580][T11330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.092149][T11330] IPv6: NLM_F_CREATE should be set when creating new route [ 239.099527][T11330] IPv6: NLM_F_CREATE should be set when creating new route [ 239.106875][T11330] IPv6: NLM_F_CREATE should be set when creating new route [ 239.178031][T11332] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 239.190803][T11332] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 239.611981][T11357] __nla_validate_parse: 4 callbacks suppressed [ 239.612003][T11357] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2627'. [ 239.643231][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 239.844714][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 240.105122][T11372] netlink: 'syz.2.2634': attribute type 1 has an invalid length. [ 240.115003][T11372] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2634'. [ 240.662795][T11400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2648'. [ 240.702066][T11400] netlink: 245 bytes leftover after parsing attributes in process `syz.3.2648'. [ 240.928727][T11411] netlink: 'syz.3.2653': attribute type 41 has an invalid length. [ 241.036640][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2656'. [ 241.128629][T11420] netlink: 'syz.3.2658': attribute type 15 has an invalid length. [ 241.223422][T11422] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2659'. [ 242.100447][T11448] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 242.147500][T11448] CPU: 0 UID: 0 PID: 11448 Comm: syz.1.2672 Not tainted syzkaller #0 PREEMPT(full) [ 242.147530][T11448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.147540][T11448] Call Trace: [ 242.147549][T11448] [ 242.147557][T11448] dump_stack_lvl+0x189/0x250 [ 242.147593][T11448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.147618][T11448] ? __pfx__printk+0x10/0x10 [ 242.147659][T11448] ? kernfs_path_from_node+0x2f/0x290 [ 242.147680][T11448] ? kernfs_path_from_node+0x250/0x290 [ 242.147698][T11448] ? kernfs_path_from_node+0x2f/0x290 [ 242.147721][T11448] sysfs_warn_dup+0x8e/0xa0 [ 242.147740][T11448] sysfs_do_create_link_sd+0xc0/0x110 [ 242.147764][T11448] device_add_class_symlinks+0x1cf/0x240 [ 242.147788][T11448] device_add+0x475/0xb50 [ 242.147814][T11448] wiphy_register+0x1ba6/0x28d0 [ 242.147854][T11448] ? __pfx_wiphy_register+0x10/0x10 [ 242.147872][T11448] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 242.147904][T11448] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 242.147933][T11448] ieee80211_register_hw+0x3425/0x4080 [ 242.147976][T11448] ? ieee80211_register_hw+0x1451/0x4080 [ 242.148010][T11448] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 242.148038][T11448] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 242.148075][T11448] ? __hrtimer_setup+0x187/0x210 [ 242.148093][T11448] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 242.148125][T11448] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 242.148189][T11448] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 242.148212][T11448] ? trace_kmalloc+0x1f/0xd0 [ 242.148233][T11448] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 242.148258][T11448] ? kstrndup+0xbf/0x160 [ 242.148291][T11448] hwsim_new_radio_nl+0xea4/0x1b10 [ 242.148321][T11448] ? __pfx___nla_validate_parse+0x10/0x10 [ 242.148368][T11448] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 242.148411][T11448] ? __nla_parse+0x40/0x60 [ 242.148444][T11448] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 242.148480][T11448] genl_family_rcv_msg_doit+0x215/0x300 [ 242.148515][T11448] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 242.148558][T11448] ? bpf_lsm_capable+0x9/0x20 [ 242.148585][T11448] ? security_capable+0x7e/0x2e0 [ 242.148622][T11448] genl_rcv_msg+0x60e/0x790 [ 242.148668][T11448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.148692][T11448] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 242.148737][T11448] netlink_rcv_skb+0x205/0x470 [ 242.148754][T11448] ? __lock_acquire+0xab9/0xd20 [ 242.148783][T11448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.148811][T11448] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.148855][T11448] ? down_read+0x1ad/0x2e0 [ 242.148880][T11448] genl_rcv+0x28/0x40 [ 242.148901][T11448] netlink_unicast+0x82c/0x9e0 [ 242.148941][T11448] ? __pfx_netlink_unicast+0x10/0x10 [ 242.148972][T11448] ? netlink_sendmsg+0x642/0xb30 [ 242.148989][T11448] ? skb_put+0x11b/0x210 [ 242.149015][T11448] netlink_sendmsg+0x805/0xb30 [ 242.149047][T11448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.149072][T11448] ? aa_sock_msg_perm+0xf1/0x1d0 [ 242.149093][T11448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.149114][T11448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.149134][T11448] __sock_sendmsg+0x219/0x270 [ 242.149167][T11448] ____sys_sendmsg+0x505/0x830 [ 242.149197][T11448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.149232][T11448] ? import_iovec+0x74/0xa0 [ 242.149260][T11448] ___sys_sendmsg+0x21f/0x2a0 [ 242.149287][T11448] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.149356][T11448] ? __fget_files+0x2a/0x420 [ 242.149374][T11448] ? __fget_files+0x3a0/0x420 [ 242.149406][T11448] __x64_sys_sendmsg+0x19b/0x260 [ 242.149434][T11448] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.149470][T11448] ? rcu_is_watching+0x15/0xb0 [ 242.149497][T11448] ? do_syscall_64+0xbe/0x3b0 [ 242.149523][T11448] do_syscall_64+0xfa/0x3b0 [ 242.149541][T11448] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.149558][T11448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.149577][T11448] ? clear_bhb_loop+0x60/0xb0 [ 242.149602][T11448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.149620][T11448] RIP: 0033:0x7f5580d8ebe9 [ 242.149650][T11448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.149665][T11448] RSP: 002b:00007f5581cec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.149688][T11448] RAX: ffffffffffffffda RBX: 00007f5580fc5fa0 RCX: 00007f5580d8ebe9 [ 242.149702][T11448] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 242.149714][T11448] RBP: 00007f5580e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 242.149726][T11448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.149738][T11448] R13: 00007f5580fc6038 R14: 00007f5580fc5fa0 R15: 00007ffce132be58 [ 242.149774][T11448] [ 242.151530][T11450] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.2673'. [ 242.787066][T11466] delete_channel: no stack [ 243.278973][T11458] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 243.343899][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2692'. [ 243.400354][T11488] netlink: 'syz.2.2692': attribute type 2 has an invalid length. [ 244.944632][T11558] __nla_validate_parse: 3 callbacks suppressed [ 244.944652][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 245.681325][T11593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2745'. [ 246.365477][T11623] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2758'. [ 246.440653][T11623] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2758'. [ 246.463752][T11623] netlink: 'syz.4.2758': attribute type 6 has an invalid length. [ 246.505814][T11623] netlink: 'syz.4.2758': attribute type 5 has an invalid length. [ 246.524082][T11630] netlink: 'syz.2.2761': attribute type 2 has an invalid length. [ 246.533071][T11623] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2758'. [ 246.553355][T11630] netlink: 'syz.2.2761': attribute type 1 has an invalid length. [ 246.702124][T11637] netlink: 'syz.3.2763': attribute type 7 has an invalid length. [ 246.706297][T11631] bond1: entered promiscuous mode [ 246.775979][T11631] bond1: entered allmulticast mode [ 246.793882][T11631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.064423][T11650] netlink: 'syz.4.2772': attribute type 5 has an invalid length. [ 247.092044][T11650] netlink: 'syz.4.2772': attribute type 5 has an invalid length. [ 247.447705][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 247.456756][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 247.630494][T11675] netlink: 'syz.1.2783': attribute type 2 has an invalid length. [ 247.704272][T11675] þ: entered promiscuous mode [ 247.735799][T11679] netlink: 'syz.3.2784': attribute type 10 has an invalid length. [ 247.756682][T11681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2785'. [ 247.785517][T11679] team0: Device ipvlan1 failed to register rx_handler [ 247.807501][T11681] openvswitch: netlink: Missing key (keys=40, expected=80) [ 248.090537][T11693] netlink: 'syz.4.2790': attribute type 21 has an invalid length. [ 248.123915][T11693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2790'. [ 248.467661][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 250.151210][T11770] dummy0: entered allmulticast mode [ 250.168168][T11769] dummy0: left allmulticast mode [ 250.442811][T11782] __nla_validate_parse: 2 callbacks suppressed [ 250.442832][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 251.805492][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2858'. [ 251.837429][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2858'. [ 251.907110][T11852] validate_nla: 4 callbacks suppressed [ 251.907130][T11852] netlink: 'syz.1.2861': attribute type 5 has an invalid length. [ 252.090441][T11859] delete_channel: no stack [ 252.590986][T11881] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 252.814413][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2880'. [ 252.824208][T11891] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2878'. [ 253.833409][T11933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'. [ 254.077887][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2907'. [ 254.137177][T11945] xfrm1: entered promiscuous mode [ 254.182442][T11945] xfrm1: entered allmulticast mode [ 254.377799][T11956] netlink: 'syz.2.2913': attribute type 1 has an invalid length. [ 254.407661][T11961] netlink: 'syz.0.2915': attribute type 26 has an invalid length. [ 254.871854][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'. [ 255.206639][T11994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.702769][ T30] audit: type=1800 audit(1756522259.563:2): pid=12016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2940" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2906 res=0 errno=0 [ 255.862868][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.873432][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.013919][T12027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2945'. [ 256.349349][T12037] netlink: 'syz.4.2950': attribute type 3 has an invalid length. [ 256.393456][T12037] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2950'. [ 256.801252][T12053] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2959'. [ 257.553047][T12079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2969'. [ 257.616254][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2972'. [ 257.816911][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 258.919694][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2994'. [ 258.978510][T12143] netlink: 'syz.0.2995': attribute type 11 has an invalid length. [ 259.135680][T12146] : entered promiscuous mode [ 259.587779][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'. [ 261.441368][T12245] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 261.546428][T12241] bond2: entered promiscuous mode [ 261.560809][T12241] bond2: entered allmulticast mode [ 261.576860][T12241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.807764][T12262] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3041'. [ 261.852596][T12261] netlink: 'syz.2.3040': attribute type 10 has an invalid length. [ 261.970084][T12261] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 262.053057][T12268] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3046'. [ 262.340843][T12277] netlink: 'syz.4.3049': attribute type 17 has an invalid length. [ 262.501567][T12277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.981408][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3061'. [ 263.014685][T12301] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 263.139378][T12307] netlink: 'syz.0.3065': attribute type 8 has an invalid length. [ 263.238036][T12314] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 263.263158][T12314] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 263.405620][T12319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3069'. [ 263.485938][T12322] netlink: 'syz.1.3071': attribute type 1 has an invalid length. [ 264.196741][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3084'. [ 264.236873][T12354] delete_channel: