last executing test programs: 1.796898652s ago: executing program 4 (id=10698): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) nanosleep(&(0x7f0000000200), 0x0) 1.648887182s ago: executing program 4 (id=10703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) 1.527600843s ago: executing program 4 (id=10705): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1.365407014s ago: executing program 4 (id=10710): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r1, 0xcb}, 0x8) 1.356486168s ago: executing program 1 (id=10711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050025bd7000080000002e00000008000300", @ANYRES32=r2, @ANYBLOB="050034008b0000001400490005ac0f0009"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) 1.212200186s ago: executing program 3 (id=10713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f0000001800000004000000", @ANYBLOB="18df887075"], 0x20) 1.211589099s ago: executing program 4 (id=10714): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10000) 1.166469647s ago: executing program 1 (id=10715): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) 1.09659566s ago: executing program 3 (id=10718): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 1.031019076s ago: executing program 1 (id=10719): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) sendmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f00000000c0), 0x4) 1.006347562s ago: executing program 2 (id=10720): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 995.589539ms ago: executing program 3 (id=10721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 956.781095ms ago: executing program 0 (id=10722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x3, 0x8, 0x7, 0x140}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x8, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 860.702062ms ago: executing program 1 (id=10723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) 860.270303ms ago: executing program 3 (id=10724): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x4c, r2, 0x1, 0x70b526, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @initial, {0x7, 0x5}}, 0x1d, @val={0x8c, 0x10, {0x179, "0da231297259", @short="42c46abce2a803e9"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 817.21625ms ago: executing program 0 (id=10725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x0) 765.487247ms ago: executing program 0 (id=10726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c000280380001"], 0x58}, 0x1, 0x0, 0x0, 0x20040881}, 0x0) 648.387026ms ago: executing program 3 (id=10727): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha512-avx2)\x00'}, 0x58) 581.596653ms ago: executing program 1 (id=10728): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r0, 0xb97534d5fe9704cf, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x57c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x44}}, 0x0) 581.348867ms ago: executing program 0 (id=10729): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x99, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e21, 0x4e20, 0x77, 0x0, @wg=@data={0x4, 0x9, 0x7, "4e1baee8bfcfb76a429b95545f92220c69a041ed67948576d31a8c0bd4e690f919f0d80bd992c1c887fe835a0779d6114d8919d079dc02e699ae5b3e916f6c708bd84bc21af131c898d3e9998a967677d0d67535ac16ded6d23ad83830f20d"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000003980)=[{0x0}, {&(0x7f0000002600)=""/111, 0x6f}], 0x2}, 0xfffffff1}], 0x1, 0x10061, 0x0) 532.828079ms ago: executing program 2 (id=10730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) 516.216078ms ago: executing program 0 (id=10731): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 474.284061ms ago: executing program 1 (id=10732): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) 341.452694ms ago: executing program 2 (id=10733): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) 341.189836ms ago: executing program 3 (id=10734): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000000)={'virt_wifi0\x00'}) 287.767538ms ago: executing program 0 (id=10735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 259.189297ms ago: executing program 4 (id=10736): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 235.296814ms ago: executing program 2 (id=10737): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x29, 0x4}}}]}, 0x24}}, 0x20008000) 118.986676ms ago: executing program 2 (id=10738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x1}, 0x14}}, 0x0) 0s ago: executing program 2 (id=10739): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x1, 0x4}, &(0x7f00000000c0)=0x5a) kernel console output (not intermixed with test programs): face: batadv_slave_0 [ 213.062482][T11878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.075789][T11878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.275586][ T5854] Bluetooth: hci3: command 0x0405 tx timeout [ 213.947765][T11941] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2896'. [ 213.957355][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2896'. [ 213.970930][T11941] netlink: 'syz.3.2896': attribute type 3 has an invalid length. [ 213.979898][T11939] netlink: 'syz.4.2894': attribute type 7 has an invalid length. [ 214.000111][T11941] netlink: 'syz.3.2896': attribute type 2 has an invalid length. [ 214.255925][T11956] xt_l2tp: wrong L2TP version: 0 [ 214.706097][T11980] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 215.018528][T11993] netlink: 'syz.0.2922': attribute type 1 has an invalid length. [ 215.036861][T11993] netlink: 'syz.0.2922': attribute type 2 has an invalid length. [ 215.094254][T11997] __nla_validate_parse: 3 callbacks suppressed [ 215.094271][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'. [ 215.344755][T12009] netlink: 'syz.3.2929': attribute type 10 has an invalid length. [ 215.765508][T12023] Cannot find del_set index 17 as target [ 216.000001][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 216.055490][T12034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2940'. [ 216.290912][T12046] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2947'. [ 216.422151][T12056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2952'. [ 216.642310][T12046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.672933][T12046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.691294][T12046] bond0 (unregistering): Released all slaves [ 216.903243][T12072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2960'. [ 216.936097][T12072] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2960'. [ 216.981053][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2962'. [ 217.073499][T12082] xt_TPROXY: Can be used only with -p tcp or -p udp [ 217.085369][T12081] netlink: 'syz.1.2965': attribute type 16 has an invalid length. [ 217.105639][T12081] netlink: 'syz.1.2965': attribute type 17 has an invalid length. [ 217.522310][T12103] netlink: 'syz.2.2975': attribute type 24 has an invalid length. [ 217.730883][T12113] xt_HMARK: spi-set and port-set can't be combined [ 218.493325][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'. [ 218.529229][T12155] netlink: 'syz.2.3001': attribute type 2 has an invalid length. [ 218.692045][T12162] netlink: 'syz.3.3004': attribute type 32 has an invalid length. [ 218.874441][T12131] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 218.945425][T12174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.058739][T12177] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.077342][T12174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.294102][T12191] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.323078][T12191] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.345266][T12191] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.354108][T12191] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.394288][T12191] geneve2: entered promiscuous mode [ 219.422333][T12191] geneve2: entered allmulticast mode [ 220.077070][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 220.111927][T12228] netlink: 'syz.3.3037': attribute type 10 has an invalid length. [ 220.161541][T12228] team0: Device veth1_macvtap failed to register rx_handler [ 220.203518][T12236] No such timeout policy "syz0" [ 220.257116][ T5901] syz1: Port: 1 Link DOWN [ 220.288937][T12238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3042'. [ 220.869120][T12267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.066254][T12275] ip6t_rpfilter: unknown options [ 221.565095][T12305] netlink: 'syz.3.3074': attribute type 12 has an invalid length. [ 221.601319][T12305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3074'. [ 222.169188][T12332] netlink: 'syz.2.3088': attribute type 11 has an invalid length. [ 222.205949][T12332] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3088'. [ 222.658761][T12365] netlink: 'syz.0.3101': attribute type 33 has an invalid length. [ 222.667629][T12363] Cannot find map_set index 65532 as target [ 222.695454][T12365] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3101'. [ 223.092588][T12387] netlink: 'syz.3.3109': attribute type 21 has an invalid length. [ 223.135301][T12387] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.143169][T12387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.150477][T12387] IPv6: NLM_F_CREATE should be set when creating new route [ 223.157899][T12387] IPv6: NLM_F_CREATE should be set when creating new route [ 223.165123][T12387] IPv6: NLM_F_CREATE should be set when creating new route [ 223.613098][T12412] SET target dimension over the limit! [ 224.368793][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'. [ 225.167515][T12487] sctp: [Deprecated]: syz.0.3156 (pid 12487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.167515][T12487] Use struct sctp_sack_info instead [ 225.525589][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'. [ 225.648456][T12512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.713968][T12515] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.936584][T12526] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 226.194299][T12540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3183'. [ 226.717271][T12565] openvswitch: netlink: Missing valid actions attribute. [ 226.758414][T12565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.216052][T12592] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 227.692141][T12618] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3222'. [ 227.792069][T12622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3224'. [ 228.002294][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 228.311216][T12606] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.434694][T12654] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 228.444315][T12654] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 228.539959][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3243'. [ 229.176576][T12694] netlink: 'syz.3.3259': attribute type 1 has an invalid length. [ 229.184355][T12694] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3259'. [ 229.264334][T12698] xt_TCPMSS: Only works on TCP SYN packets [ 229.362067][T12700] netlink: 'syz.0.3263': attribute type 1 has an invalid length. [ 229.398363][T12704] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 229.402937][T12703] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 229.515330][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 230.113183][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 230.158935][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 230.225436][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 230.272679][T12748] openvswitch: netlink: Actions may not be safe on all matching packets [ 230.526624][T12763] tipc: Can't bind to reserved service type 0 [ 230.744073][T12772] __nla_validate_parse: 1 callbacks suppressed [ 230.744090][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'. [ 230.795455][T12772] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 230.807766][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3300'. [ 231.913661][T12835] netlink: 'syz.1.3330': attribute type 1 has an invalid length. [ 231.938186][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 232.328934][T12853] netlink: 'syz.1.3339': attribute type 5 has an invalid length. [ 232.388875][T12856] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3340'. [ 232.519648][T12861] smc: removing ib device syz2 [ 233.043729][T12885] bond0: entered promiscuous mode [ 233.063691][T12885] bond0: entered allmulticast mode [ 233.253226][T12891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3358'. [ 233.296312][T12894] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3359'. [ 233.355631][T12897] !€ÿ: renamed from bond_slave_0 [ 233.636546][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3367'. [ 233.824232][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 233.933198][T12916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3370'. [ 233.975804][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 234.564443][T12935] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 235.573946][T12967] xt_l2tp: v2 doesn't support IP mode [ 235.639645][T12962] batadv1: entered allmulticast mode [ 237.004384][T13033] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 237.402664][T13054] __nla_validate_parse: 3 callbacks suppressed [ 237.402681][T13054] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3439'. [ 237.833663][T13077] gtp0: entered promiscuous mode [ 237.871690][T13077] gtp0: entered allmulticast mode [ 237.969797][T13086] netlink: 'syz.3.3456': attribute type 1 has an invalid length. [ 237.989185][T13086] netlink: 'syz.3.3456': attribute type 2 has an invalid length. [ 239.527103][T13170] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3498'. [ 239.638581][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'. [ 240.332718][T13212] netlink: 'syz.0.3518': attribute type 10 has an invalid length. [ 240.364613][T13212] batman_adv: batadv0: Adding interface: team0 [ 240.396175][T13212] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.458907][T13212] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 240.836611][T13236] SET target dimension over the limit! [ 240.874811][T13238] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 241.410896][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'. [ 241.525545][T13271] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 241.805536][T13283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.271612][T13311] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3569'. [ 242.287781][T13311] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3569'. [ 243.182404][T13359] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 243.298683][T13362] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.506356][T13374] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 243.568185][T13378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.851602][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3606'. [ 244.003758][T13402] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3608'. [ 