last executing test programs: 2m53.361622028s ago: executing program 0 (id=7101): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x3}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="200000001600ffffffff00000000df25217c00000c00018008000100", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 2m53.090562282s ago: executing program 0 (id=7107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008200140a080000008000240000000020811034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m52.920474154s ago: executing program 0 (id=7110): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2m52.701907305s ago: executing program 0 (id=7112): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) 2m52.430959951s ago: executing program 0 (id=7116): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x3}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x44, 0x41, 0x107, 0xfffffffa, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m52.297765762s ago: executing program 0 (id=7118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/28, 0x1c}, 0x0) 2m37.155341987s ago: executing program 32 (id=7118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/28, 0x1c}, 0x0) 29.909661184s ago: executing program 3 (id=9365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a01"], 0x70}}, 0x0) 29.672957289s ago: executing program 3 (id=9369): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001e000103020000200000000001"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 29.47603298s ago: executing program 3 (id=9371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 29.31040747s ago: executing program 3 (id=9374): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 29.152728824s ago: executing program 3 (id=9377): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) 28.842549821s ago: executing program 3 (id=9383): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000c00)=""/4154, 0x103a}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000900)=""/161, 0xa1}, {&(0x7f0000000700)=""/178, 0xb2}, {&(0x7f00000000c0)=""/34, 0x22}], 0x8}, 0x10102) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 27.604793198s ago: executing program 4 (id=9398): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e5c777b95ca109ff3", 0x1c}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @remote}}}], 0x20}, 0x400c804) 27.383680951s ago: executing program 4 (id=9401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@udp6=r1, 0x2}, 0x20) 27.164326491s ago: executing program 4 (id=9404): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x8000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 26.84907288s ago: executing program 4 (id=9406): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x9, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 26.559415352s ago: executing program 4 (id=9410): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000060c0)=[{&(0x7f0000000100)="929a610255999adeb2205caa791e01c4574f4203d6ee042c7eac21a75b6e3f985bd82cc3a18fa68f09bfe794", 0x2c}, {&(0x7f0000002400)="4ada6fc1667ed8f91e1d5f9eef33dc6e06246b09b9c9dc0922377156b42b1e81bf490add170501f408002a716866d543d8aa0f5ed9bb18f7ffa6b79bac46790ee86eff06f57d47", 0x47}, {&(0x7f0000000a40)="3d0832adb58278a866e4db83ed3b0c936c2b84745dd9c1da9c6294b144591698b1caea59bb7b2703083c374dc4483bda11025032d00f83a92d99a243a9d8d6bf77892ae2bb830ca80021fdc12c1fd72612e903b6268176efd7ffbf0019e834da900502a6670ff083f335f752d2c7ea3eb0daf9b2a32a1d0a00606b4fdab8efd4d926db59db990bbac4918591", 0x8c}, {&(0x7f0000000c40)="6422fff22cc7009548a420b64bc74726daf5e6fb9d36eae34cba6e2ad2fa7f4330d5d4a76dfb97faacc4eb7cddcf508fb58b0ed71d912966c09088b17f0e35f7120b4acf9d7e5c30041b2afc12f92e2a4b0be0127b8f676cda4a32b6c40fe2f9432261446c3caefc2b1d08d3e1b0", 0x6e}, {&(0x7f0000002200)="558da10fcf9caa3c1fa6dfff1e28c25319fdf4d740085551e44d025433a04deeb89616580e4f2c25eb8cb50c302aa0b80cd5151a13a54ce62b69f0629e8bca5b3fd7debdfa6d1e98667657503588628d3ce62f0508a1837640cb61c3e04b1e02a75d5ec55d30cd442237a13b50ba5887e8f54d16d23a2b0ed070eb2d9278d248b14c0082137c7811d887479f2043b174a8ba9ad10bab2fe221817756681f96d00938c5d6b44874437b3e77f3ced64689fe4d4f3fe9268415eda6747084b57dfa5e1731131774ce29a3dab93f", 0xcc}, {&(0x7f00000050c0)="df5e56d7bf456dc134dacd9937030292b600f9ceca29743cea5dec505b440424095a9e3282f6eb1e58cce3dc1e9f5cf49e70a515a0966e94e4878149ea5a1b4e4efeeddf8b2e2cd2bc9f1f0a6aa7b6e9e69466520a52d24e0892f93e344a08bdb075cd52e34b017fd1929625a5aa7acbf178f70229fdd29c5654175330031f42a4753f45a8b90cefeb572a384c423a3f90dc02b0d68f01f4b64fdaaa784be5f947376ff42ed458c9d43d347fcf890f2994f701553c68766841786db61b122632874e6545148ca624ec8466f494eb1c6a47ddd3b2d532a3538f1b61a0792a471f04240b6c377a0c38b84aa681cfc0d4bd79b317f5ae838b08c77abdda08a2af0532eef04f516bc1a7af44754b47eb57b0100d88a1e29f58e9509b46a7e36ab9c6a199fa3cf12c6de178995a176d6417e6d4220f6b880f97fbedf57620fbc47e5c13c732f82f9d8a45d5ecdcd22e375d7082ef4cdc98214484e10bcc45f5f75cc21910341f5fe067ec62aedee0699e3b6b5c3c402991ba29bf7a3eb02f8c1c02cb007ada853e0f2cd8a5f7d88e93fc64e223ef9341ed0618d14d1b256f5a84e4768f4b348a99ccdc17c6f17be87be837128bbf0ab8a67bd5dadc51b6465857d1ae4ad7a975fef7034774eca84fd89c897c9aa6e5354e4c517cd935f9a96fd2630f381d235db02381e33cb6a0778d1f9fb7a4baa105cb4eab204f2c19d025a97a14cffa155990bde96b6ac3d13e7ba83ac6fd13df7d03499145785b3340b1666bec5de8eed34999f98967a45a02c330735e8edefaa0a1bbe9208d4da42f6f4e0e7a6e1445841e7345e852086c901f81e93655500d54ea39cf728b1b189d2dcc4e3dced9c60b2105e3785eaea50348f88a12c313dfff48d41c524a4eff3a246dc244c5fb6ec21f7dd8828c5d1bcecee811a03ca58f7a1bada411602641c2e9af4bb3e110cf1e6f19d9d4716c258f16106dca0bf69e3fdd6b1be5a9c02faf3284a6e7885912ed03a7faa66c73765bf1d322c32642dad272d194599c8c40d953f7df2df2d9ec8eef5b3c3dd4036d45eca912f4eb3bcefaecb1173732166018c27318e7ef13aed0da2318805e84ace85a34d30e0bd05052c207252be4d87aec51a2dac2156258f30aaa6e7ec9df4fc72ccdd0b2ca319ac306edec89a5c845d42d0b5078829a4a311aadf4a16a34cf73ef440b872e860af407aa7b0c6210e27532cf871b24469f5fc0ace17fb700676089847d5e4b577ba9aa79ef3413a556886d01be2cabbd50d02bb6b594eba4666c9e3c539767d566f6d2b778c677027e16924d4524686e9ebf18a6f379fd3cf970fa471fcda32dec6740b49ebae03db11b8773d387db4015fd1f44587d9388a0984e6def0323c882a3a82c6774e51da20378f39f233d01c719e29faa3951741ad3d5b8da021d851bda94072c8958f973c8c9d120a13f20c667c6c9c9dd28adffdc01f985a4a6facb544baffef4d114cb053f2ce21de6b4454e49c54f99178d285289da1f7568fa98a7405b2747b3c389be9a8fdd09d0ed8f4be787d0293f453fd3f3cdc2f432249f1680c6cd44ce8304f41d6a58db8243df9ab1f015e5d0334e5e1e6d95842f04c4a3a851f259daeb4118c6f471da46392bc542a40356d96ea81ab8e1604d0aa65ef18b15d642e28fd4d5bbadb7c1acac59846918a0cbcfe4939d987b849a7576c388f8e8187e9516da273c4884eea769380e6c232cfd698540f9131185979aba3f5ed13b96a2cc93c2c50611b2b5fe928ba22181aef4d200eb71ec8994dbc9cd7ce2c686b00a6093370382216cbb13eca48bf46ddb9ef57e898ad8369b2b98de5fa3d2e1ae739e585d3160a8e10efdb8e7cefc46566b684870bcd862ef095fc187b820dd1feb2558667b4a6808114e558888027d99fb4b21087568ac83c8459ee87cfdfebf0340a05e02460cb4b208e1f47a3998462cc87b6c5f29f07864abd296a1a2d71cf9bd4a20a000f92faae787f8ce4e17cfbc3929b26de597a63b0ce1fd31b22e2da81e1e42d5250859e2e755d7789e80b64177b103c319c635e547b6a1612fe42502dbb259c56d1f97a9e115d58335d967d07efc7663acb9a6d0452212e3885c573fa3bf0daefbd23d3155ea8a6b1587d082473200610159a8198a65885d5a9a4826f651177ebf31aefc4a678c9489b9ffad475a03314aa2ee0fe80054e53f9228bcdba79a10fdacbe776baddb7ee82b5f42fb3ff0ac9f4fac05d77f5c90fb64bb3b880b4be8af77852d0a26da6957ca1771603f2b3c33246b2697692f1d8f2f06f1f5bfe9d247894ec3e80b05af45c6dce8b03f7c60fbcbb05aacd4353f29378d18409480ab8b0c0d5f19f121df67f1703386e59daa7b1f6e98a4802f3929765f837fc2e84dfdc2a177299b2ce4b982586cee5ef136a2e8fd8c07876b573e6cc484c57ba6202d72a2b7292751535244c9f6352a10783302a3c6ada5b97ed4273341bbbf143d571d94ec0970e755878bb231ae4bdac68f5b1f47d7b3db1680eccab2121b07bb0eb91b55c6e4eaf176fa65170a89efaff943cc24730df0857ca23795c321814079cf909678210ec1096b9091411ba0ad2182435831ab0cadb97fce2cd5be04f6bd5105ab9762227d12aa588d3c737c377243534efa8709a1ef08d577049743ae5d9fdf7e133bf5238b6bcdfc707e49c209e2b4e6a147afd891f33a7a400e71dc08dddaae1394a232857fa2f560b050580e7b156d21a0aa42bd86dc968bed60e7128330bced2d0831b6c271aba4873851fa808be61512172ae27885980d4d603742579b066dfb01a4f085988dff31dbcf10a6d64d8abfc9f32a6e3e874056ca117162ad8b4ea6730795a4e36c6b6e2dfad4fe59a1ce06a29a84b434d14ff02100cfe93e069cae2b7a96362d416415df2182439e630c674519d69bfc40ca644f5cce91ecad3a4890255ee472b6913a852dfa1f9fd6b88b05961d61ab33514fc99c805fb39943bc1621358901155ed51f0650666b90101fc07c185ad04f", 0x858}], 0x6}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e30025002d8d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 25.310442421s ago: executing program 4 (id=9416): r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x603}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2, 0x1855}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r0, 0x0, 0x800000000}, 0x38) 24.967802012s ago: executing program 33 (id=9416): r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x603}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2, 0x1855}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r0, 0x0, 0x800000000}, 0x38) 5.578446202s ago: executing program 2 (id=9519): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x18, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x360}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="04dde1152379be503e95606624f0", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.4759854s ago: executing program 5 (id=9520): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='c 6:', @ANYRESDEC], 0x8) 5.45578917s ago: executing program 2 (id=9521): perf_event_open(&(0x7f00000003c0)={0x1, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0xa082, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 5.211288635s ago: executing program 2 (id=9522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f0000000540), 0x0, &(0x7f0000000740), &(0x7f0000000780), 0xbe0d, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.951886441s ago: executing program 5 (id=9524): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4a}}, 0x14}, 0x1, 0x0, 0x0, 0x48841}, 0x20000010) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x8}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) 4.550617892s ago: executing program 5 (id=9526): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0xfffffffd, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) 4.18129555s ago: executing program 1 (id=9528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 3.823970807s ago: executing program 1 (id=9529): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f0000001400), 0x4) 3.606268762s ago: executing program 2 (id=9530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0xec, 0xe, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb8, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x75, 0x1, "6802ab382c7330386510783d5a8a3e5ddd967c8939f180dacb88c48a6615fe7736140c09181b37ebf9a69d3efac4a1b361da9d7bb4c28e55d3baee31f13ab144fa65f2c6543febea4074420cb51cb2a3f97d9c3b63f45e0e63cb7d7a6d3ef813962d530836ea84960a34a459e13dc80f64"}]}]}]}]}], {0x14}}, 0x114}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 3.396930918s ago: executing program 1 (id=9531): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0xffff, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x60000000, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.20105032s ago: executing program 1 (id=9532): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009", @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 788.813026ms ago: executing program 2 (id=9533): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = syz_clone(0x800000, &(0x7f0000000a00), 0x0, &(0x7f0000000a40), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0) 763.904462ms ago: executing program 5 (id=9534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 608.284255ms ago: executing program 1 (id=9535): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 519.508868ms ago: executing program 5 (id=9536): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="0000210000000000000042be83d04f26ab2c821e", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b40)="fecd", &(0x7f0000001c40), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x4}, 0x38) 281.584513ms ago: executing program 1 (id=9537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 230.267622ms ago: executing program 5 (id=9538): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r2}, 0xc) 0s ago: executing program 2 (id=9539): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x10efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'io'}]}, 0x4) kernel console output (not intermixed with test programs): ink: 'syz.1.3687': attribute type 2 has an invalid length. [ 279.294393][T13570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3684'. [ 280.045544][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'. [ 280.167560][T13607] netlink: 'syz.2.3705': attribute type 62 has an invalid length. [ 280.369626][T13618] netlink: set zone limit has 4 unknown bytes [ 280.645200][T13629] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3715'. [ 281.188238][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3724'. [ 281.188283][T13655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3724'. [ 281.188300][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 281.196119][T13654] netlink: 316 bytes leftover after parsing attributes in process `syz.2.3723'. [ 281.196179][T13654] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3723'. [ 282.010859][T13683] netlink: 'syz.4.3735': attribute type 21 has an invalid length. [ 282.018906][T13683] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.192392][T13687] netlink: 'syz.4.3737': attribute type 1 has an invalid length. [ 282.192447][T13687] netlink: 'syz.4.3737': attribute type 1 has an invalid length. [ 282.438984][T13696] netlink: 'syz.2.3740': attribute type 11 has an invalid length. [ 282.447292][T13696] __nla_validate_parse: 2 callbacks suppressed [ 282.447335][T13696] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3740'. [ 282.736882][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'. [ 282.839069][T13709] netlink: 'syz.4.3748': attribute type 10 has an invalid length. [ 283.297854][T13727] validate_nla: 2 callbacks suppressed [ 283.305523][T13727] netlink: 'syz.3.3757': attribute type 10 has an invalid length. [ 283.305573][T13727] macvlan1: entered promiscuous mode [ 283.305615][T13727] macvlan1: entered allmulticast mode [ 283.306388][T13727] veth1_vlan: entered allmulticast mode [ 283.351439][T13727] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 283.413843][T13730] netlink: 'syz.3.3760': attribute type 58 has an invalid length. [ 283.445059][T13731] netlink: 'syz.1.3758': attribute type 1 has an invalid length. [ 283.491977][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3759'. [ 