no stack [ 264.787788][T12375] netlink: 'syz.4.3097': attribute type 6 has an invalid length. [ 264.930763][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'. [ 265.442002][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3112'. [ 265.496095][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3112'. [ 265.840598][T12417] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 266.674665][T12454] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 266.794954][T12456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.366933][T12481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3148'. [ 267.395737][T12481] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3148'. [ 267.669915][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3154'. [ 268.301492][T12522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3167'. [ 268.758153][T12542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.621391][T12572] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3189'. [ 269.763686][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'. [ 270.019490][T12589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3196'. [ 270.055760][T12589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.496784][T12641] netlink: 'syz.3.3220': attribute type 32 has an invalid length. [ 272.111296][T12662] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 272.141072][T12667] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.352609][T12672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3236'. [ 272.379708][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3237'. [ 272.962875][T12697] lo speed is unknown, defaulting to 1000 [ 273.002747][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3247'. [ 273.017668][T12697] lo speed is unknown, defaulting to 1000 [ 273.025846][T12697] lo speed is unknown, defaulting to 1000 [ 273.067249][T12700] netlink: 'syz.3.3248': attribute type 303 has an invalid length. [ 273.167170][T12697] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 273.224546][T12697] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 273.480013][T12697] lo speed is unknown, defaulting to 1000 [ 273.536205][T12697] lo speed is unknown, defaulting to 1000 [ 273.593069][T12697] lo speed is unknown, defaulting to 1000 [ 273.654093][T12697] lo speed is unknown, defaulting to 1000 [ 273.696266][T12697] lo speed is unknown, defaulting to 1000 [ 274.223451][T12741] sctp: [Deprecated]: syz.1.3264 (pid 12741) Use of int in max_burst socket option. [ 274.223451][T12741] Use struct sctp_assoc_value instead [ 274.641061][T12757] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 274.867960][T12765] IPv6: Can't replace route, no match found [ 275.770165][ T6136] lo speed is unknown, defaulting to 1000 [ 276.282552][T12816] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3299'. [ 276.794602][T12836] netlink: 'syz.4.3306': attribute type 2 has an invalid length. [ 278.044458][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 278.344186][T12900] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 278.699612][T12916] netlink: 'syz.0.3347': attribute type 32 has an invalid length. [ 278.740905][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3347'. [ 278.768980][T12916] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 278.968197][T12923] bond0: (slave gretap0): Opening slave failed [ 279.255199][T12937] netlink: 'syz.0.3357': attribute type 21 has an invalid length. [ 279.313304][T12937] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3357'. [ 279.359697][T12937] netlink: 'syz.0.3357': attribute type 4 has an invalid length. [ 279.387145][T12937] netlink: 'syz.0.3357': attribute type 5 has an invalid length. [ 279.410961][T12937] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3357'. [ 280.013552][T12964] netlink: 'syz.4.3371': attribute type 8 has an invalid length. [ 280.069792][T12965] ip6erspan0: entered promiscuous mode [ 280.967471][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3387'. [ 281.179868][T13008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.477194][T13024] netlink: 'syz.3.3395': attribute type 2 has an invalid length. [ 281.504332][T13024] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3395'. [ 281.566070][T13022] batadv1: entered allmulticast mode [ 281.622781][T13022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 281.673333][T13033] netlink: 'syz.4.3402': attribute type 1 has an invalid length. [ 281.698522][T13032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.892037][T13039] netlink: 'syz.4.3406': attribute type 1 has an invalid length. [ 281.916632][T13041] siw: device registration error -23 [ 281.931026][T13039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3406'. [ 281.984181][T13043] openvswitch: netlink: Key type 251 is out of range max 32 [ 282.479551][T13061] netlink: 'syz.3.3416': attribute type 1 has an invalid length. [ 282.874549][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 283.347527][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3434'. [ 283.439915][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 283.458461][T13099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.086570][T13128] team0: left promiscuous mode [ 284.107553][T13128] team_slave_0: left promiscuous mode [ 284.125537][T13128] team_slave_1: left promiscuous mode [ 284.147147][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3449'. [ 285.142478][T13166] IPv6: sit1: Disabled Multicast RS [ 285.790651][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3484'. [ 286.770658][T13238] netlink: 'syz.0.3504': attribute type 3 has an invalid length. [ 286.807463][T13238] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3504'. [ 287.324166][T13264] sctp: [Deprecated]: syz.3.3517 (pid 13264) Use of int in maxseg socket option. [ 287.324166][T13264] Use struct sctp_assoc_value instead [ 287.644035][T13271] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3520'. [ 287.898774][T13283] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3526'. [ 288.254898][T13297] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 288.311498][T13297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 288.362578][T13301] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3535'. [ 288.645602][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3540'. [ 288.683542][T13311] veth1: entered promiscuous mode [ 288.740905][T13311] netlink: 'syz.3.3540': attribute type 1 has an invalid length. [ 288.754563][T13313] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3541'. [ 288.773328][T13311] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3540'. [ 288.799827][T13311] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 288.915802][T13319] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 289.318609][T13337] netlink: 'syz.3.3552': attribute type 1 has an invalid length. [ 289.353541][T13337] netlink: 'syz.3.3552': attribute type 3 has an invalid length. [ 289.386447][T13337] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3552'. [ 290.061232][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.069856][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.386220][T13355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.406024][T13355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.675936][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3575'. [ 290.704642][T13355] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 290.755139][T13355] ip6erspan0: left promiscuous mode [ 290.763525][ T6144] lo speed is unknown, defaulting to 1000 [ 290.785372][ T42] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.797711][ T6144] syz2: Port: 1 Link DOWN [ 290.813807][T13383] vlan0: entered promiscuous mode [ 290.837200][ T42] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.877632][ T42] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.886571][ T42] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.959650][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3578'. [ 291.013996][T13388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3578'. [ 291.533183][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3588'. [ 291.622865][T13416] vti0: entered promiscuous mode [ 291.882350][T13426] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3596'. [ 291.940678][T13426] netlink: zone id is out of range [ 291.945896][T13426] netlink: get zone limit has 8 unknown bytes [ 292.482609][T13452] netlink: 'syz.3.3609': attribute type 11 has an invalid length. [ 293.781131][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3639'. [ 294.114590][T13525] netlink: 'syz.1.3643': attribute type 1 has an invalid length. [ 294.165334][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 294.212737][T13525] netlink: 'syz.1.3643': attribute type 1 has an invalid length. [ 295.690044][T13585] netlink: 'syz.2.3675': attribute type 6 has an invalid length. [ 295.801710][T13588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3677'. [ 296.067598][T13601] netlink: 'syz.3.3683': attribute type 13 has an invalid length. [ 296.136975][T13605] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3685'. [ 296.279724][T13608] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 296.606317][T13624] netlink: ct family unspecified [ 296.633093][T13624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.071247][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 297.139722][T13647] netlink: 'syz.0.3706': attribute type 1 has an invalid length. [ 297.179647][T13647] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3706'. [ 297.249641][T13653] netlink: 'syz.4.3708': attribute type 1 has an invalid length. [ 297.271266][T13653] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3708'. [ 298.710169][T13706] netlink: 'syz.2.3732': attribute type 1 has an invalid length. [ 298.769395][T13706] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3732'. [ 298.986290][T13715] netlink: 'syz.4.3738': attribute type 1 has an invalid length. [ 299.860689][T13748] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3753'. [ 299.943539][T13748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3753'. [ 299.998324][T13748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3753'. [ 300.043096][T13755] netlink: 700 bytes leftover after parsing attributes in process `syz.3.3756'. [ 300.058662][T13748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3753'. [ 300.096280][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3757'. [ 300.125986][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3757'. [ 300.235585][T13763] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3760'. [ 300.295339][T13764] vlan0: entered promiscuous mode [ 301.214274][T13795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.243857][T13834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3793'. [ 302.313824][T13837] openvswitch: netlink: IP tunnel dst address not specified [ 303.223218][T13873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3812'. [ 303.260628][T13873] netlink: 'syz.0.3812': attribute type 4 has an invalid length. [ 304.296636][T13920] delete_channel: no stack [ 305.184009][T13955] syz.4.3853: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 305.247574][T13955] CPU: 1 UID: 0 PID: 13955 Comm: syz.4.3853 Not tainted syzkaller #0 PREEMPT(full) [ 305.247603][T13955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.247615][T13955] Call Trace: [ 305.247622][T13955] [ 305.247630][T13955] dump_stack_lvl+0x189/0x250 [ 305.247667][T13955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.247691][T13955] ? __pfx__printk+0x10/0x10 [ 305.247721][T13955] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 305.247744][T13955] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 305.247769][T13955] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 305.247794][T13955] warn_alloc+0x214/0x310 [ 305.247825][T13955] ? stack_depot_save_flags+0x436/0x860 [ 305.247855][T13955] ? __pfx_warn_alloc+0x10/0x10 [ 305.247882][T13955] ? kasan_save_track+0x4f/0x80 [ 305.247905][T13955] ? xskq_create+0x56/0x170 [ 305.247932][T13955] ? xsk_init_queue+0xb0/0x110 [ 305.247957][T13955] ? xsk_setsockopt+0x4dc/0x8d0 [ 305.247989][T13955] ? do_sock_setsockopt+0x179/0x1b0 [ 305.248009][T13955] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 305.248026][T13955] ? do_syscall_64+0xfa/0x3b0 [ 305.248049][T13955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.248078][T13955] __vmalloc_node_range_noprof+0x125/0x12f0 [ 305.248141][T13955] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.248175][T13955] ? __kasan_kmalloc+0x93/0xb0 [ 