last executing test programs: 25.521035938s ago: executing program 2 (id=7151): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f0000000000), 0xff7b) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20040800) 25.403111578s ago: executing program 2 (id=7154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/150}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000600), 0x9, r0}, 0x38) 25.256526076s ago: executing program 2 (id=7156): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000100000008000000080000", @ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB=','], 0x20) 25.128362369s ago: executing program 2 (id=7158): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x938, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x4000080) 24.895799277s ago: executing program 2 (id=7165): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 24.753277619s ago: executing program 2 (id=7170): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3}, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x800000, 0x7, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, &(0x7f00000000c0), 0x3e) 9.753132705s ago: executing program 32 (id=7170): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3}, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x800000, 0x7, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, &(0x7f00000000c0), 0x3e) 8.688683578s ago: executing program 4 (id=7449): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80181, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110c230041) 8.286945524s ago: executing program 4 (id=7458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000200)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) close(0x3) 8.117589114s ago: executing program 4 (id=7460): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000a40)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 8.000021011s ago: executing program 4 (id=7462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.964061655s ago: executing program 4 (id=7464): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) 7.869470213s ago: executing program 4 (id=7466): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) 2.0238648s ago: executing program 1 (id=7515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x40000009}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x884) 1.892540934s ago: executing program 1 (id=7516): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000000000000000000ca00000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 1.71408994s ago: executing program 0 (id=7517): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x1}) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 1.628766661s ago: executing program 1 (id=7518): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x1041a1, 0xc, 0x0, 0x1, 0x0, 0xfffffffe, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) 1.445583446s ago: executing program 1 (id=7519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000380)) 920.080727ms ago: executing program 0 (id=7520): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 918.644503ms ago: executing program 3 (id=7521): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 822.189061ms ago: executing program 3 (id=7522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a0000090900010073797a3100000000090002"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 788.954106ms ago: executing program 0 (id=7523): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1400}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0) 721.872267ms ago: executing program 3 (id=7524): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x4}, 0x1122, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 699.439028ms ago: executing program 1 (id=7525): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x7ff}, 0x5, 0x5, 0x8d, 0x7, 0x6, 'syz0\x00', "79dcb7d3dca9309c76fa698ec69859fbceadfa98a4f2aeb8503754a9b3f9f7fb", "16a96cbc9b4c13e05cc88f3490febac13569d5b09c012cc507c2f973e6c687ba", [{0x6, 0x8, {0x2, 0x6}}, {0x72, 0x4, {0x1}}, {0xc, 0x9, {0x2, 0xfa0}}, {0x400, 0x7, {0x2, 0x9}}, {0x2, 0x73, {0x3, 0x516}}, {0x3, 0x6, {0x2, 0xfffffffc}}, {0xbee2, 0x4, {0x3, 0x9}}, {0x0, 0xff, {0x1, 0xd39}}, {0x0, 0x9, {0x0, 0x8001}}, {0x4, 0xffff, {0x0, 0x8f11}}, {0x400, 0x0, {0x3, 0x14a}}, {0x1ff, 0x1, {0x3, 0x4}}, {0x0, 0x7, {0x2, 0x6}}, {0x5, 0x625, {0x3, 0xfffffffa}}, {0x1928, 0x6, {0x2, 0x2}}, {0x0, 0x3, {0x3, 0x40}}, {0x4, 0x2, {0x3, 0xc}}, {0x8, 0x200, {0x2, 0xd64}}, {0x0, 0x2, {0x1, 0x1}}, {0x7, 0x800, {0x2, 0x9}}, {0xcdf, 0x3, {0x2, 0x8}}, {0x4, 0x6, {0x0, 0x3}}, {0x3, 0x1, {0x2, 0x7}}, {0x81, 0x7, {0x1, 0x2}}, {0x9, 0x4, {0x3, 0x1}}, {0x7, 0x8, {0x1, 0xffffff7f}}, {0x8, 0x4, {0x1, 0x1397fdfb}}, {0x4, 0x1, {0x1, 0x400}}, {0x1000, 0x6, {0x3, 0x1}}, {0xfff, 0x1, {0x2, 0x80000001}}, {0x5c3, 0xed, {0x1, 0x6}}, {0x8, 0x3ff, {0x2, 0x4}}, {0x9, 0x2558, {0x1, 0x6}}, {0x6, 0x5, {0x1, 0x40}}, {0x7, 0x8, {0x3, 0x1}}, {0x8, 0x86, {0x2, 0x5}}, {0x9, 0x7, {0x3, 0xffff}}, {0x3, 0x0, {0x3, 0x401}}, {0xfb, 0x1, {0x1, 0x4}}, {0xc1, 0x6, {0x1, 0xf167}}]}}}, {{0x254, 0x1, {{0x2, 0x8000}, 0x6, 0x7, 0xbab, 0x3, 0x20, 'syz0\x00', "9426ce0954a43a7b8a2656cae489798bdc2ddb219857dcc8d6e097515159da0b", "50d7512372de658fd736cee6cd08a06ebbc805d74c722f9becc03125623361da", [{0x7, 0x101, {0x0, 0x10}}, {0xee9d, 0x7, {0x1, 0x8}}, {0x1, 0xfff7, {0x0, 0x401}}, {0xf, 0x1000, {0x0, 0xfffffffa}}, {0x3, 0xf800, {0x2, 0x8}}, {0xbb17, 0x1000, {0x3, 0x6}}, {0x4, 0xff, {0x0, 0x3eff}}, {0x5, 0x800, {0x2, 0xf}}, {0x89a, 0x4, {0x3, 0x6}}, {0xfffc, 0x73, {0x1, 0x80}}, {0x6, 0x0, {0xb0a61793e9f961c3, 0xb}}, {0xd3, 0x2, {0x2, 0x4}}, {0x6, 0xfff7, {0x3, 0x7fffffff}}, {0xb174, 0x4, {0x2, 0x654dc637}}, {0x1, 0x4, {0x3, 0xff}}, {0x3, 0x7fff, {0x1, 0x6}}, {0xfff4, 0x2, {0x1, 0x1}}, {0x6, 0x6}, {0x4, 0xc9, {0x0, 0x6}}, {0x9, 0x4, {0x3}}, {0x401, 0x6, {0x3, 0x2}}, {0x7, 0x6, {0x1, 0x7f}}, {0x6, 0x0, {0x2, 0x401}}, {0x2, 0x2, {0x0, 0x2}}, {0x0, 0x6, {0x2, 0x5}}, {0xfff8, 0x7f, {0x3, 0x9}}, {0x3ff, 0x7, {0x0, 0x1}}, {0xd2, 0x6d50, {0x1}}, {0x2, 0x100, {0x3, 0x5}}, {0x0, 0x6, {0x1, 0x2}}, {0x4, 0xfffc, {0x1, 0x33a9a7a6}}, {0x101, 0x4a, {0x1, 0x100}}, {0xc, 0x70dd, {0x1, 0x400}}, {0x4, 0x6, {0x3, 0x1}}, {0x5e, 0xfff8, {0x1, 0xa}}, {0x7, 0x9, {0x1, 0xfffffffe}}, {0x9, 0x2, {0x0, 0x9}}, {0x8, 0x2, {0x2, 0xae54}}, {0x1000, 0x5, {0x2, 0x1ff}}, {0xf, 0x17df, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x7f, 0x63, 0x8, 0x1ff, 0x1b, 'syz0\x00', "6f310209c3ff2c06699b515f101f13d41e52748b774278b2a738ebff95701250", "bb283c91e1e19494790a9a0ba376c4805c02c75c8f1d8d83198466f0cc394798", [{0x0, 0x8001, {0x1, 0x11b15a21}}, {0x0, 0x4, {0x3, 0xd35}}, {0x4, 0x9, {0x0, 0x7}}, {0xff, 0x7ad8, {0x0, 0x80000000}}, {0xe, 0x2, {0x1, 0x100}}, {0x7, 0x2, {0x2, 0x9}}, {0x722, 0x2, {0x1, 0x7}}, {0x56e, 0x4, {0x3, 0x7}}, {0x7, 0x8, {0x1}}, {0x2, 0x7, {0x1, 0xf}}, {0x7, 0x3, {0x1, 0x9c8}}, {0x40, 0x4, {0x1, 0x80000001}}, {0x4, 0x7fff, {0x1, 0x8}}, {0x3, 0x401, {0x1, 0xcf}}, {0x5, 0x4, {0x2, 0x4}}, {0x5, 0x6, {0x1, 0x1}}, {0x7, 0x2, {0x3, 0x9}}, {0xfff7, 0xd, {0x3, 0x8}}, {0x0, 0x10}, {0x800, 0x5, {0x0, 0x9}}, {0x7ff, 0x3, {0x2, 0x80000001}}, {0x7, 0xc139, {0x2, 0x962}}, {0x6, 0x21, {0x0, 0x8}}, {0x1, 0x7, {0x0, 0x1000}}, {0x7, 0x4, {0x0, 0xe0b}}, {0x80, 0x8001, {0x3, 0x8}}, {0xf, 0x0, {0x2, 0x8}}, {0x190a, 0x4, {0x0, 0x7}}, {0x1, 0x7, {0x1, 0x7}}, {0x9, 0xfffa, {0x3, 0x5}}, {0xfff7, 0x3807, {0x2, 0x7}}, {0x342, 0x4, {0x3, 0x7ff}}, {0xb49d, 0x2, {0x0, 0xded0}}, {0x9, 0x8, {0x1, 0xdcbc}}, {0xdda, 0x9, {0xadcc8522b5db9a03, 0x1}}, {0x9, 0x4, {0x2, 0x6}}, {0x1000, 0x9, {0x0, 0x9}}, {0x7, 0xc6, {0x0, 0x9}}, {0x2, 0x3, {0x1, 0xe9}}, {0x4, 0xc, {0x0, 0x1}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 652.316858ms ago: executing program 0 (id=7526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x8000090) 473.182127ms ago: executing program 0 (id=7527): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 472.918394ms ago: executing program 3 (id=7528): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 431.516349ms ago: executing program 1 (id=7529): socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x2, 0xa, 0x73) 291.160047ms ago: executing program 3 (id=7530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 225.189576ms ago: executing program 3 (id=7531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 0s ago: executing program 0 (id=7532): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) kernel console output (not intermixed with test programs): ed [ 155.531613][ T9559] netlink: 'syz.4.1759': attribute type 4 has an invalid length. [ 155.593465][ T9559] __nla_validate_parse: 3 callbacks suppressed [ 155.593481][ T9559] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1759'. [ 155.785883][ T9569] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1765'. [ 155.933213][ T9579] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1772'. [ 155.988199][ T9579] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1772'. [ 156.427155][ T9605] netlink: 'syz.3.1781': attribute type 5 has an invalid length. [ 156.475315][ T9605] netlink: 'syz.3.1781': attribute type 7 has an invalid length. [ 156.545742][ T9605] : entered promiscuous mode [ 156.591211][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 156.619825][ T9614] netlink: 'syz.2.1785': attribute type 5 has an invalid length. [ 157.115063][ T9640] netlink: 'syz.2.1800': attribute type 22 has an invalid length. [ 157.147556][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 157.169419][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 157.309771][ T9649] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 157.359045][ T9651] netlink: 'syz.0.1805': attribute type 11 has an invalid length. [ 157.465294][ T9660] netlink: 'syz.1.1808': attribute type 10 has an invalid length. [ 157.558033][ T9660] veth0_vlan: left promiscuous mode [ 157.612271][ T9660] veth0_vlan: entered promiscuous mode [ 157.637833][ T9660] team0: Device veth0_vlan failed to register rx_handler [ 157.724848][ T9668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1813'. [ 157.869402][ T9677] netlink: 'syz.2.1815': attribute type 1 has an invalid length. [ 157.909763][ T9675] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 158.077920][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 159.272414][ T9719] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1837'. [ 159.901673][ T9755] netlink: 'syz.4.1853': attribute type 19 has an invalid length. [ 159.937167][ T9758] netlink: 'syz.2.1856': attribute type 2 has an invalid length. [ 160.021239][ T9758] : entered promiscuous mode [ 160.474127][ T9785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.663477][ T9797] __nla_validate_parse: 7 callbacks suppressed [ 160.663496][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1875'. [ 160.718268][ T9798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1876'. [ 161.070504][ T9818] validate_nla: 2 callbacks suppressed [ 161.070520][ T9818] netlink: 'syz.0.1886': attribute type 10 has an invalid length. [ 161.077022][ T9820] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1887'. [ 161.644116][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 161.672041][ T9850] netlink: 'syz.3.1900': attribute type 4 has an invalid length. [ 161.753707][ T9850] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1900'. [ 161.965377][ T9865] netlink: 'syz.1.1907': attribute type 10 has an invalid length. [ 161.982416][ T9865] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1907'. [ 162.031247][ T9865] team0: entered promiscuous mode [ 162.039615][ T9865] team_slave_0: entered promiscuous mode [ 162.066028][ T9865] team_slave_1: entered promiscuous mode [ 162.094932][ T9865] bridge0: port 3(team0) entered blocking state [ 162.119652][ T9872] netlink: 'syz.4.1911': attribute type 3 has an invalid length. [ 162.127673][ T9872] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1911'. [ 162.152700][ T9865] bridge0: port 3(team0) entered disabled state [ 162.160017][ T9865] team0: entered allmulticast mode [ 162.166544][ T9865] team_slave_0: entered allmulticast mode [ 162.172632][ T9865] team_slave_1: entered allmulticast mode [ 162.179782][ T9877] netlink: 'syz.2.1914': attribute type 1 has an invalid length. [ 162.195590][ T9865] bridge0: port 3(team0) entered blocking state [ 162.202052][ T9865] bridge0: port 3(team0) entered forwarding state [ 162.329478][ T9883] netlink: 'syz.2.1916': attribute type 2 has an invalid length. [ 162.426217][ T9888] netlink: 'syz.1.1919': attribute type 21 has an invalid length. [ 162.437818][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 162.555808][ T9895] netlink: 624 bytes leftover after parsing attributes in process `syz.3.1922'. [ 162.674344][ T9902] netlink: 'syz.0.1925': attribute type 5 has an invalid length. [ 162.691412][ T9902] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1925'. [ 163.396285][ T9947] netlink: 'syz.1.1948': attribute type 1 has an invalid length. [ 163.397276][ T9950] netlink: 'syz.3.1950': attribute type 21 has an invalid length. [ 164.614535][T10017] openvswitch: netlink: Flow key attr not present in new flow. [ 165.029627][T10044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.474293][T10061] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 165.683874][T10077] __nla_validate_parse: 13 callbacks suppressed [ 165.683891][T10077] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2012'. [ 166.462580][T10129] validate_nla: 6 callbacks suppressed [ 166.462599][T10129] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 166.534940][T10129] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2036'. [ 166.646296][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 166.696450][T10143] netlink: 'syz.4.2044': attribute type 6 has an invalid length. [ 166.871039][T10156] netlink: 'syz.2.2050': attribute type 7 has an invalid length. [ 167.452333][T10191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.465491][T10193] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 167.953593][T10223] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2086'. [ 167.971259][T10225] netlink: 'syz.3.2084': attribute type 4 has an invalid length. [ 168.099827][T10229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2087'. [ 168.103578][T10231] netlink: 'syz.3.2090': attribute type 13 has an invalid length. [ 168.144789][T10231] netlink: 'syz.3.2090': attribute type 17 has an invalid length. [ 168.366086][T10231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.458387][T10285] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2113'. [ 169.602947][T10298] netlink: 'syz.2.2118': attribute type 21 has an invalid length. [ 169.642524][T10298] netlink: 'syz.2.2118': attribute type 5 has an invalid length. [ 169.726224][T10307] netlink: 'syz.0.2123': attribute type 33 has an invalid length. [ 169.955696][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2128'. [ 169.991389][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2128'. [ 170.338441][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 170.366702][T10344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.433654][T10348] netlink: 'syz.1.2140': attribute type 16 has an invalid length. [ 170.450879][T10348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2140'. [ 170.929030][T10376] openvswitch: netlink: IP tunnel dst address not specified [ 171.058931][T10368] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.099843][T10368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.143949][ T30] audit: type=1107 audit(1759412605.777:2): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 171.339827][T10396] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2164'. [ 171.363862][T10396] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2164'. [ 171.551645][T10409] validate_nla: 4 callbacks suppressed [ 171.551664][T10409] netlink: 'syz.3.2170': attribute type 13 has an invalid length. [ 171.623985][T10409] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2170'. [ 171.704887][T10415] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 171.739823][T10415] netlink: 'syz.2.2173': attribute type 2 has an invalid length. [ 171.757359][T10417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2175'. [ 