283.492027][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3759'. [ 283.560572][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3763'. [ 283.627984][T13739] netlink: 'syz.2.3762': attribute type 21 has an invalid length. [ 284.315163][T13775] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3781'. [ 284.555462][T13789] netlink: 'syz.2.3784': attribute type 1 has an invalid length. [ 284.978629][T13808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3797'. [ 284.978705][T13808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3797'. [ 285.105625][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3801'. [ 285.371325][T13826] netlink: 'syz.3.3806': attribute type 1 has an invalid length. [ 285.661580][T13842] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3814'. [ 285.845548][T13851] netlink: 'syz.1.3816': attribute type 4 has an invalid length. [ 286.065248][T13862] netlink: 'syz.2.3823': attribute type 2 has an invalid length. [ 286.204456][T13868] netlink: 'syz.1.3830': attribute type 29 has an invalid length. [ 286.212679][T13868] netlink: 'syz.1.3830': attribute type 29 has an invalid length. [ 286.256691][T13872] net_ratelimit: 1 callbacks suppressed [ 286.256731][T13872] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.788790][T13898] team0 (unregistering): Port device team_slave_0 removed [ 286.818198][T13898] team0 (unregistering): Port device team_slave_1 removed [ 287.490961][T13937] __nla_validate_parse: 4 callbacks suppressed [ 287.491028][T13937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3860'. [ 287.725923][T13950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3863'. [ 288.100295][T13972] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3877'. [ 289.062656][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3899'. [ 289.314549][T14012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3898'. [ 289.314595][T14012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3898'. [ 289.426891][T14018] validate_nla: 6 callbacks suppressed [ 289.433056][T14018] netlink: 'syz.2.3901': attribute type 2 has an invalid length. [ 289.444088][T14018] netlink: 'syz.2.3901': attribute type 7 has an invalid length. [ 289.471555][T14018] U: entered promiscuous mode [ 289.558557][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3902'. [ 289.574525][T14026] netlink: 'syz.3.3903': attribute type 7 has an invalid length. [ 289.585012][T14025] netlink: 'syz.1.3904': attribute type 21 has an invalid length. [ 290.039886][T14044] netlink: 'syz.4.3914': attribute type 10 has an invalid length. [ 290.039925][T14044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3914'. [ 290.237200][T14044] bond0: entered allmulticast mode [ 290.237237][T14044] bond_slave_0: entered allmulticast mode [ 290.237285][T14044] bond_slave_1: entered allmulticast mode [ 290.237303][T14044] batadv_slave_1: entered allmulticast mode [ 290.237672][T14044] bridge0: port 3(bond0) entered blocking state [ 290.237774][T14044] bridge0: port 3(bond0) entered disabled state [ 290.315136][T14044] bond0: entered promiscuous mode [ 290.315191][T14044] bond_slave_0: entered promiscuous mode [ 290.315805][T14044] bond_slave_1: entered promiscuous mode [ 290.316536][T14044] batadv_slave_1: entered promiscuous mode [ 291.106291][T14083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3933'. [ 291.106338][T14083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3933'. [ 291.294245][T14094] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 291.928096][T14124] netlink: 'syz.3.3953': attribute type 21 has an invalid length. [ 291.928200][T14124] netlink: 'syz.3.3953': attribute type 5 has an invalid length. [ 292.250909][T14143] netlink: 'syz.2.3964': attribute type 16 has an invalid length. [ 292.250945][T14143] netlink: 'syz.2.3964': attribute type 17 has an invalid length. [ 292.251004][T14143] netlink: 'syz.2.3964': attribute type 27 has an invalid length. [ 292.628936][T14165] __nla_validate_parse: 8 callbacks suppressed [ 292.628981][T14165] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3972'. [ 292.629001][T14165] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 292.886220][T14177] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3974'. [ 292.886262][T14177] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3974'. [ 292.886437][T14177] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3974'. [ 293.614233][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3998'. [ 293.614346][T14218] openvswitch: netlink: EtherType 300 is less than min 600 [ 294.216307][T14240] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.217503][T14240] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.345941][T14240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.358400][T14240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.528705][T14242] .: renamed from dummy0 [ 294.571430][ T138] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.572766][ T248] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.572855][ T248] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.572937][ T248] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.649021][T14261] openvswitch: netlink: IP tunnel dst address not specified [ 294.824683][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 294.835869][T14268] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 294.976076][T14278] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 295.362719][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4035'. [ 296.528677][T14356] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4056'. [ 296.985496][T14377] validate_nla: 5 callbacks suppressed [ 296.985553][T14377] netlink: 'syz.0.4064': attribute type 1 has an invalid length. [ 297.064485][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4068'. [ 297.078017][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4068'. [ 297.087400][T14384] netlink: 'syz.0.4068': attribute type 10 has an invalid length. [ 297.269953][T14391] netlink: 'syz.0.4073': attribute type 2 has an invalid length. [ 297.386118][T14397] netlink: Conntrack attr has 8 unknown bytes [ 297.386175][T14397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.899348][T14424] netlink: 'syz.3.4086': attribute type 10 has an invalid length. [ 297.907507][T14424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.152333][T14424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.301782][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'. [ 298.680914][T14454] xt_hashlimit: size too large, truncated to 1048576 [ 298.681102][T14454] xt_hashlimit: max too large, truncated to 1048576 [ 299.535564][T14493] netlink: 'syz.1.4114': attribute type 1 has an invalid length. [ 299.699567][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4118'. [ 299.775126][T14505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4122'. [ 299.785751][T14505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4122'. [ 299.843164][T14510] netlink: 'syz.0.4121': attribute type 2 has an invalid length. [ 299.853619][T14510] netlink: 'syz.0.4121': attribute type 5 has an invalid length. [ 299.853643][T14510] netlink: 'syz.0.4121': attribute type 2 has an invalid length. [ 299.853657][T14510] netlink: 'syz.0.4121': attribute type 5 has an invalid length. [ 299.904911][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4124'. [ 300.118201][T14525] netlink: 'syz.0.4131': attribute type 8 has an invalid length. [ 300.167536][T14527] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4130'. [ 300.204645][T14530] block nbd0: not configured, cannot reconfigure [ 300.407601][T14541] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4136'. [ 300.476663][T14549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4142'. [ 301.489000][T14585] syz.4.4159 (14585) used greatest stack depth: 18088 bytes left [ 302.008315][T14622] validate_nla: 5 callbacks suppressed [ 302.008368][T14622] netlink: 'syz.4.4172': attribute type 21 has an invalid length. [ 302.008489][T14622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4172'. [ 302.008541][T14622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4172'. [ 302.063642][T14626] netlink: 'syz.3.4174': attribute type 21 has an invalid length. [ 302.071815][T14626] netlink: 'syz.3.4174': attribute type 1 has an invalid length. [ 302.723658][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.816410][T14704] netlink: 'syz.4.4210': attribute type 1 has an invalid length. [ 303.874809][T14710] __nla_validate_parse: 2 callbacks suppressed [ 303.888078][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4214'. [ 303.897481][T14710] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4214'. [ 303.907112][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4214'. [ 303.917651][T14710] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4214'. [ 303.926974][T14710] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 304.037153][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4217'. [ 304.130805][T14719] netlink: 'syz.2.4216': attribute type 10 has an invalid length. [ 304.130854][T14719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4216'. [ 304.256753][T14727] nbd: must specify a device to reconfigure [ 304.344687][T14732] netlink: 'syz.2.4223': attribute type 21 has an invalid length. [ 304.355825][T14732] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4223'. [ 304.477409][T14736] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4225'. [ 304.570403][T14742] netlink: 'syz.2.4227': attribute type 32 has an invalid length. [ 304.680656][T14748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.762439][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 305.008630][T14766] netlink: 'syz.3.4241': attribute type 1 has an invalid length. [ 305.008670][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4241'. [ 305.643288][T14802] netlink: 'syz.0.4259': attribute type 2 has an invalid length. [ 305.643329][T14802] netlink: 'syz.0.4259': attribute type 8 has an invalid length. [ 305.903654][T14811] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 56 [ 307.245178][T14876] validate_nla: 1 callbacks suppressed [ 307.245242][T14876] netlink: 'syz.2.4295': attribute type 32 has an invalid length. [ 307.843819][T14908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.861641][T15002] netlink: 'syz.1.4356': attribute type 1 has an invalid length. [ 309.861682][T15002] __nla_validate_parse: 10 callbacks suppressed [ 309.861695][T15002] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.4356'. [ 310.439418][T15020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4364'. [ 310.439531][T15020] netlink: 'syz.1.4364': attribute type 1 has an invalid length. [ 310.616747][T15025] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 311.196500][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4374'. [ 311.254877][T15045] netlink: 'syz.3.4375': attribute type 5 has an invalid length. [ 311.254919][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4375'. [ 311.300227][T15051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4378'. [ 311.302387][T15048] netlink: 'syz.1.4377': attribute type 23 has an invalid length. [ 311.366734][T15051] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4378'. [ 311.732953][T15071] netlink: 'syz.4.4386': attribute type 11 has an invalid length. [ 311.999438][T15083] netlink: 'syz.0.4394': attribute type 7 has an invalid length. [ 312.221350][T15094] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 312.748912][T15123] tipc: Enabling of bearer rejected, media not registered [ 313.354932][T15151] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4427'. [ 313.413932][T15153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4428'. [ 313.513103][T15159] netlink: 'syz.4.4432': attribute type 2 has an invalid length. [ 313.830503][T15173] netlink: 'syz.4.4438': attribute type 39 has an invalid length. [ 313.845667][T15173] veth1_vlan: left promiscuous mode [ 313.854696][T15173] macvlan1: entered promiscuous mode [ 313.854717][T15173] macvlan1: entered allmulticast mode [ 313.969442][T15177] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4439'. [ 313.969484][T15177] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4439'. [ 314.010934][T15179] netlink: 'syz.0.4441': attribute type 1 has an invalid length. [ 314.018772][T15179] netlink: 'syz.0.4441': attribute type 2 has an invalid length. [ 314.306171][T15192] dummy1: entered promiscuous mode [ 314.314696][T15192] dummy1: entered allmulticast mode [ 315.358249][T15241] netlink: 'syz.1.4471': attribute type 11 has an invalid length. [ 315.719862][T15251] __nla_validate_parse: 6 callbacks suppressed [ 315.720112][T15251] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4476'. [ 315.762428][T15258] netlink: 'syz.1.4480': attribute type 21 has an invalid length. [ 315.771244][T15258] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4480'. [ 315.784959][T15258] netlink: 'syz.1.4480': attribute type 4 has an invalid length. [ 315.785018][T15258] netlink: 'syz.1.4480': attribute type 5 has an invalid length. [ 315.785037][T15258] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4480'. [ 315.788374][T15254] netlink: 'syz.3.4478': attribute type 46 has an invalid length. [ 315.788408][T15254] netlink: 'syz.3.4478': attribute type 28 has an invalid length. [ 315.788441][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4478'. [ 315.958315][T15259] ovs-s!!: entered promiscuous mode [ 317.143530][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.143601][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.311665][T15321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4510'. [ 318.100325][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4529'. [ 318.207265][T15369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4531'. [ 318.777706][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4545'. [ 318.991392][T15412] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 319.323739][T15428] validate_nla: 4 callbacks suppressed [ 319.323790][T15428] netlink: 'syz.3.4560': attribute type 4 has an invalid length. [ 320.090979][T15459] netlink: 'syz.4.4574': attribute type 31 has an invalid length. [ 320.775671][T15484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4586'. [ 320.775721][T15484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4586'. [ 320.894097][T15489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4589'. [ 320.894145][T15489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4589'. [ 320.940647][T15492] netlink: 'syz.4.4591': attribute type 8 has an invalid length. [ 320.948496][T15492] netlink: 'syz.4.4591': attribute type 5 has an invalid length. [ 321.379656][T15515] netlink: 516 bytes leftover after parsing attributes in process `syz.3.4602'. [ 321.392312][T15516] netlink: 