244.039225][T13402] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3608'. [ 244.183818][T13411] netlink: 'syz.0.3613': attribute type 11 has an invalid length. [ 244.204109][T13411] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3613'. [ 244.746068][T13441] netlink: 'syz.1.3626': attribute type 4 has an invalid length. [ 245.680279][T13494] openvswitch: netlink: Key type 272 is out of range max 32 [ 245.971849][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3660'. [ 245.981324][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3659'. [ 246.036602][T13514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.133062][T13517] SET target dimension over the limit! [ 246.543082][T13541] : renamed from hsr0 (while UP) [ 247.719292][T13608] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 247.786818][T13610] openvswitch: netlink: Duplicate or invalid key (type 0). [ 247.794461][T13610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.086665][T13626] openvswitch: netlink: Unknown key attributes 2 [ 248.374265][T13645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.381594][T13645] IPv6: NLM_F_CREATE should be set when creating new route [ 248.496273][T13649] delete_channel: no stack [ 248.699490][T13660] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 249.036206][T13680] xt_HMARK: proto mask must be zero with L3 mode [ 249.182413][T13686] netlink: 'syz.4.3749': attribute type 11 has an invalid length. [ 249.218164][T13686] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3749'. [ 249.255089][T13694] netlink: 'syz.0.3751': attribute type 2 has an invalid length. [ 249.288281][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3751'. [ 249.694965][T13715] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.911662][T13725] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3768'. [ 250.325341][T13752] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3780'. [ 250.348453][T13752] openvswitch: netlink: Actions may not be safe on all matching packets [ 250.453376][T13757] IPv6: NLM_F_REPLACE set, but no existing node found! [ 251.278479][T13798] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3805'. [ 251.313447][T13800] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 251.359851][T13798] gretap0: entered promiscuous mode [ 251.509416][T13811] xt_hashlimit: max too large, truncated to 1048576 [ 251.612457][T13818] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3813'. [ 251.639460][T13818] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3813'. [ 251.806693][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3816'. [ 251.858636][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'. [ 252.110325][T13843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3825'. [ 252.287263][T13851] netlink: 'syz.4.3828': attribute type 5 has an invalid length. [ 252.353114][T13855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.442563][T13860] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 253.803989][T13937] netlink: 'syz.2.3868': attribute type 11 has an invalid length. [ 253.991958][T13944] Driver unsupported XDP return value 0 on prog (id 391) dev N/A, expect packet loss! [ 254.091346][T13951] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 254.258444][T13961] __nla_validate_parse: 6 callbacks suppressed [ 254.258461][T13961] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3878'. [ 254.325343][T13961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3878'. [ 254.354871][T13966] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3881'. [ 254.384127][T13961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3878'. [ 254.426135][T13961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3878'. [ 254.693033][T13980] netlink: 'syz.1.3886': attribute type 11 has an invalid length. [ 254.751592][T13980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3886'. [ 254.977049][T13996] netlink: zone id is out of range [ 255.034994][T13996] netlink: del zone limit has 4 unknown bytes [ 255.225795][T14005] x_tables: ip_tables: osf match: only valid for protocol 6 [ 255.236892][T14002] veth5: entered promiscuous mode [ 255.241980][T14002] veth5: entered allmulticast mode [ 255.667533][T14027] xt_TCPMSS: Only works on TCP SYN packets [ 255.839943][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.846372][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.461271][T14069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3925'. [ 256.941602][T14088] netlink: 'syz.3.3932': attribute type 10 has an invalid length. [ 257.192051][T14098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3937'. [ 257.222737][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'. [ 257.245291][T14098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3937'. [ 257.478885][T14113] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 258.702320][T14178] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.712532][T14179] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 259.227151][T14201] netlink: zone id is out of range [ 259.260602][T14201] netlink: zone id is out of range [ 259.267245][T14205] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 259.282635][T14201] netlink: zone id is out of range [ 259.310008][T14201] netlink: zone id is out of range [ 259.355634][T14201] netlink: zone id is out of range [ 259.360797][T14201] netlink: zone id is out of range [ 259.409591][T14201] netlink: zone id is out of range [ 259.425075][T14201] netlink: zone id is out of range [ 259.452855][T14201] netlink: zone id is out of range [ 259.661786][T14225] __nla_validate_parse: 1 callbacks suppressed [ 259.661803][T14225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3998'. [ 260.636349][T14277] netlink: 'syz.0.4024': attribute type 1 has an invalid length. [ 260.644143][T14277] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4024'. [ 260.717397][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4024'. [ 260.885747][T14293] xt_hashlimit: overflow, rate too high: 0 [ 261.050605][T14302] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4037'. [ 261.064893][T14302] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4037'. [ 261.100709][T14302] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4037'. [ 261.234888][T14313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4043'. [ 262.028666][T14356] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4063'. [ 262.563060][T14393] xt_hashlimit: max too large, truncated to 1048576 [ 262.935237][T14411] netlink: 'syz.2.4091': attribute type 2 has an invalid length. [ 262.963229][T14411] netlink: 'syz.2.4091': attribute type 1 has an invalid length. [ 263.052133][T14418] erspan0: entered allmulticast mode [ 263.229068][T14428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4100'. [ 263.313838][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4102'. [ 263.598289][T14450] netlink: 'syz.1.4111': attribute type 24 has an invalid length. [ 263.851925][T14463] netlink: 'syz.0.4117': attribute type 12 has an invalid length. [ 263.985341][T14470] netlink: 'syz.1.4120': attribute type 1 has an invalid length. [ 263.993121][T14470] netlink: 'syz.1.4120': attribute type 3 has an invalid length. [ 263.997798][T14472] x_tables: unsorted underflow at hook 3 [ 264.055516][T14470] netlink: 'syz.1.4120': attribute type 235 has an invalid length. [ 264.542545][T14505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 264.576349][T14507] net_ratelimit: 401 callbacks suppressed [ 264.576364][T14507] openvswitch: netlink: IP tunnel dst address not specified [ 264.661768][T14509] gretap0: left promiscuous mode [ 264.717394][T14509] erspan0: left allmulticast mode [ 264.765122][T14509] bond0: left promiscuous mode [ 264.792033][T14509] bond0: left allmulticast mode [ 264.805762][T14509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.956739][T14521] __nla_validate_parse: 3 callbacks suppressed [ 264.956757][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4145'. [ 265.182961][T14533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.243043][T14537] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4153'. [ 265.825833][T14567] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 266.489419][T14585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.770609][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4182'. [ 266.958383][T14605] netlink: 'syz.4.4186': attribute type 10 has an invalid length. [ 266.995997][T14605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4186'. [ 267.116952][T14605] team0: Port device geneve0 added [ 267.285607][T14621] netlink: 'syz.2.4194': attribute type 7 has an invalid length. [ 267.481798][T14628] bond0: entered promiscuous mode [ 267.489607][T14628] bond0: entered allmulticast mode [ 267.495955][T14628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.630572][T14640] xt_limit: Overflow, try lower: 2147483649/128 [ 267.702297][T14643] netlink: 'syz.0.4205': attribute type 2 has an invalid length. [ 267.736240][T14643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4205'. [ 268.282065][T14677] netlink: 696 bytes leftover after parsing attributes in process `syz.3.4222'. [ 268.641310][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4234'. [ 268.850260][T14710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.866800][T14714] validate_nla: 1 callbacks suppressed [ 268.866817][T14714] netlink: 'syz.2.4240': attribute type 3 has an invalid length. [ 269.248750][T14731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4249'. [ 269.261698][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4249'. [ 269.265486][T14732] ipt_ECN: cannot use operation on non-tcp rule [ 269.307003][T14731] veth3: entered allmulticast mode [ 269.738610][T14758] netlink: 'syz.3.4260': attribute type 23 has an invalid length. [ 269.744192][T14756] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4262'. [ 269.890895][T14762] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 270.177837][T14778] netlink: 'syz.4.4271': attribute type 3 has an invalid length. [ 270.226141][T14778] netlink: 'syz.4.4271': attribute type 1 has an invalid length. [ 270.316188][T14786] __nla_validate_parse: 1 callbacks suppressed [ 270.316205][T14786] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4274'. [ 270.581988][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4281'. [ 271.495720][T14852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4302'. [ 272.427906][T14909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4326'. [ 272.697615][T14925] netlink: 'syz.3.4333': attribute type 11 has an invalid length. [ 272.722881][T14925] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4333'. [ 273.163868][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4342'. [ 273.280827][T14955] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 273.668919][T14975] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4354'. [ 274.323275][T15010] netlink: 'syz.1.4370': attribute type 11 has an invalid length. [ 274.709066][T15035] netlink: 'syz.1.4381': attribute type 2 has an invalid length. [ 275.312170][T15068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.350223][T15071] netlink: 'syz.1.4399': attribute type 10 has an invalid length. [ 275.362526][T15071] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.370323][T15071] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.390240][T15071] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.397487][T15071] bridge0: port 2(bridge_slave_1) entered listening state [ 275.404927][T15071] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.412211][T15071] bridge0: port 1(bridge_slave_0) entered listening state [ 275.450880][T15071] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 275.537004][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4405'. [ 276.252837][T15116] netlink: 'syz.3.4423': attribute type 10 has an invalid length. [ 276.293700][T15116] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 276.503278][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4429'. [ 276.597621][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4433'. [ 276.625319][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4433'. [ 276.637157][T15138] netlink: 'syz.3.4434': attribute type 21 has an invalid length. [ 276.655618][T15135] netlink: 'syz.1.4433': attribute type 3 has an invalid length. [ 276.682653][T15138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4434'. [ 276.732889][T15142] xt_ecn: cannot match TCP bits for non-tcp packets [ 276.861941][T15148] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4439'. [ 276.885487][T15150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.115654][T15165] xt_socket: unknown flags 0x50 [ 277.214726][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4448'. [ 277.279081][T15168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4448'. [ 277.883250][T15208] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4465'. [ 277.940527][T15208] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 277.975502][T15208] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 278.174191][T15219] netlink: 'syz.2.4469': attribute type 2 has an invalid length. [ 278.817181][T15251] lo: entered promiscuous mode [ 278.844529][T15251] tunl0: entered promiscuous mode [ 278.881594][T15259] netlink: 'syz.1.4487': attribute type 1 has an invalid length. [ 278.883241][T15251] gre0: entered promiscuous mode [ 278.921169][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4487'. [ 278.938509][T15251] gretap0: entered promiscuous mode [ 278.963828][T15251] erspan0: entered promiscuous mode [ 278.984984][T15251] ip_vti0: entered promiscuous mode [ 279.330814][T15279] netlink: 'syz.0.4496': attribute type 1 has an invalid length. [ 279.425821][T15286] netlink: 'syz.2.4498': attribute type 23 has an invalid length. [ 279.883986][T15310] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.139101][T15327] netlink: 'syz.1.4514': attribute type 1 has an invalid length. [ 280.721812][T15355] netlink: 'syz.1.4527': attribute type 1 has an invalid length. [ 280.750127][T15355] netlink: 'syz.1.4527': attribute type 11 has an invalid length. [ 280.761906][T15357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.771282][T15355] __nla_validate_parse: 3 callbacks suppressed [ 280.771296][T15355] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4527'. [ 281.650588][T15412] netlink: 'syz.2.4555': attribute type 1 has an invalid length. [ 281.726917][T15412] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4555'. [ 282.265680][T15438] xt_CT: No such helper "syz1" [ 282.952820][T15490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4593'. [ 283.287842][T15509] openvswitch: netlink: Flow key attribute not present in set flow. [ 283.410457][T15518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.908191][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4620'. [ 284.019424][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4626'. [ 