171.780813][T10421] netlink: 'syz.3.2176': attribute type 4 has an invalid length. [ 171.798931][T10421] netlink: 'syz.3.2176': attribute type 3 has an invalid length. [ 171.819588][T10421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2176'. [ 172.053119][T10427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2178'. [ 172.102543][T10427] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 172.752247][T10455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.890798][T10463] netlink: 'syz.0.2197': attribute type 13 has an invalid length. [ 172.924594][T10463] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2197'. [ 173.557709][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'. [ 173.650831][T10510] netlink: 'syz.1.2221': attribute type 2 has an invalid length. [ 173.890452][T10523] netlink: 'syz.4.2227': attribute type 1 has an invalid length. [ 174.098075][T10539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.237637][T10545] netlink: 'syz.1.2237': attribute type 21 has an invalid length. [ 174.239971][T10544] netlink: 'syz.4.2235': attribute type 2 has an invalid length. [ 174.277851][T10545] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2237'. [ 174.289372][T10544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2235'. [ 176.384359][T10665] openvswitch: netlink: IP tunnel TTL not specified. [ 176.512222][T10672] __nla_validate_parse: 8 callbacks suppressed [ 176.512240][T10672] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2297'. [ 176.832379][T10693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.918808][T10744] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.2327'. [ 178.382738][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 178.635238][T10785] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 178.685452][T10789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2350'. [ 178.865899][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2354'. [ 179.059723][T10805] : renamed from bond_slave_0 (while UP) [ 179.134777][T10809] validate_nla: 8 callbacks suppressed [ 179.134794][T10809] netlink: 'syz.0.2360': attribute type 2 has an invalid length. [ 179.188927][T10811] netlink: 'syz.3.2361': attribute type 21 has an invalid length. [ 179.213457][T10811] netlink: 'syz.3.2361': attribute type 3 has an invalid length. [ 179.241559][T10811] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2361'. [ 179.453798][T10823] netlink: 'syz.0.2367': attribute type 248 has an invalid length. [ 179.644210][T10830] netlink: 'syz.0.2371': attribute type 10 has an invalid length. [ 179.669376][T10830] veth1_vlan: entered allmulticast mode [ 179.730990][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2372'. [ 179.837989][T10835] openvswitch: netlink: IPv4 tunnel dst address is zero [ 180.025985][T10843] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.217552][T10849] netlink: 'syz.4.2380': attribute type 10 has an invalid length. [ 180.260328][T10849] bridge0: port 3(team0) entered disabled state [ 180.266800][T10849] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.275308][T10849] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.357195][T10849] team0: Device bridge0 is already an upper device of the team interface [ 180.966408][T10888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2396'. [ 180.986013][T10888] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2396'. [ 181.198011][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 181.222264][T10902] netlink: 'syz.2.2404': attribute type 3 has an invalid length. [ 181.363284][T10905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.544272][T10919] IPv6: Can't replace route, no match found [ 181.662984][T10927] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 181.703722][T10927] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2415'. [ 182.046991][T10950] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2426'. [ 182.072546][T10950] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2426'. [ 182.244549][T10957] netlink: 'syz.3.2429': attribute type 10 has an invalid length. [ 182.276228][T10957] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2429'. [ 182.449417][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'. [ 182.713207][T10982] netlink: 'syz.1.2442': attribute type 9 has an invalid length. [ 182.749475][T10982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2442'. [ 182.786753][T10989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2444'. [ 182.808875][T10988] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2445'. [ 183.008943][T11001] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2449'. [ 183.574629][T11035] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2465'. [ 183.594146][T11035] unsupported nla_type 65024 [ 183.628921][T11037] bridge_slave_1: left allmulticast mode [ 183.645608][T11037] bridge_slave_1: left promiscuous mode [ 183.667019][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.734558][T11037] bridge_slave_0: left promiscuous mode [ 183.760445][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.257691][T11077] validate_nla: 1 callbacks suppressed [ 184.257709][T11077] netlink: 'syz.2.2488': attribute type 3 has an invalid length. [ 184.462575][T11088] delete_channel: no stack [ 184.771332][T11103] warning: `syz.4.2500' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 184.818949][T11110] vcan0 speed is unknown, defaulting to 1000 [ 184.870733][T11110] vcan0 speed is unknown, defaulting to 1000 [ 184.891512][T11110] vcan0 speed is unknown, defaulting to 1000 [ 185.122843][T11122] netlink: 'syz.4.2506': attribute type 1 has an invalid length. [ 185.189850][T11110] infiniband syz1: set active [ 185.194775][T11110] infiniband syz1: added vcan0 [ 185.210254][ T3097] vcan0 speed is unknown, defaulting to 1000 [ 185.396037][T11110] RDS/IB: syz1: added [ 185.410237][T11110] smc: adding ib device syz1 with port count 1 [ 185.451151][T11110] smc: ib device syz1 port 1 has pnetid [ 185.471235][ T9] vcan0 speed is unknown, defaulting to 1000 [ 185.490113][T11110] vcan0 speed is unknown, defaulting to 1000 [ 185.692686][T11153] netlink: 'syz.3.2522': attribute type 13 has an invalid length. [ 185.957239][T11153] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.965027][T11153] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.377657][T11153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.443436][T11153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.684865][ T271] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.685837][T11110] vcan0 speed is unknown, defaulting to 1000 [ 186.712994][ T271] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.739515][ T271] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.773462][ T271] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.345154][T11225] __nla_validate_parse: 5 callbacks suppressed [ 187.345173][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2557'. [ 187.360351][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2558'. [ 187.372092][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2558'. [ 187.576058][T11110] vcan0 speed is unknown, defaulting to 1000 [ 188.099451][T11261] netlink: 'syz.0.2574': attribute type 1 has an invalid length. [ 188.107216][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'. [ 188.300234][T11110] vcan0 speed is unknown, defaulting to 1000 [ 188.382048][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'. [ 188.420085][T11281] netlink: 'syz.2.2584': attribute type 1 has an invalid length. [ 189.011838][T11110] vcan0 speed is unknown, defaulting to 1000 [ 189.024101][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2598'. [ 189.423541][T11333] netlink: 'syz.0.2610': attribute type 4 has an invalid length. [ 189.876867][T11356] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2622'. [ 189.926015][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'. [ 190.043599][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'. [ 190.165440][T11372] netlink: 'syz.3.2629': attribute type 3 has an invalid length. [ 190.175114][T11372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2629'. [ 190.385287][T11386] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 190.393519][T11386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.839087][T11413] netlink: 'syz.1.2649': attribute type 32 has an invalid length. [ 191.627623][T11462] netlink: 'syz.1.2674': attribute type 21 has an invalid length. [ 191.637352][T11462] netlink: 'syz.1.2674': attribute type 4 has an invalid length. [ 191.788299][T11472] netlink: 'syz.1.2680': attribute type 10 has an invalid length. [ 191.825180][T11472] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.844236][T11474] netlink: 'syz.4.2679': attribute type 21 has an invalid length. [ 191.852283][T11472] bridge_slave_1: left allmulticast mode [ 191.858049][T11472] bridge_slave_1: left promiscuous mode [ 191.882758][T11472] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.915166][T11476] netlink: 'syz.0.2681': attribute type 2 has an invalid length. [ 191.938051][T11481] netlink: 'syz.2.2683': attribute type 21 has an invalid length. [ 191.954910][T11472] .a: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 192.423582][T11508] __nla_validate_parse: 7 callbacks suppressed [ 192.423601][T11508] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2697'. [ 192.467195][T11508] hsr_slave_0: left promiscuous mode [ 192.486421][T11508] hsr_slave_1: left promiscuous mode [ 192.566749][T11514] netlink: 'syz.2.2700': attribute type 39 has an invalid length. [ 192.601413][T11514] veth0_macvtap: left promiscuous mode [ 193.113380][T11545] netlink: 177 bytes leftover after parsing attributes in process `syz.1.2714'. [ 193.240974][ T30] audit: type=1107 audit(1759412627.877:3): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f?-cj' [ 193.363785][T11562] team0: left allmulticast mode [ 193.379457][T11562] C: left allmulticast mode [ 193.384523][T11562] team_slave_1: left allmulticast mode [ 193.411659][T11562] team0: left promiscuous mode [ 193.446010][T11562] C: left promiscuous mode [ 193.457772][T11562] team_slave_1: left promiscuous mode [ 193.468583][T11567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2725'. [ 193.468940][T11562] bridge0: port 3(team0) entered disabled state [ 193.493325][T11562] bridge_slave_1: left allmulticast mode [ 193.513535][T11562] bridge_slave_1: left promiscuous mode [ 193.521469][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.555559][T11562] bridge_slave_0: left allmulticast mode [ 193.568564][T11562] bridge_slave_0: left promiscuous mode [ 193.583655][T11562] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.789804][T11578] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2729'. [ 193.808586][T11578] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 194.330388][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336752][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.355856][T11606] batman_adv: batadv0: Adding interface: netdevsim0 [ 194.379799][T11606] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.391950][T11613] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2747'. [ 194.405987][T11606] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 194.737000][T11632] vcan0 speed is unknown, defaulting to 1000 [ 194.813670][T11635] validate_nla: 7 callbacks suppressed [ 194.813687][T11635] netlink: 'syz.2.2757': attribute type 16 has an invalid length. [ 194.840936][T11635] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2757'. [ 194.852884][T11640] netlink: 'syz.3.2759': attribute type 6 has an invalid length. [ 194.862129][T11640] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2759'. [ 195.162739][T11658] netlink: 'syz.3.2769': attribute type 1 has an invalid length. [ 195.199734][T11658] netlink: 'syz.3.2769': attribute type 2 has an invalid length. [ 195.207527][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2769'. [ 195.385137][T11672] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2775'. [ 195.492584][T11674] netlink: 'syz.3.2778': attribute type 6 has an invalid length. [ 195.911797][T11702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.212727][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2800'. [ 196.414593][ T5186] Bluetooth: hci0: command 0x0406 tx timeout [ 196.422822][ T5186] Bluetooth: hci1: command 0x0406 tx timeout [ 196.429620][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 196.431803][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 196.436466][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 196.478023][T11735] netlink: 'syz.4.2806': attribute type 1 has an invalid length. [ 196.486697][T11735] netlink: 'syz.4.2806': attribute type 2 has an invalid length. [ 196.500676][T11735] netlink: 'syz.4.2806': attribute type 1 has an invalid length. [ 196.781830][T11748] openvswitch: netlink: Missing valid actions attribute. [ 196.799881][T11748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.295394][T11780] netlink: 'syz.0.2829': attribute type 21 has an invalid length. [ 197.363830][T11788] netlink: 'syz.2.2833': attribute type 6 has an invalid length. [ 197.624689][T11799] __nla_validate_parse: 5 callbacks suppressed [ 197.624707][T11799] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2837'. [ 197.673691][T11799] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2837'. [ 198.026806][T11825] 8021q: adding VLAN 0 to HW filter on device .a [ 198.056976][T11825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.092441][ T10] vcan0 speed is unknown, defaulting to 1000 [ 198.099474][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 198.322101][T11844] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2860'. [ 198.840729][T11872] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2874'. [ 198.877738][T11875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.904316][T11876] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2875'. [ 198.951169][T11876] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 199.013682][T11881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.156576][T11889] netlink: 163260 bytes leftover after parsing attributes in process `syz.3.2883'. [ 199.230118][T11896] tc_dump_action: action bad kind [ 199.370177][T11904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2889'. [ 199.402402][T11904] batman_adv: batadv0: Adding interface: virt_wifi0 [ 199.425856][T11904] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.509341][T11904] batman_adv: batadv0: Interface activated: virt_wifi0 [ 200.042941][T11944] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 200.075884][T11946] validate_nla: 10 callbacks suppressed [ 200.075903][T11946] netlink: 'syz.0.2911': attribute type 2 has an invalid length. [ 200.131252][T11948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.146751][T11946] netlink: 'syz.0.2911': attribute type 4 has an invalid length. [ 200.167740][T11946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2911'. [ 200.187232][T11952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.506874][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2923'. [ 200.547712][T11971] : entered promiscuous mode [ 200.981653][T12000] bond_slave_0: entered promiscuous mode [ 200.987569][T12000] bond_slave_1: entered promiscuous mode [ 201.298842][T12022] netlink: 'syz.2.2949': attribute type 21 has an invalid length. [ 201.856098][T12057] tc_dump_action: action bad kind [ 202.354928][T12084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.758135][T12110] __nla_validate_parse: 11 callbacks suppressed [ 202.758155][T12110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2993'. [ 202.798847][T12110] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2993'. [ 203.139599][T12134] netlink: 'syz.4.3005': attribute type 12 has an invalid length. [ 203.169388][T12134] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3005'. [ 203.642943][T12164] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.649629][T12164] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 203.848152][T12181] netlink: zone id is out of range [ 203.866308][T12181] netlink: set zone limit has 4 unknown bytes [ 204.426906][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 