last executing test programs: 1.068284454s ago: executing program 3 (id=5467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x402}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 934.425549ms ago: executing program 3 (id=5471): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) 917.875941ms ago: executing program 1 (id=5472): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) 908.388739ms ago: executing program 4 (id=5473): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8680d85ff978276a16114", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 849.653482ms ago: executing program 0 (id=5474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aed000000000000000000070000000900010073797a30000000005c000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031200011800a00010071756f7461000000100002800c000140000000000000000814000000110001"], 0xa4}}, 0x0) 825.550102ms ago: executing program 2 (id=5475): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$qrtr(r0, &(0x7f0000004d80)={0x2a, 0xffffffffffffffff, 0x3ffe}, 0xc) 739.458506ms ago: executing program 4 (id=5476): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) 737.640369ms ago: executing program 0 (id=5477): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d00"}) 692.883172ms ago: executing program 3 (id=5478): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 686.734562ms ago: executing program 2 (id=5479): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12, 0x0, 0x5, "0000e54d79"}}) 643.397354ms ago: executing program 1 (id=5480): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 593.092124ms ago: executing program 0 (id=5481): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 573.943211ms ago: executing program 4 (id=5482): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) 492.803077ms ago: executing program 3 (id=5483): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) 491.687868ms ago: executing program 2 (id=5484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1855}, 0x0) 473.368843ms ago: executing program 1 (id=5485): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 448.654907ms ago: executing program 4 (id=5486): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) 411.229588ms ago: executing program 0 (id=5487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002640)={0x18, 0x10, 0xa, 0x201, 0x70bd27, 0x25dfdbfe, {0x5, 0x0, 0x7}, [@generic="93a52d1f"]}, 0x18}}, 0x40) 340.059301ms ago: executing program 1 (id=5488): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 339.423461ms ago: executing program 2 (id=5489): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) 316.577287ms ago: executing program 3 (id=5490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=0x1, r0, 0x2f, 0x20}, 0x20) 236.264049ms ago: executing program 0 (id=5491): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept$packet(r0, 0x0, 0x0) 235.698804ms ago: executing program 4 (id=5492): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 201.75967ms ago: executing program 2 (id=5493): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 198.080373ms ago: executing program 1 (id=5494): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) 152.864211ms ago: executing program 3 (id=5495): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 75.980497ms ago: executing program 0 (id=5496): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 51.705927ms ago: executing program 2 (id=5497): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) 50.165268ms ago: executing program 4 (id=5498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) 0s ago: executing program 1 (id=5499): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 62.878447][ T5610] cgroup: Unknown subsys name 'net' [ 63.018549][ T5610] cgroup: Unknown subsys name 'cpuset' [ 63.027031][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.385531][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.420483][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.428960][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.438235][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.446806][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.454876][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.460905][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.465172][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.471478][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.479964][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.485637][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.491244][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.499177][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.513287][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.523791][ T4943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.533486][ T4943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.555669][ T4943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.564756][ T4943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.573486][ T4943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.581926][ T4943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.590377][ T4943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.598530][ T4943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.607592][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.616668][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.625225][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.633324][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.197959][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.205430][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.212603][ T5622] bridge_slave_0: entered allmulticast mode [ 69.219857][ T5622] bridge_slave_0: entered promiscuous mode [ 69.261338][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.268567][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.275952][ T5622] bridge_slave_1: entered allmulticast mode [ 69.282909][ T5622] bridge_slave_1: entered promiscuous mode [ 69.382124][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.389372][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.397004][ T5633] bridge_slave_0: entered allmulticast mode [ 69.403913][ T5633] bridge_slave_0: entered promiscuous mode [ 69.413756][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.451475][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.458678][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.466001][ T5633] bridge_slave_1: entered allmulticast mode [ 69.472964][ T5633] bridge_slave_1: entered promiscuous mode [ 69.482674][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.521995][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.529307][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.536835][ T5623] bridge_slave_0: entered allmulticast mode [ 69.543699][ T5623] bridge_slave_0: entered promiscuous mode [ 69.587891][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.595991][ T5631] Bluetooth: hci0: command tx timeout [ 69.596009][ T5628] Bluetooth: hci1: command tx timeout [ 69.596243][ T5628] Bluetooth: hci3: command tx timeout [ 69.603087][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.620279][ T5623] bridge_slave_1: entered allmulticast mode [ 69.627382][ T5623] bridge_slave_1: entered promiscuous mode [ 69.651736][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.659043][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.666355][ T5632] bridge_slave_0: entered allmulticast mode [ 69.673303][ T5632] bridge_slave_0: entered promiscuous mode [ 69.680648][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.688056][ T5631] Bluetooth: hci2: command tx timeout [ 69.688262][ T5628] Bluetooth: hci4: command tx timeout [ 69.693781][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.693938][ T5625] bridge_slave_0: entered allmulticast mode [ 69.696017][ T5625] bridge_slave_0: entered promiscuous mode [ 69.730220][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.741334][ T5622] team0: Port device team_slave_0 added [ 69.747135][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.754281][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.761915][ T5632] bridge_slave_1: entered allmulticast mode [ 69.769387][ T5632] bridge_slave_1: entered promiscuous mode [ 69.776917][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.784006][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.791441][ T5625] bridge_slave_1: entered allmulticast mode [ 69.798502][ T5625] bridge_slave_1: entered promiscuous mode [ 69.829227][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.840265][ T5622] team0: Port device team_slave_1 added [ 69.867348][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.903891][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.915381][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.943532][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.955189][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.974032][ T5633] team0: Port device team_slave_0 added [ 69.980651][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.987795][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.014577][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.028597][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.059161][ T5633] team0: Port device team_slave_1 added [ 70.065788][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.072861][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.098909][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.131920][ T5623] team0: Port device team_slave_0 added [ 70.172385][ T5625] team0: Port device team_slave_0 added [ 70.179887][ T5623] team0: Port device team_slave_1 added [ 70.186391][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.193363][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.219411][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.232160][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.239631][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.265695][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.278326][ T5632] team0: Port device team_slave_0 added [ 70.286053][ T5625] team0: Port device team_slave_1 added [ 70.319833][ T5632] team0: Port device team_slave_1 added [ 70.357009][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.364066][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.390074][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.402489][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.409497][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.435413][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.477098][ T5622] hsr_slave_0: entered promiscuous mode [ 70.483547][ T5622] hsr_slave_1: entered promiscuous mode [ 70.496056][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.503117][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.530109][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.541759][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.548856][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.574998][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.609345][ T5633] hsr_slave_0: entered promiscuous mode [ 70.615940][ T5633] hsr_slave_1: entered promiscuous mode [ 70.622466][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 70.628498][ T5633] Cannot create hsr debugfs directory [ 70.635483][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.642515][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.668859][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.680486][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.687492][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.713602][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.781851][ T5623] hsr_slave_0: entered promiscuous mode [ 70.788177][ T5623] hsr_slave_1: entered promiscuous mode [ 70.794171][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 70.800321][ T5623] Cannot create hsr debugfs directory [ 70.887590][ T5632] hsr_slave_0: entered promiscuous mode [ 70.893836][ T5632] hsr_slave_1: entered promiscuous mode [ 70.900405][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 70.906191][ T5632] Cannot create hsr debugfs directory [ 70.917205][ T5625] hsr_slave_0: entered promiscuous mode [ 70.923389][ T5625] hsr_slave_1: entered promiscuous mode [ 70.929649][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 70.935431][ T5625] Cannot create hsr debugfs directory [ 71.359170][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.366893][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.423464][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.438662][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.446866][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.456589][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.464697][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.477296][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.493270][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.503488][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.561513][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.571064][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.579000][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.591215][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.600262][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.609983][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.618218][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.627960][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.676660][ T5628] Bluetooth: hci0: command tx timeout [ 71.682440][ T5631] Bluetooth: hci1: command tx timeout [ 71.688192][ T50] Bluetooth: hci3: command tx timeout [ 71.732831][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.744048][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.752237][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.755915][ T5631] Bluetooth: hci4: command tx timeout [ 71.759246][ T5628] Bluetooth: hci2: command tx timeout [ 71.773650][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.781547][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.792353][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.800856][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.811098][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.914433][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.926289][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.942103][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.951817][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.975505][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.984917][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.994061][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.002899][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.046038][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.093915][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.103726][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.112781][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.130888][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.140576][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.149847][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.160780][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.175032][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.186724][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.197083][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.210877][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.236192][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.243969][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.253842][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.260982][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.301774][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.308895][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.319251][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.326435][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.372083][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.426571][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.463767][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.470916][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.512108][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.519288][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.610657][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.693060][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.719265][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.726816][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.767092][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.774266][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.796892][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.861675][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.929062][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.936263][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.994976][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.002241][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.020708][ T5632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.453696][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.532144][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.673597][ T5622] veth0_vlan: entered promiscuous mode [ 73.757427][ T5628] Bluetooth: hci1: command tx timeout [ 73.757924][ T5631] Bluetooth: hci0: command tx timeout [ 73.763471][ T5628] Bluetooth: hci3: command tx timeout [ 73.783386][ T5622] veth1_vlan: entered promiscuous mode [ 73.817171][ T5633] veth0_vlan: entered promiscuous mode [ 73.835936][ T5628] Bluetooth: hci2: command tx timeout [ 73.835945][ T5631] Bluetooth: hci4: command tx timeout [ 73.879801][ T5633] veth1_vlan: entered promiscuous mode [ 73.897404][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.981584][ T5622] veth0_macvtap: entered promiscuous mode [ 74.029903][ T5622] veth1_macvtap: entered promiscuous mode [ 74.103013][ T5633] veth0_macvtap: entered promiscuous mode [ 74.130783][ T5633] veth1_macvtap: entered promiscuous mode [ 74.161305][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.189523][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.205300][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.263789][ T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.276109][ T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.290783][ T5623] veth0_vlan: entered promiscuous mode [ 74.302897][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.319415][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.326986][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.336737][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.403386][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.421703][ T5623] veth1_vlan: entered promiscuous mode [ 74.452338][ T155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.477804][ T155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.487217][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.514867][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.600541][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.614824][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.670416][ T5625] veth0_vlan: entered promiscuous mode [ 74.684343][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.705509][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.711919][ T5625] veth1_vlan: entered promiscuous mode [ 74.726452][ T5623] veth0_macvtap: entered promiscuous mode [ 74.742713][ T5632] veth0_vlan: entered promiscuous mode [ 74.794476][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.794859][ T5623] veth1_macvtap: entered promiscuous mode [ 74.822658][ T5632] veth1_vlan: entered promiscuous mode [ 74.837503][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.859671][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.914569][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.962458][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.981620][ T5625] veth0_macvtap: entered promiscuous mode [ 74.989329][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.013641][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.023035][ T5625] veth1_macvtap: entered promiscuous mode [ 75.047774][ T5632] veth0_macvtap: entered promiscuous mode [ 75.060097][ T155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.072087][ T155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.093687][ T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.105522][ T137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.118905][ T5632] veth1_macvtap: entered promiscuous mode [ 75.222222][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.259660][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.340040][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.366693][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.403457][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.443594][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.530245][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.566376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.585017][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.596638][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.642558][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.697052][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.770034][ T137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.794921][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.814693][ T137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.821799][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.836869][ T5628] Bluetooth: hci3: command tx timeout [ 75.839698][ T50] Bluetooth: hci1: command tx timeout [ 75.849062][ T5631] Bluetooth: hci0: command tx timeout [ 75.917713][ T5631] Bluetooth: hci4: command tx timeout [ 75.923767][ T50] Bluetooth: hci2: command tx timeout [ 75.982568][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.022673][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.152228][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.177771][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.338348][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.364239][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.551208][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.579213][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.612161][ T9] cfg80211: failed to load regulatory.db [ 85.913724][ T6317] IPv6: addrconf: prefix option has invalid lifetime [ 88.992798][ T6479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.202459][ T7386] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 118.484425][ T7863] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 126.393793][ T8187] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 130.485632][ T8380] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 132.799023][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.808749][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.252354][ T8958] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 146.789200][ T9126] IPv6: addrconf: prefix option has invalid lifetime [ 151.640526][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 153.290359][ T9441] netlink: 'syz.1.1800': attribute type 2 has an invalid length. [ 153.328962][ T29] audit: type=1800 audit(1778093536.046:2): pid=9443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1799" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1723 res=0 errno=0 [ 153.354372][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1800'. [ 153.809913][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 154.307291][ T9481] openvswitch: netlink: VLAN attribute unexpected. [ 154.447303][ T9485] netlink: 'syz.2.1821': attribute type 21 has an invalid length. [ 154.491856][ T9485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1821'. [ 154.543847][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 154.554349][ T9485] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 154.603530][ T9489] openvswitch: netlink: Invalid VLAN frame [ 154.678270][ T9495] netlink: 'syz.1.1826': attribute type 61 has an invalid length. [ 154.788160][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 155.139626][ T9511] netlink: 'syz.1.1834': attribute type 11 has an invalid length. [ 156.595593][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1868'. [ 157.042995][ T9594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1875'. [ 157.588317][ T9615] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1885'. [ 157.715452][ T9614] Cannot find set identified by id 0 to match [ 158.714800][ T9668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.853996][ T9673] netlink: 'syz.1.1914': attribute type 3 has an invalid length. [ 159.130122][ T9687] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1920'. [ 159.659594][ T9712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.869832][ T9719] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 160.740029][ T9749] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1944'. [ 160.755186][ T9749] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1944'. [ 161.613775][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 161.653430][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'. [ 162.119183][ T9818] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.313927][ T9827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.753038][ T9848] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 163.092542][ T9854] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 163.105854][ T9854] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 163.128202][ T9854] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 163.230861][ T9861] netlink: 'syz.1.1991': attribute type 1 has an invalid length. [ 163.278700][ T9861] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1991'. [ 163.527083][ T9876] netlink: 'syz.4.1999': attribute type 11 has an invalid length. [ 163.604458][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 163.638269][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 163.783394][ T9886] syz.2.2004 uses obsolete (PF_INET,SOCK_PACKET) [ 163.970135][ T9894] netlink: 'syz.4.2008': attribute type 2 has an invalid length. [ 164.360896][ T9918] netlink: 'syz.2.2020': attribute type 12 has an invalid length. [ 164.458570][ T9921] netlink: 'syz.1.2021': attribute type 1 has an invalid length. [ 164.487809][ T9921] netlink: 'syz.1.2021': attribute type 1 has an invalid length. [ 164.884519][ T9940] netlink: 'syz.1.2031': attribute type 21 has an invalid length. [ 164.921579][ T9940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2031'. [ 165.422822][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2046'. [ 165.433735][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.448838][ T9971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.743761][ T9988] xt_ecn: cannot match TCP bits for non-tcp packets [ 166.038435][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2061'. [ 166.584149][T10031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2075'. [ 166.730238][T10030] bond1: Removing last arp target with arp_interval on [ 167.430617][T10074] xfrm0: entered allmulticast