'syz.2.4603': attribute type 1 has an invalid length. [ 321.392378][T15516] netlink: 'syz.2.4603': attribute type 1 has an invalid length. [ 321.488817][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4604'. [ 321.654254][T15531] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4610'. [ 321.893642][T15542] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4615'. [ 322.001179][T15550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.639555][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4638'. [ 322.768603][T15590] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 322.836919][T15596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4643'. [ 323.015257][T15606] netlink: 'syz.0.4646': attribute type 4 has an invalid length. [ 323.070409][T15610] netlink: 'syz.4.4648': attribute type 2 has an invalid length. [ 323.524465][T15633] openvswitch: netlink: Multiple metadata blocks provided [ 323.595441][T15637] netlink: 'syz.4.4661': attribute type 7 has an invalid length. [ 323.646841][T15639] nftables ruleset with unbound chain [ 324.144966][T15659] netlink: 'syz.4.4672': attribute type 6 has an invalid length. [ 324.662008][T15691] netlink: 'syz.4.4689': attribute type 21 has an invalid length. [ 324.948043][T15707] netlink: 'syz.1.4696': attribute type 15 has an invalid length. [ 325.015962][T15707] vxlan1: entered promiscuous mode [ 325.458149][T15737] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 325.842067][T15760] netlink: 'syz.4.4722': attribute type 15 has an invalid length. [ 325.893824][T15760] vxlan1: entered allmulticast mode [ 326.409530][T15793] __nla_validate_parse: 9 callbacks suppressed [ 326.409595][T15793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4739'. [ 326.791732][T15814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4748'. [ 327.201344][T15838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.297259][T15842] netlink: 'syz.2.4762': attribute type 1 has an invalid length. [ 327.297310][T15842] netlink: 'syz.2.4762': attribute type 1 has an invalid length. [ 327.945925][T15880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4781'. [ 328.078430][T15883] openvswitch: netlink: IP tunnel TTL not specified. [ 328.465557][T15908] netlink: 'syz.2.4794': attribute type 7 has an invalid length. [ 328.465598][T15908] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4794'. [ 328.512993][T15912] netlink: 'syz.0.4797': attribute type 15 has an invalid length. [ 328.643320][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4803'. [ 328.643432][T15917] netlink: Unknown conntrack attr (0) [ 328.813861][T15929] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4808'. [ 328.859572][T15930] netlink: 'syz.1.4804': attribute type 21 has an invalid length. [ 328.859647][T15930] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4804'. [ 328.895676][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4806'. [ 328.952005][T15936] Q6`Ҙ: renamed from lo (while UP) [ 329.026465][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4813'. [ 329.143173][T15949] openvswitch: netlink: Multiple metadata blocks provided [ 329.671168][T15969] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4824'. [ 329.682289][T15969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.438850][T16008] openvswitch: netlink: Message has 12 unknown bytes. [ 330.438908][T16008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.934234][T16031] netlink: 'syz.0.4855': attribute type 21 has an invalid length. [ 331.115759][T16040] netlink: NAT attribute has 5 unknown bytes [ 331.115815][T16040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.584324][T16056] openvswitch: netlink: Actions may not be safe on all matching packets [ 331.708805][T16064] __nla_validate_parse: 3 callbacks suppressed [ 331.708857][T16064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4871'. [ 331.708875][T16064] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4871'. [ 331.708897][T16064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4871'. [ 331.708914][T16064] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4871'. [ 332.274109][T16089] netlink: 'syz.1.4883': attribute type 8 has an invalid length. [ 332.342066][T16092] netlink: 'syz.3.4888': attribute type 1 has an invalid length. [ 332.428748][T16098] netlink: 'syz.3.4889': attribute type 21 has an invalid length. [ 332.440274][T16098] netlink: 'syz.3.4889': attribute type 2 has an invalid length. [ 332.617247][T16107] netlink: 'syz.4.4895': attribute type 3 has an invalid length. [ 332.617283][T16107] netlink: 'syz.4.4895': attribute type 1 has an invalid length. [ 332.837521][T16117] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4898'. [ 333.576289][T16155] netlink: 'syz.0.4917': attribute type 1 has an invalid length. [ 333.661811][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4920'. [ 333.761692][T16167] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4921'. [ 334.411884][T16203] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4941'. [ 334.831547][T16229] hsr0: entered promiscuous mode [ 334.831584][T16229] hsr0: entered allmulticast mode [ 334.831615][T16229] hsr_slave_0: entered allmulticast mode [ 334.831634][T16229] hsr_slave_1: entered allmulticast mode [ 334.883800][T16231] netlink: 'syz.1.4954': attribute type 5 has an invalid length. [ 334.883846][T16231] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4954'. [ 335.079905][T16242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4962'. [ 335.260613][T16253] netlink: 'syz.1.4965': attribute type 33 has an invalid length. [ 335.963309][T16292] validate_nla: 2 callbacks suppressed [ 335.963364][T16292] netlink: 'syz.2.4986': attribute type 2 has an invalid length. [ 336.266831][T16311] netlink: zone id is out of range [ 336.272670][T16311] netlink: zone id is out of range [ 336.278112][T16311] netlink: zone id is out of range [ 336.278126][T16311] netlink: zone id is out of range [ 336.278135][T16311] netlink: zone id is out of range [ 336.278144][T16311] netlink: zone id is out of range [ 336.278153][T16311] netlink: zone id is out of range [ 336.278162][T16311] netlink: zone id is out of range [ 336.278170][T16311] netlink: zone id is out of range [ 336.278179][T16311] netlink: zone id is out of range [ 336.469543][T16319] nbd: must specify an index to disconnect [ 336.474560][T16321] netlink: 'syz.4.4997': attribute type 16 has an invalid length. [ 336.509034][T16324] netlink: 'syz.0.5001': attribute type 23 has an invalid length. [ 337.473752][T16370] __nla_validate_parse: 4 callbacks suppressed [ 337.480456][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5024'. [ 337.846340][T16387] netlink: 'syz.2.5031': attribute type 1 has an invalid length. [ 338.051283][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5039'. [ 338.051322][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5039'. [ 338.084064][T16402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5040'. [ 338.293149][T16413] netlink: 'syz.1.5044': attribute type 4 has an invalid length. [ 338.686012][T16433] netlink: 'syz.2.5053': attribute type 1 has an invalid length. [ 339.060871][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5064'. [ 339.289598][T16467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5070'. [ 339.744672][T16490] netlink: 'syz.1.5082': attribute type 30 has an invalid length. [ 339.946055][T16502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5087'. [ 340.250441][T16517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5095'. [ 340.383091][T16524] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5098'. [ 340.998926][T16562] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5114'. [ 341.105485][T16566] netlink: 'syz.3.5117': attribute type 2 has an invalid length. [ 341.712799][T16604] net_ratelimit: 40 callbacks suppressed [ 341.721853][T16604] netlink: zone id is out of range [ 341.721886][T16604] netlink: zone id is out of range [ 341.721909][T16604] netlink: zone id is out of range [ 341.721920][T16604] netlink: zone id is out of range [ 341.721931][T16604] netlink: zone id is out of range [ 341.721940][T16604] netlink: zone id is out of range [ 341.721951][T16604] netlink: zone id is out of range [ 341.721961][T16604] netlink: zone id is out of range [ 341.721971][T16604] netlink: zone id is out of range [ 341.721981][T16604] netlink: zone id is out of range [ 341.924775][T16614] netlink: 'syz.0.5143': attribute type 2 has an invalid length. [ 341.979227][T16617] netlink: 'syz.4.5141': attribute type 153 has an invalid length. [ 342.473151][T16646] netlink: 'syz.4.5156': attribute type 1 has an invalid length. [ 342.608143][T16654] __nla_validate_parse: 8 callbacks suppressed [ 342.616858][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5162'. [ 343.280279][T16684] netlink: 'syz.0.5175': attribute type 16 has an invalid length. [ 343.280315][T16684] netlink: 'syz.0.5175': attribute type 17 has an invalid length. [ 343.480540][T16684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.497395][T16684] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.524511][ T31] audit: type=1107 audit(1789454992.242:3): pid=16694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 343.540275][T16684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.603073][T16684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.613091][T16684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.626908][T16684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.637678][T16684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.693349][T16684] veth1_vlan: left promiscuous mode [ 343.714452][T16684] veth0_vlan: left promiscuous mode [ 343.733141][T16684] veth0_vlan: entered promiscuous mode [ 343.741575][T16702] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5185'. [ 343.754232][T16684] veth1_vlan: entered promiscuous mode [ 343.769253][T16684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.777553][T16684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.785362][T16684] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 343.824740][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.825044][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.844861][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.845224][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.110540][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.110603][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.110684][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.493013][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5200'. [ 344.556587][T16737] netlink: 'syz.0.5202': attribute type 2 has an invalid length. [ 344.723792][T16747] netlink: 'syz.2.5206': attribute type 1 has an invalid length. [ 344.897390][T16755] ovs-s!: entered promiscuous mode [ 345.270623][T16776] netlink: 'syz.3.5219': attribute type 4 has an invalid length. [ 345.888277][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5235'. [ 345.888322][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5235'. [ 345.888351][T16808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5235'. [ 345.900868][ T31] audit: type=1107 audit(1789454994.612:4): pid=16807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 345.998294][T16813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5239'. [ 346.010182][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5239'. [ 346.203958][T16824] sctp: [Deprecated]: syz.0.5244 (pid 16824) Use of int in max_burst socket option deprecated. [ 346.203958][T16824] Use struct sctp_assoc_value instead [ 346.317282][T16829] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5246'. [ 346.639355][T16844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5253'. [ 346.764850][T16851] net_ratelimit: 30 callbacks suppressed [ 346.764908][T16851] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 346.969032][T16863] netlink: 'syz.4.5262': attribute type 1 has an invalid length. [ 347.254884][T16878] netlink: 'syz.0.5271': attribute type 23 has an invalid length. [ 347.501472][T16890] netlink: 'syz.0.5277': attribute type 2 has an invalid length. [ 348.372627][T16939] netlink: 'syz.3.5299': attribute type 2 has an invalid length. [ 348.401191][T16944] netlink: 'syz.4.5302': attribute type 10 has an invalid length. [ 349.081690][T16976] netlink: 'syz.3.5319': attribute type 15 has an invalid length. [ 349.091945][T16976] netlink: 'syz.3.5319': attribute type 7 has an invalid length. [ 349.315750][T16990] netlink: 'syz.1.5324': attribute type 3 has an invalid length. [ 349.363634][T16994] __nla_validate_parse: 2 callbacks suppressed [ 349.367690][T16994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5327'. [ 349.509921][T17000] netlink: 'syz.1.5330': attribute type 2 has an invalid length. [ 350.073853][T17032] netlink: 'syz.2.5347': attribute type 32 has an invalid length. [ 350.388223][T17048] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 350.388274][T17048] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 350.619336][T17060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5360'. [ 351.030710][T17080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5370'. [ 351.030768][T17080] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 351.791973][T17122] openvswitch: netlink: IPv4 tunnel dst address is zero [ 352.870610][T17174] validate_nla: 2 callbacks suppressed [ 352.870656][T17174] netlink: 'syz.3.5417': attribute type 29 has an invalid length. [ 352.870673][T17174] netlink: 'syz.3.5417': attribute type 16 has an invalid length. [ 352.870688][T17174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5417'. [ 353.283049][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5423'. [ 353.308430][T17188] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5424'. [ 353.308470][T17188] veth0_to_bond: default FDB implementation only supports local addresses [ 353.442304][T17192] netlink: 'syz.0.5427': attribute type 1 has an invalid length. [ 353.672178][T17206] netlink: 'syz.2.5433': attribute type 2 has an invalid length. [ 353.763500][T17209] netlink: 'syz.3.5434': attribute type 17 has an invalid length. [ 353.852816][T17209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.862434][T17209] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.951791][T17209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.962308][T17209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.978676][T17209] veth0_vlan: left promiscuous mode [ 353.985933][T17209] veth0_vlan: entered promiscuous mode [ 353.997794][T17209] veth1_macvtap: left promiscuous mode [ 354.004615][T17209] veth0_macvtap: left promiscuous mode [ 354.011780][T17209] veth0_macvtap: entered promiscuous mode [ 354.019074][T17209] veth1_macvtap: entered promiscuous mode [ 