305.248204][T13955] vmalloc_user_noprof+0xad/0xf0 [ 305.248230][T13955] ? xskq_create+0xbf/0x170 [ 305.248257][T13955] xskq_create+0xbf/0x170 [ 305.248289][T13955] xsk_init_queue+0xb0/0x110 [ 305.248321][T13955] xsk_setsockopt+0x4dc/0x8d0 [ 305.248352][T13955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 305.248380][T13955] ? __pfx_aa_sk_perm+0x10/0x10 [ 305.248413][T13955] ? aa_sock_opt_perm+0xff/0x1b0 [ 305.248435][T13955] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 305.248455][T13955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 305.248482][T13955] do_sock_setsockopt+0x179/0x1b0 [ 305.248510][T13955] __x64_sys_setsockopt+0x13f/0x1b0 [ 305.248538][T13955] do_syscall_64+0xfa/0x3b0 [ 305.248554][T13955] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.248572][T13955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.248589][T13955] ? clear_bhb_loop+0x60/0xb0 [ 305.248624][T13955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.248644][T13955] RIP: 0033:0x7f15d578ebe9 [ 305.248662][T13955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.248678][T13955] RSP: 002b:00007f15d6522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.248701][T13955] RAX: ffffffffffffffda RBX: 00007f15d59c5fa0 RCX: 00007f15d578ebe9 [ 305.248714][T13955] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 305.248725][T13955] RBP: 00007f15d5811e19 R08: 0000000000000004 R09: 0000000000000000 [ 305.248736][T13955] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.248749][T13955] R13: 00007f15d59c6038 R14: 00007f15d59c5fa0 R15: 00007ffcb4a15f58 [ 305.248782][T13955] [ 305.248908][T13955] Mem-Info: [ 305.575611][T13955] active_anon:5908 inactive_anon:0 isolated_anon:0 [ 305.575611][T13955] active_file:3341 inactive_file:39963 isolated_file:0 [ 305.575611][T13955] unevictable:768 dirty:246 writeback:0 [ 305.575611][T13955] slab_reclaimable:10686 slab_unreclaimable:102035 [ 305.575611][T13955] mapped:29233 shmem:1366 pagetables:1522 [ 305.575611][T13955] sec_pagetables:0 bounce:0 [ 305.575611][T13955] kernel_misc_reclaimable:0 [ 305.575611][T13955] free:1325385 free_pcp:15769 free_cma:0 [ 305.695780][T13955] Node 0 active_anon:23732kB inactive_anon:0kB active_file:13364kB inactive_file:159648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117032kB dirty:984kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11860kB pagetables:5752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 305.731181][T13969] openvswitch: netlink: Flow key attribute not present in set flow. [ 305.777809][T13955] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 305.847380][T13955] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.916531][T13973] netlink: 'syz.2.3862': attribute type 4 has an invalid length. [ 305.926079][T13973] __nla_validate_parse: 5 callbacks suppressed [ 305.926097][T13973] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3862'. [ 305.947402][T13955] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 305.961815][T13955] Node 0 DMA32 free:1401200kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23588kB inactive_anon:0kB active_file:13364kB inactive_file:158068kB unevictable:1536kB writepending:984kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:42132kB local_pcp:20588kB free_cma:0kB [ 306.005186][T13973] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 306.082830][T13955] lowmem_reserve[]: 0 0 1 1 1 [ 306.095274][T13955] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 306.199817][T13955] lowmem_reserve[]: 0 0 0 0 0 [ 306.204618][T13955] Node 1 Normal free:3885408kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21920kB local_pcp:11840kB free_cma:0kB [ 306.297403][T13955] lowmem_reserve[]: 0 0 0 0 0 [ 306.302343][T13955] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 306.357497][T13955] Node 0 DMA32: 1848*4kB (UME) 1917*8kB (UM) 1090*16kB (UM) 1135*32kB (UME) 937*64kB (UME) 643*128kB (UME) 446*256kB (UE) 267*512kB (UE) 76*1024kB (UE) 5*2048kB (UME) 206*4096kB (UM) = 1401480kB [ 306.414223][T13955] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 306.447906][T13991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3871'. [ 306.457110][T13955] Node 1 Normal: 200*4kB (UE) 54*8kB (UME) 51*16kB (UME) 75*32kB (UME) 28*64kB (UME) 4*128kB (UM) 3*256kB (ME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3885408kB [ 306.513851][T13955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.532952][T13955] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.543891][T13955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.594758][T13955] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.610436][T13955] 44667 total pagecache pages [ 306.627156][T13955] 0 pages in swap cache [ 306.644032][T13955] Free swap = 124996kB [ 306.653857][T13955] Total swap = 124996kB [ 306.678251][T13955] 2097051 pages RAM [ 306.682231][T13955] 0 pages HighMem/MovableOnly [ 306.686927][T13955] 425669 pages reserved [ 306.735485][T13955] 0 pages cma reserved [ 306.751013][T14001] netlink: 'syz.3.3876': attribute type 11 has an invalid length. [ 307.398317][T14025] netlink: 'syz.1.3888': attribute type 10 has an invalid length. [ 307.454912][T14025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.498717][T14025] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 307.834708][T14040] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 307.906312][T14036] veth5: entered promiscuous mode [ 308.184164][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 308.259500][T14055] netlink: 'syz.4.3902': attribute type 4 has an invalid length. [ 308.297147][T14055] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3902'. [ 308.375025][T14055] Ã: renamed from bond0 (while UP) [ 308.812843][T14077] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3913'. [ 308.876732][T14077] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3913'. [ 308.930627][T14077] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3913'. [ 309.314324][T14095] netlink: 'syz.3.3923': attribute type 4 has an invalid length. [ 309.374399][T14101] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 309.590247][T14109] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3930'. [ 309.740073][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3931'. [ 309.857501][ T6092] Bluetooth: hci0: command tx timeout [ 310.122100][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3941'. [ 310.346011][T14133] bond1: entered promiscuous mode [ 311.452753][T14184] __nla_validate_parse: 1 callbacks suppressed [ 311.452775][T14184] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3966'. [ 311.940685][T14200] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3974'. [ 312.117808][T14208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3978'. [ 312.147976][T14208] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3978'. [ 312.778550][T14234] netlink: 'syz.4.3991': attribute type 3 has an invalid length. [ 313.286065][T14258] netlink: 'syz.3.4002': attribute type 10 has an invalid length. [ 313.368086][T14258] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 313.424468][T14260] netlink: 'syz.1.4003': attribute type 32 has an invalid length. [ 313.611939][T14269] netlink: 'syz.1.4007': attribute type 11 has an invalid length. [ 314.157587][T14285] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 314.613274][T14305] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 314.828227][T14316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4030'. [ 315.087556][T14328] C: renamed from team_slave_0 (while UP) [ 315.173944][T14328] netlink: 'syz.2.4036': attribute type 3 has an invalid length. [ 315.187771][T14328] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4036'. [ 315.239149][T14328] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 315.350506][T14337] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 315.448776][T14341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4041'. [ 315.545941][T14344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.553667][T14344] IPv6: NLM_F_CREATE should be set when creating new route [ 315.561035][T14344] IPv6: NLM_F_CREATE should be set when creating new route [ 315.711696][T14352] netlink: 'syz.4.4047': attribute type 5 has an invalid length. [ 315.724292][T14353] netlink: 'syz.2.4048': attribute type 10 has an invalid length. [ 315.758373][T14353] macvlan0: entered promiscuous mode [ 315.826476][T14353] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 315.832903][T14355] netlink: 'syz.1.4050': attribute type 10 has an invalid length. [ 315.882980][T14355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4050'. [ 315.967070][T14355] team0: Port device geneve0 added [ 315.979598][T14360] netlink: 'syz.4.4051': attribute type 21 has an invalid length. [ 316.699258][T14385] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4062'. [ 316.712702][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4063'. [ 316.725385][T14385] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4062'. [ 316.758756][T14384] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 316.956813][T14396] netlink: 'syz.1.4067': attribute type 21 has an invalid length. [ 317.302708][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.662808][T14420] veth3: entered promiscuous mode [ 318.451309][T14453] netlink: 'syz.4.4096': attribute type 21 has an invalid length. [ 318.622142][T14459] netlink: 'syz.4.4100': attribute type 13 has an invalid length. [ 318.635842][T14461] netlink: 'syz.3.4099': attribute type 1 has an invalid length. [ 318.664897][T14461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4099'. [ 318.806264][T14465] netlink: 'syz.4.4102': attribute type 15 has an invalid length. [ 318.853268][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4102'. [ 319.377546][ T6088] Bluetooth: hci4: command 0x0406 tx timeout [ 319.437652][T14491] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4115'. [ 319.449598][T14491] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4115'. [ 319.538948][T14496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4117'. [ 319.592114][T14496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4117'. [ 319.623718][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4117'. [ 320.367013][T14516] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.375061][T14516] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.690493][T14516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.714448][T14516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.734753][ T6088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.747077][ T6088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.756665][ T6088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.774463][ T6088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.784146][ T6088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.912647][ T42] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.967728][ T42] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.977689][ T1011] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.986614][ T1011] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.135357][T14530] lo speed is unknown, defaulting to 1000 [ 321.519971][T14552] netlink: 'syz.3.4143': attribute type 1 has an invalid length. [ 321.981587][T14530] chnl_net:caif_netlink_parms(): no params data found [ 322.192546][T14576] netlink: 'syz.2.4153': attribute type 6 has an invalid length. [ 322.548170][T14530] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.555793][T14530] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.571194][T14530] bridge_slave_0: entered allmulticast mode [ 322.607476][T14530] bridge_slave_0: entered promiscuous mode [ 322.640703][T14530] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.665403][T14530] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.701441][T14530] bridge_slave_1: entered allmulticast mode [ 322.724051][T14530] bridge_slave_1: entered promiscuous mode [ 322.759011][T14599] netlink: 'syz.3.4163': attribute type 3 has an invalid length. [ 322.824289][ T6092] Bluetooth: hci5: command tx timeout [ 322.921365][T14602] __nla_validate_parse: 1 callbacks suppressed [ 322.921387][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4164'. [ 323.122761][T14530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.160366][T14530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.417201][T14530] team0: Port device team_slave_0 added [ 323.435791][T14530] team0: Port device team_slave_1 added [ 323.587491][T14627] netlink: 'syz.1.4176': attribute type 9 has an invalid length. [ 