mode [ 167.466142][T10074] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 167.749123][T10093] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 167.819178][T10095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2107'. [ 168.663200][T10143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2130'. [ 168.763960][T10147] netlink: 'syz.2.2132': attribute type 16 has an invalid length. [ 168.791948][T10147] netlink: 'syz.2.2132': attribute type 17 has an invalid length. [ 169.334104][T10172] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2138'. [ 169.953743][T10200] warning: `syz.4.2156' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 170.108044][T10205] netlink: 'syz.2.2158': attribute type 2 has an invalid length. [ 170.152381][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 170.337571][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2164'. [ 170.971743][T10252] xt_hl: Unknown TTL match mode: 237 [ 170.983626][T10243] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 171.010096][T10243] bond1 (unregistering): Released all slaves [ 171.154834][T10260] Illegal XDP return value 14 on prog (id 373) dev N/A, expect packet loss! [ 172.014539][T10296] netlink: 'syz.0.2203': attribute type 10 has an invalid length. [ 172.217835][T10296] team0: Device veth1_virt_wifi failed to register rx_handler [ 172.304261][T10303] tipc: Can't bind to reserved service type 0 [ 172.844794][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2218'. [ 172.900960][T10329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2218'. [ 172.958378][T10334] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2221'. [ 172.988120][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 173.022692][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 173.052574][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 174.270151][T10391] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 174.295255][T10391] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 174.356768][T10398] openvswitch: netlink: Multiple metadata blocks provided [ 174.895336][T10423] xt_addrtype: ipv6 does not support BROADCAST matching [ 175.404768][T10448] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.471781][T10451] __nla_validate_parse: 3 callbacks suppressed [ 175.471799][T10451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2272'. [ 175.726269][T10465] netlink: 'syz.4.2280': attribute type 1 has an invalid length. [ 175.898109][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 175.922389][T10474] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2283'. [ 176.269043][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 176.477755][T10492] bond1: option ad_actor_sys_prio: invalid value (0) [ 176.509432][T10492] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 176.716751][T10492] bond1 (unregistering): Released all slaves [ 176.922796][T10510] 8021q: VLANs not supported on lo [ 177.017252][T10516] dvmrp0: entered allmulticast mode [ 177.142607][T10526] xt_cgroup: xt_cgroup: no path or classid specified [ 177.529951][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2315'. [ 177.554974][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'. [ 177.894179][T10552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2321'. [ 177.932699][T10552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2321'. [ 178.310411][T10572] IPv6: Can't replace route, no match found [ 178.483097][T10581] netlink: 'syz.4.2335': attribute type 2 has an invalid length. [ 178.522716][T10585] netlink: 'syz.2.2336': attribute type 21 has an invalid length. [ 178.742637][T10598] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 178.761084][T10587] bond1 (unregistering): Released all slaves [ 179.362654][T10626] netlink: 'syz.4.2356': attribute type 23 has an invalid length. [ 179.500512][T10632] openvswitch: netlink: Message has 16 unknown bytes. [ 180.006792][T10650] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 180.059566][T10650] bond1 (unregistering): Released all slaves [ 180.518146][T10679] xt_bpf: check failed: parse error [ 180.881505][T10697] syz.2.2392: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 180.935207][T10697] CPU: 1 UID: 0 PID: 10697 Comm: syz.2.2392 Not tainted syzkaller #0 PREEMPT(full) [ 180.935235][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.935261][T10697] Call Trace: [ 180.935271][T10697] [ 180.935279][T10697] dump_stack_lvl+0xe8/0x150 [ 180.935319][T10697] warn_alloc+0x249/0x340 [ 180.935349][T10697] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 180.935383][T10697] ? __pfx_warn_alloc+0x10/0x10 [ 180.935418][T10697] ? kasan_save_track+0x4f/0x80 [ 180.935443][T10697] ? kasan_save_track+0x3e/0x80 [ 180.935467][T10697] ? __kasan_kmalloc+0x93/0xb0 [ 180.935491][T10697] ? __kmalloc_cache_noprof+0x31c/0x660 [ 180.935515][T10697] ? xskq_create+0x56/0x170 [ 180.935537][T10697] ? xsk_setsockopt+0x54c/0x990 [ 180.935554][T10697] ? do_sock_setsockopt+0x17c/0x1b0 [ 180.935578][T10697] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 180.935603][T10697] ? do_syscall_64+0x15f/0xf80 [ 180.935632][T10697] __vmalloc_node_range_noprof+0x132/0x1750 [ 180.935691][T10697] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.935723][T10697] ? __kasan_kmalloc+0x93/0xb0 [ 180.935754][T10697] vmalloc_user_noprof+0xad/0xe0 [ 180.935781][T10697] ? xskq_create+0xbf/0x170 [ 180.935803][T10697] xskq_create+0xbf/0x170 [ 180.935829][T10697] xsk_init_queue+0x8a/0xe0 [ 180.935854][T10697] xsk_setsockopt+0x54c/0x990 [ 180.935880][T10697] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.935902][T10697] ? __pfx_aa_sk_perm+0x10/0x10 [ 180.935929][T10697] ? aa_sock_opt_perm+0xff/0x1a0 [ 180.935958][T10697] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 180.935985][T10697] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.936008][T10697] do_sock_setsockopt+0x17c/0x1b0 [ 180.936042][T10697] __x64_sys_setsockopt+0x13d/0x1b0 [ 180.936070][T10697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.936092][T10697] do_syscall_64+0x15f/0xf80 [ 180.936116][T10697] ? trace_irq_disable+0x3b/0x140 [ 180.936146][T10697] ? clear_bhb_loop+0x40/0x90 [ 180.936168][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.936188][T10697] RIP: 0033:0x7f19dc59cdd9 [ 180.936213][T10697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.936230][T10697] RSP: 002b:00007f19dd374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.936259][T10697] RAX: ffffffffffffffda RBX: 00007f19dc815fa0 RCX: 00007f19dc59cdd9 [ 180.936274][T10697] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 180.936285][T10697] RBP: 00007f19dc632d69 R08: 0000000000000004 R09: 0000000000000000 [ 180.936298][T10697] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.936310][T10697] R13: 00007f19dc816038 R14: 00007f19dc815fa0 R15: 00007ffe0efd6ae8 [ 180.936341][T10697] [ 180.938460][T10697] Mem-Info: [ 181.043846][T10704] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 181.060288][T10697] active_anon:5862 inactive_anon:13 isolated_anon:0 [ 181.060288][T10697] active_file:2245 inactive_file:40539 isolated_file:0 [ 181.060288][T10697] unevictable:768 dirty:397 writeback:0 [ 181.060288][T10697] slab_reclaimable:10123 slab_unreclaimable:96974 [ 181.060288][T10697] mapped:29214 shmem:1290 pagetables:1298 [ 181.060288][T10697] sec_pagetables:0 bounce:0 [ 181.060288][T10697] kernel_misc_reclaimable:0 [ 181.060288][T10697] free:1332539 free_pcp:9319 free_cma:0 [ 181.345511][T10697] Node 0 active_anon:23448kB inactive_anon:52kB active_file:8980kB inactive_file:161948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116956kB dirty:1588kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11924kB pagetables:4964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 181.493206][T10697] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 181.627206][T10697] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.706798][T10697] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 181.719057][T10697] Node 0 DMA32 free:1369948kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23348kB inactive_anon:52kB active_file:8980kB inactive_file:161948kB unevictable:1536kB writepending:1588kB zspages:0kB present:3129332kB managed:2552544kB mlocked:0kB bounce:0kB free_pcp:37392kB local_pcp:19032kB free_cma:0kB [ 181.793966][T10697] lowmem_reserve[]: 0 0 0 0 0 [ 181.853488][T10697] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 181.907540][T10697] lowmem_reserve[]: 0 0 0 0 0 [ 181.946821][T10739] netlink: 'syz.4.2413': attribute type 1 has an invalid length. [ 181.954772][T10739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.960168][T10697] Node 1 Normal free:3945048kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.056202][T10697] lowmem_reserve[]: 0 0 0 0 0 [ 182.071044][T10697] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.106592][T10697] Node 0 DMA32: 3562*4kB (UM) 2661*8kB (UME) 1459*16kB (UME) 829*32kB (UME) 1005*64kB (UME) 883*128kB (UME) 639*256kB (UM) 373*512kB (UM) 238*1024kB (UME) 89*2048kB (UME) 80*4096kB (UM) = 1370976kB [ 182.181959][T10697] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 182.207462][T10697] Node 1 Normal: 0*4kB 3*8kB (UM) 5*16kB (UM) 13*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3945096kB [ 182.230271][T10749] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 182.253377][T10749] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2418'. [ 182.254037][T10751] netlink: 'syz.0.2419': attribute type 3 has an invalid length. [ 182.270005][T10697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.298398][T10697] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.338373][T10697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.350381][T10697] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.366625][T10697] 44070 total pagecache pages [ 182.374420][T10697] 0 pages in swap cache [ 182.403184][T10697] Free swap = 124996kB [ 182.408926][T10697] Total swap = 124996kB [ 182.422090][T10697] 2097051 pages RAM [ 182.445142][T10697] 0 pages HighMem/MovableOnly [ 182.475151][T10697] 427133 pages reserved [ 182.494032][T10697] 0 pages cma reserved [ 182.676327][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2426'. [ 182.764298][T10774] netlink: 'syz.1.2430': attribute type 30 has an invalid length. [ 182.885383][T10778] netlink: 'syz.0.2432': attribute type 1 has an invalid length. [ 182.926019][T10778] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2432'. [ 183.288211][T10796] netlink: 'syz.0.2440': attribute type 32 has an invalid length. [ 183.769524][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2446'. [ 183.784137][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 183.957798][T10819] netlink: 'syz.0.2449': attribute type 1 has an invalid length. [ 184.006520][T10819] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2449'. [ 184.062561][T10819] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2449'. [ 184.123926][T10819] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2449'. [ 184.480823][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.490313][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.872970][T10831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.899771][T10831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.333919][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.366999][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.400397][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.450491][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.559555][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2493'. [ 186.588287][T10909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2493'. [ 187.114137][T10931] netlink: 'syz.1.2504': attribute type 11 has an invalid length. [ 187.270598][T10937] __nla_validate_parse: 1 callbacks suppressed [ 187.270618][T10937] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2507'. [ 187.550361][T10953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2515'. [ 187.674321][T10957] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 187.696159][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2520'. [ 187.712017][T10957] bond2 (unregistering): Released all slaves [ 188.080817][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2526'. [ 188.159049][T10974] bond1 (unregistering): Released all slaves [ 188.255475][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2531'. [ 188.526608][T10999] geneve2: entered promiscuous mode [ 188.545010][T10999] geneve2: entered allmulticast mode [ 188.586335][ T1129] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 188.620407][ T1129] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 188.666654][ T1129] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 188.704683][ T1129] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.245215][T11035] netlink: 'syz.1.2554': attribute type 10 has an invalid length. [ 189.383251][T11037] 5nè‹Ò: entered promiscuous mode [ 189.548782][T11045] batadv_slave_0: entered promiscuous mode [ 189.574977][T11045] batadv_slave_0: entered allmulticast mode [ 189.642092][T11051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.009323][T11067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.080176][T11070] netlink: 'syz.1.2570': attribute type 10 has an invalid length. [ 190.129103][T11070] team0: Device vxcan1 is of different type [ 190.310146][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 190.325329][T11084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.687805][T11099] netlink: zone id is out of range [ 190.707028][T11099] netlink: get zone limit has 4 unknown bytes [ 190.738304][T11100] ip6erspan0: entered promiscuous