204.682797][T12230] €Â0: renamed from bond_slave_1 [ 204.870829][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 204.970258][T12243] netlink: 'syz.0.3058': attribute type 1 has an invalid length. [ 204.978050][T12243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.178709][T12251] netlink: 'syz.1.3062': attribute type 2 has an invalid length. [ 205.211404][T12251] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3062'. [ 205.429421][T12265] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 205.510876][T12269] netlink: 'syz.0.3071': attribute type 10 has an invalid length. [ 205.929415][T12291] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 206.029717][T12294] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.966486][T12327] netlink: 'syz.4.3097': attribute type 1 has an invalid length. [ 206.998643][T12327] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3097'. [ 207.091666][T12335] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 207.133799][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3103'. [ 207.279527][T12346] netlink: 'syz.0.3108': attribute type 9 has an invalid length. [ 207.408544][T12353] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3109'. [ 208.199178][T12398] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3129'. [ 208.485999][T12417] openvswitch: netlink: Missing key (keys=2000040, expected=2000) [ 208.607970][T12423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3141'. [ 208.634594][T12426] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3143'. [ 208.648966][T12427] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3142'. [ 208.835009][T12436] netlink: 'syz.2.3148': attribute type 7 has an invalid length. [ 208.968698][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3152'. [ 209.009295][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3152'. [ 209.105063][T12450] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3155'. [ 209.461542][T12468] hsr0: entered promiscuous mode [ 209.466539][T12468] hsr0: entered allmulticast mode [ 209.481393][T12468] hsr_slave_0: entered allmulticast mode [ 209.487163][T12468] hsr_slave_1: entered allmulticast mode [ 209.532174][T12474] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.3166'. [ 209.588111][T12477] netlink: 'syz.3.3168': attribute type 16 has an invalid length. [ 209.609392][T12477] netlink: 'syz.3.3168': attribute type 17 has an invalid length. [ 209.759465][T12477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.764159][T12485] netlink: 'syz.1.3171': attribute type 1 has an invalid length. [ 209.790568][T12477] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.839111][T12477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.117247][T12505] openvswitch: netlink: VXLAN extension 109 out of range max 1 [ 210.280039][T12511] netlink: 'syz.4.3184': attribute type 3 has an invalid length. [ 210.287806][T12511] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3184'. [ 210.875265][T12538] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3196'. [ 211.302721][T12564] netlink: 'syz.3.3208': attribute type 1 has an invalid length. [ 211.341796][T12564] netlink: 'syz.3.3208': attribute type 2 has an invalid length. [ 211.705432][T12589] delete_channel: no stack [ 211.895082][T12603] netlink: 'syz.4.3228': attribute type 37 has an invalid length. [ 212.711346][T12658] netlink: 'syz.4.3252': attribute type 21 has an invalid length. [ 212.814148][T12666] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 212.840690][T12666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.016584][T12678] nbd: must specify an index to disconnect [ 213.141379][T12687] netlink: 'syz.3.3266': attribute type 10 has an invalid length. [ 213.172282][T12687] bridge0: port 3(macsec0) entered blocking state [ 213.178914][T12687] bridge0: port 3(macsec0) entered disabled state [ 213.205958][T12687] macsec0: entered allmulticast mode [ 213.226810][T12687] veth1_macvtap: entered allmulticast mode [ 213.240520][T12687] macsec0: entered promiscuous mode [ 213.401360][T12703] __nla_validate_parse: 6 callbacks suppressed [ 213.401378][T12703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3271'. [ 213.454264][T12703] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 213.553650][T12713] netlink: 'syz.4.3280': attribute type 1 has an invalid length. [ 213.568416][T12713] netlink: 'syz.4.3280': attribute type 4 has an invalid length. [ 213.763641][T12728] netlink: 'syz.3.3283': attribute type 46 has an invalid length. [ 214.136037][T12748] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3293'. [ 214.168565][T12754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3296'. [ 214.217933][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3298'. [ 214.240943][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3296'. [ 214.587295][T12780] þÿÿ: renamed from veth0_vlan (while UP) [ 214.757197][T12791] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.3314'. [ 214.779308][T12791] veth0_to_bond: default FDB implementation only supports local addresses [ 214.834410][T12797] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3317'. [ 215.076175][T12810] openvswitch: netlink: Tunnel attr 7 has unexpected len 1 expected 0 [ 215.305061][T12825] validate_nla: 2 callbacks suppressed [ 215.305080][T12825] netlink: 'syz.0.3330': attribute type 10 has an invalid length. [ 215.444339][T12831] netlink: 'syz.2.3332': attribute type 1 has an invalid length. [ 215.493337][T12834] netlink: 'syz.1.3334': attribute type 21 has an invalid length. [ 215.511908][T12834] netlink: 'syz.1.3334': attribute type 6 has an invalid length. [ 215.530566][T12834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3334'. [ 215.801701][T12855] netlink: 'syz.4.3344': attribute type 33 has an invalid length. [ 215.851582][T12855] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3344'. [ 215.873413][T12855] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 216.127512][T12877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3354'. [ 216.377162][T12889] netlink: 'syz.4.3362': attribute type 1 has an invalid length. [ 216.604148][ C0] hrtimer: interrupt took 57235 ns [ 216.665700][T12902] netlink: 'syz.0.3368': attribute type 1 has an invalid length. [ 216.853070][T12909] netlink: 'syz.4.3371': attribute type 21 has an invalid length. [ 216.871861][T12908] delete_channel: no stack [ 217.446476][T12938] netlink: 'syz.3.3387': attribute type 3 has an invalid length. [ 217.482996][T12940] netlink: 'syz.2.3388': attribute type 21 has an invalid length. [ 217.618343][T12946] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 218.526553][T13009] __nla_validate_parse: 8 callbacks suppressed [ 218.526573][T13009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3421'. [ 218.562649][T13011] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 218.583168][T13009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3421'. [ 218.632449][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'. [ 218.664448][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'. [ 218.884582][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3432'. [ 219.404397][T13060] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3446'. [ 219.689424][T13075] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3454'. [ 219.854303][T13082] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.3457'. [ 220.132392][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3461'. [ 220.152287][T13095] nftables ruleset with unbound chain [ 220.178142][T13093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3461'. [ 220.496295][T13118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.694557][T13133] validate_nla: 5 callbacks suppressed [ 220.694575][T13133] netlink: 'syz.1.3483': attribute type 13 has an invalid length. [ 220.723609][T13133] macvtap0: entered promiscuous mode [ 220.754383][T13133] macvtap0: refused to change device tx_queue_len [ 220.927427][T13147] netlink: 'syz.0.3490': attribute type 21 has an invalid length. [ 221.154012][T13162] netlink: 'syz.1.3497': attribute type 6 has an invalid length. [ 221.249169][T13170] netlink: 'syz.0.3501': attribute type 21 has an invalid length. [ 221.424323][T13182] netlink: 'syz.4.3506': attribute type 7 has an invalid length. [ 221.524316][T13190] netlink: 'syz.3.3510': attribute type 1 has an invalid length. [ 221.954795][T13216] netlink: 'syz.0.3523': attribute type 4 has an invalid length. [ 221.996114][T13222] netlink: 'syz.1.3526': attribute type 1 has an invalid length. [ 222.077956][T13227] openvswitch: netlink: IP tunnel dst address not specified [ 223.217765][T13294] netlink: 'syz.3.3561': attribute type 27 has an invalid length. [ 223.506179][T13310] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 223.538329][T13310] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 223.568773][T13314] __nla_validate_parse: 17 callbacks suppressed [ 223.568794][T13314] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3570'. [ 223.700143][T13322] netlink: 'syz.3.3575': attribute type 1 has an invalid length. [ 223.842234][T13334] delete_channel: no stack [ 223.850988][T13332] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3581'. [ 223.981478][T13342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3585'. [ 224.136181][T13352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.327859][T13366] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3596'. [ 224.634234][T13384] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.3607'. [ 224.659613][T13384] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.3607'. [ 224.760715][T13393] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3610'. [ 225.541388][T13440] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3634'. [ 225.609429][T13446] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3635'. [ 225.718230][T13452] bond0: (slave wlan1): Releasing backup interface [ 225.735278][T13452] team0: Port device wlan1 added [ 225.935862][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'. [ 225.945286][T13461] delete_channel: no stack [ 226.037792][T13470] validate_nla: 11 callbacks suppressed [ 226.037810][T13470] netlink: 'syz.1.3649': attribute type 10 has an invalid length. [ 226.065682][T13470] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 226.352782][T13485] netlink: 'syz.4.3656': attribute type 7 has an invalid length. [ 227.338844][T13536] netlink: 'syz.4.3681': attribute type 21 has an invalid length. [ 227.799452][T13570] netlink: 'syz.1.3696': attribute type 4 has an invalid length. [ 228.076775][T13587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.116967][T13590] netlink: 'syz.2.3707': attribute type 13 has an invalid length. [ 228.201353][T13590] erspan0: refused to change device tx_queue_len [ 228.369669][T13601] netlink: 'syz.2.3711': attribute type 10 has an invalid length. [ 228.545450][T13612] netlink: 'syz.1.3718': attribute type 1 has an invalid length. [ 228.665345][T13617] __nla_validate_parse: 11 callbacks suppressed [ 228.665366][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 228.945754][T13638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3730'. [ 228.962496][T13638] unsupported nlmsg_type 40 [ 229.207340][T13653] netlink: 'syz.1.3738': attribute type 10 has an invalid length. [ 229.215893][T13653] team0: Device dummy0 is up. Set it down before adding it as a team port [ 229.362654][T13661] netlink: 'syz.2.3742': attribute type 10 has an invalid length. [ 229.428040][T13661] batman_adv: batadv0: Adding interface: team0 [ 229.459225][T13661] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.489148][T13661] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 229.534203][T13669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3746'. [ 229.709650][T13684] netlink: 'syz.4.3755': attribute type 10 has an invalid length. [ 229.746500][T13684] veth1_macvtap: left promiscuous mode [ 229.947366][T13698] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3761'. [ 229.962786][T13699] bpf: Bad value for 'mode' [ 229.986328][T13703] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3763'. [ 230.023799][T13703] bond_slave_0: left promiscuous mode [ 230.033600][T13703] bond_slave_1: left promiscuous mode [ 230.045456][T13703] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3763'. [ 230.075006][T13703] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 230.334830][T13723] ip6gretap0 speed is unknown, defaulting to 1000 [ 230.362076][T13723] ip6gretap0 speed is unknown, defaulting to 1000 [ 230.420567][T13723] ip6gretap0 speed is unknown, defaulting to 1000 [ 230.444544][T13723] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.483707][T13723] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 230.578031][T13723] ip6gretap0 speed is unknown, defaulting to 1000 [ 230.614818][T13723] ip6gretap0 speed is unknown, defaulting to 1000 [ 230.625463][T13723] ip6gretap0 speed is unknown, defaulting to 1000 [ 230.654987][T13723] ip6gretap0 speed is unknown, defaulting to 1000 [ 230.691373][T13723] ip6gretap0 speed is unknown, defaulting to 1000 [ 230.954545][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 231.104703][T13769] validate_nla: 4 callbacks suppressed [ 231.104722][T13769] netlink: 'syz.4.3794': attribute type 16 has an invalid length. [ 231.126947][T13769] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3794'. [ 231.540226][T13797] netlink: 'syz.0.3809': attribute type 1 has an invalid length. [ 231.585764][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3810'. [ 231.795743][T13814] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3816'. [ 231.831960][T13814] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 231.927618][T13818] netlink: 'syz.1.3819': attribute type 7 has an invalid length. [ 231.938656][T13822] netlink: 'syz.2.3821': attribute type 6 has an invalid length. [ 231.956024][T13824] netlink: 'syz.0.3822': attribute type 10 has an invalid length. [ 232.092878][T13832] netlink: 'syz.2.3825': attribute type 21 has an invalid length. [ 232.119382][T13832] netlink: 'syz.2.3825': attribute type 6 has an invalid length. [ 232.359029][T13850] netlink: 'syz.0.3834': attribute type 33 has an invalid length. [ 232.508600][T13856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.073904][T13895] netlink: 'syz.4.3857': attribute type 21 has an invalid length. [ 233.108068][T13895] netlink: 'syz.4.3857': attribute type 4 has an invalid length. [ 233.670555][T13927] lo: entered promiscuous mode [ 233.885859][T13942] __nla_validate_parse: 11 callbacks suppressed [ 233.885878][T13942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3879'. [ 234.002935][T13947] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3884'. [ 235.319579][T14029] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3923'. [ 236.024148][T14057] C: renamed from team_slave_0 (while UP) [ 236.071654][T14057] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 236.176929][T14068] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3943'. [ 236.354508][T14081] netlink: 960 bytes leftover after parsing attributes in process `syz.0.3949'. [ 236.399474][T14081] netlink: 960 bytes leftover after parsing attributes in process `syz.0.3949'. [ 236.701982][T14104] validate_nla: 6 callbacks suppressed [ 236.701999][T14104] netlink: 'syz.4.3961': attribute type 4 has an invalid length. [ 236.859999][T14116] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 237.028371][T14127] netlink: 'syz.2.3970': attribute type 21 has an invalid length. [ 237.070407][T14127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3970'. [ 237.089593][T14127] netlink: 'syz.2.3970': attribute type 1 has an invalid length. [ 237.307518][T14142] openvswitch: netlink: IP tunnel dst address not specified [ 237.335444][T14145] netlink: 'syz.0.3980': attribute type 10 has an invalid length. [ 237.356156][T14145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3980'. [ 237.422732][T14145] dummy0: entered promiscuous mode [ 237.428145][T14145] dummy0: entered allmulticast mode [ 237.446950][T14145] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 237.659781][T14164] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 237.691472][T14168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3990'. [ 