323.763365][T14530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.797454][T14530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.875367][T14530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.918256][T14636] netlink: 'syz.4.4181': attribute type 6 has an invalid length. [ 323.937561][T14636] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4181'. [ 323.951174][T14530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.980028][T14530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.009176][T14530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.381826][T14652] netlink: 'syz.3.4186': attribute type 3 has an invalid length. [ 324.416401][T14530] hsr_slave_0: entered promiscuous mode [ 324.446728][T14530] hsr_slave_1: entered promiscuous mode [ 324.457035][T14530] debugfs: 'hsr0' already exists in 'hsr' [ 324.468844][T14530] Cannot create hsr debugfs directory [ 324.897710][ T6092] Bluetooth: hci5: command tx timeout [ 325.527128][T14530] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.635377][T14530] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.691318][T14530] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.723993][T14530] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.038560][T14712] veth3: entered promiscuous mode [ 326.193488][T14721] xfrm0: entered allmulticast mode [ 326.457202][T14727] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 326.484051][T14727] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 326.570145][T14530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.646183][T14530] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.725980][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.733408][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.766658][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.774271][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.794367][T14735] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4224'. [ 326.836092][T14735] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4224'. [ 326.978860][ T6092] Bluetooth: hci5: command tx timeout [ 327.666132][T14530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.616651][T14789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4245'. [ 328.804495][T14530] veth0_vlan: entered promiscuous mode [ 328.882273][T14530] veth1_vlan: entered promiscuous mode [ 329.027780][T14530] veth0_macvtap: entered promiscuous mode [ 329.063052][ T6092] Bluetooth: hci5: command tx timeout [ 329.075101][T14530] veth1_macvtap: entered promiscuous mode [ 329.135765][T14530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.162678][T14530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.295678][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.320079][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.356222][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.400691][ T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.656393][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4262'. [ 329.851564][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.885116][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.018948][T14836] syz.1.4267 uses old SIOCAX25GETINFO [ 330.034227][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.079661][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.248595][T14889] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4290'. [ 331.596399][T14901] netlink: 'syz.2.4295': attribute type 7 has an invalid length. [ 331.643156][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4295'. [ 332.251139][T14928] delete_channel: no stack [ 332.477893][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4314'. [ 332.983896][T14959] netlink: 'syz.2.4322': attribute type 2 has an invalid length. [ 333.853991][T14993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.056009][T14999] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4342'. [ 334.157231][T15002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4344'. [ 334.637615][T15021] netlink: 'syz.3.4354': attribute type 1 has an invalid length. [ 334.658076][T15021] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4354'. [ 335.149934][T15041] netlink: 34 bytes leftover after parsing attributes in process `syz.4.4363'. [ 335.251092][T15045] netlink: 'syz.2.4365': attribute type 1 has an invalid length. [ 335.270809][T15045] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4365'. [ 335.755919][T15068] openvswitch: netlink: IP tunnel dst address not specified [ 335.767729][T15069] netlink: 'syz.2.4376': attribute type 10 has an invalid length. [ 335.826502][T15069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4376'. [ 335.877341][T15069] veth0_vlan: entered allmulticast mode [ 335.939987][T15069] bridge0: port 2(veth0_vlan) entered blocking state [ 335.972446][T15069] bridge0: port 2(veth0_vlan) entered disabled state [ 336.019101][T15069] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 336.269694][T15087] netlink: 'syz.2.4387': attribute type 12 has an invalid length. [ 336.304011][T15087] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4387'. [ 336.313057][T15089] netlink: 'syz.5.4386': attribute type 5 has an invalid length. [ 336.865141][T15109] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 337.446572][T15133] netlink: 'syz.1.4408': attribute type 10 has an invalid length. [ 337.468046][T15133] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4408'. [ 337.496709][T15133] batman_adv: batadv0: Adding interface: virt_wifi0 [ 337.520312][T15133] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.594740][T15133] batman_adv: batadv0: Interface activated: virt_wifi0 [ 338.307680][T15164] netlink: 'syz.3.4423': attribute type 5 has an invalid length. [ 338.455285][T15168] bridge4: entered promiscuous mode [ 338.688697][T15178] netlink: 'syz.3.4429': attribute type 12 has an invalid length. [ 339.092606][T15196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4439'. [ 339.969581][T15223] netlink: 'syz.3.4453': attribute type 1 has an invalid length. [ 340.009291][T15223] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4453'. [ 340.027632][T15228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4455'. [ 340.227455][T15236] netlink: 'syz.3.4459': attribute type 1 has an invalid length. [ 340.338961][T15239] openvswitch: netlink: IP tunnel dst address not specified [ 341.395364][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4482'. [ 341.438830][T15282] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4482'. [ 341.476531][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4482'. [ 342.598104][T15332] unsupported nlmsg_type 40 [ 342.986191][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4515'. [ 342.991061][T15346] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4513'. [ 343.005146][T15347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4514'. [ 343.073255][T15346] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4513'. [ 343.257493][T15358] netlink: 'syz.2.4517': attribute type 1 has an invalid length. [ 343.901791][T15380] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 344.170371][T15391] __nla_validate_parse: 2 callbacks suppressed [ 344.170393][T15391] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4537'. [ 344.387781][T15398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.456613][T15402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.598081][T15406] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4544'. [ 344.987774][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4554'. [ 345.225005][T15434] netdevsim0: mtu less than device minimum [ 345.827706][T15451] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 347.240636][T15503] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.454086][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 347.497660][T15511] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4587'. [ 347.820812][T15526] netlink: 'syz.1.4593': attribute type 8 has an invalid length. [ 347.912943][T15531] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4595'. [ 348.954662][T15571] netlink: 'syz.4.4611': attribute type 21 has an invalid length. [ 348.997011][T15571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4611'. [ 349.027484][T15575] netlink: 'syz.3.4613': attribute type 4 has an invalid length. [ 350.242990][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4631'. [ 351.453745][T15667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.221432][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4664'. [ 352.287383][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'. [ 352.620572][T15715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4670'. [ 353.454762][ T6088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.467144][ T6088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.476049][ T6088] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.501503][ T6088] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.516080][ T6088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.592296][T15749] tipc: Trying to set illegal importance in message [ 353.599418][T15748] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4684'. [ 353.685753][T15739] lo speed is unknown, defaulting to 1000 [ 353.742945][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4685'. [ 354.199814][T15771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.628009][T15785] netlink: 'syz.2.4698': attribute type 1 has an invalid length. [ 354.668260][T15785] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4698'. [ 354.932099][T15739] chnl_net:caif_netlink_parms(): no params data found [ 355.025638][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4704'. [ 355.353362][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4708'. [ 355.560623][T15739] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.607479][T15739] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.617648][ T6092] Bluetooth: hci6: command tx timeout [ 355.626162][T15739] bridge_slave_0: entered allmulticast mode [ 355.706115][T15739] bridge_slave_0: entered promiscuous mode [ 355.751140][T15739] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.807527][T15739] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.814919][T15739] bridge_slave_1: entered allmulticast mode [ 355.849804][T15739] bridge_slave_1: entered promiscuous mode [ 356.553029][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4720'. [ 356.589006][T15739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.681010][T15739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.017219][T15739] team0: Port device team_slave_0 added [ 357.037167][T15739] team0: Port device team_slave_1 added [ 357.092781][T15869] netlink: 'syz.3.4730': attribute type 2 has an invalid length. [ 357.145721][T15869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4730'. [ 357.378315][T15739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.385415][T15739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.498622][T15739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.549062][T15739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.566593][T15739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.657443][T15739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.699433][ T6092] Bluetooth: hci6: command tx timeout [ 358.189855][T15739] hsr_slave_0: entered promiscuous mode [ 358.220027][T15906] netlink: 'syz.3.4743': attribute type 10 has an invalid length. [ 358.229265][T15739] hsr_slave_1: entered promiscuous mode [ 358.235906][T15739] debugfs: 'hsr0' already exists in 'hsr' [ 358.272114][T15739] Cannot create hsr debugfs directory [ 358.286024][T15906] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 358.341971][T15906] team0: Port device netdevsim0 added [ 359.361962][T15936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4756'. [ 359.457885][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4756'. [ 359.559609][T15936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4756'. [ 359.575040][T15940] netlink: 'syz.4.4758': attribute type 3 has an invalid length. [ 359.754660][T15739] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 359.778331][ T6092] Bluetooth: hci6: command tx timeout [ 359.903642][T15739] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 359.985138][T15739] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 360.072073][T15739] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 360.213967][T15960] bridge7: entered promiscuous mode [ 360.239958][T15960] bridge7: entered allmulticast mode [ 360.636484][T15739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.761609][T15986] netlink: 'syz.1.4773': attribute type 10 has an invalid length. [ 