mode [ 190.744823][T11100] ip6erspan0: entered allmulticast mode [ 190.949346][T11116] openvswitch: netlink: IP tunnel TTL not specified. [ 191.130034][T11124] netlink: 'syz.1.2594': attribute type 1 has an invalid length. [ 191.154549][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'. [ 191.205434][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 191.211570][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 191.218084][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 191.224496][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 191.231497][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 191.378125][T11126] bond2: option ad_actor_sys_prio: invalid value (0) [ 191.414369][T11126] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 191.437190][T11126] bond2 (unregistering): Released all slaves [ 191.644323][T11142] m1Ie5nè‹Ò: entered promiscuous mode [ 192.790286][T11208] netlink: 'syz.0.2636': attribute type 6 has an invalid length. [ 192.812133][T11210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.817111][T11208] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.829515][T11210] batadv_slave_0: entered promiscuous mode [ 192.840877][T11210] batadv_slave_0: entered allmulticast mode [ 193.081708][T11223] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2643'. [ 193.091067][T11223] .70·X: renamed from veth1_virt_wifi [ 193.129286][T11223] .70·X: entered allmulticast mode [ 193.169390][T11223] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 193.709980][T11249] veth2: entered allmulticast mode [ 193.928149][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 194.244168][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.253294][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.266642][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'. [ 194.377702][T11277] netlink: 'syz.4.2670': attribute type 13 has an invalid length. [ 194.420977][T11277] gretap0: refused to change device tx_queue_len [ 194.430581][T11277] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 194.517117][T11283] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2674'. [ 194.690972][T11291] netlink: 'syz.1.2678': attribute type 21 has an invalid length. [ 194.735285][T11291] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2678'. [ 195.470542][T11333] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2694'. [ 195.661411][T11338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2697'. [ 195.863969][T11345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2700'. [ 195.890326][T11345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2700'. [ 196.510609][T11371] netlink: 'syz.4.2712': attribute type 49 has an invalid length. [ 196.597562][T11378] openvswitch: netlink: IP tunnel dst address not specified [ 196.743733][T11386] wg1 speed is unknown, defaulting to 1000 [ 196.784912][T11386] wg1 speed is unknown, defaulting to 1000 [ 196.819359][T11386] wg1 speed is unknown, defaulting to 1000 [ 196.873076][T11386] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 196.891528][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'. [ 196.931340][T11386] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 196.993617][T11386] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 197.059464][T11386] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 197.114682][T11386] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 197.242087][T11407] xt_TCPMSS: Only works on TCP SYN packets [ 197.323825][T11386] wg1 speed is unknown, defaulting to 1000 [ 197.392483][T11386] wg1 speed is unknown, defaulting to 1000 [ 197.430548][T11386] wg1 speed is unknown, defaulting to 1000 [ 197.458023][T11386] wg1 speed is unknown, defaulting to 1000 [ 197.552472][T11420] netlink: zone id is out of range [ 197.574622][T11418] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 197.584984][T11420] netlink: zone id is out of range [ 197.604076][T11418] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 197.612573][T11420] netlink: zone id is out of range [ 197.626642][T11386] wg1 speed is unknown, defaulting to 1000 [ 197.633592][T11420] netlink: zone id is out of range [ 197.639959][T11420] netlink: zone id is out of range [ 197.661378][T11420] netlink: zone id is out of range [ 197.683756][T11420] netlink: zone id is out of range [ 197.711262][T11420] netlink: zone id is out of range [ 197.897906][T11436] vlan0: entered promiscuous mode [ 198.057703][T11446] netlink: 'syz.1.2750': attribute type 1 has an invalid length. [ 198.986844][T11489] netlink: 'syz.0.2772': attribute type 21 has an invalid length. [ 199.017501][T11489] __nla_validate_parse: 4 callbacks suppressed [ 199.017519][T11489] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2772'. [ 199.053313][T11494] netlink: 'syz.2.2774': attribute type 2 has an invalid length. [ 199.077246][T11489] netlink: 'syz.0.2772': attribute type 4 has an invalid length. [ 199.077450][T11494] netlink: 'syz.2.2774': attribute type 1 has an invalid length. [ 199.109018][T11489] netlink: 'syz.0.2772': attribute type 5 has an invalid length. [ 199.117395][T11494] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2774'. [ 199.141663][T11489] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2772'. [ 199.255925][T11502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2778'. [ 200.209513][T11551] wg1 speed is unknown, defaulting to 1000 [ 200.811573][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'. [ 201.424860][T11615] netlink: 'syz.1.2830': attribute type 2 has an invalid length. [ 201.448781][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2832'. [ 203.033008][T11690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2862'. [ 203.071667][T11690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2862'. [ 203.107713][T11692] hmó3)óÿ: entered promiscuous mode [ 203.157732][T11696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2865'. [ 203.545873][T11710] bond1 (unregistering): Released all slaves [ 203.710094][T11715] bond2: option tlb_dynamic_lb: invalid value (5) [ 203.744022][T11728] net_ratelimit: 348 callbacks suppressed [ 203.744040][T11728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.774740][T11730] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 203.790188][T11715] bond2 (unregistering): Released all slaves [ 203.892140][T11733] netlink: 'syz.4.2883': attribute type 2 has an invalid length. [ 204.434762][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 204.463501][T11762] bond0: Error: Cannot enslave bond to itself. [ 204.832869][T11778] openvswitch: netlink: Missing key (keys=40, expected=80) [ 204.938940][T11786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.102839][T11792] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 205.251516][T11794] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.259253][T11794] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.543178][T11794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.563826][T11794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.723441][T11810] netlink: 'syz.2.2921': attribute type 11 has an invalid length. [ 205.740926][T11810] netlink: 'syz.2.2921': attribute type 5 has an invalid length. [ 205.749933][T11810] netlink: 6548 bytes leftover after parsing attributes in process `syz.2.2921'. [ 205.852116][ T137] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.882525][T11812] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 205.950432][ T137] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.983941][ T137] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.035703][ T137] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.418853][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 206.461214][T11838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2935'. [ 206.477193][T11838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2935'. [ 206.640547][T11842] netlink: 'syz.3.2937': attribute type 2 has an invalid length. [ 206.680117][T11842] netlink: 'syz.3.2937': attribute type 9 has an invalid length. [ 206.726442][T11842] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2937'. [ 207.267344][T11866] xt_ipcomp: unknown flags 1D [ 207.660943][T11884] ip6gretap2: entered promiscuous mode [ 207.688052][T11884] ip6gretap2: entered allmulticast mode [ 208.181407][T11908] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2969'. [ 208.243867][T11908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.128465][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.169375][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.195445][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.216867][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.258601][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.292731][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.328804][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.384238][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.422282][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.469645][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 210.539621][T11995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.576396][T11995] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.610201][T11995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.743567][T11995] batadv_slave_0: left promiscuous mode [ 210.756123][T11995] batadv_slave_0: left allmulticast mode [ 210.769751][T11995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.787719][T11995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.811356][T11995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.838313][T11995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.853189][T11995] .70·X: left allmulticast mode [ 210.874838][T11995] veth1_vlan: left promiscuous mode [ 210.890740][T11995] veth0_vlan: left promiscuous mode [ 210.906823][T11995] veth0_vlan: entered promiscuous mode [ 210.924703][T11995] veth1_vlan: entered promiscuous mode [ 210.967749][T11995] veth1_macvtap: left promiscuous mode [ 211.002810][T11995] veth0_macvtap: left promiscuous mode [ 211.047182][T11995] veth0_macvtap: entered promiscuous mode [ 211.084669][T11995] veth1_macvtap: entered promiscuous mode [ 211.100935][T11995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.117809][T11995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.137238][T11995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.149246][T11995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.167417][T11995] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 211.174383][T11995] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 211.222332][T11995] ip6gretap2: left promiscuous mode [ 211.227784][T11995] ip6gretap2: left allmulticast mode [ 211.240406][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.247628][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.277843][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.285140][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.453870][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.488127][T12049] veth1_macvtap: left promiscuous mode [ 211.518995][T12049] macsec0: entered promiscuous mode [ 211.561209][T12049] macsec0: entered allmulticast mode [ 211.612684][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.644956][T12057] --map-set only usable from mangle table [ 211.653975][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.674251][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.824215][T12062] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 212.861977][T12104] bond2: Unable to set down delay as MII monitoring is disabled [ 212.893340][T12104] bond2 (unregistering): Released all slaves [ 213.018896][T12119] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 213.881648][T12166] xt_TCPMSS: Only works on TCP SYN packets [ 214.074897][T12173] netlink: 'syz.1.3101': attribute type 13 has an invalid length. [ 214.102008][T12173] syz_tun: refused to change device tx_queue_len [ 214.114177][T12173] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 214.479278][T12192] openvswitch: netlink: Flow actions attr not present in new flow. [ 214.646593][T12196] bond1: entered promiscuous mode [ 214.680924][T12196] bond1: entered allmulticast mode [ 214.692343][T12196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.900062][T12218] xt_TCPMSS: Only works on TCP SYN packets [ 217.013593][T12318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.065236][T12320] __nla_validate_parse: 79 callbacks suppressed [ 217.065256][T12320] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3168'. [ 217.427083][T12329] netlink: 'syz.1.3172': attribute type 2 has an invalid length. [ 217.461487][T12329] tipc: Started in network mode [ 217.489841][T12329] tipc: Node identity 1340008, cluster identity 4711 [ 217.508507][T12329] tipc: Node number set to 20185096 [ 217.554574][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3176'. [ 217.635798][T12330] bond1: option arp_all_targets: invalid value (129) [ 217.707871][T12330] bond1 (unregistering): Released all slaves [ 218.098212][T12357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3186'. [ 218.569252][T12380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3195'. [ 218.967301][T12397] Cannot find del_set index 2 as target [ 219.013774][T12402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3207'. [ 219.132226][T12401] bond2: Removing last ns target with arp_interval on [ 219.275552][T12413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3213'. [ 219.354882][T12413] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3213'. [ 219.394558][T12413] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3213'. [ 