284.247636][T15560] bond2: entered promiscuous mode [ 284.252881][T15560] bond2: entered allmulticast mode [ 284.259850][T15560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.422949][T15575] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 284.949986][T15607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4651'. [ 285.034761][T15612] geneve3: entered promiscuous mode [ 285.050956][T15612] geneve3: entered allmulticast mode [ 285.099979][T15617] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 285.155399][T15609] xfrm1: entered allmulticast mode [ 285.219089][T15621] netlink: 'syz.2.4658': attribute type 1 has an invalid length. [ 285.230501][T15621] netlink: 'syz.2.4658': attribute type 3 has an invalid length. [ 285.250280][T15624] netlink: 'syz.3.4659': attribute type 3 has an invalid length. [ 285.261691][T15621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4658'. [ 285.315566][T15621] NCSI netlink: No device for ifindex 0 [ 285.402324][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4662'. [ 285.533651][T15639] netlink: 'syz.0.4666': attribute type 13 has an invalid length. [ 285.583823][T15639] netlink: 'syz.0.4666': attribute type 58 has an invalid length. [ 285.624909][T15639] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4666'. [ 285.940755][T15657] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 286.435567][T15687] sctp: [Deprecated]: syz.2.4689 (pid 15687) Use of int in maxseg socket option. [ 286.435567][T15687] Use struct sctp_assoc_value instead [ 286.725483][T15704] netlink: 'syz.1.4698': attribute type 21 has an invalid length. [ 286.754119][T15704] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.986270][T15721] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4706'. [ 287.099795][T15726] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4709'. [ 287.391561][T15745] netlink: 'syz.3.4717': attribute type 8 has an invalid length. [ 287.687064][T15763] openvswitch: netlink: Message has -1 unknown bytes. [ 287.774861][T15766] set match dimension is over the limit! [ 287.932899][T15779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4734'. [ 288.170507][T15789] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4740'. [ 288.214034][T15791] netlink: 'syz.4.4741': attribute type 49 has an invalid length. [ 288.393566][T15805] netlink: 'syz.3.4748': attribute type 1 has an invalid length. [ 288.647598][T15816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.725435][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 289.011143][T15843] ip6t_srh: unknown srh invflags 4449 [ 289.407157][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4780'. [ 289.479435][T15873] netlink: 'syz.1.4782': attribute type 21 has an invalid length. [ 289.804831][T15891] xt_hashlimit: size too large, truncated to 1048576 [ 289.819153][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4790'. [ 290.128210][T15912] ksmbd: Unknown IPC event: 3, ignore. [ 290.455100][ T5901] IPVS: starting estimator thread 0... [ 290.492364][T15934] netlink: 'syz.1.4812': attribute type 11 has an invalid length. [ 290.508937][T15934] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4812'. [ 290.567277][T15930] IPVS: using max 26 ests per chain, 62400 per kthread [ 291.027601][T15961] netlink: 'syz.2.4823': attribute type 1 has an invalid length. [ 291.036520][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 291.044448][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 291.095677][T15961] netlink: 'syz.2.4823': attribute type 1 has an invalid length. [ 291.121446][T15967] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 291.184129][T15971] netlink: 'syz.1.4827': attribute type 1 has an invalid length. [ 291.204345][T15971] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4827'. [ 292.155841][T16025] netlink: 'syz.2.4847': attribute type 11 has an invalid length. [ 292.196164][T16026] sctp: [Deprecated]: syz.1.4850 (pid 16026) Use of int in max_burst socket option. [ 292.196164][T16026] Use struct sctp_assoc_value instead [ 292.483416][T16039] set match dimension is over the limit! [ 292.549338][T16045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4857'. [ 292.679886][T16050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4860'. [ 292.734354][T16054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.788163][T16057] xt_TCPMSS: Only works on TCP SYN packets [ 293.295537][T16085] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 293.364136][T16089] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4876'. [ 293.740915][T16111] netlink: 'syz.1.4886': attribute type 9 has an invalid length. [ 294.037708][T16126] netlink: 'syz.2.4894': attribute type 1 has an invalid length. [ 294.334716][T16144] netlink: 'syz.2.4900': attribute type 10 has an invalid length. [ 294.361161][T16145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4901'. [ 294.402892][T16145] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4901'. [ 294.454243][T16144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.498542][T16144] team0: Port device bond0 added [ 294.697060][T16162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4906'. [ 294.697140][T16162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4906'. [ 295.050300][T16182] netlink: 'syz.4.4915': attribute type 7 has an invalid length. [ 295.058675][T16183] netlink: 'syz.0.4916': attribute type 8 has an invalid length. [ 295.077300][T16182] netlink: 'syz.4.4915': attribute type 8 has an invalid length. [ 295.284059][T16193] xt_l2tp: missing protocol rule (udp|l2tpip) [ 295.380178][T16200] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 296.121386][T16241] netlink: 'syz.4.4941': attribute type 2 has an invalid length. [ 296.146486][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4941'. [ 296.420355][T16255] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 296.608509][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4952'. [ 296.640884][T16268] netlink: 'syz.0.4952': attribute type 8 has an invalid length. [ 297.905545][T16340] xt_recent: Unsupported userspace flags (00000061) [ 297.912637][T16342] netlink: 'syz.4.4989': attribute type 3 has an invalid length. [ 297.998769][T16346] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 298.190226][T16356] netlink: 'syz.3.4997': attribute type 1 has an invalid length. [ 298.228663][T16356] netlink: 'syz.3.4997': attribute type 1 has an invalid length. [ 298.311463][T16364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5001'. [ 298.357209][T16367] SET target dimension over the limit! [ 298.510913][T16376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.530416][T16372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.558958][T16380] netlink: 'syz.0.5009': attribute type 1 has an invalid length. [ 298.833593][T16392] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5015'. [ 298.907752][T16394] bridge2: entered promiscuous mode [ 298.915518][T16394] bridge2: entered allmulticast mode [ 299.244818][T16417] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0705 with DS=0x9 [ 299.777353][T16446] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 299.896015][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5046'. [ 299.905010][T16454] tc_dump_action: action bad kind [ 300.154435][T16467] netlink: 'syz.1.5052': attribute type 2 has an invalid length. [ 300.173584][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5052'. [ 300.484843][T16480] bond3: entered promiscuous mode [ 300.511061][T16491] openvswitch: netlink: Message has 4 unknown bytes. [ 300.535450][T16480] bond3: entered allmulticast mode [ 300.548391][T16480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.596497][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5065'. [ 300.610945][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5064'. [ 300.628396][T16494] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5065'. [ 300.629059][T16495] netlink: 50 bytes leftover after parsing attributes in process `syz.0.5064'. [ 300.662953][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5068'. [ 300.673225][T16495] netlink: 50 bytes leftover after parsing attributes in process `syz.0.5064'. [ 300.814761][T16505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.927794][T16513] No such timeout policy "syz0" [ 301.447895][T16542] netlink: 'syz.0.5087': attribute type 21 has an invalid length. [ 301.477962][T16542] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 302.972256][T16628] netlink: 'syz.2.5131': attribute type 29 has an invalid length. [ 303.135517][T16636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.792814][T16669] bridge8: entered promiscuous mode [ 303.812673][T16669] bridge8: entered allmulticast mode [ 303.899675][T16680] __nla_validate_parse: 8 callbacks suppressed [ 303.899694][T16680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5157'. [ 303.980734][T16680] tc_dump_action: action bad kind [ 304.000687][T16686] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 304.584641][T16720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5176'. [ 304.844396][T16734] xt_socket: unknown flags 0x3c [ 305.208668][T16754] netlink: 'syz.0.5193': attribute type 6 has an invalid length. [ 305.421972][T16767] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 305.775551][T16790] xt_l2tp: invalid flags combination: c [ 305.870095][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5216'. [ 305.937727][T16794] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 305.964156][T16794] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 305.985357][T16794] gretap3: entered promiscuous mode [ 305.990676][T16794] gretap3: entered allmulticast mode [ 306.021872][T16800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.395431][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.402730][ C1] bridge0: topology change detected, propagating [ 306.409511][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.416775][ C1] bridge0: topology change detected, propagating [ 306.507703][T16828] delete_channel: no stack [ 306.877469][T16851] netlink: 'syz.4.5240': attribute type 1 has an invalid length. [ 307.145464][T16866] xt_ecn: cannot match TCP bits for non-tcp packets [ 307.386313][T16880] sctp: [Deprecated]: syz.3.5252 (pid 16880) Use of int in maxseg socket option. [ 307.386313][T16880] Use struct sctp_assoc_value instead [ 307.531205][T16887] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 307.624828][T16894] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 307.800853][T16904] openvswitch: netlink: Missing key (keys=40, expected=80) [ 308.013204][T16911] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 308.104815][T16918] netlink: 'syz.3.5269': attribute type 7 has an invalid length. [ 308.185969][T16921] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5270'. [ 308.194973][T16921] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5270'. [ 308.803881][T16962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5286'. [ 308.818389][T16962] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5286'. [ 309.344559][T16989] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 309.591264][T17001] netlink: 'syz.1.5305': attribute type 1 has an invalid length. [ 310.274214][T17041] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 310.278849][T17044] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5326'. [ 310.297955][T17043] ip6t_srh: unknown srh match flags 4001 [ 310.848631][T17074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5342'. [ 311.060378][T17084] x_tables: duplicate underflow at hook 3 [ 311.088357][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5346'. [ 311.095768][T17087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5347'. [ 311.120185][T17090] netlink: 'syz.3.5348': attribute type 2 has an invalid length. [ 311.249953][T17094] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5350'. [ 311.794390][T17126] netlink: 'syz.0.5366': attribute type 7 has an invalid length. [ 311.865049][T17126] : entered promiscuous mode [ 312.195673][T17145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.047667][T17201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.203621][T17206] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5405'. [ 313.244794][T17214] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 313.641587][T17235] SET target dimension over the limit! [ 313.862784][T17247] netlink: zone id is out of range [ 314.030335][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'. [ 314.473075][T17287] lo speed is unknown, defaulting to 1000 [ 314.497913][T17287] lo speed is unknown, defaulting to 1000 [ 314.519028][T17287] lo speed is unknown, defaulting to 1000 [ 315.244473][T17287] infiniband syz0: set active [ 315.249963][ T5926] lo speed is unknown, defaulting to 1000 [ 315.260406][T17287] infiniband syz0: added lo [ 315.305477][T17287] RDS/IB: syz0: added [ 315.309554][T17287] smc: adding ib device syz0 with port count 1 [ 315.315946][T17287] smc: ib device syz0 port 1 has pnetid [ 315.321947][ T5926] lo speed is unknown, defaulting to 1000 [ 315.328994][T17287] lo speed is unknown, defaulting to 1000 [ 315.445192][T17333] delete_channel: no stack [ 315.583759][T17337] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 315.978643][T17287] lo speed is unknown, defaulting to 1000 [ 316.324457][T17381] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 316.561561][T17287] lo speed is unknown, defaulting to 1000 [ 316.614608][T17398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5496'. [ 316.648690][T17397] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 316.655190][T17397] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 316.921661][T17412] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 316.988826][T17412] bond3: entered promiscuous mode [ 316.994073][T17412] bond3: entered allmulticast mode [ 317.000352][T17412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.139949][T17423] netlink: 'syz.0.5509': attribute type 2 has an invalid length. [ 317.282379][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.289116][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.305355][T17431] openvswitch: netlink: Missing key (keys=40, expected=80) [ 317.375437][T17287] lo speed is unknown, defaulting to 1000 [ 317.503580][T17442] xt_policy: output policy not valid in PREROUTING and INPUT [ 317.529790][T17445] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 317.582128][T17445] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 317.594533][T17445] gretap1: entered promiscuous mode [ 317.608160][T17445] gretap1: entered allmulticast mode [ 317.618992][T17449] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5520'. [ 317.655384][T17449] 0ªX¹¦D: renamed from gretap0 (while UP) [ 317.725552][T17449] 0ªX¹¦D: entered allmulticast mode [ 317.745707][T17449] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 318.017055][T17287] lo speed is unknown, defaulting to 1000 [ 318.403136][T17485] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5539'. [ 