354.032502][T17209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.040931][T17209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.049470][T17209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.058174][T17209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.079361][ T1159] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.079408][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.080743][ T1159] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.080820][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.200464][ T1159] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.200520][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.200611][ T1159] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.200706][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.630046][T17246] Q6`Ҙ speed is unknown, defaulting to 1000 [ 354.758493][T17252] netlink: 'syz.1.5456': attribute type 17 has an invalid length. [ 354.996325][T17266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5460'. [ 355.009556][T17265] netlink: 'syz.4.5461': attribute type 10 has an invalid length. [ 355.280297][T17283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5471'. [ 355.280339][T17283] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 355.358075][T17286] netlink: 'syz.0.5472': attribute type 1 has an invalid length. [ 355.676878][T17305] netlink: zone id is out of range [ 355.676908][T17305] netlink: zone id is out of range [ 355.676930][T17305] netlink: zone id is out of range [ 355.676941][T17305] netlink: zone id is out of range [ 355.676951][T17305] netlink: zone id is out of range [ 355.676961][T17305] netlink: zone id is out of range [ 355.676971][T17305] netlink: zone id is out of range [ 355.676982][T17305] netlink: zone id is out of range [ 355.744884][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5483'. [ 355.777914][T17309] netlink: 'syz.2.5484': attribute type 2 has an invalid length. [ 355.894522][T17314] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.5485'. [ 355.948234][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5486'. [ 356.207815][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5494'. [ 356.314615][T17337] netlink: 'syz.2.5496': attribute type 2 has an invalid length. [ 356.423494][T17345] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5501'. [ 357.123110][T17383] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5519'. [ 357.320341][T17393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5524'. [ 357.427803][T17400] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5529'. [ 358.450375][T17447] validate_nla: 4 callbacks suppressed [ 358.450421][T17447] netlink: 'syz.3.5550': attribute type 16 has an invalid length. [ 358.725150][T17457] net_ratelimit: 12 callbacks suppressed [ 358.725294][T17457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.761676][T17461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.122152][T17477] netlink: 'syz.0.5565': attribute type 10 has an invalid length. [ 359.576551][T17447] veth1_vlan: left allmulticast mode [ 359.871274][ T248] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.871328][ T248] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.871391][ T248] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.871425][ T248] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.871464][ T248] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.871496][ T248] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.871535][ T248] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.871566][ T248] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.127413][T17510] __nla_validate_parse: 2 callbacks suppressed [ 360.136129][T17510] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5574'. [ 360.585350][T17535] xt_IDLETIMER: timeout value is zero [ 360.666223][T17541] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5592'. [ 360.676142][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5592'. [ 360.807083][T17546] netlink: 'syz.4.5593': attribute type 12 has an invalid length. [ 360.816826][T17546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5593'. [ 360.885131][T17554] netlink: 'syz.2.5598': attribute type 4 has an invalid length. [ 360.893117][T17554] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5598'. [ 360.908873][T17554] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 360.918765][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5597'. [ 360.936058][T17552] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5597'. [ 360.936103][T17552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.148455][T17565] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.5601'. [ 361.480101][T17584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5612'. [ 361.726530][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5616'. [ 361.782947][T17599] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 362.066578][T17610] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 362.351410][T17630] netlink: 'syz.0.5634': attribute type 12 has an invalid length. [ 362.696513][T17649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.956557][T17663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.992960][T17668] netlink: 'syz.2.5654': attribute type 11 has an invalid length. [ 363.191327][T17676] netlink: 'syz.1.5661': attribute type 16 has an invalid length. [ 363.191363][T17676] netlink: 'syz.1.5661': attribute type 17 has an invalid length. [ 363.303488][T17681] netlink: 'syz.3.5658': attribute type 1 has an invalid length. [ 363.303532][T17681] netlink: 'syz.3.5658': attribute type 1 has an invalid length. [ 363.354813][T17676] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 363.440259][ T138] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.440554][ T138] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.460008][ T1159] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.460477][ T1159] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.254004][T17731] netlink: zone id is out of range [ 364.260582][T17731] netlink: zone id is out of range [ 364.260628][T17731] netlink: zone id is out of range [ 364.260642][T17731] netlink: zone id is out of range [ 364.597724][T17746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.950132][T17767] netlink: 'syz.2.5701': attribute type 21 has an invalid length. [ 365.335161][T17787] __nla_validate_parse: 10 callbacks suppressed [ 365.343393][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5711'. [ 365.541694][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5715'. [ 365.960077][T17819] netlink: 'syz.3.5722': attribute type 21 has an invalid length. [ 366.226929][T17836] netlink: 'syz.2.5728': attribute type 21 has an invalid length. [ 366.226967][T17836] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5728'. [ 366.424662][T17843] netlink: 'syz.0.5731': attribute type 2 has an invalid length. [ 366.424704][T17843] netlink: 'syz.0.5731': attribute type 11 has an invalid length. [ 366.426721][T17843] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5731'. [ 366.470855][T17847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5732'. [ 366.850599][T17860] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5739'. [ 367.780545][T17889] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 367.871949][T17895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.942393][T17897] netlink: 15 bytes leftover after parsing attributes in process `syz.3.5756'. [ 368.003449][T17905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5759'. [ 368.249719][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5765'. [ 368.482642][T17929] netlink: 'syz.0.5770': attribute type 16 has an invalid length. [ 368.522442][T17932] netlink: 'syz.2.5771': attribute type 21 has an invalid length. [ 368.530653][T17932] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5771'. [ 368.556576][T17929] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.559260][T17929] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.652529][T17929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.674031][T17929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.790538][ T1159] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.805730][ T1159] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.805810][ T1159] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.085406][T17950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.267061][T17957] netlink: 'syz.2.5782': attribute type 21 has an invalid length. [ 369.286600][T17958] netlink: 'syz.0.5783': attribute type 4 has an invalid length. [ 370.265243][T18005] openvswitch: netlink: IP tunnel dst address not specified [ 370.447242][T18013] __nla_validate_parse: 5 callbacks suppressed [ 370.454039][T18013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5811'. [ 370.625960][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5814'. [ 370.907778][T18040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5825'. [ 370.987034][T18044] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5826'. [ 371.186078][T18055] netlink: 'syz.1.5832': attribute type 21 has an invalid length. [ 371.390009][T18064] netlink: 'syz.2.5836': attribute type 11 has an invalid length. [ 371.416662][T18066] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5837'. [ 371.416704][T18066] tc_dump_action: action bad kind [ 373.662737][T18143] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5872'. [ 374.121181][T18160] netlink: 'syz.4.5877': attribute type 29 has an invalid length. [ 374.132063][T18160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5877'. [ 374.145785][T18160] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5877'. [ 374.858143][T18188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5891'. [ 374.858204][T18188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5891'. [ 375.186105][T18200] netlink: 'syz.4.5897': attribute type 3 has an invalid length. [ 375.545021][T18211] netlink: 'syz.1.5903': attribute type 4 has an invalid length. [ 375.681825][T18215] netlink: 'syz.4.5904': attribute type 13 has an invalid length. [ 375.696026][T18215] gretap0: refused to change device tx_queue_len [ 375.702905][T18215] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 375.970143][T18222] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.184259][T18228] netlink: 'syz.1.5910': attribute type 39 has an invalid length. [ 376.329944][T18232] __nla_validate_parse: 2 callbacks suppressed [ 376.349335][T18232] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5912'. [ 376.361972][T18232] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 378.584090][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.584167][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.679455][T18238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5915'. [ 383.992515][T18276] netlink: 'syz.3.5926': attribute type 1 has an invalid length. [ 383.992559][T18276] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5926'. [ 384.284983][T18296] netlink: 'syz.2.5935': attribute type 2 has an invalid length. [ 384.832968][T18319] netlink: 'syz.4.5946': attribute type 1 has an invalid length. [ 384.854835][T18321] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5947'. [ 384.947622][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5950'. [ 386.030815][T18381] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 386.288468][T18397] netlink: 'syz.4.5984': attribute type 21 has an invalid length. [ 386.288536][T18397] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5984'. [ 386.635506][T18416] netlink: 'syz.3.5994': attribute type 32 has an invalid length. [ 386.635547][T18416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5994'. [ 387.345448][T18450] netlink: 'syz.3.6011': attribute type 22 has an invalid length. [ 387.354887][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6011'. [ 387.475102][T18458] ovs-s: entered promiscuous mode [ 387.609251][T18462] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6016'. [ 387.671919][T18411] dummy0 speed is unknown, defaulting to 1000 [ 387.898633][T18476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6024'. [ 387.898679][T18476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6024'. [ 388.446604][T18498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.666994][T18555] __nla_validate_parse: 1 callbacks suppressed [ 389.667039][T18555] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6062'. [ 389.892802][T18566] netlink: 'syz.1.6068': attribute type 1 has an invalid length. [ 391.068071][T18635] netlink: 'syz.4.6103': attribute type 33 has an invalid length. [ 391.068114][T18635] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6103'. [ 391.076733][T18635] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 391.335428][T18641] netlink: 'syz.4.6105': attribute type 1 has an invalid length. [ 391.360338][T18643] netlink: 'syz.0.6107': attribute type 2 has an invalid length. [ 391.403741][T18643] D'|o: entered promiscuous mode [ 391.740390][T18656] netlink: 'syz.1.6114': attribute type 3 has an invalid length. [ 391.995691][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6119'. [ 392.091019][T18671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6121'. [ 392.126865][T18673] openvswitch: netlink: Flow key attribute not present in set flow. [ 392.443661][T18694] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6132'. [ 392.452444][T18691] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6130'. [ 392.670007][T18705] netlink: 'syz.0.6138': attribute type 5 has an invalid length. [ 392.670047][T18705] netlink: 'syz.0.6138': attribute type 5 has an invalid length. [ 392.772501][T18714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6141'. [ 393.321214][T18741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6154'. [ 393.668767][T18761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.752272][T18766] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 393.904550][T18775] netlink: 45 bytes leftover after parsing attributes in process `syz.1.6170'. [ 394.013334][T18779] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6172'. [ 395.153937][T18842] tc_dump_action: action bad kind [ 395.191167][T18845] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.461894][T18857] __nla_validate_parse: 2 callbacks suppressed [ 395.461940][T18857] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6211'. [ 395.461963][T18857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6211'. [ 395.598977][T18864] netlink: 'syz.3.6216': attribute type 10 has an invalid length. [ 395.599026][T18864] geneve1: entered promiscuous mode [ 395.630241][T18864] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 395.639254][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.640425][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.640523][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.640592][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.778187][T18872] netlink: 