219.429517][T12413] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3213'. [ 219.675239][T12434] netlink: 'syz.3.3223': attribute type 1 has an invalid length. [ 219.897603][T12446] netlink: 'syz.3.3229': attribute type 1 has an invalid length. [ 220.052009][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'. [ 220.261623][T12468] netlink: 'syz.3.3239': attribute type 10 has an invalid length. [ 221.228779][T12517] SET target dimension over the limit! [ 221.493289][T12532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.783527][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.791264][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.111396][T12544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.170342][T12544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.337168][T12575] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.539227][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.564231][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.582677][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.621101][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.965973][T12603] openvswitch: netlink: IP tunnel dst address not specified [ 223.536160][T12633] __nla_validate_parse: 5 callbacks suppressed [ 223.536178][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3316'. [ 223.567616][T12633] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3316'. [ 223.604818][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3317'. [ 223.790670][T12646] netlink: 'syz.3.3323': attribute type 4 has an invalid length. [ 223.954207][T12653] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3326'. [ 223.996139][T12655] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.266137][T12714] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 225.304845][T12714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.579028][T12732] veth0_macvtap: entered allmulticast mode [ 225.604047][T12732] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 225.998226][T12755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3375'. [ 226.163105][T12763] netlink: 'syz.2.3378': attribute type 5 has an invalid length. [ 226.493926][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3383'. [ 226.508195][T12779] batadv0: entered promiscuous mode [ 226.548382][T12779] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 226.814299][T12752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.832604][T12752] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 226.961314][T12752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.989970][T12752] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 227.098848][T12752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.143317][T12752] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 227.198757][T12752] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.225752][T12752] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 227.265841][T12752] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.278443][T12752] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 227.302004][T12821] netlink: 'syz.2.3401': attribute type 25 has an invalid length. [ 227.310404][T12821] netlink: 'syz.2.3401': attribute type 3 has an invalid length. [ 227.333380][T12821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3401'. [ 227.674370][T12838] netlink: 'syz.1.3406': attribute type 1 has an invalid length. [ 227.687397][T12839] netlink: 'syz.3.3407': attribute type 21 has an invalid length. [ 227.722416][T12839] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3407'. [ 227.856389][T12839] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3407'. [ 228.054578][T12855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3413'. [ 229.049206][T12906] x_tables: unsorted underflow at hook 2 [ 229.116119][T12908] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3435'. [ 229.760471][T12937] Zero length message leads to an empty skb [ 230.082328][T12953] openvswitch: netlink: IP tunnel dst address not specified [ 230.933310][T13000] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 231.008133][T13000] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 231.292058][T13019] xt_nfacct: accounting object `syz0' does not exist [ 231.465961][T13028] netlink: 'syz.2.3483': attribute type 1 has an invalid length. [ 231.730381][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3489'. [ 231.784927][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3489'. [ 232.227599][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'. [ 232.349354][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 232.435663][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3506'. [ 232.544585][T13087] netlink: 'syz.1.3507': attribute type 8 has an invalid length. [ 232.611913][T13093] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 232.633044][T13093] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 232.660544][T13093] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.3510'. [ 233.008618][T13111] netlink: 'syz.2.3518': attribute type 30 has an invalid length. [ 233.309319][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'. [ 233.536908][T13140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3530'. [ 233.577828][T13140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3530'. [ 234.456486][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 234.503925][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 234.549630][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 234.589010][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 234.630625][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 234.676702][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 234.687514][T13190] netlink: 'syz.0.3547': attribute type 2 has an invalid length. [ 234.725991][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 234.779244][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 234.880530][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 234.897777][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 235.013627][T13179] batadv_slave_0: left promiscuous mode [ 235.046846][T13179] batadv_slave_0: left allmulticast mode [ 235.070184][T13179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.141577][T13179] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 235.455644][T13215] bond1: option resend_igmp: invalid value (2878) [ 235.496703][T13215] bond1: option resend_igmp: allowed values 0 - 255 [ 235.533849][T13215] bond1 (unregistering): Released all slaves [ 235.890108][T13243] netlink: 'syz.0.3566': attribute type 2 has an invalid length. [ 236.212267][T13258] geneve3: entered promiscuous mode [ 236.240722][T13258] geneve3: entered allmulticast mode [ 236.473323][T13272] netlink: 'syz.4.3580': attribute type 41 has an invalid length. [ 236.787706][ T29] audit: type=1107 audit(1778093619.516:3): pid=13287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 237.823189][T13344] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 237.942924][T13349] openvswitch: netlink: IP tunnel dst address not specified [ 237.960392][T13351] netlink: 'syz.4.3612': attribute type 5 has an invalid length. [ 239.181485][T13409] Cannot find add_set index 4 as target [ 239.191662][T13411] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 239.673971][T13436] __nla_validate_parse: 48 callbacks suppressed [ 239.673989][T13436] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3650'. [ 239.729849][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3651'. [ 239.762938][T13442] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3651'. [ 239.942823][T13450] IPv6: sit1: Disabled Multicast RS [ 240.286427][T13469] netlink: 34 bytes leftover after parsing attributes in process `syz.4.3666'. [ 240.386501][T13474] netlink: 'syz.1.3669': attribute type 3 has an invalid length. [ 240.463208][T13479] sctp: [Deprecated]: syz.3.3672 (pid 13479) Use of int in maxseg socket option. [ 240.463208][T13479] Use struct sctp_assoc_value instead [ 240.802635][T13496] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 240.802635][T13496] Please contact the netfilter-devel mailing list or update your nftables rules. [ 241.008085][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3687'. [ 241.439237][T13530] xt_ecn: cannot match TCP bits for non-tcp packets [ 241.764581][T13550] Unsupported ieee802154 address type: 0 [ 241.954174][T13548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.981987][T13562] netlink: 'syz.2.3712': attribute type 1 has an invalid length. [ 241.984388][T13548] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.006237][T13562] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3712'. [ 242.016141][T13564] netlink: zone id is out of range [ 242.063380][T13548] batadv0: left promiscuous mode [ 242.086224][T13548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.249131][T13574] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 242.276965][T13548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.289126][T13548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.322751][T13548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.354913][T13548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.434662][T13548] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 242.478450][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.485691][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.552526][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.559760][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.630309][T13591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.870008][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3729'. [ 242.945211][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'. [ 242.987405][T13607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3732'. [ 243.184597][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3736'. [ 243.217844][T13617] openvswitch: netlink: Invalid VLAN frame [ 243.366734][T13625] netlink: 'syz.0.3740': attribute type 15 has an invalid length. [ 243.954740][T13651] netlink: 'syz.0.3753': attribute type 8 has an invalid length. [ 244.013707][T13654] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 244.560219][T13679] veth1_to_hsr: entered allmulticast mode [ 244.751701][T13690] __nla_validate_parse: 3 callbacks suppressed [ 244.751720][T13690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3771'. [ 244.772562][T13691] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 244.806859][T13691] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3772'. [ 244.973533][T13698] vlan0: entered promiscuous mode [ 245.492158][T13729] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3791'. [ 245.541340][T13731] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 245.566298][T13733] xt_l2tp: wrong L2TP version: 0 [ 246.232881][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3812'. [ 246.871615][T13806] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3826'. [ 246.916116][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 246.931070][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 246.950288][T13809] netlink: 'syz.1.3827': attribute type 9 has an invalid length. [ 247.515862][T13842] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 247.535357][T13835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.543848][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3842'. [ 247.788340][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3847'. [ 248.126762][T13875] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3859'. [ 248.829950][T13907] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 248.896385][T13907] bond3 (unregistering): Released all slaves [ 248.926053][T13920] set match dimension is over the limit! [ 249.002210][T13924] netlink: 'syz.2.3882': attribute type 1 has an invalid length. [ 249.038168][T13924] netlink: 'syz.2.3882': attribute type 2 has an invalid length. [ 249.295285][T13937] netlink: 'syz.3.3890': attribute type 21 has an invalid length. [ 249.501593][T13944] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.509479][T13944] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.711959][T13944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.740861][T13944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.831441][T13944] vlan0: left promiscuous mode [ 249.865461][T13944] veth0_macvtap: left allmulticast mode [ 249.889509][T13944] macsec0: left promiscuous mode [ 249.901116][T13944] macsec0: left allmulticast mode [ 249.939698][T13966] openvswitch: netlink: IP tunnel dst address not specified [ 249.983293][T13944] geneve3: left promiscuous mode [ 249.998267][T13944] geneve3: left allmulticast mode [ 250.015565][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.028958][ T5740] wg1 speed is unknown, defaulting to 1000 [ 250.053098][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.072736][ T5740] syz0: Port: 1 Link DOWN [ 250.091227][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.126992][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.501862][T13993] __nla_validate_parse: 11 callbacks suppressed [ 250.501882][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'. [ 250.674141][T13995] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 251.184988][T14028] netlink: 'syz.3.3933': attribute type 1 has an invalid length. [ 251.215327][T14028] netlink: 'syz.3.3933': attribute type 1 has an invalid length. [ 251.606453][T14050] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3943'. [ 251.799263][T14056] netlink: 'syz.4.3947': attribute type 10 has an invalid length. [ 251.922324][T14056] team0 (unregistering): Port device team_slave_0 removed [ 