237.864191][T14177] netlink: 'syz.0.3995': attribute type 15 has an invalid length. [ 238.357790][T14205] netlink: 'syz.0.4005': attribute type 10 has an invalid length. [ 238.417585][T14209] netlink: 'syz.3.4008': attribute type 1 has an invalid length. [ 238.437008][T14205] team0: Port device geneve1 added [ 238.619532][T14224] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4016'. [ 238.868854][T14240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.126053][T14261] __nla_validate_parse: 2 callbacks suppressed [ 239.126072][T14261] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.4033'. [ 239.376740][T14274] openvswitch: netlink: Missing valid actions attribute. [ 239.418541][T14274] openvswitch: netlink: Actions may not be safe on all matching packets [ 239.561984][T14290] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4046'. [ 239.730177][T14298] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4050'. [ 239.948109][T14308] netlink: 'syz.0.4054': attribute type 10 has an invalid length. [ 239.961962][T14308] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4054'. [ 240.017020][T14298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.036993][T14298] bond0 (unregistering): (slave €Â0): Releasing backup interface [ 240.046668][T14298] bond0 (unregistering): Released all slaves [ 240.083151][T14308] batadv_slave_1: entered promiscuous mode [ 240.089382][T14308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.096773][T14308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.259702][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 240.347146][T14327] netlink: 'syz.2.4066': attribute type 10 has an invalid length. [ 240.389739][T14327] team0: Port device netdevsim0 added [ 240.663820][T14349] netlink: 'syz.1.4075': attribute type 9 has an invalid length. [ 240.785585][T14355] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 241.042119][T14373] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4088'. [ 241.222302][T14382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4092'. [ 241.442867][T14394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4099'. [ 241.546769][T14400] netlink: 2220 bytes leftover after parsing attributes in process `syz.1.4101'. [ 241.748663][T14417] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4108'. [ 241.793329][T14417] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4108'. [ 241.828483][T14417] validate_nla: 3 callbacks suppressed [ 241.828509][T14417] netlink: 'syz.2.4108': attribute type 5 has an invalid length. [ 243.243718][T14511] netlink: 'syz.2.4153': attribute type 10 has an invalid length. [ 244.025481][ T30] audit: type=1107 audit(1759412678.657:4): pid=14557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 244.045658][T14562] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.160383][T14566] netlink: 'syz.2.4182': attribute type 40 has an invalid length. [ 244.188966][T14570] netlink: 'syz.3.4183': attribute type 32 has an invalid length. [ 244.203136][T14566] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.207468][T14570] __nla_validate_parse: 10 callbacks suppressed [ 244.207483][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4183'. [ 244.526629][T14589] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4191'. [ 244.854495][T14606] netlink: 'syz.2.4199': attribute type 31 has an invalid length. [ 245.042865][T14618] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4203'. [ 245.108585][T14624] netlink: 'syz.1.4206': attribute type 11 has an invalid length. [ 245.122320][T14625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.139338][T14624] netlink: 'syz.1.4206': attribute type 11 has an invalid length. [ 245.238159][T14630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4210'. [ 245.413986][T14641] netlink: 'syz.1.4216': attribute type 1 has an invalid length. [ 245.497836][T14650] netlink: 15678 bytes leftover after parsing attributes in process `syz.4.4219'. [ 245.574557][T14653] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4221'. [ 245.643738][T14659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.694981][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4224'. [ 245.881402][T14675] netlink: 'syz.3.4232': attribute type 2 has an invalid length. [ 245.892689][T14675] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4232'. [ 246.382001][T14704] netlink: 'syz.1.4245': attribute type 29 has an invalid length. [ 246.413267][T14704] netlink: 'syz.1.4245': attribute type 3 has an invalid length. [ 246.452127][T14704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4245'. [ 246.500646][T14713] netlink: 'syz.4.4249': attribute type 39 has an invalid length. [ 246.739162][T14728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4258'. [ 246.918893][T14736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.921233][T14738] openvswitch: netlink: Duplicate or invalid key (type 0). [ 246.940699][T14738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.128994][T14744] validate_nla: 1 callbacks suppressed [ 247.129010][T14744] netlink: 'syz.2.4266': attribute type 3 has an invalid length. [ 248.162587][T14804] openvswitch: netlink: IP tunnel dst address not specified [ 248.795736][T14850] netlink: 'syz.4.4319': attribute type 10 has an invalid length. [ 248.808819][T14850] veth0_vlan: entered allmulticast mode [ 248.823544][T14850] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 249.124251][T14873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.322079][T14886] netlink: 'syz.0.4337': attribute type 1 has an invalid length. [ 249.355980][T14886] __nla_validate_parse: 9 callbacks suppressed [ 249.355996][T14886] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.4337'. [ 249.564335][T14903] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4345'. [ 249.783986][T14916] netlink: 'syz.2.4351': attribute type 28 has an invalid length. [ 249.815495][T14916] netlink: 'syz.2.4351': attribute type 3 has an invalid length. [ 249.850122][T14916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4351'. [ 249.877032][T14921] netlink: 'syz.4.4354': attribute type 21 has an invalid length. [ 249.926862][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4354'. [ 250.004286][T14928] netlink: 'syz.2.4359': attribute type 1 has an invalid length. [ 250.016369][T14932] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4357'. [ 250.029635][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4359'. [ 250.134883][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'. [ 250.658973][T14970] netlink: 'syz.4.4377': attribute type 7 has an invalid length. [ 250.806015][T14982] bridge_slave_0: mtu greater than device maximum [ 251.343217][T15016] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.364813][T15018] netlink: 'syz.1.4401': attribute type 21 has an invalid length. [ 251.409473][T15018] netlink: 'syz.1.4401': attribute type 1 has an invalid length. [ 251.439031][T15018] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4401'. [ 251.817349][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4414'. [ 251.833865][T15042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.089404][T15055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4420'. [ 252.167269][T15062] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 252.614048][T15091] validate_nla: 3 callbacks suppressed [ 252.614075][T15091] netlink: 'syz.3.4438': attribute type 1 has an invalid length. [ 252.790130][T15089] syz.4.4436 (15089) used greatest stack depth: 17864 bytes left [ 252.978126][T15113] netlink: 'syz.4.4448': attribute type 28 has an invalid length. [ 252.986706][T15113] netlink: 'syz.4.4448': attribute type 4 has an invalid length. [ 253.226815][T15131] netlink: 'syz.4.4458': attribute type 1 has an invalid length. [ 253.235917][T15131] netlink: 'syz.4.4458': attribute type 2 has an invalid length. [ 253.428370][T15143] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 253.447646][T15141] netlink: 'syz.1.4462': attribute type 1 has an invalid length. [ 253.760498][T15165] netlink: 'syz.0.4474': attribute type 2 has an invalid length. [ 253.781759][T15165] netlink: 'syz.0.4474': attribute type 1 has an invalid length. [ 254.097479][T15188] Â: renamed from lo (while UP) [ 254.215883][T15193] netlink: 'syz.0.4489': attribute type 11 has an invalid length. [ 254.334976][T15203] netlink: 'syz.4.4494': attribute type 46 has an invalid length. [ 254.346858][T15204] netlink: 'syz.3.4492': attribute type 9 has an invalid length. [ 254.375291][T15201] team0: Port device team_slave_0 removed [ 254.393450][T15201] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 254.577964][T15216] __nla_validate_parse: 8 callbacks suppressed [ 254.577983][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4499'. [ 254.627142][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4499'. [ 254.653735][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4499'. [ 254.897688][T15236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.200333][T15256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4520'. [ 255.464688][T15272] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 255.581798][T15280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4534'. [ 255.748636][T15290] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.4539'. [ 255.763998][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.770788][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.945424][T15300] veth1_macvtap (unregistering): left allmulticast mode [ 255.966376][T15300] bridge0: port 3(macsec0) entered disabled state [ 256.058082][T15300] macsec0 (unregistering): left allmulticast mode [ 256.076447][T15300] macsec0 (unregistering): left promiscuous mode [ 256.091671][T15300] bridge0: port 3(macsec0) entered disabled state [ 256.523825][T15334] netlink: 10916 bytes leftover after parsing attributes in process `syz.0.4558'. [ 256.554290][T15334] nbd: couldn't find device at index 13109 [ 256.773414][T15351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.822307][T15355] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4566'. [ 257.212853][T15376] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4576'. [ 257.446912][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4582'. [ 257.503810][T15388] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 258.084577][T15415] validate_nla: 9 callbacks suppressed [ 258.084596][T15415] netlink: 'syz.4.4596': attribute type 13 has an invalid length. [ 258.531542][T15445] erspan0: default FDB implementation only supports local addresses [ 258.775633][T15456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.817763][T15531] __nla_validate_parse: 6 callbacks suppressed [ 259.817781][T15531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4653'. [ 259.858407][T15531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4653'. [ 259.870195][T15533] netlink: 'syz.4.4654': attribute type 2 has an invalid length. [ 260.042573][T15548] netlink: 'syz.2.4660': attribute type 30 has an invalid length. [ 260.073566][T15551] netlink: 'syz.1.4663': attribute type 3 has an invalid length. [ 260.282150][T15565] netlink: 'syz.3.4670': attribute type 64 has an invalid length. [ 260.324242][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4671'. [ 260.416323][T15573] netlink: 'syz.0.4673': attribute type 10 has an invalid length. [ 260.456957][T15573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4673'. [ 260.476746][T15573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.192548][T15627] netlink: 'syz.2.4700': attribute type 21 has an invalid length. [ 261.220398][T15627] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.624513][T15650] netlink: 'syz.0.4712': attribute type 33 has an invalid length. [ 261.643098][T15650] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4712'. [ 261.695164][T15653] netlink: 'syz.1.4711': attribute type 1 has an invalid length. [ 261.717853][T15653] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4711'. [ 262.697999][T15646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.751542][T15646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.257036][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.281960][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.358517][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.396632][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.399775][T15720] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.4741'. [ 263.435967][T15723] netlink: 'syz.2.4743': attribute type 16 has an invalid length. [ 263.481156][T15723] netlink: 'syz.2.4743': attribute type 17 has an invalid length. [ 263.528664][T15728] openvswitch: netlink: IP tunnel dst address not specified [ 263.566114][T15723] Â: left promiscuous mode [ 263.649758][T15723] bond_slave_0: entered promiscuous mode [ 263.655583][T15723] bond_slave_1: entered promiscuous mode [ 263.662467][T15723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.674944][T15723] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.688222][T15723] batman_adv: batadv0: Interface activated: team0 [ 263.726653][T15723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.978175][T15752] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4756'. [ 264.287024][T15773] netlink: 'syz.2.4767': attribute type 3 has an invalid length. [ 264.295996][T15773] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4767'. [ 264.324114][T15773] netlink: 'syz.2.4767': attribute type 3 has an invalid length. [ 264.342675][T15773] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4767'. [ 264.507045][T15784] netlink: 'syz.0.4771': attribute type 1 has an invalid length. [ 264.759400][T15801] netlink: 'syz.1.4780': attribute type 10 has an invalid length. [ 264.767476][T15800] netlink: 'syz.2.4781': attribute type 21 has an invalid length. [ 264.807644][T15801] bridge0: port 3(team0) entered disabled state [ 264.839847][T15807] netlink: 'syz.3.4784': attribute type 40 has an invalid length. [ 264.869620][T15801] team0: left allmulticast mode [ 264.878865][T15801] C: left allmulticast mode [ 264.889793][T15801] team_slave_1: left allmulticast mode [ 264.895467][T15801] team0: left promiscuous mode [ 264.907018][T15801] C: left promiscuous mode [ 264.917869][T15801] team_slave_1: left promiscuous mode [ 264.927996][T15801] bridge0: port 3(team0) entered disabled state [ 264.938145][T15801] team0: Cannot enslave team device to itself [ 264.982254][T15813] __nla_validate_parse: 2 callbacks suppressed [ 264.982271][T15813] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4787'. [ 265.055532][T15815] netlink: 'syz.0.4788': attribute type 17 has an invalid length. [ 265.082071][T15815] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4788'. [ 265.191140][T15825] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4795'. [ 265.236921][T15827] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4794'. [ 265.264657][T15831] netlink: 'syz.0.4796': attribute type 46 has an invalid length. [ 265.655184][T15856] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4809'. [ 265.844533][T15869] netlink: 724 bytes leftover after parsing attributes in process `syz.2.4815'. [ 266.102444][T15886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.190777][T15891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4827'. [ 266.221272][T15891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4827'. [ 266.957007][T15932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4844'. [ 267.677021][T15978] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4870'. [ 269.067885][T16068] validate_nla: 3 callbacks suppressed [ 269.067901][T16068] netlink: 'syz.3.4912': attribute type 21 has an invalid length. [ 269.381533][T16091] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 269.734092][T16112] caif0: entered promiscuous mode [ 269.752990][T16112] caif0: entered allmulticast mode [ 269.915675][T16125] netlink: 'syz.0.4936': attribute type 1 has an invalid length. [ 270.067791][T16136] __nla_validate_parse: 11 callbacks suppressed [ 270.067809][T16136] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4942'. [ 270.459403][T16162] netlink: 'syz.3.4955': attribute type 15 has an invalid length. [ 