360.793617][T15739] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.812550][T15986] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4773'. [ 360.867116][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.874374][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.910569][T15986] team0: entered promiscuous mode [ 360.937777][T15986] team_slave_0: entered promiscuous mode [ 360.958859][T15986] team_slave_1: entered promiscuous mode [ 360.989731][T15986] geneve0: entered promiscuous mode [ 360.995519][T15986] bridge0: port 4(team0) entered blocking state [ 361.006414][T15986] bridge0: port 4(team0) entered disabled state [ 361.024515][T15986] team0: entered allmulticast mode [ 361.066805][T15986] team_slave_0: entered allmulticast mode [ 361.106368][T15986] team_slave_1: entered allmulticast mode [ 361.124180][T15986] geneve0: entered allmulticast mode [ 361.182917][T15986] bridge0: port 4(team0) entered blocking state [ 361.189451][T15986] bridge0: port 4(team0) entered forwarding state [ 361.282040][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.289280][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.719347][T16019] netlink: 'syz.4.4786': attribute type 2 has an invalid length. [ 361.814836][T16019] : entered promiscuous mode [ 361.857540][ T6092] Bluetooth: hci6: command tx timeout [ 361.873281][T16023] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4789'. [ 362.101668][T16035] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 362.506591][T16051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4796'. [ 362.530729][T15739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.688001][T16055] netlink: 'syz.4.4797': attribute type 3 has an invalid length. [ 363.652158][T16088] netlink: 'syz.1.4808': attribute type 1 has an invalid length. [ 363.689104][T16088] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4808'. [ 363.835298][T15739] veth0_vlan: entered promiscuous mode [ 363.916656][T15739] veth1_vlan: entered promiscuous mode [ 364.077852][T15739] veth0_macvtap: entered promiscuous mode [ 364.136212][T15739] veth1_macvtap: entered promiscuous mode [ 364.240588][T15739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.304189][T15739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.381712][ T1146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.410902][ T1146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.511723][ T1146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.623182][ T1146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.867474][T16126] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4822'. [ 364.899499][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.933791][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.099945][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.153587][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.488871][T16149] netlink: 'syz.4.4831': attribute type 10 has an invalid length. [ 365.589227][T16149] veth0_vlan: left promiscuous mode [ 365.629374][T16157] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4660'. [ 365.631446][T16149] veth0_vlan: entered promiscuous mode [ 365.710833][T16149] team0: Device veth0_vlan failed to register rx_handler [ 365.727818][T16157] netlink: 560 bytes leftover after parsing attributes in process `syz.6.4660'. [ 366.279766][T16179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4843'. [ 366.719003][T16195] netlink: 'syz.1.4849': attribute type 21 has an invalid length. [ 366.726876][T16195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4849'. [ 366.894789][T16203] netlink: 'syz.2.4853': attribute type 1 has an invalid length. [ 366.929737][T16203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4853'. [ 367.211895][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4857'. [ 367.451802][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4860'. [ 367.750064][T16238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4867'. [ 367.797024][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4866'. [ 368.698295][T16277] netlink: 'syz.3.4883': attribute type 21 has an invalid length. [ 368.735965][T16277] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4883'. [ 368.800922][T16277] netlink: 'syz.3.4883': attribute type 5 has an invalid length. [ 368.841152][T16277] netlink: 'syz.3.4883': attribute type 6 has an invalid length. [ 368.881277][T16277] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4883'. [ 368.917160][T16284] netlink: 'syz.6.4886': attribute type 3 has an invalid length. [ 368.982596][T16284] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4886'. [ 370.407564][T16336] netlink: 'syz.4.4907': attribute type 4 has an invalid length. [ 371.778600][T16384] __nla_validate_parse: 3 callbacks suppressed [ 371.778620][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4926'. [ 371.944001][T16390] erspan1: entered promiscuous mode [ 372.828149][ T30] audit: type=1800 audit(1756522376.703:3): pid=16425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4944" name="blkio.bfq.time_recursive" dev="tmpfs" ino=143 res=0 errno=0 [ 373.357887][T16450] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 373.386115][T16450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.774880][T16464] netlink: 'syz.3.4961': attribute type 13 has an invalid length. [ 374.637870][T16495] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 375.327050][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4985'. [ 376.881138][T16588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5010'. [ 377.274550][T16604] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5018'. [ 377.504134][T16613] netlink: 'syz.1.5022': attribute type 6 has an invalid length. [ 377.547748][T16613] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.090215][T16638] netlink: 'syz.1.5033': attribute type 11 has an invalid length. [ 378.170010][T16638] netlink: 'syz.1.5033': attribute type 4 has an invalid length. [ 378.207450][T16638] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5033'. [ 378.515918][T16654] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 378.528839][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5041'. [ 378.580073][T16654] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 378.747940][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.487789][T16691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.786018][T16703] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 380.079352][T16715] veth2: entered promiscuous mode [ 380.084463][T16715] veth2: entered allmulticast mode [ 380.924860][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5082'. [ 380.934024][T16752] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5082'. [ 380.971653][T16753] netlink: 'syz.2.5081': attribute type 1 has an invalid length. [ 380.990727][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5081'. [ 381.010987][T16745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.663371][T16782] netlink: 'syz.6.5093': attribute type 10 has an invalid length. [ 381.730714][T16782] team0: Device hsr_slave_0 failed to register rx_handler [ 381.805983][T16787] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5095'. [ 383.016135][T16848] netlink: 'syz.4.5109': attribute type 2 has an invalid length. [ 383.262872][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5113'. [ 383.317398][T16856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.485432][T16869] netlink: 'syz.2.5119': attribute type 1 has an invalid length. [ 383.502131][T16868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5118'. [ 383.517368][T16869] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5119'. [ 383.576634][T16868] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 383.799682][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5122'. [ 383.915798][T16883] netlink: 'syz.1.5124': attribute type 1 has an invalid length. [ 383.987481][T16883] netlink: 'syz.1.5124': attribute type 1 has an invalid length. [ 384.447167][T16902] netlink: 'syz.4.5132': attribute type 8 has an invalid length. [ 385.227920][T16930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5144'. [ 385.237049][T16930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5144'. [ 385.448083][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5148'. [ 385.902709][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5155'. [ 385.912255][T16956] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5156'. [ 385.926870][T16961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.958440][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5155'. [ 386.169355][T16959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.558757][T17025] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 388.727554][T17077] __nla_validate_parse: 19 callbacks suppressed [ 388.727575][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5205'. [ 388.807644][T17077] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 388.815323][T17077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.172077][T17092] netlink: 'syz.2.5212': attribute type 1 has an invalid length. [ 391.362276][T17175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5251'. [ 391.411346][T17175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5251'. [ 392.633886][T17226] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5278'. [ 392.670195][T17226] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 392.847437][T17237] netlink: 'syz.3.5282': attribute type 2 has an invalid length. [ 393.208619][T17250] netlink: 'syz.4.5288': attribute type 7 has an invalid length. [ 393.216629][T17250] netlink: 'syz.4.5288': attribute type 8 has an invalid length. [ 393.289272][T17254] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 393.497662][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5294'. [ 393.872655][T17278] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5302'. [ 393.898937][T17278] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5302'. [ 393.920778][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5304'. [ 393.971805][T17281] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 394.937789][T17319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5321'. [ 395.027859][T17319] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5321'. [ 395.037040][T17319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5321'. [ 395.480529][T17341] netlink: 'syz.1.5330': attribute type 1 has an invalid length. [ 396.332013][T17374] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5343'. [ 396.574831][T17384] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5348'. [ 397.339962][T17412] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 397.397124][T17414] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5360'. [ 397.469503][T17414] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 397.637085][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5364'. [ 398.110472][T17443] bridge_slave_0: left allmulticast mode [ 398.116719][T17443] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.261557][T17443] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 398.949825][T17477] __nla_validate_parse: 1 callbacks suppressed [ 398.949845][T17477] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5387'. [ 399.168217][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5388'. [ 400.125629][T17521] netlink: 'syz.3.5406': attribute type 2 has an invalid length. [ 400.167377][T17521] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5406'. [ 401.283349][T17563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.387751][T17565] ieee802154 phy1 wpan1: encryption failed: -90 [ 401.704398][T17575] netlink: 'syz.3.5432': attribute type 1 has an invalid length. [ 401.732923][T17575] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5432'. [ 403.907549][T17659] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5470'. [ 404.290619][T17677] netlink: 'syz.6.5477': attribute type 7 has an invalid length. [ 404.329884][T17678] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5478'. [ 404.356191][T17677] : entered promiscuous mode [ 404.519556][T17686] netlink: zone id is out of range [ 404.524740][T17686] netlink: zone id is out of range [ 404.592360][T17686] netlink: zone id is out of range [ 404.631667][T17686] netlink: zone id is out of range [ 404.636846][T17686] netlink: zone id is out of range [ 404.710099][T17686] netlink: zone id is out of range [ 404.715288][T17686] netlink: zone id is out of range [ 404.750060][T17686] netlink: zone id is out of range [ 404.777490][T17686] netlink: zone id is out of range [ 404.782671][T17686] netlink: zone id is out of range [ 405.193080][T17717] netlink: 'syz.2.5494': attribute type 11 has an invalid length. [ 405.427482][T17729] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5498'. [ 405.697522][T17742] netlink: 'syz.4.5503': attribute type 10 has an invalid length. [ 405.770683][T17742] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.816375][T17742] Ã: (slave team0): Enslaving as an active interface with an up link [ 406.123905][T17752] netlink: 'syz.2.5509': attribute type 13 has an invalid length. [ 406.183152][T17752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5509'. [ 406.400378][T17764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5515'. [ 406.447505][T17764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5515'. [ 406.475779][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5517'. [ 406.613036][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5519'. [ 406.899422][T17782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5524'. [ 406.919233][T17782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5524'. [ 407.110260][T17793] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5529'. [ 407.199897][T17798] netlink: 'syz.2.5532': attribute type 3 has an invalid length. [ 407.229612][T17798] netlink: 'syz.2.5532': attribute type 2 has an invalid length. [ 407.275146][T17798] netlink: 'syz.2.5532': attribute type 2 has an invalid length. [ 408.903546][T17856] netlink: 'syz.4.5561': attribute type 10 has an invalid length. [ 408.957592][T17856] Ã: entered promiscuous mode [ 408.986679][T17856] bond_slave_0: entered promiscuous mode [ 409.017699][T17856] bond_slave_1: entered promiscuous mode [ 409.037171][T17856] team0: entered promiscuous mode [ 409.089631][T17856] team_slave_0: entered promiscuous mode [ 409.095546][T17856] team_slave_1: entered promiscuous mode [ 409.134553][T17856] Ã: entered allmulticast mode [ 409.161164][T17856] bond_slave_0: entered allmulticast mode [ 409.198211][T17856] bond_slave_1: entered allmulticast mode [ 409.204022][T17856] team0: entered allmulticast mode [ 409.222664][T17856] team_slave_0: entered allmulticast mode [ 409.242961][T17856] team_slave_1: entered allmulticast mode [ 409.303479][T17856] 8021q: adding VLAN 0 to HW filter on device à [ 409.330921][T17856] bridge0: port 4(Ã) entered blocking state [ 409.346070][T17856] bridge0: port 4(Ã) entered disabled state [ 409.376506][T17856] bridge0: port 4(Ã) entered blocking state [ 409.382970][T17856] bridge0: port 4(Ã) entered forwarding state [ 409.456433][T17868] __nla_validate_parse: 7 callbacks suppressed [ 409.456454][T17868] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5567'. [ 409.542084][T17878] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5572'. [ 410.567557][T17914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5588'. [ 411.297073][T17948] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.5604'. [ 411.767516][T17969] net_ratelimit: 13 callbacks suppressed [ 411.767536][T17969] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 411.811748][T17971] netlink: 'syz.1.5610': attribute type 1 has an invalid length. [ 412.250939][T17987] netlink: 'syz.4.5618': attribute type 13 has an invalid length. [ 412.307472][T17987] netlink: 'syz.4.5618': attribute type 17 has an invalid length. [ 412.574378][T17987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.868941][T18012] netlink: 'syz.6.5629': attribute type 1 has an invalid length. [ 412.876919][T18012] netlink: 'syz.6.5629': attribute type 11 has an invalid length. [ 412.888955][T18011] netlink: 'syz.2.5628': attribute type 3 has an invalid length. [ 412.925291][T18012] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5629'. [ 412.964970][T18015] netlink: 'syz.4.5630': attribute type 30 has an invalid length. [ 413.134857][T18020] netlink: 'syz.1.5634': attribute type 1 has an invalid length. [ 413.167777][T18020] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5634'. [ 413.248042][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5634'. [ 414.031401][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5650'. [ 414.278031][T18070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5656'. [ 414.304259][T18070] veth1: entered promiscuous mode [ 414.331085][T18070] veth1: entered allmulticast mode [ 414.366586][T18070] netlink: 'syz.4.5656': attribute type 8 has an invalid length. [ 414.411392][T18075] netlink: 'syz.3.5658': attribute type 1 has an invalid length. [ 415.497879][T18122] macsec0: entered allmulticast mode [ 415.897979][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5690'. [ 415.957825][T18140] delete_channel: no stack [ 416.217525][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 416.244308][T18152] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 416.284566][T18155] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5698'. [ 416.293892][T18155] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5698'. [ 416.367398][T18155] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5698'. [ 416.684171][T18171] wg1 speed is unknown, defaulting to 1000 [ 416.721175][T18171] wg1 speed is unknown, defaulting to 1000 [ 416.739077][T18171] wg1 speed is unknown, defaulting to 1000 [ 416.848954][T18171] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 417.039585][T18171] wg1 speed is unknown, defaulting to 1000 [ 417.094825][T18171] wg1 speed is unknown, defaulting to 1000 [ 417.152732][T18171] wg1 speed is unknown, defaulting to 1000 [ 417.245879][T18171] wg1 speed is unknown, defaulting to 1000 [ 417.267022][T18171] wg1 speed is unknown, defaulting to 1000 [ 417.329151][T18171] wg1 speed is unknown, defaulting to 1000 [ 417.375325][T18171] wg1 speed is unknown, defaulting to 1000 [ 417.471853][T18199] bridge6: entered allmulticast mode [ 419.331179][T18273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5755'. [ 419.678579][T18287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5763'. [ 419.765067][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5763'. [ 419.920694][T18297] netlink: 'syz.1.5768': attribute type 10 has an invalid length. [ 419.987776][T18297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5768'. [ 420.042374][T18297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.138331][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5771'. [ 420.649628][T18327] netlink: del zone limit has 4 unknown bytes [ 420.872302][T18336] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 422.231456][T18393] netlink: 'syz.6.5815': attribute type 9 has an invalid length. [ 422.737931][ T6088] Bluetooth: hci6: command 0x0405 tx timeout [ 423.087979][T18429] netlink: 'syz.1.5832': attribute type 26 has an invalid length. [ 423.211478][T18435] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 423.531391][T18447] Ã: left allmulticast mode [ 423.578462][T18447] bond_slave_0: left allmulticast mode [ 423.590785][T18447] bond_slave_1: left allmulticast mode [ 423.600967][T18447] team0: left allmulticast mode [ 423.615349][T18447] team_slave_0: left allmulticast mode [ 423.637639][T18447] team_slave_1: left allmulticast mode [ 423.654161][T18447] Ã: left promiscuous mode [ 423.664305][T18452] netlink: 'syz.1.5844': attribute type 9 has an invalid length. [ 423.681601][T18447] bond_slave_0: left promiscuous mode [ 423.717651][T18447] bond_slave_1: left promiscuous mode [ 423.747713][T18447] team0: left promiscuous mode [ 423.752632][T18447] team_slave_0: left promiscuous mode [ 423.767746][T18447] team_slave_1: left promiscuous mode [ 423.791090][T18447] bridge0: port 4(Ã) entered disabled state [ 423.898305][T18447] Ã: (slave team0): Releasing backup interface [ 424.004164][T18447] bridge_slave_0: left allmulticast mode [ 424.031540][T18447] bridge_slave_0: left promiscuous mode [ 424.047307][T18447] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.069298][T18447] bridge_slave_1: left allmulticast mode [ 424.076071][T18447] bridge_slave_1: left promiscuous mode [ 424.082974][T18447] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.099178][T18447] Ã: (slave bond_slave_0): Releasing backup interface [ 424.117120][T18447] Ã: (slave bond_slave_1): Releasing backup interface [ 424.144000][T18447] team0: Port device team_slave_0 removed [ 424.172801][T18447] team0: Port device team_slave_1 removed [ 424.180478][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.189614][T18447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.204637][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.213889][T18447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.227733][T18447] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 424.235103][T18447] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 424.242863][T18447] bridge0: port 3(netdevsim2) entered disabled state [ 424.261525][T18461] __nla_validate_parse: 1 callbacks suppressed [ 424.261546][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5848'. [ 425.536849][T18521] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 425.817447][T18529] netlink: 'syz.2.5878': attribute type 11 has an invalid length. [ 425.864222][T18529] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5878'. [ 426.062123][T18540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.121884][T18543] netlink: 'syz.1.5884': attribute type 2 has an invalid length. [ 426.145470][T18543] netlink: 'syz.1.5884': attribute type 1 has an invalid length. [ 426.197471][T18543] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5884'. [ 426.220631][T18546] _ÐZ`Ô€@S: entered promiscuous mode [ 426.453376][T18554] netlink: 'syz.6.5891': attribute type 2 has an invalid length. [ 426.490325][T18554] netlink: 'syz.6.5891': attribute type 2 has an invalid length. [ 426.520319][T18554] netlink: 'syz.6.5891': attribute type 2 has an invalid length. [ 426.537769][T18554] netlink: 'syz.6.5891': attribute type 2 has an invalid length. [ 426.558339][T18554] netlink: 'syz.6.5891': attribute type 2 has an invalid length. [ 426.570734][T18554] netlink: 'syz.6.5891': attribute type 2 has an invalid length. [ 426.619740][T18554] netlink: 'syz.6.5891': attribute type 2 has an invalid length. [ 426.634954][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5895'. [ 427.016999][T18580] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5902'. [ 427.653611][T18607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.739961][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5919'. [ 427.957388][T18621] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5923'. [ 428.084034][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5926'. [ 428.130717][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5926'. [ 428.162072][T18627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.916126][T18703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 430.976731][T18748] validate_nla: 47 callbacks suppressed [ 430.976754][T18748] netlink: 'syz.6.5985': attribute type 49 has an invalid length. [ 431.017480][T18750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5986'. [ 431.262800][T18761] netlink: 'syz.4.5992': attribute type 7 has an invalid length. [ 432.573288][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6017'. [ 432.752448][T18824] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6021'. [ 433.515787][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6039'. [ 433.572127][T18860] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6039'. [ 433.606332][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6039'. [ 433.911645][T18870] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6044'. [ 434.568620][T18870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.596156][T18870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.623572][T18886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6052'. [ 434.643716][T18870] bond0 (unregistering): Released all slaves [ 434.954941][T18893] netlink: 'syz.3.6056': attribute type 21 has an invalid length. [ 435.025703][T18893] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6056'. [ 435.088358][T18893] netlink: 'syz.3.6056': attribute type 5 has an invalid length. [ 435.096201][T18893] netlink: 'syz.3.6056': attribute type 6 has an invalid length. [ 435.177360][T18893] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6056'. [ 436.429009][T18956] netlink: 'syz.3.6084': attribute type 1 has an invalid length. [ 436.436901][T18956] __nla_validate_parse: 1 callbacks suppressed [ 436.436918][T18956] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6084'. [ 436.697825][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6089'. [ 436.806928][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6090'. [ 