251.980405][T14056] team0 (unregistering): Port device team_slave_1 removed [ 252.000361][T14062] netlink: 'syz.0.3950': attribute type 3 has an invalid length. [ 252.192044][T14036] infiniband syz1: set active [ 252.205924][T14036] infiniband syz1: added team0 [ 252.262443][T14036] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 252.297807][T14036] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 252.324694][T14074] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 252.356151][T14036] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 252.468325][T14036] RDS/IB: syz1: added [ 252.488318][T14036] smc: adding ib device syz1 with port count 1 [ 252.516678][T14036] smc: ib device syz1 port 1 has no pnetid [ 252.528592][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3958'. [ 252.572199][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 252.641286][T14081] ip6gretap2: entered allmulticast mode [ 252.790010][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'. [ 252.959132][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3968'. [ 253.144727][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3970'. [ 253.234791][T14110] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3973'. [ 253.471452][T14120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3977'. [ 253.502521][T14120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3977'. [ 253.515464][T14122] openvswitch: netlink: IPv4 tun info is not correct [ 253.820510][T14134] netlink: 'syz.4.3983': attribute type 1 has an invalid length. [ 253.945166][T14136] xfrm1: entered allmulticast mode [ 254.830240][T14180] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 255.162890][T14195] geneve3: entered promiscuous mode [ 255.170888][T14195] geneve3: entered allmulticast mode [ 255.636127][T14221] __nla_validate_parse: 2 callbacks suppressed [ 255.636146][T14221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4028'. [ 255.678290][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688514][T14221] netlink: 245 bytes leftover after parsing attributes in process `syz.3.4028'. [ 255.689124][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.953165][T14233] netlink: 'syz.4.4034': attribute type 1 has an invalid length. [ 255.971444][T14233] netlink: 'syz.4.4034': attribute type 3 has an invalid length. [ 255.981393][T14233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4034'. [ 256.380222][T14251] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 258.140981][T14342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.189844][T14342] xfrm0: left allmulticast mode [ 258.232994][T14342] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 258.566041][T14369] netlink: 'syz.3.4100': attribute type 1 has an invalid length. [ 258.604810][T14369] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4100'. [ 258.742160][T14377] netlink: 'syz.4.4105': attribute type 10 has an invalid length. [ 259.531928][T14377] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 259.567969][T14383] ªªªªª: renamed from virt_wifi0 [ 259.629363][T14386] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 260.483649][T14435] netlink: 'syz.4.4133': attribute type 21 has an invalid length. [ 260.519662][T14435] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4133'. [ 260.558573][T14435] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4133'. [ 260.766703][T14446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4139'. [ 260.796860][T14446] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4139'. [ 260.947630][T14456] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.948128][T14454] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4143'. [ 261.004784][T14458] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 261.042756][T14458] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4145'. [ 261.350328][T14465] xt_CT: No such helper "snmp" [ 261.569379][T14473] bond1: entered allmulticast mode [ 261.598577][T14482] netlink: ct family unspecified [ 261.599767][T14473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.610308][T14482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.766423][T14489] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 262.214191][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4168'. [ 262.392425][T14518] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4172'. [ 262.566305][T14527] xt_TCPMSS: Only works on TCP SYN packets [ 262.691113][T14535] nftables ruleset with unbound chain [ 263.344635][T14565] netlink: 'syz.4.4196': attribute type 1 has an invalid length. [ 263.765707][T14571] bond1: Unable to set up delay as MII monitoring is disabled [ 263.767809][T14584] netlink: 'syz.4.4203': attribute type 2 has an invalid length. [ 263.781280][T14584] netlink: 'syz.4.4203': attribute type 1 has an invalid length. [ 263.789962][T14584] netlink: 'syz.4.4203': attribute type 1 has an invalid length. [ 263.803707][T14571] bond1 (unregistering): Released all slaves [ 264.109736][T14589] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.117339][T14589] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.386608][T14589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.408675][T14589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.594621][T14589] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 264.739073][T14589] bond1: left allmulticast mode [ 264.856313][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.916149][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.968322][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.003699][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.720437][T14647] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.728110][T14647] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.824404][T14647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.841419][T14647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.216047][T14674] SET target dimension over the limit! [ 266.604600][T14691] xt_TPROXY: Can be used only with -p tcp or -p udp [ 266.616022][T14693] netlink: 'syz.1.4258': attribute type 1 has an invalid length. [ 266.643272][T14693] nbd: couldn't find device at index -427251215 [ 267.162876][T14722] ip6t_srh: unknown srh invflags 4000 [ 267.209590][T14725] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4273'. [ 267.572595][T14744] erspan1: entered promiscuous mode [ 267.586477][T14744] erspan1: entered allmulticast mode [ 267.642909][T14751] netlink: 'syz.4.4285': attribute type 10 has an invalid length. [ 267.832469][T14763] netlink: 'syz.4.4292': attribute type 1 has an invalid length. [ 267.878611][T14763] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4292'. [ 267.896436][T14765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.903744][T14765] IPv6: NLM_F_CREATE should be set when creating new route [ 267.911128][T14765] IPv6: NLM_F_CREATE should be set when creating new route [ 268.105258][T14773] netlink: 'syz.4.4297': attribute type 2 has an invalid length. [ 268.473967][T14792] netlink: 'syz.1.4306': attribute type 8 has an invalid length. [ 268.493468][T14791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4304'. [ 268.544247][T14791] geneve3: entered promiscuous mode [ 268.556979][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.584473][ T1113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.613112][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.634127][ T1113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.827434][T14858] gre1: entered promiscuous mode [ 269.895520][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4342'. [ 270.103707][T14874] sit0: entered promiscuous mode [ 270.143012][T14874] netlink: 'syz.0.4347': attribute type 1 has an invalid length. [ 270.168144][T14874] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4347'. [ 270.420545][T14887] bond1: option all_slaves_active: invalid value (5) [ 270.446369][T14887] bond1 (unregistering): Released all slaves [ 270.764308][T14910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.718335][T14964] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 271.837328][T14970] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4379'. [ 272.184822][T14985] netlink: 'syz.2.4387': attribute type 11 has an invalid length. [ 272.210839][T14985] netlink: 'syz.2.4387': attribute type 5 has an invalid length. [ 272.222383][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 272.237616][T14985] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4387'. [ 272.645555][T15012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4398'. [ 273.214610][T15044] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4413'. [ 273.244904][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4413'. [ 273.256694][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4413'. [ 273.471377][T15054] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 273.819158][T15070] netlink: 'syz.3.4426': attribute type 21 has an invalid length. [ 273.857075][T15070] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4426'. [ 273.866646][T15070] netlink: 'syz.3.4426': attribute type 5 has an invalid length. [ 273.874585][T15070] netlink: 'syz.3.4426': attribute type 6 has an invalid length. [ 273.883412][T15070] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4426'. [ 274.007650][T15082] openvswitch: netlink: Multiple metadata blocks provided [ 274.339421][T15096] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.659410][T15114] netlink: 'syz.0.4448': attribute type 13 has an invalid length. [ 274.687396][T15118] netlink: 'syz.3.4449': attribute type 3 has an invalid length. [ 274.691930][T15114] netlink: 'syz.0.4448': attribute type 17 has an invalid length. [ 274.833102][T15114] sit0: left promiscuous mode [ 274.935707][T15114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.943607][T15114] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.980839][T15114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.093008][T15114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.112113][T15114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.150483][T15114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.171439][T15114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.188015][T15114] A link change request failed with some changes committed already. Interface ªªªªª may have been left with an inconsistent configuration, please check. [ 275.375439][T14930] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.382690][T14930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.423402][T14930] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.430628][T14930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.489582][T15150] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 275.532986][ T5717] wg1 speed is unknown, defaulting to 1000 [ 275.545063][ T5717] syz0: Port: 1 Link ACTIVE [ 275.948633][T15173] netlink: 'syz.4.4476': attribute type 9 has an invalid length. [ 278.377111][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4517'. [ 278.567838][T15296] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 278.596674][T15298] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 278.714088][T15301] netlink: 'syz.3.4526': attribute type 30 has an invalid length. [ 278.757094][T15303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4527'. [ 278.764668][T15301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4526'. [ 278.862236][T15301] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 278.877203][T15301] bond4 (unregistering): Released all slaves [ 278.978473][T15317] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 278.994051][T15315] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.010122][T15303] netlink: 'syz.0.4527': attribute type 8 has an invalid length. [ 279.036036][T15303] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4527'. [ 279.528836][T15340] netlink: 'syz.3.4545': attribute type 30 has an invalid length. [ 279.879412][T15357] sctp: [Deprecated]: syz.1.4553 (pid 15357) Use of int in maxseg socket option. [ 279.879412][T15357] Use struct sctp_assoc_value instead [ 280.227644][T15376] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4561'. [ 280.283922][T15376] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 280.351831][T15382] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 280.572595][T15392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4570'. [ 280.763121][T15402] lo speed is unknown, defaulting to 1000 [ 280.782208][T15402] lo speed is unknown, defaulting to 1000 [ 280.806058][T15402] lo speed is unknown, defaulting to 1000 [ 281.687898][T15402] infiniband sqz0: set down [ 281.692552][ T5717] lo speed is unknown, defaulting to 1000 [ 281.724125][T15402] infiniband sqz0: added lo [ 281.742556][T15402] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 281.757541][T15402] infiniband sqz0: Couldn't open port 1 [ 281.810918][T15402] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 281.893309][T15402] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 281.924054][T15402] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 281.961906][T15461] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 281.971288][T15460] hmac(sh: entered promiscuous mode [ 282.012918][T15402] RDS/IB: sqz0: added [ 282.023897][T15402] smc: adding ib device sqz0 with port count 1 [ 282.042169][T15402] smc: ib device sqz0 port 1 has no pnetid [ 282.053913][ T5717] lo speed is unknown, defaulting to 1000 [ 282.073262][T15402] lo speed is unknown, defaulting to 1000 [ 282.152191][T15471] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4608'. [ 282.183292][T15471] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4608'. [ 