'syz.4.6220': attribute type 19 has an invalid length. [ 395.778254][T18872] netlink: 'syz.4.6220': attribute type 28 has an invalid length. [ 395.778288][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6220'. [ 395.923846][T18880] netlink: 'syz.0.6226': attribute type 39 has an invalid length. [ 395.935666][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6226'. [ 395.944946][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6226'. [ 395.944968][T18880] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 396.239625][T18898] netlink: 'syz.3.6233': attribute type 3 has an invalid length. [ 396.239676][T18898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6233'. [ 396.412568][T18905] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6238'. [ 396.507668][T18910] netlink: 'syz.4.6241': attribute type 97 has an invalid length. [ 396.519458][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6241'. [ 396.528787][T18910] netlink: 'syz.4.6241': attribute type 97 has an invalid length. [ 396.537033][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6241'. [ 396.690772][T18920] netlink: 'syz.4.6245': attribute type 10 has an invalid length. [ 396.698775][T18920] netlink: 'syz.4.6245': attribute type 16 has an invalid length. [ 396.708002][T18920] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6245'. [ 398.015644][T18981] netlink: 'syz.2.6273': attribute type 1 has an invalid length. [ 398.292405][T18994] ipvlan0: entered promiscuous mode [ 398.512568][T19008] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 400.326681][T19107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.767172][T19132] __nla_validate_parse: 2 callbacks suppressed [ 400.767218][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6336'. [ 400.876110][T19140] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 401.062220][T19153] validate_nla: 2 callbacks suppressed [ 401.068014][T19153] netlink: 'syz.2.6343': attribute type 21 has an invalid length. [ 401.077766][T19153] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6343'. [ 401.077841][T19153] netlink: 'syz.2.6343': attribute type 4 has an invalid length. [ 401.077859][T19153] netlink: 'syz.2.6343': attribute type 5 has an invalid length. [ 401.077874][T19153] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6343'. [ 401.187302][T19160] netlink: 'syz.0.6349': attribute type 16 has an invalid length. [ 401.195596][T19160] netlink: 'syz.0.6349': attribute type 4 has an invalid length. [ 401.203688][T19160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6349'. [ 401.340326][T19164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6352'. [ 402.245566][T19208] can: request_module (can-proto-3) failed. [ 402.296706][T19213] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1r$Gt:uJ˺ [ 402.607304][T19231] netlink: 'syz.0.6381': attribute type 21 has an invalid length. [ 403.120989][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6396'. [ 403.285545][T19271] netlink: 'syz.1.6398': attribute type 21 has an invalid length. [ 403.338853][T19274] netlink: 'syz.2.6401': attribute type 9 has an invalid length. [ 403.625245][T19292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6410'. [ 404.123041][T19316] netlink: 'syz.0.6422': attribute type 5 has an invalid length. [ 404.155916][T19318] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6423'. [ 404.278676][T19328] netlink: 'syz.2.6429': attribute type 6 has an invalid length. [ 404.289239][T19328] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6429'. [ 404.710896][T19350] netlink: 'syz.0.6439': attribute type 11 has an invalid length. [ 404.986172][T19367] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6447'. [ 405.602985][T19401] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.668626][T19409] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 406.067913][T19432] __nla_validate_parse: 2 callbacks suppressed [ 406.075114][T19432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6479'. [ 406.250029][T19442] validate_nla: 6 callbacks suppressed [ 406.250077][T19442] netlink: 'syz.2.6483': attribute type 19 has an invalid length. [ 406.250099][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6483'. [ 406.446456][T19454] bridge_slave_1: left allmulticast mode [ 406.446511][T19454] bridge_slave_1: left promiscuous mode [ 406.446942][T19454] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.637692][T19454] bridge_slave_0: left allmulticast mode [ 406.644556][T19454] bridge_slave_0: left promiscuous mode [ 406.651453][T19454] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.869547][T19469] netlink: 'syz.3.6498': attribute type 4 has an invalid length. [ 406.869587][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6498'. [ 407.059787][T19475] openvswitch: netlink: Key 22 has unexpected len 12 expected 4 [ 407.919257][T19520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.442515][T19545] netlink: 'syz.4.6533': attribute type 21 has an invalid length. [ 408.479885][T19547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.074128][T19574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6547'. [ 409.074171][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6547'. [ 409.318079][T19585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6552'. [ 409.648128][T19601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6559'. [ 409.648173][T19601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6559'. [ 410.018120][T19621] netlink: 'syz.1.6567': attribute type 1 has an invalid length. [ 411.127255][T19679] netlink: 'syz.3.6595': attribute type 3 has an invalid length. [ 411.356676][T19691] netlink: 'syz.4.6601': attribute type 6 has an invalid length. [ 411.356727][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6601'. [ 412.291371][T19729] netlink: 'syz.4.6620': attribute type 12 has an invalid length. [ 412.341971][T19732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.783249][T19750] netlink: 'syz.0.6628': attribute type 29 has an invalid length. [ 412.993027][T19766] netlink: 'syz.4.6635': attribute type 2 has an invalid length. [ 414.594283][T19833] xt_time: unknown flags 0x74 [ 415.058759][T19856] netlink: 'syz.4.6671': attribute type 13 has an invalid length. [ 415.067867][T19856] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.6671'. [ 416.490047][T19922] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6700'. [ 417.256966][T19951] netlink: 'syz.4.6717': attribute type 1 has an invalid length. [ 417.311627][T19956] netlink: 253 bytes leftover after parsing attributes in process `syz.3.6718'. [ 417.311705][T19956] netlink: 'syz.3.6718': attribute type 1 has an invalid length. [ 417.311992][T19956] netlink: 14452 bytes leftover after parsing attributes in process `syz.3.6718'. [ 417.598847][T19962] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6722'. [ 417.839859][T19973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6728'. [ 417.839921][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6728'. [ 417.982050][T19978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6731'. [ 418.441290][T20003] xt_l2tp: missing protocol rule (udp|l2tpip) [ 418.688973][T20012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6747'. [ 419.488531][T20056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.498088][T20055] netlink: 'syz.4.6766': attribute type 1 has an invalid length. [ 419.841301][T20069] netlink: 'syz.2.6774': attribute type 11 has an invalid length. [ 420.159770][T20081] netlink: 'syz.3.6779': attribute type 6 has an invalid length. [ 420.159812][T20081] netlink: 360 bytes leftover after parsing attributes in process `syz.3.6779'. [ 420.229824][T20085] netlink: 'syz.2.6781': attribute type 153 has an invalid length. [ 420.488746][T20100] netlink: 'syz.3.6788': attribute type 13 has an invalid length. [ 420.500362][T20100] gretap0: refused to change device tx_queue_len [ 420.507083][T20100] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 420.745303][T20110] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6793'. [ 421.732163][T20157] __nla_validate_parse: 1 callbacks suppressed [ 421.732212][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6816'. [ 421.982928][T20165] netlink: 'syz.0.6820': attribute type 29 has an invalid length. [ 421.987699][T20165] netlink: 'syz.0.6820': attribute type 29 has an invalid length. [ 422.206549][T20167] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6821'. [ 422.953323][T20202] netlink: 16863 bytes leftover after parsing attributes in process `syz.4.6839'. [ 422.986015][T20205] netlink: 'syz.2.6838': attribute type 2 has an invalid length. [ 423.052354][T20207] netlink: 'syz.4.6841': attribute type 29 has an invalid length. [ 423.061250][T20207] netlink: 'syz.4.6841': attribute type 29 has an invalid length. [ 423.280755][T20215] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 423.367690][T20223] netlink: 731 bytes leftover after parsing attributes in process `syz.1.6849'. [ 423.472377][T20227] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6850'. [ 423.472426][T20227] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6850'. [ 423.564581][T20233] netlink: 'syz.1.6853': attribute type 4 has an invalid length. [ 423.572447][T20233] netlink: 14532 bytes leftover after parsing attributes in process `syz.1.6853'. [ 424.763419][T20274] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6874'. [ 425.444829][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6886'. [ 425.711304][T20314] tmpfs: Bad value for 'uid' [ 425.717602][T20314] tmpfs: Bad value for 'uid' [ 427.662191][T20368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6917'. [ 428.491329][T20413] netlink: 271 bytes leftover after parsing attributes in process `syz.3.6938'. [ 428.543178][T20417] netlink: 253 bytes leftover after parsing attributes in process `syz.4.6939'. [ 428.543252][T20417] netlink: 'syz.4.6939': attribute type 1 has an invalid length. [ 428.543385][T20417] netlink: 14452 bytes leftover after parsing attributes in process `syz.4.6939'. [ 428.727388][T20424] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6944'. [ 428.878110][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6945'. [ 429.184871][T20445] netlink: 'syz.3.6953': attribute type 3 has an invalid length. [ 429.195989][T20445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6953'. [ 430.438001][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6974'. [ 430.438725][T20488] xt_cgroup: path and classid specified [ 430.670403][T20497] openvswitch: netlink: Missing key (keys=40, expected=100) [ 430.716857][T20500] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6982'. [ 431.324962][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6998'. [ 431.917468][T20567] netlink: 'syz.3.7013': attribute type 2 has an invalid length. [ 432.148204][T20579] block nbd0: not configured, cannot reconfigure [ 433.205875][T20628] __nla_validate_parse: 3 callbacks suppressed [ 433.205937][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7042'. [ 433.259777][T20632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7043'. [ 433.914898][T20662] netlink: 'syz.1.7053': attribute type 2 has an invalid length. [ 434.476490][T20678] netlink: 'syz.0.7065': attribute type 1 has an invalid length. [ 434.485438][T20678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.669282][T20681] netlink: 'syz.0.7067': attribute type 21 has an invalid length. [ 435.191292][T20702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7076'. [ 435.912993][T20736] netlink: 'syz.4.7092': attribute type 39 has an invalid length. [ 436.267352][T20750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.695719][T20768] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7107'. [ 436.695784][T20768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7107'. [ 436.696842][T20768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7107'. [ 436.885675][T20774] netlink: 'syz.0.7110': attribute type 3 has an invalid length. [ 436.885717][T20774] netlink: 'syz.0.7110': attribute type 1 has an invalid length. [ 437.356946][T20783] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 439.670310][T20815] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7126'. [ 439.680097][T20815] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7126'. [ 439.989841][T20823] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 439.989901][T20823] CPU: 1 UID: 0 PID: 20823 Comm: syz.1.7130 Not tainted syzkaller #0 PREEMPT(full) [ 439.989930][T20823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 439.989949][T20823] Call Trace: [ 439.990025][T20823] [ 439.990094][T20823] dump_stack_lvl+0xe8/0x150 [ 439.990265][T20823] sysfs_warn_dup+0x8e/0xa0 [ 439.990328][T20823] sysfs_do_create_link_sd+0xc0/0x110 [ 439.990353][T20823] device_add_class_symlinks+0x1cf/0x240 [ 439.990447][T20823] device_add+0x467/0xb80 [ 439.990473][T20823] wiphy_register+0x1fc8/0x2ff0 [ 439.990612][T20823] ? __pfx_wiphy_register+0x10/0x10 [ 439.990653][T20823] ? __pfx_netdev_run_todo+0x10/0x10 [ 439.990755][T20823] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 439.990852][T20823] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 439.990942][T20823] ieee80211_register_hw+0x3d3d/0x4a50 [ 439.991004][T20823] ? ieee80211_register_hw+0x1991/0x4a50 [ 439.991056][T20823] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 439.991083][T20823] ? __asan_memset+0x22/0x50 [ 439.991124][T20823] ? __hrtimer_setup+0x1b7/0x260 [ 439.991174][T20823] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 439.991252][T20823] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 439.991310][T20823] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 439.991335][T20823] ? kstrndup+0xbd/0x160 [ 439.991382][T20823] ? kstrndup+0xbd/0x160 [ 439.991408][T20823] hwsim_new_radio_nl+0xd8b/0xf90 [ 439.991449][T20823] genl_family_rcv_msg_doit+0x233/0x340 [ 439.991548][T20823] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 439.991589][T20823] ? bpf_lsm_capable+0x9/0x20 [ 439.991620][T20823] ? security_capable+0x7e/0x2c0 [ 439.991707][T20823] genl_rcv_msg+0x614/0x7a0 [ 439.991738][T20823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.991761][T20823] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 439.991799][T20823] netlink_rcv_skb+0x226/0x4a0 [ 439.991830][T20823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.991854][T20823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.991901][T20823] ? down_read+0x2be/0x330 [ 439.992001][T20823] genl_rcv+0x28/0x40 [ 439.992022][T20823] netlink_unicast+0x7bd/0x940 [ 439.992062][T20823] netlink_sendmsg+0x813/0xb40 [ 439.992104][T20823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.992145][T20823] ? apparmor_socket_sendmsg+0x98/0x360 [ 