437.854466][T19020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.615696][T19055] netlink: 'syz.6.6133': attribute type 1 has an invalid length. [ 438.662881][T19055] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6133'. [ 439.576405][T19095] netlink: 'syz.3.6151': attribute type 1 has an invalid length. [ 440.184207][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.226177][T19111] openvswitch: netlink: IP tunnel dst address not specified [ 440.409693][T19115] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6160'. [ 440.477744][T19115] 0ªX¹¦À: renamed from caif0 [ 440.504139][T19115] 0ªX¹¦À: entered allmulticast mode [ 440.525481][T19115] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 440.665581][T19123] netlink: 452 bytes leftover after parsing attributes in process `syz.2.6164'. [ 441.236335][T19149] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.429228][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6181'. [ 442.450306][T19197] netlink: 'syz.6.6200': attribute type 3 has an invalid length. [ 442.577663][T19197] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6200'. [ 442.855899][T19215] syz_tun: entered promiscuous mode [ 442.876985][T19215] syz_tun: entered allmulticast mode [ 443.391404][T19239] netlink: 'syz.6.6217': attribute type 1 has an invalid length. [ 443.998058][T19264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6228'. [ 444.043647][T19264] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6228'. [ 444.089657][T19264] netlink: 'syz.2.6228': attribute type 5 has an invalid length. [ 444.121333][T19264] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6228'. [ 444.387793][T19277] netlink: 'syz.3.6234': attribute type 3 has an invalid length. [ 445.174690][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6249'. [ 445.224425][T19312] netlink: 'syz.1.6249': attribute type 5 has an invalid length. [ 445.257366][T19312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6249'. [ 445.314492][T19312] geneve2: entered promiscuous mode [ 445.380510][T19312] geneve2: entered allmulticast mode [ 445.508593][ T1011] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 445.540969][ T1011] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 445.567682][ T1011] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 445.594347][ T1011] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 445.803588][T19338] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6256'. [ 445.948754][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6258'. [ 446.929794][T19385] netlink: 'syz.6.6279': attribute type 9 has an invalid length. [ 447.374887][T19403] netlink: 'syz.2.6287': attribute type 1 has an invalid length. [ 447.383649][ T6088] Bluetooth: hci5: command 0x0406 tx timeout [ 448.105851][T19429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6299'. [ 448.119763][T19430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6300'. [ 448.316629][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6301'. [ 448.352986][T19432] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 448.368370][T19432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.498544][ T6092] Bluetooth: hci2: command 0x0406 tx timeout [ 450.257709][T19511] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.948886][T19539] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6353'. [ 450.988824][T19539] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6353'. [ 451.029472][T19539] netlink: 'syz.1.6353': attribute type 6 has an invalid length. [ 451.059008][T19539] netlink: 'syz.1.6353': attribute type 5 has an invalid length. [ 451.066897][T19539] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6353'. [ 451.696685][T19573] netlink: 324 bytes leftover after parsing attributes in process `syz.6.6369'. [ 453.306101][T19636] tipc: Started in network mode [ 453.332829][T19636] tipc: Node identity ac14142f, cluster identity 4711 [ 453.357541][T19636] tipc: New replicast peer: 0.0.0.0 [ 453.368644][T19636] tipc: Enabled bearer , priority 10 [ 453.787515][T19652] netlink: 'syz.3.6405': attribute type 1 has an invalid length. [ 453.867749][T19652] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6405'. [ 453.907912][T19652] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6405'. [ 454.185226][T19662] netlink: 'syz.2.6411': attribute type 1 has an invalid length. [ 454.492524][ T6185] tipc: Node number set to 2886997039 [ 454.723795][T19682] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 454.864763][T19687] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6422'. [ 456.092461][T19722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6440'. [ 456.228898][T19727] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6441'. [ 457.009907][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6454'. [ 457.028694][T19754] netlink: 'syz.4.6455': attribute type 42 has an invalid length. [ 458.943203][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6485'. [ 459.237902][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6488'. [ 459.500601][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6490'. [ 459.526073][T19826] netlink: 'syz.2.6490': attribute type 5 has an invalid length. [ 459.564887][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6490'. [ 459.921174][T19840] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6496'. [ 461.062731][T19879] sctp: [Deprecated]: syz.3.6516 (pid 19879) Use of int in maxseg socket option. [ 461.062731][T19879] Use struct sctp_assoc_value instead [ 461.943581][T19912] Bluetooth: MGMT ver 1.23 [ 462.706317][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6542'. [ 463.364940][T19964] netlink: 'syz.6.6564': attribute type 6 has an invalid length. [ 463.441091][T19971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6555'. [ 463.489124][T19971] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6555'. [ 463.522155][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6555'. [ 463.583188][T19973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6557'. [ 464.158581][T19989] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6566'. [ 464.480877][T20000] tipc: Enabling of bearer rejected, failed to enable media [ 464.548760][T20006] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 464.809488][T20010] netlink: 'syz.6.6576': attribute type 4 has an invalid length. [ 465.083788][T20018] netlink: 248 bytes leftover after parsing attributes in process `syz.6.6580'. [ 465.128299][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6580'. [ 465.585560][T20040] tc_dump_action: action bad kind [ 467.662636][T20113] xt_socket: unknown flags 0x50 [ 468.434371][T20145] pim6reg99999999: entered allmulticast mode [ 468.686380][T20154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6644'. [ 469.080998][T20167] tipc: Started in network mode [ 469.086020][T20167] tipc: Node identity ac14140f, cluster identity 3142 [ 469.156882][T20167] tipc: New replicast peer: 208.253.78.183 [ 469.189340][T20167] tipc: Enabled bearer , priority 10 [ 469.616969][T20188] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6661'. [ 469.644638][T20188] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 469.666368][T20188] openvswitch: netlink: Message has 1 unknown bytes. [ 469.920567][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6666'. [ 469.978640][T20201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6666'. [ 470.177462][ T6088] Bluetooth: hci6: command 0x0405 tx timeout [ 470.218015][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6672'. [ 470.311927][ T6183] tipc: Node number set to 2886997007 [ 470.796852][T20236] netlink: 'syz.1.6684': attribute type 46 has an invalid length. [ 471.015149][T20243] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6688'. [ 471.078500][T20243] netlink: 'syz.4.6688': attribute type 1 has an invalid length. [ 471.096381][T20245] atomic_op ffff8880242f3998 conn xmit_atomic 0000000000000000 [ 472.117918][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6707'. [ 472.578674][T20298] netlink: 'syz.4.6711': attribute type 3 has an invalid length. [ 473.291188][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6726'. [ 474.978966][T20385] netlink: 'syz.2.6756': attribute type 1 has an invalid length. [ 475.026543][T20385] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6756'. [ 475.721855][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6768'. [ 475.945847][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6772'. [ 476.709340][T20450] netlink: 'syz.3.6783': attribute type 4 has an invalid length. [ 476.765418][T20450] netlink: 'syz.3.6783': attribute type 4 has an invalid length. [ 476.917124][T20453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.938796][T20453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 477.099789][T20453] bridge0: port 3(netdevsim2) entered disabled state [ 477.207007][T20453] netdevsim netdevsim1 netdevsim2 (unregistering): left allmulticast mode [ 477.237467][T20453] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 477.271945][T20453] bridge0: port 3(netdevsim2) entered disabled state [ 477.299632][T20470] netlink: 'syz.6.6793': attribute type 1 has an invalid length. [ 477.316659][T20453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.323004][T20470] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6793'. [ 477.351738][T20453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 477.631640][T20453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.654234][T20453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 477.872329][T20453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.901081][T20453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 478.359192][ T1011] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 478.382561][ T1011] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 478.495012][T16823] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 478.528471][T16823] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 478.574970][T16823] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 478.599877][T16823] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 478.648040][T16823] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 478.656286][T16823] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.517152][T20555] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6833'. [ 480.371839][T20586] ip6tnl1: entered promiscuous mode [ 480.398410][T20586] ip6tnl1: entered allmulticast mode [ 480.410579][T20586] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 481.446234][T20641] netlink: 'syz.2.6870': attribute type 1 has an invalid length. [ 481.481876][T20641] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6870'. [ 481.517095][T20641] NCSI netlink: No device for ifindex 0 [ 481.639888][T20646] nbd: couldn't find device at index 536870912 [ 482.821910][T20694] xt_HMARK: spi-set and port-set can't be combined [ 482.876057][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6900'. [ 482.947265][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6902'. [ 482.990460][T20700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6902'. [ 483.013458][T20700] netlink: 'syz.1.6902': attribute type 7 has an invalid length. [ 483.037709][T20702] Bluetooth: MGMT ver 1.23 [ 483.503255][T20698] team0: Port device netdevsim0 removed [ 483.989091][T20729] IPVS: Error connecting to the multicast addr [ 484.569027][T20756] netlink: 'syz.4.6929': attribute type 5 has an invalid length. [ 484.784521][T20769] Zero length message leads to an empty skb [ 485.170263][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6941'. [ 485.253799][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6942'. [ 485.462419][T20798] tipc: Started in network mode [ 485.483314][T20798] tipc: Node identity e0000001, cluster identity 4711 [ 485.504156][T20798] tipc: Enabling of bearer rejected, failed to enable media [ 485.716599][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6953'. [ 485.759506][T20816] batman_adv: batadv0: Adding interface: gretap1 [ 485.787370][T20816] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.862252][T20816] batman_adv: batadv0: Interface activated: gretap1 [ 485.892264][T20821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6960'. [ 486.048231][T20827] netlink: 'syz.6.6962': attribute type 62 has an invalid length. [ 486.604371][T20854] Bluetooth: MGMT ver 1.23 [ 486.965034][T20868] sock: sock_set_timeout: `syz.3.6982' (pid 20868) tries to set negative timeout [ 