282.218198][T15471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4608'. [ 282.324891][T15477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4611'. [ 282.432082][T15483] netlink: 'syz.1.4615': attribute type 30 has an invalid length. [ 282.778827][T15402] lo speed is unknown, defaulting to 1000 [ 283.044658][T15506] netlink: 'syz.0.4626': attribute type 11 has an invalid length. [ 283.593472][T15402] lo speed is unknown, defaulting to 1000 [ 283.608603][T15533] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 283.907712][T15548] __nla_validate_parse: 1 callbacks suppressed [ 283.907731][T15548] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4645'. [ 284.421453][T15402] lo speed is unknown, defaulting to 1000 [ 284.904861][T15581] xt_TPROXY: Can be used only with -p tcp or -p udp [ 285.111659][T15402] lo speed is unknown, defaulting to 1000 [ 285.890740][ T5717] IPVS: starting estimator thread 0... [ 285.987105][T15623] IPVS: using max 30 ests per chain, 72000 per kthread [ 286.059820][T15631] SET target dimension over the limit! [ 286.706858][T15661] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4701'. [ 287.334803][T15687] ip6erspan0: entered allmulticast mode [ 288.084699][T15720] bond3: option xmit_hash_policy: invalid value (10) [ 288.120700][T15720] bond3 (unregistering): Released all slaves [ 288.393609][T15741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.834795][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4754'. [ 289.113602][T15787] netlink: 'syz.0.4763': attribute type 1 has an invalid length. [ 289.304549][T15795] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 289.406013][T15802] netlink: 'syz.2.4770': attribute type 8 has an invalid length. [ 289.435391][T15802] netlink: 'syz.2.4770': attribute type 4 has an invalid length. [ 289.727777][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 290.180644][T15845] openvswitch: netlink: Missing valid actions attribute. [ 290.212231][T15845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.286108][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4815'. [ 291.328751][T15907] unsupported nla_type 216 [ 292.202251][T15958] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4840'. [ 292.369055][T15971] netlink: 'syz.2.4847': attribute type 17 has an invalid length. [ 292.481643][T15971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.506890][T15971] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.531980][T15971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.595624][T15983] x_tables: duplicate underflow at hook 3 [ 292.630646][T15971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.641307][T15971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.656843][T15971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.676830][T15971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.697056][T15971] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 292.717680][ T5717] lo speed is unknown, defaulting to 1000 [ 292.740529][ T5717] sqz0: Port: 1 Link ACTIVE [ 292.753554][T15989] netlink: 'syz.1.4856': attribute type 2 has an invalid length. [ 292.768970][ T5717] lo speed is unknown, defaulting to 1000 [ 293.233340][T16015] x_tables: unsorted entry at hook 3 [ 294.210272][T16065] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 294.447904][T16074] xt_hashlimit: size too large, truncated to 1048576 [ 294.467192][T16074] xt_hashlimit: invalid interval [ 295.061414][T16103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.068801][T16103] IPv6: NLM_F_CREATE should be set when creating new route [ 295.076098][T16103] IPv6: NLM_F_CREATE should be set when creating new route [ 295.338367][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4919'. [ 295.803901][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4926'. [ 295.842154][T16128] 5Ò: entered promiscuous mode [ 295.924753][T16138] netlink: 'syz.0.4929': attribute type 1 has an invalid length. [ 295.940176][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4927'. [ 296.234312][T16153] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4936'. [ 296.263461][T16153] unsupported nlmsg_type 40 [ 296.701571][T16182] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 297.318912][T16218] x_tables: unsorted underflow at hook 3 [ 297.363973][T16224] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 298.066798][T16258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.438810][T16273] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 298.459391][T16280] netlink: zone id is out of range [ 298.469055][T16273] bond4 (unregistering): Released all slaves [ 298.485742][T16280] netlink: zone id is out of range [ 298.491084][T16280] netlink: zone id is out of range [ 298.496868][T16280] netlink: zone id is out of range [ 298.502139][T16280] netlink: zone id is out of range [ 298.508552][T16280] netlink: zone id is out of range [ 298.514823][T16280] netlink: zone id is out of range [ 298.520444][T16280] netlink: zone id is out of range [ 298.526269][T16280] netlink: zone id is out of range [ 299.060758][T16310] netlink: 'syz.1.5010': attribute type 2 has an invalid length. [ 299.474623][T16335] netlink: 'syz.3.5024': attribute type 2 has an invalid length. [ 299.713348][T16350] sock: sock_timestamping_bind_phc: sock not bind to device [ 299.926176][T16361] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.494746][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5051'. [ 300.624865][T16399] netlink: 'syz.3.5055': attribute type 1 has an invalid length. [ 300.704855][T16401] batadv1: entered promiscuous mode [ 300.724895][T16401] batadv1: entered allmulticast mode [ 300.879664][T16411] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 301.092000][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5068'. [ 301.242622][T16435] netlink: 'syz.2.5074': attribute type 21 has an invalid length. [ 301.332261][T16435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5074'. [ 301.774651][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5087'. [ 301.834503][T16468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5089'. [ 302.179654][T16486] SET target dimension over the limit! [ 302.494934][T16506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5106'. [ 302.759913][T16520] netlink: 'syz.1.5113': attribute type 1 has an invalid length. [ 303.503455][T16563] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5134'. [ 303.868111][ T9] IPVS: starting estimator thread 0... [ 303.908602][T16590] netlink: 'syz.0.5144': attribute type 6 has an invalid length. [ 303.976504][T16584] IPVS: using max 26 ests per chain, 62400 per kthread [ 304.033361][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5149'. [ 304.054083][T16595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5149'. [ 304.065710][T16598] netlink: 'syz.2.5151': attribute type 1 has an invalid length. [ 304.083087][T16598] netlink: 'syz.2.5151': attribute type 2 has an invalid length. [ 304.236251][T16607] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5155'. [ 304.631014][T16632] netlink: 'syz.4.5168': attribute type 4 has an invalid length. [ 304.812278][T16643] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 304.827706][T16643] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 304.885553][T16643] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 305.807628][T16694] hmac(sha2: entered promiscuous mode [ 305.829032][T16696] sctp: [Deprecated]: syz.4.5197 (pid 16696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.829032][T16696] Use struct sctp_sack_info instead [ 305.848175][T16698] xt_l2tp: invalid flags combination: 8 [ 306.376979][T16729] netlink: 'syz.2.5213': attribute type 13 has an invalid length. [ 306.386532][T16729] __nla_validate_parse: 6 callbacks suppressed [ 306.386550][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5213'. [ 306.558052][T16739] ±ÿ: renamed from lo (while UP) [ 306.989478][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5230'. [ 307.036364][T16768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.474444][T16791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.399963][T16841] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5269'. [ 308.534147][T16845] netlink: 'syz.3.5271': attribute type 1 has an invalid length. [ 308.782135][T16853] netlink: 'syz.3.5275': attribute type 61 has an invalid length. [ 310.155112][T16825] lo speed is unknown, defaulting to 1000 [ 310.155333][T16829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5263'. [ 310.192408][T16825] lo speed is unknown, defaulting to 1000 [ 310.203524][T16825] lo speed is unknown, defaulting to 1000 [ 310.229180][T16825] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 310.252017][T16825] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 310.335084][T16825] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 310.404023][T16825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 310.501812][T16825] lo speed is unknown, defaulting to 1000 [ 310.514679][T16825] lo speed is unknown, defaulting to 1000 [ 310.538725][T16825] lo speed is unknown, defaulting to 1000 [ 310.562735][T16825] lo speed is unknown, defaulting to 1000 [ 310.579220][T16825] lo speed is unknown, defaulting to 1000 [ 310.713230][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5286'. [ 310.745235][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5286'. [ 311.062586][T16896] netlink: 'syz.3.5295': attribute type 13 has an invalid length. [ 311.348383][T16912] netlink: 'syz.2.5304': attribute type 1 has an invalid length. [ 311.594826][T16926] netlink: 'syz.0.5311': attribute type 10 has an invalid length. [ 311.614440][T16926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5311'. [ 311.648000][T16927] IPv6: sit2: Disabled Multicast RS [ 311.654926][T16926] dummy0: entered promiscuous mode [ 311.688315][T16926] bridge0: port 3(dummy0) entered blocking state [ 311.715589][T16926] bridge0: port 3(dummy0) entered disabled state [ 311.737627][T16926] dummy0: entered allmulticast mode [ 311.778619][T16931] netlink: 820 bytes leftover after parsing attributes in process `syz.1.5314'. [ 311.792849][T16931] netlink: 820 bytes leftover after parsing attributes in process `syz.1.5314'. [ 311.805756][T16926] bridge0: port 3(dummy0) entered blocking state [ 311.812280][T16926] bridge0: port 3(dummy0) entered forwarding state [ 312.177009][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5324'. [ 312.371642][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5329'. [ 312.552315][T16974] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 312.575392][T16974] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 312.607444][T16974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.637939][T16974] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 312.680214][T16981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5337'. [ 312.765287][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5340'. [ 312.971153][T16997] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5346'. [ 312.990468][T16997] netlink: 'syz.2.5346': attribute type 1 has an invalid length. [ 313.020304][T16999] net_ratelimit: 396 callbacks suppressed [ 313.020326][T16999] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 313.102620][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5349'. [ 313.878101][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5366'. [ 314.220347][T17056] bond0: (slave bond_slave_1): Releasing backup interface [ 314.505142][T17072] netlink: 'syz.1.5381': attribute type 1 has an invalid length. [ 314.520330][T17072] netlink: 'syz.1.5381': attribute type 1 has an invalid length. [ 314.648821][T17079] netlink: 'syz.3.5386': attribute type 10 has an invalid length. [ 315.132092][T17109] netlink: 'syz.2.5400': attribute type 29 has an invalid length. [ 315.389233][T17123] netlink: 'syz.4.5407': attribute type 1 has an invalid length. [ 315.521539][T17131] netlink: 'syz.1.5411': attribute type 1 has an invalid length. [ 315.595553][T17137] netlink: 'syz.4.5413': attribute type 1 has an invalid length. [ 315.735083][T17144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.880932][T17153] netlink: 'syz.4.5422': attribute type 2 has an invalid length. [ 315.913188][T17157] netlink: zone id is out of range [ 315.934617][T17157] netlink: zone id is out of range [ 315.953051][T17157] netlink: zone id is out of range [ 315.969488][T17157] netlink: zone id is out of range [ 316.004886][T17157] netlink: zone id is out of range [ 316.036255][T17157] netlink: zone id is out of range [ 316.054225][T17157] netlink: zone id is out of range [ 316.065760][T17157] netlink: zone id is out of range [ 316.620036][T17199] __nla_validate_parse: 7 callbacks suppressed [ 316.620055][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5441'. [ 316.983224][T17220] netlink: 'syz.0.5452': attribute type 32 has an invalid length. [ 317.119551][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.306588][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5459'. [ 317.345594][T17236] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5459'. [ 318.123136][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5483'. [ 318.211701][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5487'. [ 318.570036][T17308] ------------[ cut here ]------------ [ 318.576052][T17308] (wiphy->interface_modes & BIT(NL80211_IFTYPE_NAN_DATA)) && (!wiphy->nan_capa.phy.ht.ht_supported || wiphy->n_radio > 1) [ 318.576087][T17308] WARNING: net/wireless/core.c:885 at wiphy_register+0x58a/0x2fe0, CPU#1: syz.0.5496/17308 [ 318.599903][T17308] Modules linked in: [ 318.604555][T17308] CPU: 1 UID: 0 PID: 17308 Comm: syz.0.5496 