439.992199][T20823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.992230][T20823] sock_sendmsg_nosec+0x13a/0x180 [ 439.992318][T20823] ____sys_sendmsg+0x54e/0x850 [ 439.992352][T20823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.992391][T20823] ? import_iovec+0x73/0xa0 [ 439.992464][T20823] ___sys_sendmsg+0x2a5/0x360 [ 439.992490][T20823] ? __lock_acquire+0x747/0x2de0 [ 439.992536][T20823] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.992602][T20823] ? __fget_files+0x2a/0x420 [ 439.992643][T20823] ? __fget_files+0x3a2/0x420 [ 439.992687][T20823] __x64_sys_sendmsg+0x1b1/0x290 [ 439.992714][T20823] ? perf_trace_preemptirq_template+0x270/0x350 [ 439.992757][T20823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.992809][T20823] do_syscall_64+0x166/0x520 [ 439.992858][T20823] ? trace_irq_disable+0x3b/0x140 [ 439.992879][T20823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.992929][T20823] ? clear_bhb_loop+0x70/0xc0 [ 439.992956][T20823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.992978][T20823] RIP: 0033:0x7ff745d9e159 [ 439.993039][T20823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.993083][T20823] RSP: 002b:00007ff746c09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.993140][T20823] RAX: ffffffffffffffda RBX: 00007ff746025fa0 RCX: 00007ff745d9e159 [ 439.993158][T20823] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 439.993173][T20823] RBP: 00007ff745e3503b R08: 0000000000000000 R09: 0000000000000000 [ 439.993188][T20823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.993202][T20823] R13: 00007ff746026038 R14: 00007ff746025fa0 R15: 00007fff68c4e158 [ 439.993241][T20823] [ 440.048618][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.048751][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.630289][T20830] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7133'. [ 441.281308][T20848] netlink: 11 bytes leftover after parsing attributes in process `syz.2.7142'. [ 441.993801][T20874] netlink: 'syz.3.7155': attribute type 3 has an invalid length. [ 441.993851][T20874] netlink: 'syz.3.7155': attribute type 1 has an invalid length. [ 442.621027][T20896] netlink: 'syz.4.7165': attribute type 17 has an invalid length. [ 442.629204][T20896] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 445.303373][T20972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7201'. [ 447.386343][T21035] netlink: 'syz.3.7230': attribute type 12 has an invalid length. [ 452.795979][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.807117][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.814690][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.825453][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.833145][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 453.383404][T21099] ovs-s: entered promiscuous mode [ 453.398112][T21099] openvswitch: ovs-s: Dropping previously announced user features [ 454.041167][T21076] dummy0 speed is unknown, defaulting to 1000 [ 454.910181][ T5619] Bluetooth: hci5: command tx timeout [ 455.212906][T21150] tmpfs: Bad value for 'uid' [ 455.212947][T21150] tmpfs: Bad value for 'uid' [ 456.132019][T21076] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.142128][T21076] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.150952][T21076] bridge_slave_0: entered allmulticast mode [ 456.163045][T21076] bridge_slave_0: entered promiscuous mode [ 456.176034][T21076] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.177817][T21076] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.205109][T21076] bridge_slave_1: entered allmulticast mode [ 456.220646][T21076] bridge_slave_1: entered promiscuous mode [ 456.487382][T21076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.574448][T21206] netlink: 'syz.2.7297': attribute type 29 has an invalid length. [ 456.608195][T21076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.671068][T21207] netlink: 'syz.2.7297': attribute type 29 has an invalid length. [ 456.733629][T21213] tmpfs: Unknown parameter 'measure' [ 456.757952][T21076] team0: Port device team_slave_0 added [ 456.822189][T21218] netlink: 'syz.4.7301': attribute type 10 has an invalid length. [ 456.836106][T21076] team0: Port device team_slave_1 added [ 456.876343][T21222] netlink: 'syz.4.7301': attribute type 10 has an invalid length. [ 456.979277][ T5619] Bluetooth: hci5: command tx timeout [ 457.015340][T21076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.015377][T21076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.015439][T21076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.104966][T21232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7307'. [ 457.388300][ T261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.400533][ T261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.413852][ T261] bond0 (unregistering): Released all slaves [ 457.433409][T21076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.433440][T21076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.433466][T21076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.495968][T21235] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7307'. [ 457.550832][ T261] ovs-s!!: left promiscuous mode [ 457.680851][ T261] D'|o: left promiscuous mode [ 457.734133][T21076] hsr_slave_0: entered promiscuous mode [ 457.744070][T21076] hsr_slave_1: entered promiscuous mode [ 457.765855][T21076] debugfs: 'hsr0' already exists in 'hsr' [ 457.773060][T21076] Cannot create hsr debugfs directory [ 457.774992][ T261] tipc: Left network mode [ 457.965739][T21262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7331'. [ 458.001502][T21264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7323'. [ 458.171474][T21270] netlink: 'syz.2.7325': attribute type 1 has an invalid length. [ 458.902853][T21076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 458.929687][T21076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.976435][T21076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.997399][T21076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.006938][T21076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 459.037047][T21076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.047697][T21076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 459.060767][ T5619] Bluetooth: hci5: command tx timeout [ 459.098190][T21076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.423949][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 459.534061][ T261] team0: Port device wlan0 removed [ 459.656811][T21339] netlink: zone id is out of range [ 459.668239][T21076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.675845][T21339] netlink: zone id is out of range [ 459.675859][T21339] netlink: zone id is out of range [ 459.675869][T21339] netlink: zone id is out of range [ 459.675878][T21339] netlink: zone id is out of range [ 459.675887][T21339] netlink: zone id is out of range [ 459.675896][T21339] netlink: zone id is out of range [ 459.675904][T21339] netlink: zone id is out of range [ 459.675913][T21339] netlink: zone id is out of range [ 459.675922][T21339] netlink: zone id is out of range [ 459.760850][T21076] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.782299][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.782589][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.815916][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.816146][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.627215][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 460.742186][T21378] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.7359'. [ 461.140355][ T5619] Bluetooth: hci5: command tx timeout [ 461.267197][T21076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.832060][ T261] hsr_slave_0: left promiscuous mode [ 461.851754][ T261] hsr_slave_1: left promiscuous mode [ 461.858502][ T261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.876221][ T261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.953208][T21430] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.7375'. [ 462.315646][ T261] team0 (unregistering): Port device team_slave_1 removed [ 462.353564][ T261] team0 (unregistering): Port device team_slave_0 removed [ 462.392044][ T1159] smc: removing ib device syz1 [ 465.503590][T21442] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.7381'. [ 465.528923][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 465.648699][ T1159] smbdirect: ib_dev[syz1] removed [ 465.975172][T21477] netlink: 'syz.3.7392': attribute type 1 has an invalid length. [ 465.975211][T21477] netlink: 'syz.3.7392': attribute type 2 has an invalid length. [ 465.975241][T21477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7392'. [ 466.159662][T21076] veth0_vlan: entered promiscuous mode [ 466.196331][T21076] veth1_vlan: entered promiscuous mode [ 466.262883][T21485] tmpfs: Bad value for 'mode' [ 466.371055][T21076] veth0_macvtap: entered promiscuous mode [ 466.391351][T21076] veth1_macvtap: entered promiscuous mode [ 466.518931][T21076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.557738][T21076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.608015][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7399'. [ 466.611492][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.611598][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.611691][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.611780][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.923415][T21503] net_ratelimit: 160 callbacks suppressed [ 466.923458][T21503] openvswitch: netlink: Unknown nsh attribute 0 [ 467.108609][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.108665][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.418599][ T248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.418639][ T248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.901538][T21535] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7411'. [ 467.911359][T21536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.146572][T21543] xt_hashlimit: max too large, truncated to 1048576 [ 469.202565][T21581] netlink: 'syz.1.7428': attribute type 29 has an invalid length. [ 469.227242][T21581] netlink: 'syz.1.7428': attribute type 29 has an invalid length. [ 469.779777][T21605] netlink: 'syz.2.7437': attribute type 10 has an invalid length. [ 469.791661][T21605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.804851][T21605] team0: Port device netdevsim1 added [ 469.877114][T21608] netlink: 277 bytes leftover after parsing attributes in process `syz.4.7439'. [ 471.802123][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 472.110564][T21687] netlink: 'syz.5.7467': attribute type 2 has an invalid length. [ 472.119715][T21687] netlink: 'syz.5.7467': attribute type 1 has an invalid length. [ 472.128012][T21687] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7467'. [ 473.066671][T21727] sock: sock_set_timeout: `syz.2.7481' (pid 21727) tries to set negative timeout [ 473.565820][T21752] netlink: Setting conntrack mark requires 'commit' flag. [ 473.573415][T21752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.734800][T21762] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.7494'. [ 473.834335][T21766] xt_hashlimit: size too large, truncated to 1048576 [ 473.841429][T21766] xt_hashlimit: overflow, rate too high: 0 [ 474.034769][T21775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7501'. [ 474.045929][T21775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7501'. [ 474.475582][T21794] netlink: Failed to add F helper -22 [ 474.475661][T21794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.127267][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7527'. [ 475.127319][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7527'. [ 475.127576][T21833] netlink: 'syz.5.7527': attribute type 4 has an invalid length. [ 476.126327][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7551'. [ 477.728554][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7573'. [ 477.851382][T21938] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7578'. [ 479.659912][T21986] netlink: 'syz.2.7600': attribute type 29 has an invalid length. [ 479.659957][T21986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7600'. [ 479.659997][T21986] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7600'. [ 479.744328][T21991] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7603'. [ 480.303485][T22017] netlink: 'syz.1.7614': attribute type 1 has an invalid length. [ 480.691516][T22034] netlink: 'syz.1.7622': attribute type 17 has an invalid length. [ 480.862769][T22035] ovs-system: entered promiscuous mode [ 480.914672][T22039] openvswitch: ovs-system: Dropping previously announced user features [ 480.973376][T22047] netlink: 'syz.5.7627': attribute type 1 has an invalid length. [ 481.154098][T22055] netlink: 'syz.5.7632': attribute type 1 has an invalid length. [ 481.413017][T22069] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7638'. [ 481.470810][T22073] netlink: Invalid conntrack timeout [ 481.476615][T22073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.634537][T22077] netlink: 'syz.5.7642': attribute type 46 has an invalid length. [ 481.688229][T22081] netlink: 'syz.2.7644': attribute type 21 has an invalid length. [ 481.696422][T22081] netlink: 'syz.2.7644': attribute type 6 has an invalid length. [ 481.704830][T22081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7644'. [ 481.872171][T22085] netlink: 'syz.2.7648': attribute type 1 has an invalid length. [ 482.065905][T22098] netlink: 'syz.1.7651': attribute type 29 has an invalid length. [ 482.471260][T22112] netlink: Failed to add helper -22 [ 482.471343][T22112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.309699][T22137] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7671'. [ 483.478126][T22148] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7676'. [ 484.045170][T22172] tmpfs: Bad value for 'gid' [ 484.045205][T22172] tmpfs: Bad value for 'gid' [ 484.098605][T22179] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7689'. [ 484.098655][T22179] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7689'. [ 484.894372][T22213] validate_nla: 3 callbacks suppressed [ 484.894429][T22213] netlink: 'syz.5.7702': attribute type 1 has an invalid length. [ 485.367247][T22232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7710'. [ 485.648312][T22247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7715'. [ 485.856969][T22260] netlink: 'syz.2.7720': attribute type 21 has an invalid length. [ 487.205241][T22304] IPv6: NLM_F_CREATE should be specified when creating new route [ 488.035061][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7743'. [ 488.548650][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7752'. [ 488.712511][T22367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.313304][T22391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7766'. [ 