487.614844][T20894] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.728423][T20894] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.871352][T20894] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.021944][T20894] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.203260][T16823] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.261511][T16823] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.321173][T16831] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.479230][T16831] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.659032][ T6088] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 489.031405][T20935] netlink: 'syz.1.7016': attribute type 8 has an invalid length. [ 489.318054][T20951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7022'. [ 489.891428][T20967] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7029'. [ 490.385781][T20980] tc_dump_action: action bad kind [ 490.738152][T20994] netlink: 'syz.6.7042': attribute type 23 has an invalid length. [ 490.969395][T16823] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.005866][T16823] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.046658][T16823] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.055516][T16823] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.169570][T21008] ipvlan2: entered promiscuous mode [ 491.236003][T21012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7051'. [ 491.392784][T13941] svc: failed to register nfsdv3 RPC service (errno 512). [ 491.437545][T13941] svc: failed to register nfsaclv3 RPC service (errno 512). [ 491.500186][T21021] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 491.693146][T21030] tipc: Enabling of bearer rejected, failed to enable media [ 491.712691][T21033] tipc: Enabled bearer , priority 14 [ 491.999369][T21047] netlink: 19 bytes leftover after parsing attributes in process `syz.3.7065'. [ 492.019797][ T31] INFO: task syz.5.4399:15113 blocked for more than 143 seconds. [ 492.057496][ T31] Not tainted syzkaller #0 [ 492.067374][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.088840][ T31] task:syz.5.4399 state:D stack:27272 pid:15113 tgid:15110 ppid:14530 task_flags:0x400040 flags:0x00004004 [ 492.113502][ T31] Call Trace: [ 492.116965][ T31] [ 492.120068][ T31] __schedule+0x1798/0x4cc0 [ 492.124862][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.169319][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.189641][ T31] ? __pfx___schedule+0x10/0x10 [ 492.200952][ T31] ? schedule+0x91/0x360 [ 492.205363][ T31] schedule+0x165/0x360 [ 492.209852][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.215437][ T31] __mutex_lock+0x7e6/0x1350 [ 492.220323][ T31] ? __mutex_lock+0x5bb/0x1350 [ 492.225482][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 492.231511][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.236635][ T31] ? __nlmsg_put+0xef/0x1b0 [ 492.241257][ T31] ? genlmsg_put+0x137/0x2e0 [ 492.245958][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 492.251759][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 492.257508][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 492.263781][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 492.270487][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 492.276669][ T31] genl_rcv_msg+0x60e/0x790 [ 492.281733][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.286827][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 492.293047][ T31] ? __asan_memcpy+0x40/0x70 [ 492.298144][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 492.303915][ T31] netlink_rcv_skb+0x205/0x470 [ 492.309228][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.314116][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.319496][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.325766][ T31] ? down_read+0x1ad/0x2e0 [ 492.330649][ T31] genl_rcv+0x28/0x40 [ 492.334660][ T31] netlink_unicast+0x82c/0x9e0 [ 492.339901][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 492.345238][ T31] ? netlink_sendmsg+0x642/0xb30 [ 492.350624][ T31] ? skb_put+0x11b/0x210 [ 492.354901][ T31] netlink_sendmsg+0x805/0xb30 [ 492.359909][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.365286][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 492.370685][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.375977][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.381589][ T31] __sock_sendmsg+0x219/0x270 [ 492.386328][ T31] ____sys_sendmsg+0x505/0x830 [ 492.391497][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.396837][ T31] ? import_iovec+0x74/0xa0 [ 492.401584][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 492.406346][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.412173][ T31] ? __fget_files+0x2a/0x420 [ 492.416783][ T31] ? __fget_files+0x3a0/0x420 [ 492.421798][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 492.427618][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.433122][ T31] ? rcu_is_watching+0x15/0xb0 [ 492.438018][ T31] ? do_syscall_64+0xbe/0x3b0 [ 492.442750][ T31] do_syscall_64+0xfa/0x3b0 [ 492.447678][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.452928][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.459092][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.463794][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.470065][ T31] RIP: 0033:0x7f466a78ebe9 [ 492.474596][ T31] RSP: 002b:00007f466b5d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.483162][ T31] RAX: ffffffffffffffda RBX: 00007f466a9c5fa0 RCX: 00007f466a78ebe9 [ 492.491709][ T31] RDX: 0000000000040000 RSI: 0000200000000540 RDI: 0000000000000003 [ 492.499872][ T31] RBP: 00007f466a811e19 R08: 0000000000000000 R09: 0000000000000000 [ 492.508224][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.516244][ T31] R13: 00007f466a9c6038 R14: 00007f466a9c5fa0 R15: 00007ffcac4d88b8 [ 492.524513][ T31] [ 492.528144][ T31] [ 492.528144][ T31] Showing all locks held in the system: [ 492.536528][ T31] 1 lock held by khungtaskd/31: [ 492.545202][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.556310][ T31] 2 locks held by getty/5625: [ 492.565868][ T31] #0: ffff8880301a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.576043][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 492.586525][ T31] 2 locks held by syz.0.3846/13941: [ 492.592105][ T31] #0: ffffffff8f59e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.600587][ T31] #1: ffffffff8e4186c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 492.610954][ T31] 2 locks held by syz.5.4399/15113: [ 492.616175][ T31] #0: ffffffff8f59e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.624474][ T31] #1: ffffffff8e4186c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 492.635694][ T31] 4 locks held by kworker/u8:6/16831: [ 492.641381][ T31] [ 492.643729][ T31] ============================================= [ 492.643729][ T31] [ 492.654800][ T31] NMI backtrace for cpu 1 [ 492.654821][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 492.654843][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.654854][ T31] Call Trace: [ 492.654862][ T31] [ 492.654872][ T31] dump_stack_lvl+0x189/0x250 [ 492.654904][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.654927][ T31] ? __pfx__printk+0x10/0x10 [ 492.654968][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 492.654998][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 492.655027][ T31] ? __pfx__printk+0x10/0x10 [ 492.655058][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 492.655091][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 492.655120][ T31] watchdog+0xf93/0xfe0 [ 492.655152][ T31] ? watchdog+0x1de/0xfe0 [ 492.655184][ T31] kthread+0x70e/0x8a0 [ 492.655212][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.655237][ T31] ? __pfx_kthread+0x10/0x10 [ 492.655262][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.655290][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.655357][ T31] ? __pfx_kthread+0x10/0x10 [ 492.655382][ T31] ret_from_fork+0x3f9/0x770 [ 492.655405][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.655432][ T31] ? __switch_to_asm+0x39/0x70 [ 492.655455][ T31] ? __switch_to_asm+0x33/0x70 [ 492.655477][ T31] ? __pfx_kthread+0x10/0x10 [ 492.655501][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.655543][ T31] [ 492.655550][ T31] Sending NMI from CPU 1 to CPUs 0: [ 492.808827][ C0] NMI backtrace for cpu 0 [ 492.808848][ C0] CPU: 0 UID: 0 PID: 16823 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 492.808866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.808876][ C0] Workqueue: bat_events batadv_nc_worker [ 492.808905][ C0] RIP: 0010:mark_lock+0x0/0x190 [ 492.808922][ C0] Code: 89 df 48 8b 2c 24 e9 b0 fd ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 [ 492.808935][ C0] RSP: 0018:ffffc900100a7898 EFLAGS: 00000006 [ 492.808948][ C0] RAX: 0000000000000000 RBX: ffff88802bc69e00 RCX: ffffffff934feb58 [ 492.808959][ C0] RDX: 0000000000000006 RSI: ffff88802bc6a918 RDI: ffff88802bc69e00 [ 492.808970][ C0] RBP: ffffc900100a7978 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6 [ 492.808980][ C0] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: ffff88802bc6a940 [ 492.808991][ C0] R13: dffffc0000000000 R14: ffff88802bc6a918 R15: 0000000000000001 [ 492.809002][ C0] FS: 0000000000000000(0000) GS:ffff888125c17000(0000) knlGS:0000000000000000 [ 492.809014][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.809024][ C0] CR2: 000055555e0055c8 CR3: 000000007790e000 CR4: 00000000003526f0 [ 492.809041][ C0] Call Trace: [ 492.809047][ C0] [ 492.809052][ C0] lockdep_hardirqs_on_prepare+0x191/0x2a0 [ 492.809074][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 492.809095][ C0] trace_hardirqs_on+0x28/0x40 [ 492.809113][ C0] __local_bh_enable_ip+0x12d/0x1c0 [ 492.809128][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 492.809143][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 492.809160][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 492.809179][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 492.809201][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 492.809226][ C0] batadv_nc_worker+0x369/0x610 [ 492.809246][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 492.809261][ C0] process_scheduled_works+0xae1/0x17b0 [ 492.809286][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.809314][ C0] worker_thread+0x8a0/0xda0 [ 492.809338][ C0] kthread+0x70e/0x8a0 [ 492.809356][ C0] ? __pfx_worker_thread+0x10/0x10 [ 492.809370][ C0] ? __pfx_kthread+0x10/0x10 [ 492.809387][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.809408][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.809421][ C0] ? __pfx_kthread+0x10/0x10 [ 492.809438][ C0] ret_from_fork+0x3f9/0x770 [ 492.809453][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 492.809470][ C0] ? __switch_to_asm+0x39/0x70 [ 492.809488][ C0] ? __switch_to_asm+0x33/0x70 [ 492.809505][ C0] ? __pfx_kthread+0x10/0x10 [ 492.809522][ C0] ret_from_fork_asm+0x1a/0x30 [ 492.809546][ C0] [ 492.810249][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 493.086640][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 493.095843][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.105986][ T31] Call Trace: [ 493.109269][ T31] [ 493.112294][ T31] dump_stack_lvl+0x99/0x250 [ 493.116890][ T31] ? __asan_memcpy+0x40/0x70 [ 493.121535][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.126748][ T31] ? __pfx__printk+0x10/0x10 [ 493.131351][ T31] vpanic+0x281/0x750 [ 493.135344][ T31] ? __pfx_vpanic+0x10/0x10 [ 493.139936][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 493.145490][ T31] ? preempt_schedule+0xae/0xc0 [ 493.150355][ T31] ? preempt_schedule_common+0x83/0xd0 [ 493.155835][ T31] panic+0xb9/0xc0 [ 493.159651][ T31] ? __pfx_panic+0x10/0x10 [ 493.164159][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 493.169544][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 493.175711][ T31] watchdog+0xfd2/0xfe0 [ 493.179977][ T31] ? watchdog+0x1de/0xfe0 [ 493.184319][ T31] kthread+0x70e/0x8a0 [ 493.188396][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.193098][ T31] ? __pfx_kthread+0x10/0x10 [ 493.197731][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.203058][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.208305][ T31] ? __pfx_kthread+0x10/0x10 [ 493.212909][ T31] ret_from_fork+0x3f9/0x770 [ 493.217525][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.222829][ T31] ? __switch_to_asm+0x39/0x70 [ 493.227598][ T31] ? __switch_to_asm+0x33/0x70 [ 493.232537][ T31] ? __pfx_kthread+0x10/0x10 [ 493.237139][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.241927][ T31] [ 493.245386][ T31] Kernel Offset: disabled [ 493.249722][ T31] Rebooting in 86400 seconds..