Not tainted syzkaller #0 PREEMPT(full) [ 318.614514][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.625101][T17308] RIP: 0010:wiphy_register+0x58a/0x2fe0 [ 318.630696][T17308] Code: 00 00 e8 49 8f d4 f6 90 0f 0b 90 e9 67 0a 00 00 e8 3b 8f d4 f6 e9 59 0a 00 00 e8 31 8f d4 f6 e9 eb 00 00 00 e8 27 8f d4 f6 90 <0f> 0b 90 e9 45 0a 00 00 44 89 f8 24 06 0f b6 d8 31 ff 89 de e8 0d [ 318.650683][T17308] RSP: 0018:ffffc9000246e860 EFLAGS: 00010283 [ 318.656831][T17308] RAX: ffffffff8af13fe2 RBX: 0000000000000004 RCX: 0000000000080000 [ 318.665149][T17308] RDX: ffffc9000d541000 RSI: 000000000000479a RDI: 000000000000479b [ 318.673169][T17308] RBP: ffffc9000246e9f0 R08: ffff88802a270faf R09: 1ffff1100544e1f5 [ 318.681261][T17308] R10: dffffc0000000000 R11: ffffed100544e1f6 R12: ffff88802a270740 [ 318.689306][T17308] R13: dffffc0000000000 R14: ffffffff8d002990 R15: ffff88802a270804 [ 318.697354][T17308] FS: 00007fc4006956c0(0000) GS:ffff888125389000(0000) knlGS:0000000000000000 [ 318.706345][T17308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.712987][T17308] CR2: 0000200000000100 CR3: 00000000ad1ea000 CR4: 00000000003526f0 [ 318.721076][T17308] Call Trace: [ 318.724399][T17308] [ 318.727447][T17308] ? trace_kmalloc+0x2a/0xf0 [ 318.732070][T17308] ? __rtnl_unlock+0xc8/0xf0 [ 318.736761][T17308] ? netdev_run_todo+0xd5c/0xde0 [ 318.741733][T17308] ? ieee80211_register_hw+0x378e/0x4910 [ 318.747554][T17308] ? __pfx_wiphy_register+0x10/0x10 [ 318.752779][T17308] ? __pfx_netdev_run_todo+0x10/0x10 [ 318.758170][T17308] ? ieee80211_init_rate_ctrl_alg+0x104/0x5d0 [ 318.764295][T17308] ieee80211_register_hw+0x3c53/0x4910 [ 318.769873][T17308] ? ieee80211_register_hw+0x1991/0x4910 [ 318.775600][T17308] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 318.781449][T17308] ? __asan_memset+0x22/0x50 [ 318.786145][T17308] ? __hrtimer_setup+0x1b7/0x260 [ 318.791107][T17308] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 318.797035][T17308] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 318.802817][T17308] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 318.808978][T17308] hwsim_new_radio_nl+0xe20/0x26e0 [ 318.814118][T17308] ? unwind_next_frame+0xa6/0x2550 [ 318.819425][T17308] ? is_bpf_text_address+0x26/0x2b0 [ 318.824673][T17308] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 318.830318][T17308] ? __kernel_text_address+0xd/0x30 [ 318.835671][T17308] ? unwind_get_return_address+0x4d/0x90 [ 318.841340][T17308] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.847637][T17308] ? arch_stack_walk+0xfb/0x150 [ 318.852538][T17308] ? stack_trace_save+0xa9/0x100 [ 318.857568][T17308] ? __pfx_stack_trace_save+0x10/0x10 [ 318.862994][T17308] ? stack_depot_save_flags+0x33/0x810 [ 318.868564][T17308] ? kasan_save_track+0x3e/0x80 [ 318.873454][T17308] ? kasan_record_aux_stack+0xa1/0xd0 [ 318.878935][T17308] ? __kasan_slab_free+0x5c/0x80 [ 318.883919][T17308] ? __nla_validate_parse+0x2480/0x2dc0 [ 318.889590][T17308] ? ____sys_sendmsg+0x972/0x9f0 [ 318.894661][T17308] ? ___sys_sendmsg+0x2a5/0x360 [ 318.899641][T17308] ? __pfx___nla_validate_parse+0x10/0x10 [ 318.905502][T17308] ? rcu_is_watching+0x15/0xb0 [ 318.910304][T17308] ? trace_kmalloc+0x2a/0xf0 [ 318.915164][T17308] ? __nla_parse+0x40/0x60 [ 318.919624][T17308] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 318.926059][T17308] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 318.932426][T17308] genl_family_rcv_msg_doit+0x22a/0x330 [ 318.938070][T17308] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 318.944174][T17308] ? bpf_lsm_capable+0x9/0x20 [ 318.948927][T17308] ? security_capable+0x7e/0x2c0 [ 318.953894][T17308] genl_rcv_msg+0x61c/0x7a0 [ 318.959057][T17308] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.964122][T17308] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 318.969894][T17308] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.975345][T17308] ? __asan_memcpy+0x40/0x70 [ 318.979969][T17308] ? __skb_clone+0x63/0x7a0 [ 318.984506][T17308] netlink_rcv_skb+0x232/0x4b0 [ 318.989377][T17308] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.994464][T17308] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.999929][T17308] ? down_read+0x270/0x2e0 [ 319.004422][T17308] ? genl_rcv+0xd/0x40 [ 319.008586][T17308] genl_rcv+0x28/0x40 [ 319.012599][T17308] netlink_unicast+0x75c/0x8e0 [ 319.017503][T17308] netlink_sendmsg+0x813/0xb40 [ 319.022314][T17308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.027704][T17308] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.032680][T17308] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.038278][T17308] ____sys_sendmsg+0x972/0x9f0 [ 319.043127][T17308] ? __might_fault+0xaf/0x130 [ 319.047925][T17308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.053353][T17308] ? import_iovec+0x73/0xa0 [ 319.057949][T17308] ___sys_sendmsg+0x2a5/0x360 [ 319.062747][T17308] ? __lock_acquire+0x6b5/0x2cf0 [ 319.067754][T17308] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.073010][T17308] ? futex_wait+0x2a2/0x390 [ 319.077610][T17308] ? __fget_files+0x2a/0x420 [ 319.082229][T17308] ? __fget_files+0x3a0/0x420 [ 319.086998][T17308] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.091970][T17308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.097588][T17308] ? rcu_is_watching+0x15/0xb0 [ 319.102390][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.108550][T17308] do_syscall_64+0x15f/0xf80 [ 319.113172][T17308] ? trace_irq_disable+0x3b/0x140 [ 319.118476][T17308] ? clear_bhb_loop+0x40/0x90 [ 319.123191][T17308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.129171][T17308] RIP: 0033:0x7fc3ff79cdd9 [ 319.133610][T17308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.153415][T17308] RSP: 002b:00007fc400695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.161898][T17308] RAX: ffffffffffffffda RBX: 00007fc3ffa15fa0 RCX: 00007fc3ff79cdd9 [ 319.169940][T17308] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 319.177993][T17308] RBP: 00007fc3ff832d69 R08: 0000000000000000 R09: 0000000000000000 [ 319.186041][T17308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.194030][T17308] R13: 00007fc3ffa16038 R14: 00007fc3ffa15fa0 R15: 00007ffec1d08f18 [ 319.202207][T17308] [ 319.205308][T17308] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.212608][T17308] CPU: 1 UID: 0 PID: 17308 Comm: syz.0.5496 Not tainted syzkaller #0 PREEMPT(full) [ 319.222010][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.232080][T17308] Call Trace: [ 319.235379][T17308] [ 319.238323][T17308] vpanic+0x56c/0xa60 [ 319.242326][T17308] ? __pfx__printk+0x10/0x10 [ 319.246938][T17308] ? __pfx_vpanic+0x10/0x10 [ 319.251458][T17308] ? is_bpf_text_address+0x292/0x2b0 [ 319.256743][T17308] ? is_bpf_text_address+0x26/0x2b0 [ 319.261958][T17308] panic+0xc5/0xd0 [ 319.265730][T17308] ? __pfx_panic+0x10/0x10 [ 319.270177][T17308] __warn+0x315/0x4c0 [ 319.274173][T17308] ? wiphy_register+0x58a/0x2fe0 [ 319.279132][T17308] ? wiphy_register+0x58a/0x2fe0 [ 319.284096][T17308] __report_bug+0x29a/0x540 [ 319.288617][T17308] ? wiphy_register+0x58a/0x2fe0 [ 319.293564][T17308] ? __pfx___report_bug+0x10/0x10 [ 319.298590][T17308] ? lockdep_hardirqs_on+0x7a/0x110 [ 319.303796][T17308] ? irqentry_exit+0x218/0x730 [ 319.308570][T17308] ? trace_irq_disable+0x3b/0x140 [ 319.313620][T17308] ? wiphy_register+0x58c/0x2fe0 [ 319.318588][T17308] ? wiphy_register+0x58a/0x2fe0 [ 319.323540][T17308] report_bug+0x16a/0x220 [ 319.327882][T17308] ? wiphy_register+0x58a/0x2fe0 [ 319.333345][T17308] ? wiphy_register+0x58c/0x2fe0 [ 319.338288][T17308] handle_bug+0x9c/0x200 [ 319.342543][T17308] exc_invalid_op+0x1a/0x50 [ 319.347059][T17308] asm_exc_invalid_op+0x1a/0x20 [ 319.351913][T17308] RIP: 0010:wiphy_register+0x58a/0x2fe0 [ 319.357467][T17308] Code: 00 00 e8 49 8f d4 f6 90 0f 0b 90 e9 67 0a 00 00 e8 3b 8f d4 f6 e9 59 0a 00 00 e8 31 8f d4 f6 e9 eb 00 00 00 e8 27 8f d4 f6 90 <0f> 0b 90 e9 45 0a 00 00 44 89 f8 24 06 0f b6 d8 31 ff 89 de e8 0d [ 319.377175][T17308] RSP: 0018:ffffc9000246e860 EFLAGS: 00010283 [ 319.383254][T17308] RAX: ffffffff8af13fe2 RBX: 0000000000000004 RCX: 0000000000080000 [ 319.391225][T17308] RDX: ffffc9000d541000 RSI: 000000000000479a RDI: 000000000000479b [ 319.399213][T17308] RBP: ffffc9000246e9f0 R08: ffff88802a270faf R09: 1ffff1100544e1f5 [ 319.407186][T17308] R10: dffffc0000000000 R11: ffffed100544e1f6 R12: ffff88802a270740 [ 319.415156][T17308] R13: dffffc0000000000 R14: ffffffff8d002990 R15: ffff88802a270804 [ 319.423134][T17308] ? wiphy_register+0x2862/0x2fe0 [ 319.428183][T17308] ? trace_kmalloc+0x2a/0xf0 [ 319.432782][T17308] ? __rtnl_unlock+0xc8/0xf0 [ 319.437394][T17308] ? netdev_run_todo+0xd5c/0xde0 [ 319.442342][T17308] ? ieee80211_register_hw+0x378e/0x4910 [ 319.447993][T17308] ? __pfx_wiphy_register+0x10/0x10 [ 319.453202][T17308] ? __pfx_netdev_run_todo+0x10/0x10 [ 319.458595][T17308] ? ieee80211_init_rate_ctrl_alg+0x104/0x5d0 [ 319.464690][T17308] ieee80211_register_hw+0x3c53/0x4910 [ 319.470287][T17308] ? ieee80211_register_hw+0x1991/0x4910 [ 319.476005][T17308] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 319.482607][T17308] ? __asan_memset+0x22/0x50 [ 319.487295][T17308] ? __hrtimer_setup+0x1b7/0x260 [ 319.492874][T17308] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 319.499001][T17308] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 319.504930][T17308] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 319.511097][T17308] hwsim_new_radio_nl+0xe20/0x26e0 [ 319.516210][T17308] ? unwind_next_frame+0xa6/0x2550 [ 319.521340][T17308] ? is_bpf_text_address+0x26/0x2b0 [ 319.526564][T17308] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 319.532379][T17308] ? __kernel_text_address+0xd/0x30 [ 319.537762][T17308] ? unwind_get_return_address+0x4d/0x90 [ 319.543402][T17308] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 319.549563][T17308] ? arch_stack_walk+0xfb/0x150 [ 319.554428][T17308] ? stack_trace_save+0xa9/0x100 [ 319.559373][T17308] ? __pfx_stack_trace_save+0x10/0x10 [ 319.564756][T17308] ? stack_depot_save_flags+0x33/0x810 [ 319.570216][T17308] ? kasan_save_track+0x3e/0x80 [ 319.575082][T17308] ? kasan_record_aux_stack+0xa1/0xd0 [ 319.580462][T17308] ? __kasan_slab_free+0x5c/0x80 [ 319.585416][T17308] ? __nla_validate_parse+0x2480/0x2dc0 [ 319.590964][T17308] ? ____sys_sendmsg+0x972/0x9f0 [ 319.595903][T17308] ? ___sys_sendmsg+0x2a5/0x360 [ 319.600775][T17308] ? __pfx___nla_validate_parse+0x10/0x10 [ 319.606515][T17308] ? rcu_is_watching+0x15/0xb0 [ 319.611414][T17308] ? trace_kmalloc+0x2a/0xf0 [ 319.616011][T17308] ? __nla_parse+0x40/0x60 [ 319.620431][T17308] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 319.626755][T17308] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 319.633085][T17308] genl_family_rcv_msg_doit+0x22a/0x330 [ 319.638638][T17308] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 319.645061][T17308] ? bpf_lsm_capable+0x9/0x20 [ 319.649732][T17308] ? security_capable+0x7e/0x2c0 [ 319.654670][T17308] genl_rcv_msg+0x61c/0x7a0 [ 319.659173][T17308] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.664190][T17308] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 319.669735][T17308] ? __pfx_ref_tracker_free+0x10/0x10 [ 319.675109][T17308] ? __asan_memcpy+0x40/0x70 [ 319.679712][T17308] ? __skb_clone+0x63/0x7a0 [ 319.684221][T17308] netlink_rcv_skb+0x232/0x4b0 [ 319.688993][T17308] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.694014][T17308] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.699317][T17308] ? down_read+0x270/0x2e0 [ 319.703750][T17308] ? genl_rcv+0xd/0x40 [ 319.707832][T17308] genl_rcv+0x28/0x40 [ 319.711812][T17308] netlink_unicast+0x75c/0x8e0 [ 319.716584][T17308] netlink_sendmsg+0x813/0xb40 [ 319.721370][T17308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.726750][T17308] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.731691][T17308] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.736990][T17308] ____sys_sendmsg+0x972/0x9f0 [ 319.741757][T17308] ? __might_fault+0xaf/0x130 [ 319.746442][T17308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.751732][T17308] ? import_iovec+0x73/0xa0 [ 319.756244][T17308] ___sys_sendmsg+0x2a5/0x360 [ 319.760928][T17308] ? __lock_acquire+0x6b5/0x2cf0 [ 319.765902][T17308] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.771108][T17308] ? futex_wait+0x2a2/0x390 [ 319.775630][T17308] ? __fget_files+0x2a/0x420 [ 319.780220][T17308] ? __fget_files+0x3a0/0x420 [ 319.784907][T17308] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.789852][T17308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.795408][T17308] ? rcu_is_watching+0x15/0xb0 [ 319.800185][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.806251][T17308] do_syscall_64+0x15f/0xf80 [ 319.810856][T17308] ? trace_irq_disable+0x3b/0x140 [ 319.815879][T17308] ? clear_bhb_loop+0x40/0x90 [ 319.820556][T17308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.826470][T17308] RIP: 0033:0x7fc3ff79cdd9 [ 319.830887][T17308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.850486][T17308] RSP: 002b:00007fc400695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.858989][T17308] RAX: ffffffffffffffda RBX: 00007fc3ffa15fa0 RCX: 00007fc3ff79cdd9 [ 319.866960][T17308] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 319.875048][T17308] RBP: 00007fc3ff832d69 R08: 0000000000000000 R09: 0000000000000000 [ 319.883120][T17308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.891616][T17308] R13: 00007fc3ffa16038 R14: 00007fc3ffa15fa0 R15: 00007ffec1d08f18 [ 319.899602][T17308] [ 319.903023][T17308] Kernel Offset: disabled [ 319.907334][T17308] Rebooting in 86400 seconds..