270.622428][T16171] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 270.661424][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4963'. [ 270.670744][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4963'. [ 270.690067][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4963'. [ 270.806001][T16182] netlink: 'syz.2.4964': attribute type 4 has an invalid length. [ 270.824431][T16182] netlink: 'syz.2.4964': attribute type 17 has an invalid length. [ 270.839666][T16188] netlink: 'syz.3.4968': attribute type 12 has an invalid length. [ 270.888994][T16188] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4968'. [ 271.357062][T16219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.859369][T16249] netlink: 'syz.3.4998': attribute type 12 has an invalid length. [ 271.899282][T16249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4998'. [ 271.941911][T16255] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5001'. [ 271.980806][T16255] tc_dump_action: action bad kind [ 272.006691][T16257] netlink: 'syz.1.5002': attribute type 21 has an invalid length. [ 272.029372][T16257] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5002'. [ 272.038553][T16257] netlink: 'syz.1.5002': attribute type 5 has an invalid length. [ 272.101357][T16257] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5002'. [ 272.266423][T16276] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5011'. [ 272.949337][T16320] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.082469][T16327] openvswitch: netlink: Tunnel attr 72 out of range max 16 [ 273.393563][T16348] netlink: zone id is out of range [ 273.398718][T16348] netlink: zone id is out of range [ 273.409677][T16348] netlink: zone id is out of range [ 273.424262][T16348] netlink: zone id is out of range [ 273.463935][T16348] netlink: zone id is out of range [ 273.476231][T16348] netlink: zone id is out of range [ 274.062752][T16392] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 274.124719][T16392] validate_nla: 4 callbacks suppressed [ 274.124736][T16392] netlink: 'syz.3.5069': attribute type 5 has an invalid length. [ 274.359553][T16414] @ÿ: renamed from bond_slave_0 (while UP) [ 275.546552][T16465] netlink: 'syz.4.5104': attribute type 3 has an invalid length. [ 275.704381][T16470] net_ratelimit: 79 callbacks suppressed [ 275.704399][T16470] openvswitch: netlink: nsh attr 10541 is out of range max 3 [ 275.893057][ T30] audit: type=1107 audit(1759412710.527:5): pid=16481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 276.010390][T16489] __nla_validate_parse: 17 callbacks suppressed [ 276.010408][T16489] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5116'. [ 276.167608][T16495] netlink: 'syz.4.5119': attribute type 41 has an invalid length. [ 276.282344][T16502] netlink: 'syz.3.5122': attribute type 11 has an invalid length. [ 276.285743][T16503] netlink: 'syz.2.5123': attribute type 7 has an invalid length. [ 276.301383][T16502] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5122'. [ 276.508922][T16517] netlink: 'syz.0.5131': attribute type 16 has an invalid length. [ 276.529356][T16517] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5131'. [ 276.684430][T16529] netlink: 'syz.1.5134': attribute type 33 has an invalid length. [ 276.703696][T16527] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5135'. [ 276.802572][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5138'. [ 276.909388][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5142'. [ 276.949051][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5142'. [ 277.230174][T16562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5151'. [ 277.407855][T16576] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5157'. [ 277.536914][T16585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5163'. [ 277.662025][T16591] openvswitch: netlink: EtherType 50a is less than min 600 [ 277.957580][T16611] netlink: 'syz.0.5175': attribute type 6 has an invalid length. [ 278.002252][T16613] netlink: 'syz.4.5176': attribute type 21 has an invalid length. [ 278.226922][T16627] openvswitch: netlink: Unknown key attributes 1 [ 278.312702][T16633] netlink: 'syz.4.5185': attribute type 10 has an invalid length. [ 278.585970][T16652] vxcan0: entered promiscuous mode [ 278.744182][T16662] delete_channel: no stack [ 278.927039][T16673] openvswitch: netlink: Missing key (keys=40, expected=80) [ 279.159339][T16691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.166634][T16691] IPv6: NLM_F_CREATE should be set when creating new route [ 279.174011][T16691] IPv6: NLM_F_CREATE should be set when creating new route [ 279.181290][T16691] IPv6: NLM_F_CREATE should be set when creating new route [ 279.566644][T16716] validate_nla: 2 callbacks suppressed [ 279.566662][T16716] netlink: 'syz.2.5226': attribute type 14 has an invalid length. [ 281.033832][T16815] netlink: 'syz.3.5277': attribute type 21 has an invalid length. [ 281.180618][T16826] __nla_validate_parse: 15 callbacks suppressed [ 281.180638][T16826] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5279'. [ 281.293409][T16830] netlink: 7986 bytes leftover after parsing attributes in process `syz.0.5282'. [ 281.389376][T16837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5288'. [ 281.426282][T16837] netlink: 46 bytes leftover after parsing attributes in process `syz.2.5288'. [ 281.445055][T16837] netlink: 46 bytes leftover after parsing attributes in process `syz.2.5288'. [ 281.523032][T16845] netlink: 'syz.1.5290': attribute type 27 has an invalid length. [ 281.548554][T16845] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.5290'. [ 281.661854][T16854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.683363][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5296'. [ 281.713972][T16857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5294'. [ 281.850869][T16862] netlink: 'syz.1.5298': attribute type 1 has an invalid length. [ 281.884264][T16862] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5298'. [ 282.112919][T16876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.122196][T16874] netlink: 'syz.1.5304': attribute type 1 has an invalid length. [ 282.676917][T16915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5323'. [ 283.347421][T16950] netlink: 'syz.2.5342': attribute type 39 has an invalid length. [ 283.711377][T16975] netlink: 'syz.3.5353': attribute type 2 has an invalid length. [ 284.005593][T16991] openvswitch: netlink: IP tunnel TTL not specified. [ 284.048615][T16995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.425703][T17022] netlink: 'syz.4.5373': attribute type 3 has an invalid length. [ 286.241730][ T3012] bridge_slave_1: left allmulticast mode [ 286.247654][ T3012] bridge_slave_1: left promiscuous mode [ 286.290731][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.351042][ T3012] bridge_slave_0: left allmulticast mode [ 286.356746][ T3012] bridge_slave_0: left promiscuous mode [ 286.387633][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.929601][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.940430][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.951386][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.964464][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.978840][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.142028][T15662] ip6gretap0 speed is unknown, defaulting to 1000 [ 287.149384][T15662] infiniband syz2: ib_query_port failed (-19) [ 287.297188][ T3012] : left promiscuous mode [ 287.298455][T17123] netlink: 'syz.4.5414': attribute type 3 has an invalid length. [ 287.330669][T17123] __nla_validate_parse: 6 callbacks suppressed [ 287.330686][T17123] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.5414'. [ 287.430850][T17106] vcan0 speed is unknown, defaulting to 1000 [ 287.698142][T17137] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5420'. [ 288.163096][T17159] netlink: 'syz.2.5429': attribute type 10 has an invalid length. [ 288.175319][T17159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5429'. [ 288.178048][ T3012] team0: Port device wlan1 removed [ 288.248117][T17159] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 289.044278][ T5864] Bluetooth: hci1: command tx timeout [ 289.245556][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.277374][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.445441][T17241] netlink: 809 bytes leftover after parsing attributes in process `syz.0.5462'. [ 290.477567][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 290.493569][T17241] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.5462'. [ 290.671507][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 291.131145][ T5864] Bluetooth: hci1: command tx timeout [ 291.694299][T17230] netlink: 731 bytes leftover after parsing attributes in process `syz.4.5457'. [ 291.721261][T17106] chnl_net:caif_netlink_parms(): no params data found [ 291.858702][T17280] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.5480'. [ 292.156019][T17106] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.162048][T17300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5488'. [ 292.180340][T17106] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.197843][T17106] bridge_slave_0: entered allmulticast mode [ 292.240780][T17106] bridge_slave_0: entered promiscuous mode [ 292.285830][T17106] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.328227][T17106] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.348624][T17106] bridge_slave_1: entered allmulticast mode [ 292.362326][T17309] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5492'. [ 292.372585][T17106] bridge_slave_1: entered promiscuous mode [ 292.627441][T17106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.683719][T17106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.991997][T17106] team0: Port device team_slave_0 added [ 293.020906][T17106] team0: Port device team_slave_1 added [ 293.199400][ T5864] Bluetooth: hci1: command tx timeout [ 293.211758][T17106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.218729][T17106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.315989][T17106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.330480][T17106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.337525][T17106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.427262][T17106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.490414][T17366] netlink: 'syz.0.5512': attribute type 3 has an invalid length. [ 293.505818][T17366] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.5512'. [ 293.602072][T17106] hsr_slave_0: entered promiscuous mode [ 293.615519][T17106] hsr_slave_1: entered promiscuous mode [ 293.629130][T17106] debugfs: 'hsr0' already exists in 'hsr' [ 293.635421][T17106] Cannot create hsr debugfs directory [ 293.928291][T17386] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5523'. [ 294.140990][T17398] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5528'. [ 294.350766][T17410] netlink: 'syz.2.5532': attribute type 1 has an invalid length. [ 294.516596][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5534'. [ 294.586417][T17420] xt_l2tp: missing protocol rule (udp|l2tpip) [ 295.279670][ T5864] Bluetooth: hci1: command tx timeout [ 295.406842][T17106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 295.480815][T17106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 295.504301][T17106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 295.546103][T17106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 295.560350][T17469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5553'. [ 295.867416][T17106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.938850][T17106] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.001481][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.008669][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.050833][T17498] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5562'. [ 296.055629][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.067110][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.678418][T17524] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5572'. [ 296.912843][T17106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.021727][T17106] veth0_vlan: entered promiscuous mode [ 297.047562][T17106] veth1_vlan: entered promiscuous mode [ 297.157657][T17106] veth0_macvtap: entered promiscuous mode [ 297.182557][T17106] veth1_macvtap: entered promiscuous mode [ 297.247966][T17106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.315219][T17106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.353682][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.428071][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.489815][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.553918][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.699028][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.725834][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.748093][T17567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5588'. [ 297.824267][T17570] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5589'. [ 297.847084][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.849363][T17570] netlink: 'syz.1.5589': attribute type 1 has an invalid length. [ 297.898142][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.332793][T17596] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5596'. [ 300.037974][T17681] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5625'. [ 300.525698][T17703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.576300][T17706] tmpfs: Bad value for 'uid' [ 300.590181][T17706] tmpfs: Bad value for 'uid' [ 300.877662][T17715] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5640'. [ 301.304193][T17737] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5649'. [ 301.477902][T17749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5655'. [ 302.429553][T17807] netlink: 'syz.1.5682': attribute type 29 has an invalid length. [ 302.468411][T17807] netlink: 'syz.1.5682': attribute type 29 has an invalid length. [ 302.929907][T17833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5695'. [ 303.189511][T17849] openvswitch: netlink: Message has 16 unknown bytes. [ 303.217429][T17849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.244468][T17855] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5705'. [ 303.577088][T17876] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5715'. [ 303.938128][T17895] netlink: 'syz.4.5724': attribute type 1 has an invalid length. [ 304.560850][T17930] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5742'. [ 304.599635][T17930] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 304.619356][T17930] openvswitch: netlink: Message has 1 unknown bytes. [ 305.225385][T17952] ãÿ: entered promiscuous mode [ 305.593311][T17973] netlink: 'syz.2.5763': attribute type 1 has an invalid length. [ 305.602614][T17973] netlink: 'syz.2.5763': attribute type 2 has an invalid length. [ 305.647621][T17975] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5764'. [ 305.678324][T17977] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5765'. [ 305.788019][T17985] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5769'. [ 305.834569][T17987] netlink: 7680 bytes leftover after parsing attributes in process `syz.1.5770'. [ 305.894328][T17990] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5772'. [ 306.037928][T17997] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5775'. [ 306.231557][T18007] netlink: 'syz.0.5779': attribute type 1 has an invalid length. [ 306.953513][T18054] netlink: 'syz.4.5803': attribute type 12 has an invalid length. [ 307.712106][T18089] vcan0 speed is unknown, defaulting to 1000 [ 307.818405][T18099] IPv6: Can't replace route, no match found [ 308.561459][T18135] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 308.905766][T18150] netlink: 'syz.3.5850': attribute type 2 has an invalid length. [ 308.919331][T18150] __nla_validate_parse: 2 callbacks suppressed [ 308.919347][T18150] netlink: 51 bytes leftover after parsing attributes in process `syz.3.5850'. [ 309.105316][T18158] netlink: 16239 bytes leftover after parsing attributes in process `syz.2.5854'. [ 