318.599162][T17495] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 318.790012][T17506] netlink: 'syz.3.5549': attribute type 2 has an invalid length. [ 318.947745][T17516] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5553'. [ 319.533604][T17551] netlink: 'syz.4.5572': attribute type 21 has an invalid length. [ 319.550215][T17553] C: renamed from team_slave_0 [ 319.597439][T17553] netlink: 'syz.0.5571': attribute type 1 has an invalid length. [ 319.619739][T17556] netlink: 'syz.3.5573': attribute type 27 has an invalid length. [ 319.620008][T17553] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 319.643952][T17551] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5572'. [ 320.047378][T17582] netlink: 'syz.0.5585': attribute type 1 has an invalid length. [ 320.432565][T17606] netlink: 'syz.3.5599': attribute type 29 has an invalid length. [ 320.457549][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5599'. [ 320.637670][ T5863] Bluetooth: hci0: command tx timeout [ 320.703338][T17623] netlink: 'syz.0.5606': attribute type 12 has an invalid length. [ 321.010447][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5616'. [ 321.028917][T17641] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5616'. [ 321.058221][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5616'. [ 321.272901][T17656] bond3: entered promiscuous mode [ 321.278536][T17656] bond3: entered allmulticast mode [ 321.284858][T17656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.414021][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5626'. [ 321.906053][T17690] xt_bpf: check failed: parse error [ 322.481458][T17729] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 322.508096][T17731] netlink: 'syz.2.5659': attribute type 8 has an invalid length. [ 322.665410][T17739] nft_compat: unsupported protocol 0 [ 322.753106][T17747] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 323.164968][T17774] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 323.278526][T17780] xt_policy: too many policy elements [ 323.914041][T17818] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5694'. [ 325.031522][T17876] xt_l2tp: invalid flags combination: 4 [ 325.066156][T17881] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5717'. [ 325.629760][T17912] openvswitch: netlink: Actions may not be safe on all matching packets [ 326.439446][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5749'. [ 326.485250][T17961] netlink: 'syz.3.5750': attribute type 64 has an invalid length. [ 326.529474][T17961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5750'. [ 326.550737][T17965] lo: entered promiscuous mode [ 326.559093][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5753'. [ 326.606015][T17965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.645730][T17967] bridge_slave_1: left allmulticast mode [ 326.665297][T17967] bridge_slave_1: left promiscuous mode [ 326.671149][T17967] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.741010][T17967] bridge_slave_0: left allmulticast mode [ 326.754837][T17967] bridge_slave_0: left promiscuous mode [ 326.770769][T17967] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.478677][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5778'. [ 327.494299][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5778'. [ 327.564767][T18019] xt_ipcomp: unknown flags B [ 327.708404][T18025] x_tables: unsorted entry at hook 3 [ 327.972691][T18039] netlink: 'syz.2.5789': attribute type 1 has an invalid length. [ 328.031270][ T5849] lo speed is unknown, defaulting to 1000 [ 328.436296][T18061] netlink: 'syz.4.5801': attribute type 1 has an invalid length. [ 328.563410][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5803'. [ 328.588958][T18068] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 328.609235][T18068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.808005][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5809'. [ 328.977281][T18047] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 329.760611][T18139] netlink: 'syz.2.5837': attribute type 21 has an invalid length. [ 330.758871][T18191] bond0: (slave bridge0): Releasing backup interface [ 330.792657][T18191] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.800498][T18191] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.854984][T18191] bridge_slave_0: left allmulticast mode [ 330.870778][T18191] bridge_slave_0: left promiscuous mode [ 330.882529][T18191] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.924832][T18191] bridge_slave_1: left allmulticast mode [ 330.954711][T18191] bridge_slave_1: left promiscuous mode [ 330.974811][T18191] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.014955][T18191] bond0: (slave bond_slave_0): Releasing backup interface [ 331.092147][T18191] bond0: (slave bond_slave_1): Releasing backup interface [ 331.104729][T18214] xt_l2tp: v2 tid > 0xffff: 150994944 [ 331.166563][T18191] team0: Port device team_slave_0 removed [ 331.197054][T18191] team0: Port device team_slave_1 removed [ 331.213527][T18191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.238355][T18191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.289927][T18197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.394218][T18227] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 331.442941][T18229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5883'. [ 331.736571][T18248] netlink: 'syz.1.5891': attribute type 7 has an invalid length. [ 331.760131][T18248] : entered promiscuous mode [ 331.813644][T18251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5893'. [ 331.888979][T18256] netlink: 'syz.4.5895': attribute type 3 has an invalid length. [ 331.935675][T18256] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5895'. [ 331.991382][T18261] netlink: 'syz.0.5898': attribute type 21 has an invalid length. [ 332.035578][T18261] netlink: 'syz.0.5898': attribute type 1 has an invalid length. [ 332.343602][T18284] tc_dump_action: action bad kind [ 332.682959][T18305] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5922'. [ 333.225524][T18333] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 333.381206][T18344] netlink: 'syz.3.5940': attribute type 1 has an invalid length. [ 333.418029][T18344] netlink: 'syz.3.5940': attribute type 1 has an invalid length. [ 333.751007][T18367] netlink: 'syz.3.5950': attribute type 1 has an invalid length. [ 333.820530][T18367] netlink: 'syz.3.5950': attribute type 2 has an invalid length. [ 333.973813][T18379] netlink: 'syz.4.5955': attribute type 1 has an invalid length. [ 334.022647][T18379] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5955'. [ 334.048396][T18379] nbd: illegal input index 1048576 [ 334.340644][T18405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5968'. [ 334.519151][T18417] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.705914][T18424] netlink: 'syz.4.5977': attribute type 1 has an invalid length. [ 334.740225][T18424] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5977'. [ 334.790034][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5977'. [ 334.930138][T18438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5981'. [ 334.974696][T18440] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 335.011538][T18440] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 335.524406][T18466] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5989'. [ 335.777494][T18484] netlink: 'syz.2.5996': attribute type 10 has an invalid length. [ 335.816124][T18484] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 335.842642][T18484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.803084][T18547] netlink: 'syz.3.6029': attribute type 1 has an invalid length. [ 336.843092][T18547] netlink: 'syz.3.6029': attribute type 11 has an invalid length. [ 336.860497][T18547] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6029'. [ 337.001719][T18557] delete_channel: no stack [ 337.589510][T18592] bond0: entered allmulticast mode [ 337.605424][T18592] bond_slave_0: entered allmulticast mode [ 337.635339][T18592] bond_slave_1: entered allmulticast mode [ 337.972449][T18615] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6058'. [ 338.322918][T18634] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6066'. [ 338.335666][T18632] netlink: ct family unspecified [ 338.340672][T18632] openvswitch: netlink: Actions may not be safe on all matching packets [ 338.638721][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6073'. [ 338.792737][T18657] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6075'. [ 338.841152][T18661] netlink: 'syz.0.6078': attribute type 5 has an invalid length. [ 339.108766][T18675] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 339.185319][T18675] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 339.425379][T18693] netlink: 'syz.1.6091': attribute type 10 has an invalid length. [ 339.505488][T18693] veth0_macvtap: left promiscuous mode [ 339.578241][T18704] SET target dimension over the limit! [ 339.945402][T18723] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6103'. [ 339.980519][T18723] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6103'. [ 340.020148][T18723] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6103'. [ 340.153789][T18738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6110'. [ 340.771862][T18772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.892910][T18779] netlink: 'syz.0.6127': attribute type 1 has an invalid length. [ 341.021586][T18787] netlink: 'syz.2.6129': attribute type 11 has an invalid length. [ 341.050423][T18787] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6129'. [ 341.254819][T18798] No such timeout policy "syz0" [ 341.305418][T18804] ipt_rpfilter: unknown options [ 341.650061][T18823] nftables ruleset with unbound chain [ 342.619019][T18880] netlink: 'syz.3.6174': attribute type 15 has an invalid length. [ 342.668237][T18880] __nla_validate_parse: 1 callbacks suppressed [ 342.668253][T18880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6174'. [ 343.054727][T18904] x_tables: duplicate underflow at hook 1 [ 343.185423][T18912] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 343.267737][T18920] netlink: 'syz.1.6188': attribute type 5 has an invalid length. [ 343.834055][T18953] Cannot find add_set index 4 as target [ 344.366022][T18987] netlink: 'syz.1.6224': attribute type 10 has an invalid length. [ 344.381696][T18989] netlink: 'syz.4.6225': attribute type 4 has an invalid length. [ 344.395496][T18987] veth1_vlan: entered allmulticast mode [ 344.421213][T18987] team0: Device veth1_vlan failed to register rx_handler [ 344.551220][T18998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6229'. [ 344.552941][T18993] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 344.715897][T19003] unsupported nla_type 52263 [ 344.847852][T19011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6236'. [ 345.048743][T19024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.074545][T19028] netlink: 'syz.0.6243': attribute type 2 has an invalid length. [ 345.095680][T19028] netlink: 119 bytes leftover after parsing attributes in process `syz.0.6243'. [ 345.164080][T19033] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6247'. [ 345.619122][T19060] netlink: 'syz.4.6260': attribute type 2 has an invalid length. [ 345.766484][T19068] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 345.773183][T19071] sctp: [Deprecated]: syz.4.6267 (pid 19071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.773183][T19071] Use struct sctp_sack_info instead [ 346.123804][T19090] netlink: 'syz.1.6276': attribute type 1 has an invalid length. [ 346.142212][T19091] xt_nfacct: accounting object `syz1' does not exists [ 346.608225][T19118] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6289'. [ 346.979780][T19136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6298'. [ 347.019680][T19138] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 347.201633][T19149] netlink: 'syz.2.6304': attribute type 1 has an invalid length. [ 347.486052][T19167] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.6313'. [ 347.514046][T19167] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.6313'. [ 347.676592][T19180] netlink: 'syz.2.6318': attribute type 6 has an invalid length. [ 347.700468][T19180] netlink: 'syz.2.6318': attribute type 1 has an invalid length. [ 347.732760][T19180] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.6318'. [ 348.161380][T19206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6332'. [ 348.335360][T19216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6335'. [ 348.363125][T19219] netlink: 'syz.3.6337': attribute type 29 has an invalid length. [ 348.583779][T19233] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6345'. [ 349.312459][T19274] netlink: 'syz.4.6364': attribute type 25 has an invalid length. [ 349.339967][T19277] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.349007][T19277] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.358136][T19277] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.366897][T19277] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.441813][T19277] Zero length message leads to an empty skb [ 349.984504][T19312] Bluetooth: MGMT ver 1.23 [ 350.354772][T19335] netlink: 'syz.1.6395': attribute type 1 has an invalid length. [ 350.373464][T19335] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6395'. [ 350.399812][T19335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6395'. [ 350.708477][T19358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6404'. [ 351.103975][T19379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6413'. [ 351.908836][T19410] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 351.937526][T19413] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6430'. [ 352.197317][T19422] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 352.211447][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6436'. [ 352.245478][T19427] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 352.265795][T19427] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 353.015356][T19475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.053721][T19480] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 353.584126][T19508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.607310][T19511] netlink: 'syz.4.6475': attribute type 33 has an invalid length. [ 354.690177][T19570] __nla_validate_parse: 1 callbacks suppressed [ 354.690194][T19570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6498'. [ 355.193657][T19601] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.197261][ T5854] Bluetooth: hci3: command 0x0405 tx timeout [ 355.613984][T19623] IPVS: Error connecting to the multicast addr [ 356.466902][T19662] x_tables: ip_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 16 [ 356.959443][T19687] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6554'. [ 357.195075][T19702] lo: entered allmulticast mode [ 