489.435768][ T31] audit: type=1107 audit(1789455138.152:5): pid=22396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 489.765824][T22417] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7778'. [ 490.554455][T22455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7797'. [ 490.567464][T22455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7797'. [ 490.664844][T22457] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.7798'. [ 492.824141][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7837'. [ 494.143723][T22604] openvswitch: netlink: Actions may not be safe on all matching packets [ 494.346014][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7872'. [ 494.368201][T22615] netlink: 'syz.5.7870': attribute type 3 has an invalid length. [ 494.368244][T22615] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7870'. [ 494.626365][T22628] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.186156][T22678] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 496.405209][T22686] xfrm0 speed is unknown, defaulting to 1000 [ 496.408526][T22686] xfrm0 speed is unknown, defaulting to 1000 [ 496.427088][T22686] xfrm0 speed is unknown, defaulting to 1000 [ 496.443008][T22686] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 496.443113][T22686] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 496.443825][T22686] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 496.573734][T22686] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 496.696830][T22686] xfrm0 speed is unknown, defaulting to 1000 [ 496.707606][T22686] xfrm0 speed is unknown, defaulting to 1000 [ 496.721175][T22686] xfrm0 speed is unknown, defaulting to 1000 [ 496.734112][T22686] xfrm0 speed is unknown, defaulting to 1000 [ 496.754644][T22686] xfrm0 speed is unknown, defaulting to 1000 [ 497.266727][T22710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7918'. [ 497.663792][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7928'. [ 497.663861][T22732] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 498.481195][T22770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7946'. [ 498.481249][T22770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7946'. [ 499.157033][T22772] hsr0: entered promiscuous mode [ 499.162529][T22772] hsr0: entered allmulticast mode [ 499.167801][T22772] hsr_slave_0: entered allmulticast mode [ 499.175502][T22772] hsr_slave_1: entered allmulticast mode [ 499.296103][T22774] netlink: 'syz.2.7948': attribute type 21 has an invalid length. [ 499.575997][T22795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.568016][T22832] tmpfs: Bad value for 'gid' [ 500.568054][T22832] tmpfs: Bad value for 'gid' [ 501.243168][T22855] netlink: 'syz.3.7987': attribute type 21 has an invalid length. [ 501.243219][T22855] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.461820][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.461888][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.501390][T22913] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8014'. [ 502.508401][T22913] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8014'. [ 503.230439][T22953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8032'. [ 503.337341][T22959] netlink: 'syz.5.8033': attribute type 2 has an invalid length. [ 503.349335][T22959] netlink: 51 bytes leftover after parsing attributes in process `syz.5.8033'. [ 503.689922][T22973] netlink: 'syz.2.8042': attribute type 4 has an invalid length. [ 504.618472][T23025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8067'. [ 508.022532][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8126'. [ 509.787939][T23238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8165'. [ 509.798670][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8165'. [ 509.933056][T23244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.960169][T23287] netlink: 'syz.4.8188': attribute type 1 has an invalid length. [ 510.960247][T23287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.946539][T23333] netlink: 'syz.4.8210': attribute type 1 has an invalid length. [ 511.956806][T23333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.042621][T23340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.257564][T23353] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.8218'. [ 512.415468][T23363] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8224'. [ 512.415517][T23363] netlink: 35 bytes leftover after parsing attributes in process `syz.4.8224'. [ 512.415534][T23363] netlink: 'syz.4.8224': attribute type 5 has an invalid length. [ 512.415571][T23363] netlink: 'syz.4.8224': attribute type 6 has an invalid length. [ 512.415616][T23363] netlink: 35 bytes leftover after parsing attributes in process `syz.4.8224'. [ 512.866652][T23384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8235'. [ 513.397544][T23410] netlink: 'syz.2.8247': attribute type 1 has an invalid length. [ 514.133876][T23448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.287222][T23461] netlink: 'syz.3.8271': attribute type 1 has an invalid length. [ 515.549286][T23510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8292'. [ 516.035110][T23527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8300'. [ 516.516615][T23547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8310'. [ 516.718761][T23557] netlink: 'syz.3.8314': attribute type 1 has an invalid length. [ 517.421611][T23595] netlink: 'syz.1.8334': attribute type 46 has an invalid length. [ 518.554447][T23631] netlink: 'syz.4.8349': attribute type 21 has an invalid length. [ 518.554627][T23631] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8349'. [ 518.585250][T23633] netlink: 'syz.3.8351': attribute type 2 has an invalid length. [ 518.594877][T23633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8351'. [ 518.839142][T23646] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8356'. [ 518.850742][T23646] unsupported nlmsg_type 40 [ 518.920666][T23650] netlink: 'syz.2.8359': attribute type 1 has an invalid length. [ 519.455137][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8371'. [ 519.478430][T23679] tmpfs: Bad value for 'mode' [ 519.632322][T23691] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.8377'. [ 519.644349][T23691] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.8377'. [ 519.746335][T23697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8382'. [ 519.847194][T23706] netlink: 'syz.3.8385': attribute type 1 has an invalid length. [ 519.847234][T23706] netlink: 'syz.3.8385': attribute type 4 has an invalid length. [ 519.847248][T23706] netlink: 'syz.3.8385': attribute type 2 has an invalid length. [ 520.359115][T23730] netlink: 'syz.1.8398': attribute type 21 has an invalid length. [ 520.359151][T23730] netlink: 'syz.1.8398': attribute type 1 has an invalid length. [ 520.972639][T23760] __nla_validate_parse: 2 callbacks suppressed [ 520.973228][T23760] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8413'. [ 521.483106][T23780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8423'. [ 521.495946][T23780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8423'. [ 521.929209][T23792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8428'. [ 522.275891][T23807] netlink: 'syz.4.8435': attribute type 12 has an invalid length. [ 522.332032][ T1159] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 522.332102][ T1159] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 522.332153][ T1159] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 522.332261][ T1159] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 522.671191][T23826] netlink: 'syz.1.8446': attribute type 2 has an invalid length. [ 522.688463][T23826] : entered promiscuous mode [ 522.862488][T23837] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.8451'. [ 525.413931][T23919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8488'. [ 525.413991][T23919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8488'. [ 525.964401][T23935] netlink: 'syz.3.8496': attribute type 2 has an invalid length. [ 526.050743][T23939] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 526.050799][T23939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.057555][T23984] netlink: 'syz.3.8520': attribute type 10 has an invalid length. [ 527.057602][T23984] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8520'. [ 527.404062][T24000] netlink: 'syz.5.8528': attribute type 29 has an invalid length. [ 527.421475][T24000] netlink: 'syz.5.8528': attribute type 29 has an invalid length. [ 528.174677][T24031] netlink: 'syz.2.8542': attribute type 1 has an invalid length. [ 528.510416][T24053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8553'. [ 528.672515][T24064] netlink: 763 bytes leftover after parsing attributes in process `syz.2.8559'. [ 528.748670][T24068] netlink: 'syz.2.8562': attribute type 1 has an invalid length. [ 529.475723][T24103] netlink: 'syz.5.8577': attribute type 2 has an invalid length. [ 529.475765][T24103] netlink: 200 bytes leftover after parsing attributes in process `syz.5.8577'. [ 529.817902][T24123] netlink: zone id is out of range [ 529.823894][T24123] netlink: zone id is out of range [ 529.829612][T24123] netlink: zone id is out of range [ 529.835240][T24123] netlink: zone id is out of range [ 529.841005][T24123] netlink: zone id is out of range [ 529.846459][T24123] netlink: zone id is out of range [ 529.846711][T24123] netlink: zone id is out of range [ 529.858138][T24123] netlink: zone id is out of range [ 530.690757][T24171] netlink: 'syz.4.8606': attribute type 6 has an invalid length. [ 530.690794][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8606'. [ 530.841698][T24177] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8610'. [ 530.841745][T24177] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8610'. [ 531.455716][T24207] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8625'. [ 531.517106][T24210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8627'. [ 531.624187][T24215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8631'. [ 532.002010][T24228] nbd: couldn't find a device at index 16 [ 532.366406][T24247] TCP: TCP_TX_DELAY enabled [ 533.235135][T24266] nbd: couldn't find a device at index 16392 [ 533.709043][T24291] net_ratelimit: 43 callbacks suppressed [ 533.715171][T24291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.901966][T24297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8667'. [ 533.988863][T24299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8669'. [ 534.094444][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8672'. [ 535.465103][T24340] netlink: 'syz.4.8688': attribute type 21 has an invalid length. [ 536.071939][T24384] netlink: 14552 bytes leftover after parsing attributes in process `syz.5.8710'. [ 536.826764][T24434] netlink: 'syz.1.8735': attribute type 10 has an invalid length. [ 536.840180][T24434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8735'. [ 537.031254][T24446] netlink: 'syz.3.8740': attribute type 22 has an invalid length. [ 537.041785][T24446] netlink: 14464 bytes leftover after parsing attributes in process `syz.3.8740'. [ 537.083322][T24448] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.8741'. [ 537.234913][T24457] netlink: 'syz.2.8747': attribute type 11 has an invalid length. [ 537.234956][T24457] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8747'. [ 537.464145][T24471] netlink: 'syz.1.8752': attribute type 27 has an invalid length. [ 537.555415][T24476] No such timeout policy "s" [ 537.555504][T24476] netlink: Failed to associated timeout policy 's' [ 538.470453][T24520] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8776'. [ 539.682639][T24582] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.8805'. [ 539.861512][T24586] netlink: 'syz.5.8807': attribute type 2 has an invalid length. [ 540.134051][T24597] netlink: 763 bytes leftover after parsing attributes in process `syz.2.8811'. [ 541.181654][T24636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8830'. [ 541.181726][T24636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8830'. [ 541.304654][T24644] netlink: 'syz.2.8835': attribute type 10 has an invalid length. [ 541.315594][T24644] netlink: 'syz.2.8835': attribute type 8 has an invalid length. [ 541.688638][T24669] netlink: 'syz.1.8847': attribute type 29 has an invalid length. [ 541.701596][T24669] netlink: 'syz.1.8847': attribute type 29 has an invalid length. [ 542.015378][T24684] netlink: 'syz.2.8854': attribute type 10 has an invalid length. [ 542.023295][T24684] veth0_vlan: left promiscuous mode [ 542.062246][T24684] team0: Device veth0_vlan failed to register rx_handler [ 542.333362][T24702] netlink: 'syz.2.8862': attribute type 2 has an invalid length. [ 542.333402][T24702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8862'. [ 542.415610][T24707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8866'. [ 542.436864][T24709] netlink: 'syz.4.8865': attribute type 15 has an invalid length. [ 544.077362][T24796] netlink: 'syz.3.8907': attribute type 21 has an invalid length. [ 544.077403][T24796] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.8907'. [ 544.266518][T24802] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8910'. [ 544.281763][T24804] netlink: Invalid conntrack helper [ 544.281805][T24804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.541746][T24818] netlink: 'syz.4.8916': attribute type 21 has an invalid length. [ 545.469380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.706995][T24877] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8945'. [ 545.902753][T24884] netlink: 'syz.4.8949': attribute type 12 has an invalid length. [ 545.902797][T24884] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8949'. [ 546.234493][T24900] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8956'. [ 546.616211][T24922] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8964'. [ 546.703443][T24922] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 549.379819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.380534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.381125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.674739][T24942] validate_nla: 1 callbacks suppressed [ 549.674783][T24942] netlink: 'syz.2.8973': attribute type 1 has an invalid length. [ 549.882087][T24953] netlink: 'syz.3.8979': attribute type 2 has an invalid length. [ 551.028830][T24984] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8993'. [ 551.125928][T24987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8994'. [ 551.405828][T25006] netlink: 'syz.3.9005': attribute type 10 has an invalid length. [ 551.426167][T25008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9004'. [ 551.461502][T25008] bond0: (slave bond_slave_0): Releasing backup