309.826827][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5873'. [ 309.850308][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5873'. [ 310.209046][T18199] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.5874'. [ 310.365613][T18209] netlink: 'syz.2.5878': attribute type 39 has an invalid length. [ 310.449986][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5881'. [ 310.888402][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5894'. [ 311.360845][T18261] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.5904'. [ 312.016547][T18284] netlink: 'syz.0.5916': attribute type 2 has an invalid length. [ 312.047223][T18287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5918'. [ 312.067499][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5918'. [ 314.323061][T18386] netlink: 'syz.2.5965': attribute type 1 has an invalid length. [ 314.339344][T18386] __nla_validate_parse: 4 callbacks suppressed [ 314.339361][T18386] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5965'. [ 314.374144][T18388] netlink: 'syz.4.5967': attribute type 29 has an invalid length. [ 314.418220][T18388] netlink: 'syz.4.5967': attribute type 29 has an invalid length. [ 314.831770][T18414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5979'. [ 315.137892][T18434] netlink: 'syz.1.5990': attribute type 29 has an invalid length. [ 315.164658][T18434] netlink: 'syz.1.5990': attribute type 29 has an invalid length. [ 315.266362][T18444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5995'. [ 315.513657][T18459] netlink: 'syz.3.6002': attribute type 29 has an invalid length. [ 315.523202][T18459] netlink: 'syz.3.6002': attribute type 29 has an invalid length. [ 315.752176][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6010'. [ 315.771570][T18475] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 315.794380][T18475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.043791][T18551] netlink: 'syz.0.6045': attribute type 11 has an invalid length. [ 317.067018][T18551] netlink: 'syz.0.6045': attribute type 11 has an invalid length. [ 317.108383][T18551] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6045'. [ 317.221620][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227957][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.278996][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6049'. [ 317.592254][T18573] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.6056'. [ 317.638743][T18573] bridge: RTM_NEWNEIGH with invalid ether address [ 318.745336][T18628] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.6082'. [ 318.758508][T18631] netlink: 'syz.1.6085': attribute type 29 has an invalid length. [ 318.783512][T18631] netlink: 'syz.1.6085': attribute type 29 has an invalid length. [ 318.883721][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6087'. [ 318.908407][T18637] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6087'. [ 319.037493][T18647] tmpfs: Bad value for 'uid' [ 319.056707][T18649] netlink: 'syz.1.6091': attribute type 1 has an invalid length. [ 319.069485][T18647] tmpfs: Bad value for 'uid' [ 319.440526][T18676] validate_nla: 1 callbacks suppressed [ 319.440543][T18676] netlink: 'syz.4.6104': attribute type 29 has an invalid length. [ 319.517411][T18676] netlink: 'syz.4.6104': attribute type 29 has an invalid length. [ 319.569538][T18682] __nla_validate_parse: 2 callbacks suppressed [ 319.569555][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6109'. [ 319.868820][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6118'. [ 320.027191][T18711] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6124'. [ 320.041309][T18714] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6123'. [ 320.200032][T18723] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6129'. [ 320.325673][T18733] netlink: 'syz.1.6134': attribute type 4 has an invalid length. [ 320.767511][T18755] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 321.085822][T18777] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6154'. [ 322.135943][T18797] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 322.622353][T18826] netlink: 'syz.2.6179': attribute type 3 has an invalid length. [ 322.664106][T18826] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6179'. [ 322.914568][T18847] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.6190'. [ 322.936150][T18847] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 323.215776][T18869] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6200'. [ 323.254662][T18869] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6200'. [ 323.830809][T18907] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 324.046528][T18913] openvswitch: netlink: Unknown nsh attribute 0 [ 324.077629][T18913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.305185][T18963] __nla_validate_parse: 5 callbacks suppressed [ 325.305203][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6246'. [ 325.362813][T18963] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 325.384813][T18963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.427185][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6249'. [ 325.495177][T18973] netlink: 'syz.1.6252': attribute type 1 has an invalid length. [ 325.505640][T18973] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.6252'. [ 325.593630][ T1165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.716705][ T1165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.811985][ T1165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.018866][ T1165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.403116][ T1165] bridge_slave_1: left allmulticast mode [ 326.420333][ T1165] bridge_slave_1: left promiscuous mode [ 326.438637][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.477976][ T1165] bridge_slave_0: left allmulticast mode [ 326.506201][ T1165] bridge_slave_0: left promiscuous mode [ 326.522801][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.568996][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.578779][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.590837][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.601617][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.610975][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.157175][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.169952][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.180695][ T1165] bond0 (unregistering): Released all slaves [ 327.265151][T19018] vcan0 speed is unknown, defaulting to 1000 [ 327.284713][ T1165] ãÿ: left promiscuous mode [ 327.698335][T19058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6287'. [ 327.749586][T19062] netlink: 'syz.2.6289': attribute type 10 has an invalid length. [ 327.774466][T19062] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6289'. [ 328.200451][T19074] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6291'. [ 328.231008][T19067] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6291'. [ 328.640291][ T5864] Bluetooth: hci1: command tx timeout [ 329.018300][ T1165] hsr_slave_0: left promiscuous mode [ 329.039241][ T1165] hsr_slave_1: left promiscuous mode [ 329.045441][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.078386][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.096002][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.121201][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.194223][ T1165] veth1_macvtap: left promiscuous mode [ 329.229306][ T1165] veth0_macvtap: left promiscuous mode [ 329.235085][ T1165] veth1_vlan: left promiscuous mode [ 329.263221][ T1165] veth0_vlan: left promiscuous mode [ 330.535668][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 330.584750][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 330.719294][ T5864] Bluetooth: hci1: command tx timeout [ 331.135044][T19018] chnl_net:caif_netlink_parms(): no params data found [ 331.530524][T19018] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.538984][T19018] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.554286][T19018] bridge_slave_0: entered allmulticast mode [ 331.562556][T19018] bridge_slave_0: entered promiscuous mode [ 331.590246][T19018] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.597418][T19018] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.627950][T19018] bridge_slave_1: entered allmulticast mode [ 331.637467][T19018] bridge_slave_1: entered promiscuous mode [ 331.757130][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6342'. [ 331.780258][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6342'. [ 331.814606][T19200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.916110][T19018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.954845][T19018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.053513][T19218] netlink: 'syz.2.6346': attribute type 10 has an invalid length. [ 332.079855][T19218] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6346'. [ 332.258603][T19230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6351'. [ 332.282774][T19018] team0: Port device team_slave_0 added [ 332.312673][T19018] team0: Port device team_slave_1 added [ 332.327216][T19230] netlink: 'syz.4.6351': attribute type 1 has an invalid length. [ 332.482328][T19018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.505023][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.565184][T19018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.622290][T19018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.643959][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.702757][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6360'. [ 332.724979][T19256] netlink: 'syz.4.6361': attribute type 1 has an invalid length. [ 332.738240][T19018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.799411][ T5864] Bluetooth: hci1: command tx timeout [ 332.927803][T19018] hsr_slave_0: entered promiscuous mode [ 332.936682][T19018] hsr_slave_1: entered promiscuous mode [ 332.947072][T19018] debugfs: 'hsr0' already exists in 'hsr' [ 332.955741][T19018] Cannot create hsr debugfs directory [ 333.294281][T19286] xt_limit: Overflow, try lower: 324398827/4200216962 [ 333.917912][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6384'. [ 334.436451][T19338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6392'. [ 334.488191][T19338] netlink: 35 bytes leftover after parsing attributes in process `syz.0.6392'. [ 334.529066][T19338] netlink: 35 bytes leftover after parsing attributes in process `syz.0.6392'. [ 334.566257][T19018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.613011][T19018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.682745][T19018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.731429][T19018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.880566][ T5864] Bluetooth: hci1: command tx timeout [ 335.063142][T19018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.150710][T19018] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.173662][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.180873][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.204671][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.211968][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.302249][T19018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.338114][T19018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.385287][T19385] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6408'. [ 335.420989][T19392] sock: sock_set_timeout: `syz.2.6411' (pid 19392) tries to set negative timeout [ 336.173534][T19419] netlink: 'syz.0.6420': attribute type 29 has an invalid length. [ 336.253686][T19018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.406497][T19018] veth0_vlan: entered promiscuous mode [ 336.428139][T19018] veth1_vlan: entered promiscuous mode [ 336.561750][T19018] veth0_macvtap: entered promiscuous mode [ 336.598742][T19018] veth1_macvtap: entered promiscuous mode [ 336.664359][T19018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.732231][T19018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.809379][ T2960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.840592][T19446] __nla_validate_parse: 1 callbacks suppressed [ 336.840609][T19446] netlink: 202232 bytes leftover after parsing attributes in process `syz.2.6429'. [ 336.847037][ T2960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.904168][ T2960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.917013][T19446] netlink: zone id is out of range [ 336.935630][ T2960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.159298][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.167146][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.298800][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.340174][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.500469][T19476] netlink: 'syz.4.6441': attribute type 29 has an invalid length. [ 337.560896][T19480] netlink: 'syz.2.6442': attribute type 21 has an invalid length. [ 337.565496][T19476] netlink: 'syz.4.6441': attribute type 29 has an invalid length. [ 337.590669][T19480] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6442'. [ 338.154646][T19513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6455'. [ 338.174717][T19513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6455'. [ 338.261608][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6457'. [ 339.169674][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6472'. [ 339.341828][T19572] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6476'. [ 339.472814][T19580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.854550][T19598] openvswitch: netlink: IPv6 tunnel dst address is zero [ 340.772871][T19652] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6515'. [ 340.785442][T19652] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6515'. [ 340.855634][T19654] netlink: 'syz.3.6514': attribute type 21 has an invalid length. [ 340.930730][T19658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6517'. [ 341.463946][T19663] infiniband syz0: set down [ 341.469514][T19663] infiniband syz0: added veth1_virt_wifi [ 341.572078][T19663] RDS/IB: syz0: added [ 341.576202][T19663] smc: adding ib device syz0 with port count 1 [ 341.587017][T19663] smc: ib device syz0 port 1 has pnetid [ 342.630980][T19734] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6554'. [ 343.273794][T19760] netlink: 'syz.2.6566': attribute type 39 has an invalid length. [ 343.533318][T19764] netlink: 'syz.0.6568': attribute type 1 has an invalid length. [ 343.584948][T19764] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.6568'. [ 343.798426][T19773] xt_l2tp: missing protocol rule (udp|l2tpip) [ 344.006901][T19783] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.6577'. [ 344.042242][T19783] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.6577'. [ 344.262959][T19796] netlink: 'syz.2.6584': attribute type 10 has an invalid length. [ 344.285398][T19796] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.321155][T19796] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.328401][T19796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.366331][T19796] bridge0: entered promiscuous mode [ 344.398308][T19796] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 344.863572][T19824] netlink: 'syz.0.6598': attribute type 6 has an invalid length. [ 344.894814][T19824] netlink: 'syz.0.6598': attribute type 3 has an invalid length. [ 344.926078][T19824] netlink: 152988 bytes leftover after parsing attributes in process `syz.0.6598'. [ 345.098351][T19832] netlink: 'syz.1.6602': attribute type 23 has an invalid length. [ 345.633703][T19853] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6612'. [ 345.667447][T19853] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6612'. [ 345.696422][T19853] netlink: 'syz.0.6612': attribute type 5 has an invalid length. [ 345.736953][T19853] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6612'. [ 346.689068][T19892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6628'. [ 346.726938][T19893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6629'. [ 346.828802][T19899] tmpfs: Bad value for 'mode' [ 347.012149][T19908] netlink: 'syz.3.6637': attribute type 21 has an invalid length. [ 