357.222879][T19702] lo: left allmulticast mode [ 357.446321][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'. [ 357.468947][T19719] netlink: 'syz.4.6571': attribute type 5 has an invalid length. [ 357.478724][T19719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6571'. [ 357.893880][T19748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.044859][T19758] tipc: Started in network mode [ 358.051678][T19758] tipc: Node identity , cluster identity 4711 [ 358.058270][T19758] tipc: Failed to obtain node identity [ 358.064081][T19758] tipc: Enabling of bearer rejected, failed to enable media [ 358.132248][T19762] netlink: 'syz.3.6590': attribute type 2 has an invalid length. [ 358.914336][T19806] netlink: 'syz.1.6611': attribute type 1 has an invalid length. [ 358.937594][T19806] netlink: 'syz.1.6611': attribute type 2 has an invalid length. [ 358.968310][T19806] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.6611'. [ 359.261144][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6622'. [ 359.387774][T19835] netlink: 'syz.1.6623': attribute type 83 has an invalid length. [ 359.429604][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6625'. [ 359.801553][T19858] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 360.198651][ T5849] IPVS: starting estimator thread 0... [ 360.228942][T19879] IPVS: ip_vs_edit_dest(): server weight less than zero [ 360.355267][T19881] IPVS: using max 30 ests per chain, 72000 per kthread [ 361.965097][T19984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6697'. [ 362.393495][ T5849] IPVS: starting estimator thread 0... [ 362.488229][T20013] IPVS: using max 32 ests per chain, 76800 per kthread [ 362.653416][T20026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6715'. [ 363.053130][T20050] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6727'. [ 363.553731][T20073] netlink: 'syz.3.6738': attribute type 29 has an invalid length. [ 363.571318][T20073] netlink: 'syz.3.6738': attribute type 29 has an invalid length. [ 363.642548][T20076] tipc: Started in network mode [ 363.662778][T20076] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 363.687291][T20076] tipc: Enabled bearer , priority 10 [ 364.133088][T20101] sock: sock_timestamping_bind_phc: sock not bind to device [ 364.576166][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6766'. [ 364.610968][T20129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6766'. [ 364.700539][T20135] tipc: Cannot configure node identity twice [ 364.806679][ T5950] tipc: Node number set to 10463914 [ 365.391723][T20173] netlink: 'syz.0.6785': attribute type 3 has an invalid length. [ 365.977600][T20199] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 366.282903][T20216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.840674][T20247] pimreg: entered allmulticast mode [ 366.893690][T20247] pimreg: left allmulticast mode [ 366.947221][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6826'. [ 366.962335][T20256] netlink: 'syz.3.6826': attribute type 2 has an invalid length. [ 366.970665][T20256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6826'. [ 366.985851][T20251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6823'. [ 366.997673][T20253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6824'. [ 367.842518][T20293] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 367.879170][T20296] netlink: 'syz.3.6846': attribute type 1 has an invalid length. [ 367.896804][T20296] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6846'. [ 367.910620][T20296] netlink: 'syz.3.6846': attribute type 1 has an invalid length. [ 368.244083][T20313] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6855'. [ 368.553800][T20334] tipc: Started in network mode [ 368.563774][T20334] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 368.599069][T20334] tipc: Enabled bearer , priority 10 [ 369.310674][T20381] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 369.715546][ T5849] tipc: Node number set to 10136234 [ 369.955350][T20416] netlink: 'syz.1.6898': attribute type 6 has an invalid length. [ 369.988049][T20416] netlink: 'syz.1.6898': attribute type 6 has an invalid length. [ 370.104909][T20419] syz.3.6900 (20419) used greatest stack depth: 19880 bytes left [ 370.253808][T20432] Bluetooth: MGMT ver 1.23 [ 370.477198][T20445] netlink: 'syz.2.6914': attribute type 32 has an invalid length. [ 370.487021][T20446] Bluetooth: MGMT ver 1.23 [ 370.687675][T20457] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6917'. [ 371.081499][T20478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6926'. [ 372.113613][T20537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.318571][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 372.320295][ T5863] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 372.400643][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6961'. [ 372.679641][T20572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6969'. [ 373.366502][T20616] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6990'. [ 373.517624][ T5854] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 374.032261][T20653] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7007'. [ 374.050573][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7007'. [ 374.192846][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7010'. [ 374.301887][T20666] netlink: 11 bytes leftover after parsing attributes in process `syz.3.7013'. [ 374.700247][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7022'. [ 374.717907][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7022'. [ 374.802463][T20690] netlink: 'syz.1.7023': attribute type 11 has an invalid length. [ 375.008799][T20700] pimreg3: entered allmulticast mode [ 375.041631][T20702] tipc: Enabling of bearer rejected, failed to enable media [ 375.310739][T20718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7039'. [ 375.649258][T20734] macvlan2: entered promiscuous mode [ 375.654598][T20734] macvlan2: entered allmulticast mode [ 376.356132][T20779] netlink: 'syz.0.7071': attribute type 3 has an invalid length. [ 376.768158][T20806] IPVS: ip_vs_add_dest(): server weight less than zero [ 377.119554][T20825] netlink: 'syz.0.7092': attribute type 11 has an invalid length. [ 377.430726][T20843] __nla_validate_parse: 2 callbacks suppressed [ 377.430744][T20843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7101'. [ 377.786664][T20858] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.827201][T20858] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 377.903942][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7114'. [ 377.991449][T20875] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7115'. [ 378.404082][T20897] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7124'. [ 378.566332][T20902] netlink: 'syz.4.7127': attribute type 1 has an invalid length. [ 378.584050][T20902] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7127'. [ 378.720270][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.727570][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.195929][T20932] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7137'. [ 380.043888][T20974] syz_tun: left promiscuous mode [ 380.342176][T20990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.561630][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7169'. [ 380.657189][T21008] netlink: 'syz.2.7171': attribute type 1 has an invalid length. [ 380.684602][T21008] netlink: 'syz.2.7171': attribute type 3 has an invalid length. [ 380.710649][T21013] vlan2: entered promiscuous mode [ 380.725323][T21008] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7171'. [ 380.744666][T21013] bridge0: entered promiscuous mode [ 380.751669][T21008] NCSI netlink: No device for ifindex 131080 [ 380.971537][T21027] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7175'. [ 381.019344][T21028] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7178'. [ 381.101690][T21028] vlan2: entered allmulticast mode [ 381.128292][T21028] gretap0: entered allmulticast mode [ 381.548157][T21059] netlink: 'syz.0.7189': attribute type 178 has an invalid length. [ 382.154826][T21090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.292681][T21097] netlink: 'syz.0.7204': attribute type 27 has an invalid length. [ 382.937735][T21133] __nla_validate_parse: 1 callbacks suppressed [ 382.937752][T21133] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7221'. [ 383.157654][T21145] tipc: Enabled bearer , priority 10 [ 385.326058][T21157] vlan2: entered allmulticast mode [ 385.331231][T21157] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 385.528704][T21182] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 385.561642][T21186] netlink: 'syz.0.7245': attribute type 1 has an invalid length. [ 385.578323][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7244'. [ 385.589675][T21186] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7245'. [ 385.615471][T21182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7244'. [ 385.913434][T21205] pim6reg: entered allmulticast mode [ 386.491761][T21243] tipc: Invalid UDP bearer configuration [ 386.491826][T21243] tipc: Enabling of bearer rejected, failed to enable media [ 387.461487][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7298'. [ 387.823262][T21317] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 388.172122][T21336] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 388.736432][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7331'. [ 388.781617][T21371] team0: Device vti0 is of different type [ 388.807232][T21374] netlink: 'syz.1.7334': attribute type 10 has an invalid length. [ 389.575802][T21408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7350'. [ 389.612295][T21412] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7351'. [ 389.639055][T21412] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7351'. [ 389.689270][T21412] netlink: 'syz.0.7351': attribute type 6 has an invalid length. [ 389.730677][T21412] netlink: 'syz.0.7351': attribute type 5 has an invalid length. [ 389.765321][T21412] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7351'. [ 391.313807][T21509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7399'. [ 391.587845][T21528] tipc: MTU too low for tipc bearer [ 391.737233][T21535] netlink: 'syz.2.7410': attribute type 2 has an invalid length. [ 391.786681][T21537] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.520067][T21577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.833768][T21595] tipc: Started in network mode [ 392.859502][T21595] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 392.884133][T21595] tipc: Enabling of bearer rejected, failed to enable media [ 393.020857][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7446'. [ 393.295739][T21623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.490764][T21630] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.501524][T21630] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.627725][T21630] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.643607][T21630] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.740799][T21630] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.755733][T21630] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.831960][T21630] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.853824][T21630] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.891328][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7466'. [ 394.031408][T21630] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.042995][T21630] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.087490][T21630] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.099207][T21630] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.124252][T21630] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.138631][T21630] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.170866][T21630] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.191013][T21630] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.403911][T21727] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7501'. [ 396.661508][T21793] nbd: must specify an index to disconnect [ 396.702510][T21797] tipc: Enabled bearer , priority 12 [ 397.530160][T21841] netlink: 'syz.3.7550': attribute type 29 has an invalid length. [ 397.543945][T21841] netlink: 'syz.3.7550': attribute type 29 has an invalid length. [ 398.183078][T21878] vlan2: entered allmulticast mode [ 398.189247][T21878] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 398.245947][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7572'. [ 398.255873][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7572'. [ 398.397412][T21889] tipc: Enabling of bearer rejected, failed to enable media [ 398.503830][T21895] veth3: entered allmulticast mode [ 399.543719][T21960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7609'. [ 399.599679][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'. [ 399.955421][T21981] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 400.785490][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7643'. [ 400.814973][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7643'. [ 400.843836][T22028] netlink: 'syz.4.7643': attribute type 11 has an invalid length. [ 401.035652][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 401.068901][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7653'. [ 401.078347][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7653'. [ 401.078533][T22044] netlink: 'syz.2.7651': attribute type 1 has an invalid length. [ 401.191781][ T30] audit: type=1800 audit(1752654850.637:2): pid=22052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7655" name="memory.events" dev="tmpfs" ino=7940 res=0 errno=0 [ 401.238815][ T30] audit: type=1804 audit(1752654850.677:3): pid=22052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7655" name="/newroot/1582/memory.events" dev="tmpfs" ino=7940 res=1 errno=0 [ 401.544324][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7665'. [ 402.788580][T22135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7696'. [ 403.095410][T22150] netlink: 'syz.3.7702': attribute type 2 has an invalid length. [ 403.940390][T22201] tipc: Started in network mode [ 403.959689][T22201] tipc: Node identity e0000002, cluster identity 4711 [ 403.980333][T22203] netlink: 'syz.4.7724': attribute type 2 has an invalid length. [ 403.989045][T22201] tipc: Enabling of bearer rejected, failed to enable media [ 404.582772][T22228] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7736'. [ 404.618183][T22228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7736'. [ 404.639923][T22228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7736'. [ 405.102733][T22259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.131450][T22260] netem: change failed [ 405.613728][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7757'. [ 405.623727][T22276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7757'. [ 405.948249][T22297] Bluetooth: MGMT ver 1.23 [ 405.988452][T22299] netlink: 'syz.0.7769': attribute type 1 has an invalid length. [ 406.823826][T22353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.830594][T22354] netlink: 'syz.1.7795': attribute type 2 has an invalid length. [ 407.097945][T22368] netlink: 'syz.3.7804': attribute type 2 has an invalid length. [ 407.454051][T22392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7815'. [ 407.455893][T22390] x_tables: ip_tables: udp match: only valid for protocol 17 [ 407.841375][T22413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7826'. [ 408.590642][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7846'. [ 409.230989][T22492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7863'. [ 409.271297][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7863'. [ 409.298609][T22496] netlink: 'syz.4.7865': attribute type 5 has an invalid length. [ 409.705088][T22520] sit0: Master is either lo or non-ether device [ 409.844823][T22530] __nla_validate_parse: 3 callbacks suppressed [ 409.844842][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7881'. [ 409.907002][T22530] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 409.914536][T22530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.081246][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7887'. [ 410.113948][T22542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7887'. [ 410.145372][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7891'. [ 410.154297][T22546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7891'. [ 410.193360][T22546] netlink: 'syz.3.7891': attribute type 5 has an invalid length. [ 410.453294][T22566] netlink: 'syz.3.7899': attribute type 1 has an invalid length. [ 410.475319][T22566] netlink: 236 bytes leftover after parsing attributes in process `syz.3.7899'. [ 410.609584][T22574] tipc: Enabled bearer , priority 10 [ 410.784898][T22584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7908'. [ 410.819163][T22589] netlink: 'syz.0.7911': attribute type 1 has an invalid length. [ 410.842725][T22589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7911'. [ 410.882868][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7912'. [ 411.192063][T22608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7921'. [ 412.439241][T22685] tipc: Enabling of bearer rejected, failed to enable media [ 412.831579][T22710] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 413.934008][T22786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.184525][T22799] netlink: 'syz.0.8010': attribute type 10 has an invalid length. [ 414.220638][T22799] batman_adv: batadv0: Removing interface: team0 [ 414.246995][T22799] bridge0: port 3(team0) entered blocking state [ 414.265488][T22799] bridge0: port 3(team0) entered disabled state [ 414.271956][T22799] team0: entered allmulticast mode [ 414.297769][T22799] C: entered allmulticast mode [ 414.352128][T22799] team_slave_1: entered allmulticast mode [ 414.362029][T22799] team0: entered promiscuous mode [ 414.372803][T22799] C: entered promiscuous mode [ 414.381853][T22799] team_slave_1: entered promiscuous mode [ 414.420334][T22811] team0: Device xfrm1 is of different type [ 415.126582][T22855] tipc: Enabling of bearer rejected, failed to enable media [ 415.504625][T22876] __nla_validate_parse: 5 callbacks suppressed [ 415.504644][T22876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8041'. [ 415.678088][T22883] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8044'. [ 415.742329][T22883] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8044'. [ 415.766335][T22883] netlink: 'syz.3.8044': attribute type 5 has an invalid length. [ 415.781247][T22883] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8044'. [ 415.930321][T22890] netlink: 'syz.0.8047': attribute type 1 has an invalid length. [ 416.429284][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8056'. [ 416.587940][T22924] team0: Device vti0 is of different type [ 417.955472][T22999] netlink: 'syz.1.8089': attribute type 1 has an invalid length. [ 417.971746][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8089'. [ 418.065305][T23006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8093'. [ 418.339255][T23020] veth0_to_bond: entered allmulticast mode [ 419.510357][ T5849] IPVS: starting estimator thread 0... [ 419.615326][T23098] IPVS: using max 31 ests per chain, 74400 per kthread [ 419.703912][T23110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8142'. [ 419.719447][T23110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8142'. [ 419.731176][T23110] netlink: 'syz.4.8142': attribute type 12 has an invalid length. [ 419.743676][T23110] netlink: 'syz.4.8142': attribute type 11 has an invalid length. [ 420.343942][T23144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.817647][T23170] netlink: 'syz.3.8169': attribute type 1 has an invalid length. [ 421.458192][T23210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8192'. [ 421.755262][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 422.483849][T23276] lo: left promiscuous mode [ 422.521863][T23276] tunl0: left promiscuous mode [ 422.578941][T23276] 0ªX¹¦D: left allmulticast mode [ 422.593642][T23283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8226'. [ 422.815563][T23276] sit0: left promiscuous mode [ 422.905200][T23276] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.269914][T23276] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 423.407159][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8235'. [ 423.568740][T23314] macsec0: entered promiscuous mode [ 423.574008][T23314] macsec0: entered allmulticast mode [ 423.609426][T23314] veth1_macvtap: entered allmulticast mode [ 423.628872][T23314] macsec0: left promiscuous mode [ 423.634035][T23314] macsec0: left allmulticast mode [ 423.656906][T23314] veth1_macvtap: left allmulticast mode [ 424.293787][T23359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8262'. [ 424.436717][T23365] netlink: 'syz.0.8264': attribute type 1 has an invalid length. [ 424.465948][T23365] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8264'. [ 424.754934][T23381] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8271'. [ 424.934806][T23391] netlink: 'syz.3.8276': attribute type 18 has an invalid length. [ 424.971970][T23394] netlink: 'syz.0.8278': attribute type 1 has an invalid length. [ 425.108569][T23400] netlink: zone id is out of range [ 425.114051][T23400] netlink: zone id is out of range [ 425.137783][T23400] netlink: zone id is out of range [ 425.153570][T23400] netlink: zone id is out of range [ 425.184221][T23400] netlink: zone id is out of range [ 425.228338][T23400] netlink: zone id is out of range [ 425.233945][T23400] netlink: zone id is out of range [ 425.263972][T23400] netlink: zone id is out of range [ 425.322607][T23411] nbd: must specify at least one socket [ 425.364781][T23418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8291'. [ 425.563482][T23431] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8296'. [ 426.508494][T23491] nbd: must specify a device to reconfigure [ 426.671348][T23496] pim6reg527: entered allmulticast mode [ 427.148272][T23532] netlink: 'syz.2.8342': attribute type 23 has an invalid length. [ 427.312342][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8346'. [ 427.335743][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8346'. [ 427.840512][T23574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8363'. [ 429.141068][T23656] bond0: Device is already in use. [ 429.185113][T23658] net_ratelimit: 5 callbacks suppressed [ 429.199447][T23658] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 429.302625][T23666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8402'. [ 429.349362][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8402'. [ 429.485553][T23675] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8406'. [ 429.494636][T23675] netlink: 'syz.0.8406': attribute type 9 has an invalid length. [ 430.157631][T23717] team_slave_0: entered promiscuous mode [ 430.164134][T23717] team_slave_1: entered promiscuous mode [ 430.169915][T23717] geneve0: entered promiscuous mode [ 430.933753][T23764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8449'. [ 431.098302][T23770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8454'. [ 431.131827][T23770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8454'. [ 431.460214][T23796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8465'. [ 432.648900][T23875] Bluetooth: MGMT ver 1.23 [ 432.770244][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8509'. [ 432.793430][T23889] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8511'. [ 432.803546][T23889] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8511'. [ 432.947846][T23897] netlink: 'syz.1.8515': attribute type 1 has an invalid length. [ 432.973245][T23897] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.8515'. [ 433.041990][T23903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.373766][T23921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8527'. [ 433.402001][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8527'. [ 433.728114][T23944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8538'. [ 434.628756][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8566'. [ 434.654616][T23998] netlink: 'syz.3.8566': attribute type 30 has an invalid length. [ 434.705310][T23998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8566'. [ 434.750132][T24007] netlink: 'syz.4.8569': attribute type 1 has an invalid length. [ 434.779349][T24007] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8569'. [ 434.822622][T24007] netlink: 'syz.4.8569': attribute type 1 has an invalid length. [ 434.926659][T24019] netlink: 'syz.4.8575': attribute type 4 has an invalid length. [ 436.098856][T24068] team0: Device gtp1 is up. Set it down before adding it as a team port [ 436.220116][T24080] tipc: Enabling of bearer rejected, failed to enable media [ 436.751500][T24111] pimreg: entered allmulticast mode [ 437.776007][T24173] __nla_validate_parse: 6 callbacks suppressed [ 437.776026][T24173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8646'. [ 437.840616][T24173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8646'. [ 437.861102][T24173] netlink: 'syz.4.8646': attribute type 13 has an invalid length. [ 438.013576][T24186] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 438.409472][T24216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8667'. [ 438.463618][T24220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8668'. [ 438.510295][T24219] delete_channel: no stack [ 438.578471][T24226] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8671'. [ 438.615377][T24226] nbd: illegal input index -8454144 [ 438.696111][T24234] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 438.711571][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8675'. [ 438.755325][T24233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.840246][T24299] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8706'. [ 439.888244][T24299] unsupported nlmsg_type 40 [ 440.160185][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.870765][T24366] netlink: 'syz.1.8736': attribute type 2 has an invalid length. [ 441.324615][T24392] netlink: 'syz.1.8748': attribute type 1 has an invalid length. [ 442.426947][T24451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8776'. [ 442.581278][T24460] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8781'. [ 442.788836][T24471] netlink: 'syz.2.8788': attribute type 32 has an invalid length. [ 442.810571][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8788'. [ 442.831988][T24471] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 442.859362][T24426] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 442.936344][T24481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8790'. [ 442.971680][T24481] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8790'. [ 443.012620][T24481] netlink: 'syz.0.8790': attribute type 5 has an invalid length. [ 443.051090][T24481] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8790'. [ 443.467375][T24511] tipc: Enabling of bearer rejected, failed to enable media [ 443.582336][T24517] netlink: 212404 bytes leftover after parsing attributes in process `syz.1.8806'. [ 443.587209][T24518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8808'. [ 443.703913][T24524] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 444.022180][T24544] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8820'. [ 444.119585][T24548] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 444.261050][T24556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8826'. [ 444.395896][T24562] netlink: 'syz.2.8829': attribute type 1 has an invalid length. [ 444.848444][T24588] tipc: Enabling of bearer rejected, media not registered [ 445.566727][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8862'. [ 445.584798][T24631] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 445.594693][T24631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.771097][T24644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8867'. [ 446.669811][T24698] netlink: zone id is out of range [ 446.681484][T24698] netlink: get zone limit has 8 unknown bytes [ 447.367824][T24743] netlink: 'syz.1.8916': attribute type 14 has an invalid length. [ 447.917544][T24777] __nla_validate_parse: 4 callbacks suppressed [ 447.917562][T24777] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8931'. [ 449.283479][T24851] netlink: 'syz.0.8964': attribute type 11 has an invalid length. [ 449.459415][T24862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8969'. [ 451.032241][T24938] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 451.711685][T24974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9023'. [ 451.884943][T24985] openvswitch: netlink: IP tunnel TTL not specified. [ 452.536404][T25021] tipc: Enabled bearer , priority 10 [ 452.883627][T25036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9050'. [ 453.068283][T25047] netlink: 'syz.0.9057': attribute type 83 has an invalid length. [ 453.308291][T25062] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.9064'. [ 453.524437][T25073] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9067'. [ 453.655873][ T5849] tipc: Node number set to 3758096386 [ 454.127081][T25109] netlink: 81 bytes leftover after parsing attributes in process `syz.1.9084'. [ 454.274318][T25120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9089'. [ 454.660764][T25139] tap0: tun_chr_ioctl cmd 1074025677 [ 454.668450][T25139] tap0: linktype set to 65534 [ 454.812355][T25146] netlink: 'syz.0.9102': attribute type 6 has an invalid length. [ 454.928252][T25153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9104'. [ 455.671675][T25199] veth0: entered promiscuous mode [ 455.696171][T25198] veth0: left promiscuous mode [ 455.825078][T25209] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9129'. [ 455.914423][T25216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9132'. [ 456.531169][T25251] raw_sendmsg: syz.3.9148 forgot to set AF_INET. Fix it! [ 456.706576][T25258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9152'. [ 456.731164][T25258] xfrm2: entered promiscuous mode [ 456.749916][T25258] xfrm2: entered allmulticast mode [ 456.764523][T25258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9152'. [ 459.773153][T25420] netlink: 'syz.4.9227': attribute type 83 has an invalid length. [ 459.778499][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9226'. [ 460.458071][T25462] lo: left promiscuous mode [ 460.462830][T25462] tunl0: left promiscuous mode [ 460.490092][T25462] gre0: left promiscuous mode [ 460.496012][T25462] gretap0: left promiscuous mode [ 460.508452][T25462] erspan0: left promiscuous mode [ 460.518551][T25462] ip_vti0: left promiscuous mode [ 460.724075][T25462] bond0: left allmulticast mode [ 460.736104][T25462] bond_slave_0: left allmulticast mode [ 460.746211][T25462] bond_slave_1: left allmulticast mode [ 460.779529][T25462] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 460.892905][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9252'. [ 461.008990][T25477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9253'. [ 461.213276][T25487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9259'. [ 461.242775][T25487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9259'. [ 461.251059][T25493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9261'. [ 461.362677][T25495] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 461.499197][T25505] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9267'. [ 461.591518][T25511] netlink: 'syz.2.9270': attribute type 83 has an invalid length. [ 461.998711][T17847] wlan1: Trigger new scan to find an IBSS to join [ 462.053705][T25531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9280'. [ 462.712557][T25563] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9295'. [ 463.014087][T25580] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9303'. [ 463.184099][T25590] netlink: 'syz.2.9307': attribute type 21 has an invalid length. [ 463.229066][T25590] netlink: 'syz.2.9307': attribute type 4 has an invalid length. [ 463.246570][T25590] netlink: 'syz.2.9307': attribute type 5 has an invalid length. [ 463.269013][T25595] netlink: 'syz.2.9307': attribute type 21 has an invalid length. [ 463.308184][T25595] netlink: 'syz.2.9307': attribute type 4 has an invalid length. [ 463.341802][T25595] netlink: 'syz.2.9307': attribute type 5 has an invalid length. [ 464.245464][T25658] veth0: entered promiscuous mode [ 464.257883][T25658] veth0: left promiscuous mode [ 464.638750][T25681] netlink: 'syz.1.9348': attribute type 1 has an invalid length. [ 465.046277][T17847] wlan1: Trigger new scan to find an IBSS to join [ 465.553903][T25725] __nla_validate_parse: 15 callbacks suppressed [ 465.553924][T25725] netlink: 165 bytes leftover after parsing attributes in process `syz.2.9365'. [ 466.193295][T25750] siw: device registration error -23 [ 466.906680][T25794] netlink: 'syz.1.9395': attribute type 5 has an invalid length. [ 467.311896][T25815] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.9405'. [ 467.410961][T25819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9407'. [ 467.997896][T17848] wlan1: Trigger new scan to find an IBSS to join [ 468.622730][T25889] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9441'. [ 468.916912][T17848] wlan1: Creating new IBSS network, BSSID ae:1f:ea:c9:bb:ff [ 469.460656][T25935] openvswitch: netlink: IPv4 tun info is not correct [ 469.997977][T25964] macvtap1: entered allmulticast mode [ 470.024544][T25964] veth0_macvtap: entered allmulticast mode [ 470.693542][T25993] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9489'. [ 471.009219][T26013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9498'. [ 471.195831][ T5863] Bluetooth: hci3: command 0x0405 tx timeout [ 471.312835][T26034] gtp1: entered promiscuous mode [ 471.324563][T26034] gtp1: entered allmulticast mode [ 472.548768][T26108] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9545'. [ 473.588676][T26154] syz.2.9565 (26154) used greatest stack depth: 17992 bytes left [ 473.655370][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9570'. [ 473.790305][T26170] netlink: 'syz.2.9572': attribute type 1 has an invalid length. [ 473.799882][T26170] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9572'. [ 473.834423][T26170] netlink: 'syz.2.9572': attribute type 1 has an invalid length. [ 474.160077][T26186] IPVS: persistence engine module ip_vs_pe_À not found [ 474.510715][T26213] netlink: 'syz.2.9594': attribute type 1 has an invalid length. [ 474.553299][T26213] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9594'. [ 474.663055][T26223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9599'. [ 474.692096][T26223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9599'. [ 474.844148][T26235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9603'. [ 474.844924][T26232] netlink: 'syz.3.9604': attribute type 4 has an invalid length. [ 476.046705][T26280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9626'. [ 476.102432][T26282] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9627'. [ 476.139390][T26284] netlink: 'syz.3.9628': attribute type 1 has an invalid length. [ 476.162712][T26284] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9628'. [ 476.189471][T26284] netlink: 'syz.3.9628': attribute type 1 has an invalid length. [ 477.054886][T26330] IPv6: NLM_F_CREATE should be specified when creating new route [ 477.454660][T26356] netlink: 'syz.0.9662': attribute type 1 has an invalid length. [ 477.484327][T26356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9662'. [ 477.488531][T26360] netlink: 'syz.2.9664': attribute type 58 has an invalid length. [ 477.535800][T26360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9664'. [ 477.755799][T26374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9671'. [ 477.952586][T26387] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 478.142047][T26392] netlink: 'syz.2.9678': attribute type 1 has an invalid length. [ 478.170109][T26392] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9678'. [ 478.202726][T26393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9679'. [ 478.930790][T26427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9693'. [ 478.967785][T26427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9693'. [ 479.373455][T26448] bridge_slave_0: entered promiscuous mode [ 481.104768][T26545] tap0: tun_chr_ioctl cmd 2148553947 [ 481.615714][T26568] syz.3.9762: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 481.651984][T26568] CPU: 0 UID: 0 PID: 26568 Comm: syz.3.9762 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 481.652015][T26568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.652034][T26568] Call Trace: [ 481.652043][T26568] [ 481.652052][T26568] dump_stack_lvl+0x189/0x250 [ 481.652084][T26568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.652106][T26568] ? __pfx__printk+0x10/0x10 [ 481.652130][T26568] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 481.652154][T26568] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 481.652179][T26568] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 481.652206][T26568] warn_alloc+0x214/0x310 [ 481.652229][T26568] ? stack_depot_save_flags+0x40/0x900 [ 481.652259][T26568] ? __pfx_warn_alloc+0x10/0x10 [ 481.652283][T26568] ? kasan_save_track+0x4f/0x80 [ 481.652305][T26568] ? xskq_create+0x56/0x170 [ 481.652328][T26568] ? xsk_init_queue+0xb0/0x110 [ 481.652350][T26568] ? xsk_setsockopt+0x43f/0x710 [ 481.652372][T26568] ? do_sock_setsockopt+0x25a/0x3e0 [ 481.652391][T26568] ? __x64_sys_setsockopt+0x18b/0x220 [ 481.652411][T26568] ? do_syscall_64+0xfa/0x3b0 [ 481.652427][T26568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.652455][T26568] __vmalloc_node_range_noprof+0x125/0x12f0 [ 481.652513][T26568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 481.652544][T26568] ? __kasan_kmalloc+0x93/0xb0 [ 481.652569][T26568] vmalloc_user_noprof+0xad/0xf0 [ 481.652592][T26568] ? xskq_create+0xbf/0x170 [ 481.652624][T26568] xskq_create+0xbf/0x170 [ 481.652654][T26568] xsk_init_queue+0xb0/0x110 [ 481.652683][T26568] xsk_setsockopt+0x43f/0x710 [ 481.652711][T26568] ? __pfx_xsk_setsockopt+0x10/0x10 [ 481.652734][T26568] ? __lock_acquire+0xab9/0xd20 [ 481.652765][T26568] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 481.652789][T26568] ? __pfx_xsk_setsockopt+0x10/0x10 [ 481.652815][T26568] do_sock_setsockopt+0x25a/0x3e0 [ 481.652842][T26568] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 481.652869][T26568] ? __fget_files+0x2a/0x420 [ 481.652902][T26568] __x64_sys_setsockopt+0x18b/0x220 [ 481.652932][T26568] do_syscall_64+0xfa/0x3b0 [ 481.652949][T26568] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.652975][T26568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.652992][T26568] ? clear_bhb_loop+0x60/0xb0 [ 481.653015][T26568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.653037][T26568] RIP: 0033:0x7f2c4298e929 [ 481.653059][T26568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.653076][T26568] RSP: 002b:00007f2c43716038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 481.653097][T26568] RAX: ffffffffffffffda RBX: 00007f2c42bb5fa0 RCX: 00007f2c4298e929 [ 481.653111][T26568] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 481.653122][T26568] RBP: 00007f2c42a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 481.653134][T26568] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.653146][T26568] R13: 0000000000000000 R14: 00007f2c42bb5fa0 R15: 00007ffe79218e68 [ 481.653178][T26568] [ 481.653189][T26568] Mem-Info: [ 481.873605][T26582] netlink: 'syz.4.9768': attribute type 9 has an invalid length. [ 481.964844][T26568] active_anon:5521 inactive_anon:0 isolated_anon:0 [ 481.964844][T26568] active_file:1163 inactive_file:39983 isolated_file:0 [ 481.964844][T26568] unevictable:768 dirty:314 writeback:0 [ 481.964844][T26568] slab_reclaimable:11665 slab_unreclaimable:107177 [ 481.964844][T26568] mapped:29104 shmem:1392 pagetables:1499 [ 481.964844][T26568] sec_pagetables:0 bounce:0 [ 481.964844][T26568] kernel_misc_reclaimable:0 [ 481.964844][T26568] free:1313479 free_pcp:17649 free_cma:0 [ 482.036123][T26568] Node 0 active_anon:22232kB inactive_anon:0kB active_file:4652kB inactive_file:159728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116440kB dirty:1256kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12208kB pagetables:5584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 482.115789][T26568] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 482.169416][T26568] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.213273][T26568] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 482.220015][T26568] Node 0 DMA32 free:1346772kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22284kB inactive_anon:0kB active_file:4652kB inactive_file:158140kB unevictable:1536kB writepending:1256kB present:3129332kB managed:2558392kB mlocked:0kB bounce:0kB free_pcp:44816kB local_pcp:21052kB free_cma:0kB [ 482.254904][T26568] lowmem_reserve[]: 0 0 1 1 1 [ 482.271848][T26568] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 482.364366][T26568] lowmem_reserve[]: 0 0 0 0 0 [ 482.393702][T26568] Node 1 Normal free:3894628kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22880kB local_pcp:9408kB free_cma:0kB [ 482.440642][T26568] lowmem_reserve[]: 0 0 0 0 0 [ 482.446868][T26568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 482.447333][T26599] __nla_validate_parse: 6 callbacks suppressed [ 482.447346][T26599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9776'. [ 482.475763][T26568] Node 0 DMA32: 707*4kB (UM) 356*8kB (UME) 304*16kB (UME) 1684*32kB (UME) 818*64kB (UM) 478*128kB (UM) 348*256kB (UM) 273*512kB (UM) 170*1024kB (UME) 2*2048kB (UM) 186*4096kB (UM) = 1346860kB [ 482.547623][T26568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 482.585356][T26568] Node 1 Normal: 207*4kB (UE) 35*8kB (UME) 35*16kB (UME) 51*32kB (UME) 20*64kB (UME) 7*128kB (UME) 6*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894628kB [ 482.645290][T26568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 482.654908][T26568] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 482.677527][T26610] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 482.701125][T26568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 482.724426][T26568] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 482.773482][T26568] 42534 total pagecache pages [ 482.806350][T26568] 0 pages in swap cache [ 482.833380][T26568] Free swap = 124996kB [ 482.853813][T26619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9785'. [ 482.853982][T26568] Total swap = 124996kB [ 482.874380][T26568] 2097051 pages RAM [ 482.892599][T26568] 0 pages HighMem/MovableOnly [ 482.912946][T26568] 425411 pages reserved [ 482.918660][T26568] 0 pages cma reserved [ 483.369394][T26644] netlink: 'syz.0.9795': attribute type 6 has an invalid length. [ 483.586571][T26656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.718795][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 484.973154][T26727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9834'. [ 485.141762][T26739] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 485.507714][T26759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9849'. [ 485.769853][T26775] ip6gre2: entered allmulticast mode [ 486.166696][T26800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9863'. [ 487.244233][T26853] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.9886'. [ 487.425206][T26863] sch_fq: defrate 0 ignored. [ 487.760617][T26886] netem: change failed [ 488.036621][T26899] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.9906'. [ 488.117875][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9908'. [ 488.329158][T26919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9914'. [ 488.398936][T26917] block nbd0: server does not support multiple connections per device. [ 488.418446][T26917] block nbd0: shutting down sockets [ 489.267035][T26970] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9938'. [ 489.707317][T26997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9947'. [ 489.881640][T27004] netlink: 'syz.3.9951': attribute type 1 has an invalid length. [ 489.918258][T27004] netlink: 'syz.3.9951': attribute type 10 has an invalid length. [ 489.928618][T27004] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9951'. [ 490.499092][T27037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9966'. [ 490.551805][T27037] vlan2: entered allmulticast mode [ 490.572204][T27037] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 490.801183][T27054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9975'. [ 490.824072][T27056] netlink: 284 bytes leftover after parsing attributes in process `syz.0.9976'. [ 491.011647][T27066] netlink: 'syz.1.9981': attribute type 2 