347.150490][T19912] netlink: 'syz.3.6638': attribute type 33 has an invalid length. [ 347.173821][T19912] netlink: 'syz.3.6638': attribute type 3 has an invalid length. [ 348.025624][T19931] __nla_validate_parse: 3 callbacks suppressed [ 348.025644][T19931] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6650'. [ 348.317848][T19952] netlink: 'syz.3.6658': attribute type 2 has an invalid length. [ 348.321192][T19954] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6659'. [ 348.371156][T19952] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.6658'. [ 348.622525][T19969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6665'. [ 348.745156][T19977] netlink: 'syz.4.6670': attribute type 1 has an invalid length. [ 349.898956][T20048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6706'. [ 350.164762][T20063] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6713'. [ 350.458002][T20075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6717'. [ 350.693046][T20088] netlink: 'syz.1.6724': attribute type 21 has an invalid length. [ 350.803248][T20095] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6727'. [ 351.074277][T20112] netlink: 182 bytes leftover after parsing attributes in process `syz.4.6734'. [ 351.518368][T20139] netlink: 'syz.2.6749': attribute type 12 has an invalid length. [ 351.547648][T20139] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.6749'. [ 351.656724][T20146] netlink: 'syz.0.6752': attribute type 23 has an invalid length. [ 351.885425][T20159] netlink: 'syz.3.6757': attribute type 39 has an invalid length. [ 353.186186][T20236] __nla_validate_parse: 4 callbacks suppressed [ 353.186210][T20236] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6796'. [ 353.275612][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.377141][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.526130][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.645004][T20253] netlink: 'syz.3.6804': attribute type 1 has an invalid length. [ 353.701753][ T49] batman_adv: batadv0: Removing interface: netdevsim0 [ 353.722725][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.885403][T20261] : entered promiscuous mode [ 354.183272][ T49] bridge_slave_0: left allmulticast mode [ 354.188981][ T49] bridge_slave_0: left promiscuous mode [ 354.211087][T20273] netlink: 'syz.0.6814': attribute type 4 has an invalid length. [ 354.218856][T20273] netlink: 'syz.0.6814': attribute type 1 has an invalid length. [ 354.252765][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.281322][T20273] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.6814'. [ 354.315575][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.327024][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.343938][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.358051][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.366093][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.017925][ T49] .a (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.032199][ T49] .a (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.044891][ T49] .a (unregistering): (slave bridge_slave_1): Releasing backup interface [ 355.057516][ T49] .a (unregistering): Released all slaves [ 355.091812][T20297] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6821'. [ 355.145939][T20300] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6821'. [ 355.236439][ T49] : left promiscuous mode [ 355.313130][T20277] vcan0 speed is unknown, defaulting to 1000 [ 355.723522][T20323] netlink: 'syz.4.6830': attribute type 2 has an invalid length. [ 356.094004][T20340] netlink: 'syz.2.6835': attribute type 3 has an invalid length. [ 356.114058][T20340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6835'. [ 356.401134][ T5864] Bluetooth: hci4: command tx timeout [ 356.758555][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6842'. [ 357.589314][ T49] hsr_slave_0: left promiscuous mode [ 357.606516][ T49] hsr_slave_1: left promiscuous mode [ 357.621386][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.633295][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.643400][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.651204][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.663707][ T49] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 357.671991][ T49] batman_adv: batadv0: Removing interface: virt_wifi0 [ 357.704362][ T49] veth1_macvtap: left promiscuous mode [ 357.710305][ T49] veth0_macvtap: left promiscuous mode [ 357.716188][ T49] veth1_vlan: left promiscuous mode [ 357.727230][T20398] netlink: 'syz.2.6859': attribute type 8 has an invalid length. [ 357.738685][T20398] netlink: 'syz.2.6859': attribute type 3 has an invalid length. [ 357.749721][T20398] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.6859'. [ 358.256308][ T49] team0 (unregistering): Port device team_slave_1 removed [ 358.298622][ T49] team0 (unregistering): Port device C removed [ 358.479432][ T5864] Bluetooth: hci4: command tx timeout [ 358.636054][ T36] smc: removing ib device syz1 [ 358.673802][T20394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6856'. [ 358.684268][T20394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6856'. [ 358.814269][T20412] netlink: 'syz.3.6864': attribute type 21 has an invalid length. [ 358.883115][ T24] vcan0 speed is unknown, defaulting to 1000 [ 358.898188][ T24] syz1: Port: 1 Link DOWN [ 358.987343][T20277] chnl_net:caif_netlink_parms(): no params data found [ 359.223666][T20420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6867'. [ 359.374699][T20422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6867'. [ 360.235492][T20277] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.269526][T20277] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.319747][T20277] bridge_slave_0: entered allmulticast mode [ 360.363740][T20277] bridge_slave_0: entered promiscuous mode [ 360.408420][T20277] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.452184][T20277] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.459540][T20277] bridge_slave_1: entered allmulticast mode [ 360.467497][T20277] bridge_slave_1: entered promiscuous mode [ 360.567856][ T5864] Bluetooth: hci4: command tx timeout [ 360.680351][T20277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.723973][T20277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.977180][T20277] team0: Port device team_slave_0 added [ 361.013322][T20277] team0: Port device team_slave_1 added [ 361.406803][T20277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.429264][T20277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.489566][T20277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.598467][T20277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.617307][T20277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.656634][T20277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.099955][T20519] syz.3.6898 (20519) used obsolete PPPIOCDETACH ioctl [ 362.110224][T20277] hsr_slave_0: entered promiscuous mode [ 362.116914][T20277] hsr_slave_1: entered promiscuous mode [ 362.413508][T20532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6904'. [ 362.640263][ T5864] Bluetooth: hci4: command tx timeout [ 362.923145][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6911'. [ 363.395479][T20581] netlink: 'syz.4.6921': attribute type 12 has an invalid length. [ 363.444804][T20581] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.6921'. [ 363.865047][T20599] netlink: 'syz.0.6927': attribute type 2 has an invalid length. [ 363.893971][T20277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.937361][T20277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.995874][T20277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.081856][T20277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.281136][T20628] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6935'. [ 364.553075][T20277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.625800][T20277] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.662446][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.669642][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.728587][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.735857][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.844003][T20277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.460704][T20277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.558632][T20688] netlink: 'syz.4.6956': attribute type 2 has an invalid length. [ 365.609895][T20277] veth0_vlan: entered promiscuous mode [ 365.656408][T20277] veth1_vlan: entered promiscuous mode [ 365.813212][T20277] veth0_macvtap: entered promiscuous mode [ 365.871679][T20277] veth1_macvtap: entered promiscuous mode [ 365.949377][T20277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.978511][T20707] C: renamed from team_slave_0 (while UP) [ 365.998675][T20712] netlink: 'syz.4.6965': attribute type 10 has an invalid length. [ 366.011862][T20707] netlink: 'syz.3.6964': attribute type 3 has an invalid length. [ 366.048756][T20707] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6964'. [ 366.098964][T20712] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 366.143032][T20277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.265737][ T2960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.299677][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.363719][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.395524][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.637388][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.676821][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.755769][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.784199][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.219707][T20765] netlink: 'syz.0.6984': attribute type 3 has an invalid length. [ 367.227486][T20765] netlink: 'syz.0.6984': attribute type 1 has an invalid length. [ 367.872045][T20793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6994'. [ 367.907520][T20793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6994'. [ 368.806920][T20841] netlink: 'syz.1.7011': attribute type 10 has an invalid length. [ 368.860713][T20845] netlink: 'syz.1.7011': attribute type 10 has an invalid length. [ 368.862927][T20841] team0: Port device dummy0 added [ 369.165685][T20845] team0: Port device dummy0 removed [ 369.206838][T20845] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 369.378822][T20862] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.7017'. [ 369.700387][T20877] netlink: 'syz.1.7022': attribute type 3 has an invalid length. [ 369.756623][T20881] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7025'. [ 369.808119][T20883] netlink: 495 bytes leftover after parsing attributes in process `syz.3.7023'. [ 369.940934][T20894] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.7027'. [ 370.228770][T20910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7037'. [ 370.405762][T20921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7040'. [ 370.436840][T20921] netlink: 'syz.4.7040': attribute type 1 has an invalid length. [ 370.466607][T20921] netlink: 'syz.4.7040': attribute type 2 has an invalid length. [ 370.490800][T20926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7043'. [ 370.506054][T20926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7043'. [ 371.000172][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7055'. [ 371.099478][T20957] netlink: 'syz.4.7058': attribute type 16 has an invalid length. [ 371.113727][T20955] : entered promiscuous mode [ 371.117846][T20957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7058'. [ 371.491458][T20976] netlink: 'syz.2.7068': attribute type 3 has an invalid length. [ 371.586416][T20984] netlink: 'syz.3.7072': attribute type 2 has an invalid length. [ 371.930757][T21008] netlink: 'syz.0.7084': attribute type 21 has an invalid length. [ 371.938774][T21008] netlink: 'syz.0.7084': attribute type 22 has an invalid length. [ 373.956116][T21098] caif0: entered promiscuous mode [ 373.979542][T21098] caif0: entered allmulticast mode [ 374.219732][T21111] netlink: 'syz.3.7134': attribute type 29 has an invalid length. [ 374.231584][T21111] netlink: 'syz.3.7134': attribute type 29 has an invalid length. [ 374.517012][T21125] netlink: set zone limit has 4 unknown bytes [ 374.818996][T21150] __nla_validate_parse: 9 callbacks suppressed [ 374.819014][T21150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7152'. [ 374.892587][T21150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7152'. [ 375.206750][T21167] netlink: 'syz.4.7159': attribute type 1 has an invalid length. [ 375.294913][T21173] netlink: 'syz.1.7164': attribute type 3 has an invalid length. [ 375.511197][T21184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7168'. [ 377.171803][T21258] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7206'. [ 377.916760][T21271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7212'. [ 378.653229][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.660567][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.236024][T21317] netlink: 'syz.4.7232': attribute type 3 has an invalid length. [ 379.265028][T21317] netlink: 'syz.4.7232': attribute type 1 has an invalid length. [ 379.313690][T21317] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7232'. [ 379.728519][T21337] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.7244'. [ 379.798713][T21338] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7243'. [ 380.322833][T21355] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7252'. [ 380.369400][T21355] netlink: 'syz.3.7252': attribute type 2 has an invalid length. [ 381.994703][T21412] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7278'. [ 382.088296][T21416] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7280'. [ 382.117101][T21416] batadv_slave_1: entered promiscuous mode [ 382.385255][T21425] xt_socket: unknown flags 0x20 [ 382.464627][T21427] xt_HMARK: spi-set and port-set can't be combined [ 383.064233][T21448] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.7296'. [ 383.142422][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7298'. [ 383.349904][T21461] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.7302'. [ 383.385430][T21461] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.7302'. [ 383.418497][T21461] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.7302'. [ 383.645411][T21475] netlink: 'syz.4.7309': attribute type 21 has an invalid length. [ 383.814832][T21480] xt_HMARK: proto mask must be zero with L3 mode [ 384.336550][T21500] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.7321'. [ 384.843679][T21519] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7330'. [ 384.918742][T21521] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 385.645288][T21542] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7341'. [ 385.681996][T21542] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7341'. [ 385.854102][T21548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7345'. [ 386.184573][T21561] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7351'. [ 386.238257][T21566] netlink: 'syz.3.7352': attribute type 6 has an invalid length. [ 386.273236][T21566] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7352'. [ 386.398981][T21573] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7354'. [ 386.429300][T21568] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7354'. [ 386.443027][T21568] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7354'. [ 386.961848][T21596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7366'. [ 386.993719][T21596] netlink: 416 bytes leftover after parsing attributes in process `syz.1.7366'. [ 387.177350][T21606] netlink: 'syz.3.7372': attribute type 29 has an invalid length. [ 387.236988][T21606] netlink: 'syz.3.7372': attribute type 29 has an invalid length. [ 387.292380][T21611] netlink: 'syz.3.7372': attribute type 29 has an invalid length. [ 387.515810][T21622] proc: Bad value for 'gid' [ 389.986751][T21707] netlink: 'syz.4.7419': attribute type 4 has an invalid length. [ 390.754315][T21736] ipvlan0: entered promiscuous mode [ 390.764555][T21736] ipvlan0: entered allmulticast mode [ 