has an invalid length. [ 491.031955][T27068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9982'. [ 492.019361][T27131] openvswitch: netlink: IP tunnel dst address not specified [ 493.257309][T27182] __nla_validate_parse: 3 callbacks suppressed [ 493.257328][T27182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10035'. [ 493.280592][T27182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10035'. [ 493.492685][T27194] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 494.144410][T27234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10060'. [ 494.240977][T27238] netlink: 'syz.1.10062': attribute type 83 has an invalid length. [ 494.398345][T27249] netlink: 'syz.2.10065': attribute type 28 has an invalid length. [ 494.444125][T27249] netlink: 'syz.2.10065': attribute type 3 has an invalid length. [ 494.491684][T27249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10065'. [ 494.654085][T27257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10071'. [ 495.102843][T27275] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10080'. [ 495.774220][T27313] tap0: tun_chr_ioctl cmd 1074025678 [ 495.818152][T27313] tap0: group set to 0 [ 495.842141][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10096'. [ 495.956220][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10096'. [ 496.907571][T27377] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10117'. [ 496.925603][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10117'. [ 498.393734][T27439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10142'. [ 498.434125][T27440] tipc: Bearer : already 2 bearers with priority 10 [ 498.459367][T27440] tipc: Bearer : trying with adjusted priority [ 498.479628][T27440] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 498.583390][T27449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10144'. [ 498.596069][T27449] 8021q: VLANs not supported on ip6_vti0 [ 499.165054][T27477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10156'. [ 499.328077][T27488] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.10160'. [ 499.581288][T27498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10164'. [ 499.610237][T27498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10164'. [ 499.631645][T27498] gretap0: entered promiscuous mode [ 499.686137][T27498] gretap0: left promiscuous mode [ 500.888687][T27551] nbd0: detected capacity change from 0 to 127 [ 500.910427][ T5854] block nbd0: Receive control failed (result -104) [ 500.936810][T27561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10188'. [ 501.563462][T27598] veth0: entered promiscuous mode [ 501.578507][T27598] veth0: left promiscuous mode [ 501.601736][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.084796][T27625] netlink: 23 bytes leftover after parsing attributes in process `syz.0.10212'. [ 502.955617][T27674] sctp: [Deprecated]: syz.1.10234 (pid 27674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.955617][T27674] Use struct sctp_sack_info instead [ 503.014951][T27678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10237'. [ 504.562307][T27768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10281'. [ 504.643289][T27778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10283'. [ 504.793397][T27784] netlink: 'syz.0.10287': attribute type 5 has an invalid length. [ 504.955979][ T5863] Bluetooth: hci3: command 0x0405 tx timeout [ 505.210798][T27812] netlink: 'syz.2.10301': attribute type 19 has an invalid length. [ 506.071643][T27850] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 506.233285][T27859] sctp: [Deprecated]: syz.2.10325 (pid 27859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.233285][T27859] Use struct sctp_sack_info instead [ 506.500704][T27871] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 506.661712][T27886] netlink: 'syz.3.10337': attribute type 4 has an invalid length. [ 506.789881][T27890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10339'. [ 506.933762][T27900] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10344'. [ 506.971870][T27900] ip6gretap0: entered promiscuous mode [ 507.012393][T27900] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10344'. [ 507.070215][T27906] block nbd1: Unsupported socket: shutdown callout must be supported. [ 507.675468][ T5854] Bluetooth: hci3: command 0x0405 tx timeout [ 508.141546][T27964] netlink: 284 bytes leftover after parsing attributes in process `syz.3.10375'. [ 508.217498][T27969] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10376'. [ 508.602794][T27989] netlink: 71 bytes leftover after parsing attributes in process `syz.3.10386'. [ 509.210554][T28021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10401'. [ 509.398473][T28033] lo: entered allmulticast mode [ 509.518754][T28040] bridge_slave_0: invalid flags given to default FDB implementation [ 509.555814][T28043] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 509.944259][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10422'. [ 510.392371][T28096] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10437'. [ 510.623278][T28111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10444'. [ 510.707887][T28117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10447'. [ 510.816548][T28120] netlink: 'syz.3.10451': attribute type 18 has an invalid length. [ 511.059407][T28135] bond0: entered promiscuous mode [ 511.074755][T28135] bond_slave_0: entered promiscuous mode [ 511.087823][T28135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.103460][T28135] Cannot create hsr debugfs directory [ 511.136272][T28135] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 511.162465][T28135] hsr0: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.181531][T28135] hsr0: entered promiscuous mode [ 511.644960][T28169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10469'. [ 511.714956][T28174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10471'. [ 511.780504][T28174] netlink: 'syz.1.10471': attribute type 1 has an invalid length. [ 511.806773][T28174] netlink: 'syz.1.10471': attribute type 2 has an invalid length. [ 511.914046][T28181] netlink: 165 bytes leftover after parsing attributes in process `syz.4.10476'. [ 512.758065][T28225] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 513.020219][T28236] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.10501'. [ 513.056122][T28236] netlink: zone id is out of range [ 513.061497][T28236] netlink: zone id is out of range [ 513.066924][T28241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10503'. [ 513.096658][T28236] netlink: zone id is out of range [ 513.102052][T28236] netlink: zone id is out of range [ 513.112632][T28243] netlink: 'syz.0.10505': attribute type 1 has an invalid length. [ 513.122513][T28236] netlink: zone id is out of range [ 513.128259][T28243] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10505'. [ 513.137832][T28236] netlink: zone id is out of range [ 513.143396][T28236] netlink: zone id is out of range [ 513.149317][T28243] netlink: 'syz.0.10505': attribute type 1 has an invalid length. [ 513.161048][T28236] netlink: zone id is out of range [ 513.178236][T28236] netlink: zone id is out of range [ 513.193606][T28236] netlink: zone id is out of range [ 513.563661][T28265] netlink: 'syz.4.10516': attribute type 2 has an invalid length. [ 513.992373][T28290] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (65485) ! [ 515.154924][T28359] __nla_validate_parse: 2 callbacks suppressed [ 515.154943][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10559'. [ 515.375075][T28372] netlink: 'syz.1.10567': attribute type 8 has an invalid length. [ 516.019891][T28411] netlink: 'syz.1.10585': attribute type 1 has an invalid length. [ 516.043903][T28411] netlink: 'syz.1.10585': attribute type 4 has an invalid length. [ 516.073094][T28411] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10585'. [ 516.125272][T28411] NCSI netlink: No device for ifindex 458760 [ 516.360542][T28429] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10593'. [ 517.196187][ T5863] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 517.196225][T28468] Bluetooth: hci2: command 0x0406 tx timeout [ 517.299533][T28484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10619'. [ 517.362476][T28486] netlink: 'syz.1.10618': attribute type 9 has an invalid length. [ 517.373190][T28486] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.10618'. [ 517.434720][T28491] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10622'. [ 517.776131][T28506] macvtap1: entered promiscuous mode [ 517.791236][T28506] vlan0: entered promiscuous mode [ 517.808731][T28506] macvtap1: entered allmulticast mode [ 517.830174][T28506] vlan0: entered allmulticast mode [ 517.843764][T28506] veth0_vlan: entered allmulticast mode [ 518.192439][T28532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.619548][T28613] macvlan0: left promiscuous mode [ 519.624640][T28613] macvlan0: left allmulticast mode [ 519.645498][T28613] netlink: 'syz.2.10680': attribute type 2 has an invalid length. [ 519.701265][T28617] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10682'. [ 519.733136][T28619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10683'. [ 519.837979][T28619] macvtap1: entered promiscuous mode [ 519.843389][T28619] vlan0: entered promiscuous mode [ 519.860147][T28619] macvtap1: entered allmulticast mode [ 519.891626][T28619] vlan0: entered allmulticast mode [ 519.901740][T28619] veth0_vlan: entered allmulticast mode [ 520.269077][ T30] audit: type=1804 audit(1752654969.727:4): pid=28641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10694" name="/newroot/2136/cgroup.controllers" dev="tmpfs" ino=10729 res=1 errno=0 [ 520.312288][ T30] audit: type=1800 audit(1752654969.747:5): pid=28641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10694" name="cgroup.controllers" dev="tmpfs" ino=10729 res=0 errno=0 [ 520.530123][T28656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10703'. [ 521.069625][T28692] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.10716'. [ 521.402356][T28710] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10726'. [ 521.452883][T28710] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10726'. [ 521.683793][T28720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10730'. [ 522.075986][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.102960][ T59] ------------[ cut here ]------------ [ 522.122416][ T59] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 522.142269][ T59] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 522.177276][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 522.177302][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.177315][ T59] Workqueue: events_unbound cfg80211_wiphy_work [ 522.177340][ T59] Call Trace: [ 522.177347][ T59] [ 522.177355][ T59] dump_stack_lvl+0x189/0x250 [ 522.177382][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.177402][ T59] ? __pfx__printk+0x10/0x10 [ 522.177440][ T59] ubsan_epilogue+0xa/0x40 [ 522.177462][ T59] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 522.177491][ T59] ieee80211_request_ibss_scan+0x600/0x8b0 [ 522.177533][ T59] ieee80211_ibss_work+0xd85/0x1060 [ 522.177556][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.177582][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 522.177606][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 522.177630][ T59] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 522.177660][ T59] ? skb_dequeue+0x10e/0x150 [ 522.177675][ T59] ? ieee80211_iface_work+0xcdb/0xfe0 [ 522.177695][ T59] ? ieee80211_iface_work+0xf39/0xfe0 [ 522.177714][ T59] ? rcu_is_watching+0x15/0xb0 [ 522.177739][ T59] cfg80211_wiphy_work+0x2dc/0x460 [ 522.177760][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 522.177780][ T59] process_scheduled_works+0xae1/0x17b0 [ 522.177831][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 522.177870][ T59] worker_thread+0x8a0/0xda0 [ 522.177919][ T59] kthread+0x70e/0x8a0 [ 522.177947][ T59] ? __pfx_worker_thread+0x10/0x10 [ 522.177967][ T59] ? __pfx_kthread+0x10/0x10 [ 522.177991][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.178014][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.178035][ T59] ? __pfx_kthread+0x10/0x10 [ 522.178059][ T59] ret_from_fork+0x3fc/0x770 [ 522.178082][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 522.178107][ T59] ? __switch_to_asm+0x39/0x70 [ 522.178126][ T59] ? __switch_to_asm+0x33/0x70 [ 522.178146][ T59] ? __pfx_kthread+0x10/0x10 [ 522.178169][ T59] ret_from_fork_asm+0x1a/0x30 [ 522.178209][ T59] [ 522.178216][ T59] ---[ end trace ]--- [ 522.407652][ T59] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 522.414888][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 522.426877][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.436929][ T59] Workqueue: events_unbound cfg80211_wiphy_work [ 522.443228][ T59] Call Trace: [ 522.446523][ T59] [ 522.449452][ T59] dump_stack_lvl+0x99/0x250 [ 522.454036][ T59] ? __asan_memcpy+0x40/0x70 [ 522.458616][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.463895][ T59] ? __pfx__printk+0x10/0x10 [ 522.468507][ T59] panic+0x2db/0x790 [ 522.472443][ T59] ? __pfx_panic+0x10/0x10 [ 522.476870][ T59] ? _printk+0xcf/0x120 [ 522.481023][ T59] ? __pfx__printk+0x10/0x10 [ 522.485613][ T59] check_panic_on_warn+0x89/0xb0 [ 522.490560][ T59] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 522.496291][ T59] ieee80211_request_ibss_scan+0x600/0x8b0 [ 522.502131][ T59] ieee80211_ibss_work+0xd85/0x1060 [ 522.507349][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.512543][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 522.518442][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 522.524771][ T59] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 522.530407][ T59] ? skb_dequeue+0x10e/0x150 [ 522.534987][ T59] ? ieee80211_iface_work+0xcdb/0xfe0 [ 522.540354][ T59] ? ieee80211_iface_work+0xf39/0xfe0 [ 522.545721][ T59] ? rcu_is_watching+0x15/0xb0 [ 522.550483][ T59] cfg80211_wiphy_work+0x2dc/0x460 [ 522.555589][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 522.561393][ T59] process_scheduled_works+0xae1/0x17b0 [ 522.566956][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 522.572944][ T59] worker_thread+0x8a0/0xda0 [ 522.577550][ T59] kthread+0x70e/0x8a0 [ 522.581631][ T59] ? __pfx_worker_thread+0x10/0x10 [ 522.586734][ T59] ? __pfx_kthread+0x10/0x10 [ 522.591409][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.596605][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.601798][ T59] ? __pfx_kthread+0x10/0x10 [ 522.606423][ T59] ret_from_fork+0x3fc/0x770 [ 522.611026][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 522.616143][ T59] ? __switch_to_asm+0x39/0x70 [ 522.620943][ T59] ? __switch_to_asm+0x33/0x70 [ 522.625719][ T59] ? __pfx_kthread+0x10/0x10 [ 522.630314][ T59] ret_from_fork_asm+0x1a/0x30 [ 522.635185][ T59] [ 522.638476][ T59] Kernel Offset: disabled [ 522.642840][ T59] Rebooting in 86400 seconds..