391.341869][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.355662][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.364269][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.374152][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.382456][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.478874][ T2960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.733438][ T2960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.893031][ T2960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.209627][ T2960] team0: Port device netdevsim0 removed [ 392.234454][ T2960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.471049][T21808] __nla_validate_parse: 22 callbacks suppressed [ 392.471067][T21808] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.7465'. [ 392.726637][ T2960] bridge_slave_1: left allmulticast mode [ 392.737314][ T2960] bridge_slave_1: left promiscuous mode [ 392.770166][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.784931][ T2960] bridge_slave_0: left allmulticast mode [ 392.801417][ T2960] bridge_slave_0: left promiscuous mode [ 392.819520][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.847162][ T2960] @ÿ: left promiscuous mode [ 392.860066][ T2960] bond_slave_1: left promiscuous mode [ 393.253814][ T2960] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 393.409315][ T2960] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 393.421636][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.434850][ T2960] bond0 (unregistering): Released all slaves [ 393.447795][ T5870] Bluetooth: hci2: command tx timeout [ 393.585022][T21819] debugfs: '!' already exists in 'ieee80211' [ 393.605650][ T2960] : left promiscuous mode [ 393.849875][T21761] chnl_net:caif_netlink_parms(): no params data found [ 394.140987][T21844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7479'. [ 394.310273][T21846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7479'. [ 394.373643][T21761] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.395668][T21761] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.403551][T21761] bridge_slave_0: entered allmulticast mode [ 394.429491][T21761] bridge_slave_0: entered promiscuous mode [ 394.447711][T21844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7479'. [ 394.476608][T21761] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.486366][T21761] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.498140][T21761] bridge_slave_1: entered allmulticast mode [ 394.538036][T21761] bridge_slave_1: entered promiscuous mode [ 395.529631][ T5870] Bluetooth: hci2: command tx timeout [ 395.550068][T21868] netlink: 'syz.3.7490': attribute type 3 has an invalid length. [ 395.557828][T21868] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.7490'. [ 396.001185][T21761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.050109][T21761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.081228][T21871] netlink: 'syz.3.7491': attribute type 1 has an invalid length. [ 396.283028][T21761] team0: Port device team_slave_0 added [ 396.303986][T21761] team0: Port device team_slave_1 added [ 396.630887][T21761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.643492][T21761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.729302][T21761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.763969][T21894] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7503'. [ 396.831975][ T2960] hsr_slave_0: left promiscuous mode [ 396.851951][ T2960] hsr_slave_1: left promiscuous mode [ 396.875918][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.913900][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.950577][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.958432][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.007827][ T2960] batman_adv: batadv0: Interface deactivated: team0 [ 397.019228][ T2960] batman_adv: batadv0: Removing interface: team0 [ 397.050966][ T2960] veth1_vlan: left promiscuous mode [ 397.056340][ T2960] þÿÿ: left promiscuous mode [ 397.613573][ T5870] Bluetooth: hci2: command tx timeout [ 398.420654][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 398.678675][T21928] netlink: 3815 bytes leftover after parsing attributes in process `syz.1.7518'. [ 399.162242][T21761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.173435][T21761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.201155][T21761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.220319][T21901] netlink: 'syz.3.7506': attribute type 2 has an invalid length. [ 399.258794][T21932] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 399.465596][T21940] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.7523'. [ 399.525256][T21761] hsr_slave_0: entered promiscuous mode [ 399.546177][T21761] hsr_slave_1: entered promiscuous mode [ 399.572906][T21761] debugfs: 'hsr0' already exists in 'hsr' [ 399.578680][T21761] Cannot create hsr debugfs directory [ 399.592273][T21944] netlink: 'syz.1.7525': attribute type 4 has an invalid length. [ 399.624173][T21944] netlink: 'syz.1.7525': attribute type 4 has an invalid length. [ 399.642845][T21944] netlink: 199756 bytes leftover after parsing attributes in process `syz.1.7525'. [ 399.680187][ T5870] Bluetooth: hci2: command tx timeout [ 400.225411][ T2960] ================================================================== [ 400.233527][ T2960] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0 [ 400.241616][ T2960] Write of size 8 at addr ffff88807df12228 by task kworker/u8:7/2960 [ 400.249689][ T2960] [ 400.252028][ T2960] CPU: 0 UID: 0 PID: 2960 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 400.252043][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.252050][ T2960] Workqueue: netns cleanup_net [ 400.252076][ T2960] Call Trace: [ 400.252082][ T2960] [ 400.252087][ T2960] dump_stack_lvl+0x189/0x250 [ 400.252100][ T2960] ? __virt_addr_valid+0x1c8/0x5c0 [ 400.252112][ T2960] ? rcu_is_watching+0x15/0xb0 [ 400.252122][ T2960] ? __kasan_check_byte+0x12/0x40 [ 400.252131][ T2960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.252141][ T2960] ? rcu_is_watching+0x15/0xb0 [ 400.252149][ T2960] ? lock_release+0x4b/0x3e0 [ 400.252163][ T2960] ? __virt_addr_valid+0x1c8/0x5c0 [ 400.252174][ T2960] ? __virt_addr_valid+0x4a5/0x5c0 [ 400.252186][ T2960] print_report+0xca/0x240 [ 400.252195][ T2960] ? __xfrm_state_delete+0x666/0xca0 [ 400.252207][ T2960] kasan_report+0x118/0x150 [ 400.252220][ T2960] ? __xfrm_state_delete+0x666/0xca0 [ 400.252234][ T2960] __xfrm_state_delete+0x666/0xca0 [ 400.252248][ T2960] xfrm_state_flush+0x45f/0x770 [ 400.252263][ T2960] xfrm6_tunnel_net_exit+0x3c/0x100 [ 400.252277][ T2960] ops_undo_list+0x49a/0x990 [ 400.252290][ T2960] ? __pfx_ops_undo_list+0x10/0x10 [ 400.252301][ T2960] ? do_raw_spin_unlock+0x122/0x240 [ 400.252313][ T2960] cleanup_net+0x4c5/0x800 [ 400.252325][ T2960] ? __pfx_cleanup_net+0x10/0x10 [ 400.252337][ T2960] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.252347][ T2960] ? process_scheduled_works+0x9ef/0x17b0 [ 400.252356][ T2960] ? process_scheduled_works+0x9ef/0x17b0 [ 400.252364][ T2960] process_scheduled_works+0xae1/0x17b0 [ 400.252379][ T2960] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.252391][ T2960] worker_thread+0x8a0/0xda0 [ 400.252405][ T2960] kthread+0x70e/0x8a0 [ 400.252417][ T2960] ? __pfx_worker_thread+0x10/0x10 [ 400.252426][ T2960] ? __pfx_kthread+0x10/0x10 [ 400.252437][ T2960] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.252446][ T2960] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.252457][ T2960] ? __pfx_kthread+0x10/0x10 [ 400.252467][ T2960] ret_from_fork+0x436/0x7d0 [ 400.252478][ T2960] ? __pfx_ret_from_fork+0x10/0x10 [ 400.252488][ T2960] ? __switch_to_asm+0x39/0x70 [ 400.252499][ T2960] ? __switch_to_asm+0x33/0x70 [ 400.252510][ T2960] ? __pfx_kthread+0x10/0x10 [ 400.252520][ T2960] ret_from_fork_asm+0x1a/0x30 [ 400.252535][ T2960] [ 400.252539][ T2960] [ 400.480779][ T2960] Allocated by task 19401: [ 400.485198][ T2960] kasan_save_track+0x3e/0x80 [ 400.489895][ T2960] __kasan_slab_alloc+0x6c/0x80 [ 400.494762][ T2960] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 400.500229][ T2960] xfrm_state_alloc+0x24/0x2f0 [ 400.504996][ T2960] __find_acq_core+0x8a7/0x1c00 [ 400.509867][ T2960] xfrm_find_acq+0x78/0xa0 [ 400.514280][ T2960] xfrm_alloc_userspi+0x6b3/0xc90 [ 400.519292][ T2960] xfrm_user_rcv_msg+0x7a3/0xab0 [ 400.524410][ T2960] netlink_rcv_skb+0x208/0x470 [ 400.529212][ T2960] xfrm_netlink_rcv+0x79/0x90 [ 400.533892][ T2960] netlink_unicast+0x82c/0x9e0 [ 400.538661][ T2960] netlink_sendmsg+0x805/0xb30 [ 400.543414][ T2960] __sock_sendmsg+0x219/0x270 [ 400.548080][ T2960] ____sys_sendmsg+0x505/0x830 [ 400.552842][ T2960] ___sys_sendmsg+0x21f/0x2a0 [ 400.557554][ T2960] __x64_sys_sendmsg+0x19b/0x260 [ 400.562518][ T2960] do_syscall_64+0xfa/0x3b0 [ 400.567006][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.573142][ T2960] [ 400.575449][ T2960] Freed by task 15665: [ 400.579561][ T2960] kasan_save_track+0x3e/0x80 [ 400.584236][ T2960] kasan_save_free_info+0x46/0x50 [ 400.589253][ T2960] __kasan_slab_free+0x5b/0x80 [ 400.594014][ T2960] kmem_cache_free+0x18f/0x400 [ 400.598763][ T2960] xfrm_state_gc_task+0x52d/0x6b0 [ 400.603776][ T2960] process_scheduled_works+0xae1/0x17b0 [ 400.609308][ T2960] worker_thread+0x8a0/0xda0 [ 400.613883][ T2960] kthread+0x70e/0x8a0 [ 400.617937][ T2960] ret_from_fork+0x436/0x7d0 [ 400.622507][ T2960] ret_from_fork_asm+0x1a/0x30 [ 400.627255][ T2960] [ 400.629565][ T2960] The buggy address belongs to the object at ffff88807df12200 [ 400.629565][ T2960] which belongs to the cache xfrm_state of size 928 [ 400.643510][ T2960] The buggy address is located 40 bytes inside of [ 400.643510][ T2960] freed 928-byte region [ffff88807df12200, ffff88807df125a0) [ 400.657210][ T2960] [ 400.659575][ T2960] The buggy address belongs to the physical page: [ 400.665985][ T2960] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807df11540 pfn:0x7df10 [ 400.676041][ T2960] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 400.684531][ T2960] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 400.692067][ T2960] page_type: f5(slab) [ 400.696047][ T2960] raw: 00fff00000000040 ffff8880202d1640 dead000000000122 0000000000000000 [ 400.704701][ T2960] raw: ffff88807df11540 00000000800f000d 00000000f5000000 0000000000000000 [ 400.713273][ T2960] head: 00fff00000000040 ffff8880202d1640 dead000000000122 0000000000000000 [ 400.721960][ T2960] head: ffff88807df11540 00000000800f000d 00000000f5000000 0000000000000000 [ 400.730616][ T2960] head: 00fff00000000002 ffffea0001f7c401 00000000ffffffff 00000000ffffffff [ 400.739273][ T2960] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 400.747924][ T2960] page dumped because: kasan: bad access detected [ 400.754327][ T2960] page_owner tracks the page as allocated [ 400.760020][ T2960] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 14674, tgid 14671 (syz.0.4230), ts 245896819444, free_ts 245598933159 [ 400.779456][ T2960] post_alloc_hook+0x240/0x2a0 [ 400.784316][ T2960] get_page_from_freelist+0x21e4/0x22c0 [ 400.789847][ T2960] __alloc_frozen_pages_noprof+0x181/0x370 [ 400.795639][ T2960] alloc_pages_mpol+0x232/0x4a0 [ 400.800474][ T2960] allocate_slab+0x8a/0x370 [ 400.804966][ T2960] ___slab_alloc+0xbeb/0x1420 [ 400.809625][ T2960] kmem_cache_alloc_noprof+0x283/0x3c0 [ 400.815069][ T2960] xfrm_state_alloc+0x24/0x2f0 [ 400.819816][ T2960] __find_acq_core+0x8a7/0x1c00 [ 400.824737][ T2960] xfrm_find_acq+0x78/0xa0 [ 400.829138][ T2960] pfkey_getspi+0x65d/0xee0 [ 400.833628][ T2960] pfkey_sendmsg+0xbfe/0x1090 [ 400.838292][ T2960] __sock_sendmsg+0x219/0x270 [ 400.842964][ T2960] ____sys_sendmsg+0x505/0x830 [ 400.847713][ T2960] ___sys_sendmsg+0x21f/0x2a0 [ 400.852380][ T2960] __x64_sys_sendmsg+0x19b/0x260 [ 400.857309][ T2960] page last free pid 14653 tgid 14652 stack trace: [ 400.863934][ T2960] __free_frozen_pages+0xbc4/0xd30 [ 400.869030][ T2960] stack_depot_save_flags+0x436/0x860 [ 400.874383][ T2960] kasan_save_track+0x4f/0x80 [ 400.879056][ T2960] __kasan_slab_alloc+0x6c/0x80 [ 400.883909][ T2960] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 400.889825][ T2960] kmalloc_reserve+0xbd/0x290 [ 400.894490][ T2960] __alloc_skb+0x142/0x2d0 [ 400.898901][ T2960] __neigh_notify+0x15c/0x310 [ 400.903569][ T2960] neigh_cleanup_and_release+0xb0/0x290 [ 400.909194][ T2960] __neigh_ifdown+0x1e8/0x8b0 [ 400.913856][ T2960] neigh_ifdown+0x1f/0x30 [ 400.918177][ T2960] fib_netdev_event+0x318/0x490 [ 400.923010][ T2960] notifier_call_chain+0x1b3/0x3e0 [ 400.928101][ T2960] netif_close_many+0x29c/0x410 [ 400.933021][ T2960] unregister_netdevice_many_notify+0x5a7/0x1ff0 [ 400.939331][ T2960] rtnl_dellink+0x488/0x710 [ 400.943831][ T2960] [ 400.946134][ T2960] Memory state around the buggy address: [ 400.951746][ T2960] ffff88807df12100: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 400.959787][ T2960] ffff88807df12180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.967827][ T2960] >ffff88807df12200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.975868][ T2960] ^ [ 400.981218][ T2960] ffff88807df12280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.989257][ T2960] ffff88807df12300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.997297][ T2960] ================================================================== [ 401.005517][ T2960] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 401.012735][ T2960] CPU: 0 UID: 0 PID: 2960 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 401.022198][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.032335][ T2960] Workqueue: netns cleanup_net [ 401.037103][ T2960] Call Trace: [ 401.040369][ T2960] [ 401.043288][ T2960] dump_stack_lvl+0x99/0x250 [ 401.047878][ T2960] ? __asan_memcpy+0x40/0x70 [ 401.052458][ T2960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.057645][ T2960] ? __pfx__printk+0x10/0x10 [ 401.062237][ T2960] vpanic+0x281/0x750 [ 401.066209][ T2960] ? __pfx_print_hex_dump+0x10/0x10 [ 401.071397][ T2960] ? __pfx_vpanic+0x10/0x10 [ 401.076014][ T2960] ? irqentry_exit+0x74/0x90 [ 401.080603][ T2960] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.086088][ T2960] panic+0xb9/0xc0 [ 401.089909][ T2960] ? __pfx_panic+0x10/0x10 [ 401.094313][ T2960] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 401.100296][ T2960] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 401.106613][ T2960] ? __xfrm_state_delete+0x666/0xca0 [ 401.111886][ T2960] check_panic_on_warn+0x89/0xb0 [ 401.116815][ T2960] ? __xfrm_state_delete+0x666/0xca0 [ 401.122102][ T2960] end_report+0x78/0x160 [ 401.126333][ T2960] kasan_report+0x129/0x150 [ 401.130825][ T2960] ? __xfrm_state_delete+0x666/0xca0 [ 401.136119][ T2960] __xfrm_state_delete+0x666/0xca0 [ 401.141222][ T2960] xfrm_state_flush+0x45f/0x770 [ 401.146062][ T2960] xfrm6_tunnel_net_exit+0x3c/0x100 [ 401.151247][ T2960] ops_undo_list+0x49a/0x990 [ 401.156784][ T2960] ? __pfx_ops_undo_list+0x10/0x10 [ 401.161880][ T2960] ? do_raw_spin_unlock+0x122/0x240 [ 401.167067][ T2960] cleanup_net+0x4c5/0x800 [ 401.171472][ T2960] ? __pfx_cleanup_net+0x10/0x10 [ 401.176394][ T2960] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.181579][ T2960] ? process_scheduled_works+0x9ef/0x17b0 [ 401.187291][ T2960] ? process_scheduled_works+0x9ef/0x17b0 [ 401.192995][ T2960] process_scheduled_works+0xae1/0x17b0 [ 401.198532][ T2960] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.204498][ T2960] worker_thread+0x8a0/0xda0 [ 401.209084][ T2960] kthread+0x70e/0x8a0 [ 401.213146][ T2960] ? __pfx_worker_thread+0x10/0x10 [ 401.218240][ T2960] ? __pfx_kthread+0x10/0x10 [ 401.222829][ T2960] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.228022][ T2960] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.233206][ T2960] ? __pfx_kthread+0x10/0x10 [ 401.237780][ T2960] ret_from_fork+0x436/0x7d0 [ 401.242354][ T2960] ? __pfx_ret_from_fork+0x10/0x10 [ 401.247447][ T2960] ? __switch_to_asm+0x39/0x70 [ 401.252198][ T2960] ? __switch_to_asm+0x33/0x70 [ 401.256946][ T2960] ? __pfx_kthread+0x10/0x10 [ 401.261520][ T2960] ret_from_fork_asm+0x1a/0x30 [ 401.266273][ T2960] [ 401.269406][ T2960] Kernel Offset: disabled [ 401.273740][ T2960] Rebooting in 86400 seconds..