interface [ 551.508844][T25010] netlink: 'syz.1.9006': attribute type 1 has an invalid length. [ 551.534544][T25008] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 551.565315][T25012] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9007'. [ 551.565363][T25012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9007'. [ 552.704803][T25058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9023'. [ 552.705138][T25058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9023'. [ 553.147213][T25074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9028'. [ 553.219551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.220040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.670811][T25103] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9039'. [ 554.259491][T25125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9048'. [ 554.366848][T25130] set match dimension is over the limit! [ 555.167064][T25163] netlink: 'syz.5.9066': attribute type 29 has an invalid length. [ 555.170982][T25163] netlink: 'syz.5.9066': attribute type 29 has an invalid length. [ 555.516627][T25178] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 556.339310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.339881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.340349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.703310][ T31] audit: type=1107 audit(1789455206.412:6): pid=25244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='t (M@"otԘr2,d vMQF' [ 557.750164][T25251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.767606][T25249] __nla_validate_parse: 5 callbacks suppressed [ 557.767653][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9104'. [ 558.532739][T25285] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9123'. [ 559.184005][T25308] netlink: 'syz.1.9134': attribute type 29 has an invalid length. [ 559.195806][T25308] netlink: 'syz.1.9134': attribute type 29 has an invalid length. [ 559.196660][T25308] netlink: 'syz.1.9134': attribute type 29 has an invalid length. [ 559.494086][T25320] tun0: tun_chr_ioctl cmd 21731 [ 559.725264][T25327] netlink: 'syz.5.9142': attribute type 29 has an invalid length. [ 559.735239][T25327] netlink: 'syz.5.9142': attribute type 29 has an invalid length. [ 559.748828][T25327] netlink: 'syz.5.9142': attribute type 29 has an invalid length. [ 560.259304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.259576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.259860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.260095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.716835][T25361] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9158'. [ 560.966538][T25376] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9164'. [ 562.904105][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.904191][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.099297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.099775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.202411][T25414] netlink: 'syz.3.9181': attribute type 29 has an invalid length. [ 564.204175][T25414] netlink: 'syz.3.9181': attribute type 29 has an invalid length. [ 564.206419][T25414] netlink: 'syz.3.9181': attribute type 29 has an invalid length. [ 564.435124][T25420] pimreg0: tun_chr_ioctl cmd 2148553947 [ 565.258656][T25442] pimreg0: tun_chr_ioctl cmd 1074025678 [ 565.264674][T25442] pimreg0: group set to 0 [ 565.491357][T25458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9198'. [ 565.508085][T25458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9198'. [ 565.519493][T25458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9198'. [ 566.646258][T25493] No such timeout policy "s" [ 566.646298][T25493] netlink: Failed to associated timeout policy 's' [ 567.939344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.939957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.940468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.302360][T25543] pimreg: tun_chr_ioctl cmd 1074025677 [ 568.302485][T25543] pimreg: linktype set to 804 [ 568.339250][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9227'. [ 571.139288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.142751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.143375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.252641][T25559] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9233'. [ 572.706310][T25623] netlink: 'syz.4.9264': attribute type 4 has an invalid length. [ 572.714806][T25623] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9264'. [ 572.724331][T25623] .`: renamed from bond0 (while UP) [ 572.856346][T25623] bridge0: port 3(.`) entered disabled state [ 573.130549][T25644] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9274'. [ 573.811053][T25683] openvswitch: netlink: IP tunnel TTL not specified. [ 573.811105][T25683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.979312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.979788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.221342][T25645] Bluetooth: hci5: command 0x0406 tx timeout [ 577.002637][T25724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9308'. [ 577.463690][T25751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9321'. [ 578.257674][T25793] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9340'. [ 578.285804][T25793] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9340'. [ 578.294255][T25793] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9340'. [ 578.517943][T25802] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9344'. [ 578.527638][T25802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9344'. [ 578.739316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.739959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.740555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.078062][T25821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9352'. [ 579.091192][T25821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9352'. [ 579.103299][T25821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9352'. [ 580.360033][T25864] netlink: 'syz.5.9372': attribute type 4 has an invalid length. [ 580.964532][ T1159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.124736][ T1159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.251307][ T1159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.415919][T25645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 581.428062][T25645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 581.435567][T25645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 581.449369][T25645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 581.457386][T25645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 581.566458][ T1159] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.876084][T25914] veth1_to_bridge: entered allmulticast mode [ 582.395774][T25937] netlink: 'syz.2.9400': attribute type 10 has an invalid length. [ 582.437786][ T1159] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 582.593003][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.619296][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.645394][ T1159] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 582.656236][ T1159] bond0 (unregistering): Released all slaves [ 582.662542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.662787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.663000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.800213][ T1159] : left promiscuous mode [ 582.934852][ T1159] ovs-s: left promiscuous mode [ 583.002527][T25963] netlink: 'syz.2.9407': attribute type 29 has an invalid length. [ 583.004760][T25963] netlink: 'syz.2.9407': attribute type 29 has an invalid length. [ 583.007498][T25963] netlink: 'syz.2.9407': attribute type 29 has an invalid length. [ 583.040263][ T1159] ovs-s: left promiscuous mode [ 583.107939][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 583.225198][T25968] __nla_validate_parse: 8 callbacks suppressed [ 583.231750][T25968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9409'. [ 583.539186][T25645] Bluetooth: hci3: command tx timeout [ 584.119846][T25893] dummy0 speed is unknown, defaulting to 1000 [ 584.127742][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 584.128877][T25893] xfrm0 speed is unknown, defaulting to 1000 [ 585.082737][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 585.092164][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 585.099613][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 585.107392][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 585.115324][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 585.619267][ T5619] Bluetooth: hci3: command tx timeout [ 585.859523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.859776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.219310][ T5619] Bluetooth: hci1: command tx timeout [ 587.709134][ T5619] Bluetooth: hci3: command tx timeout [ 587.907761][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 588.175899][T26038] proc: Unknown parameter 'fowner<00000000000000000000' [ 588.574963][T25893] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.575143][T25893] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.575297][T25893] bridge_slave_0: entered allmulticast mode [ 588.603881][T25893] bridge_slave_0: entered promiscuous mode [ 588.625583][T25893] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.625697][T25893] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.625837][T25893] bridge_slave_1: entered allmulticast mode [ 588.657673][T25893] bridge_slave_1: entered promiscuous mode [ 588.928219][T25893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.971825][T25893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.059292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.059542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.059779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.152216][ T1159] hsr_slave_0: left promiscuous mode [ 589.158054][ T1159] hsr_slave_1: left promiscuous mode [ 589.299244][ T5619] Bluetooth: hci1: command tx timeout [ 589.779454][ T5619] Bluetooth: hci3: command tx timeout [ 589.914797][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 590.360882][T26115] netlink: 'syz.2.9453': attribute type 1 has an invalid length. [ 590.360926][T26115] netlink: 'syz.2.9453': attribute type 4 has an invalid length. [ 590.361854][T26115] netlink: 'syz.2.9453': attribute type 2 has an invalid length. [ 590.361893][T26115] netlink: 'syz.2.9453': attribute type 1 has an invalid length. [ 590.361922][T26115] netlink: 'syz.2.9453': attribute type 5 has an invalid length. [ 590.361960][T26115] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9453'. [ 591.389270][ T5619] Bluetooth: hci1: command tx timeout [ 592.660645][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 592.921071][T25893] team0: Port device team_slave_0 added [ 592.928176][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 592.940235][T25893] team0: Port device team_slave_1 added [ 592.991721][T25893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.991749][T25893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.991788][T25893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.035918][T25893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.035969][T25893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.036043][T25893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.351258][T25893] hsr_slave_0: entered promiscuous mode [ 593.354312][T25893] hsr_slave_1: entered promiscuous mode [ 593.358363][T25893] debugfs: 'hsr0' already exists in 'hsr' [ 593.358381][T25893] Cannot create hsr debugfs directory [ 593.461619][ T5619] Bluetooth: hci1: command tx timeout [ 593.663596][T26017] dummy0 speed is unknown, defaulting to 1000 [ 593.722811][T26017] xfrm0 speed is unknown, defaulting to 1000 [ 593.976556][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 258 - 0 [ 593.976626][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 593.976654][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.038009][T26159] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9465'. [ 594.058869][T26159] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9465'. [ 594.179425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.180112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.180619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.181189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.241473][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 258 - 0 [ 594.253829][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 594.264359][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.512158][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 258 - 0 [ 595.512215][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 595.512241][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.883132][T26017] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.885016][T26017] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.885417][T26017] bridge_slave_0: entered allmulticast mode [ 595.901431][T26017] bridge_slave_0: entered promiscuous mode [ 595.982572][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 258 - 0 [ 595.982626][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 595.986506][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.058062][T26216] pimreg0: tun_chr_ioctl cmd 35108 [ 596.059151][T26017] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.059369][T26017] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.059692][T26017] bridge_slave_1: entered allmulticast mode [ 596.073410][T26017] bridge_slave_1: entered promiscuous mode [ 596.483408][T26017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.507731][T26017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.689007][T26017] team0: Port device team_slave_0 added [ 596.716038][T26017] team0: Port device team_slave_1 added [ 596.970870][T26246] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9485'. [ 597.313757][T26249] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 597.313846][T26249] syzkaller1: linktype set to 823 [ 597.318764][T26242] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9485'. [ 597.378783][T26017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.378815][T26017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.378843][T26017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.392367][T26250] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9485'. [ 597.475958][T26017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.475998][T26017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.476026][T26017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.855563][T26017] hsr_slave_0: entered promiscuous mode [ 597.857708][T26017] hsr_slave_1: entered promiscuous mode [ 597.878979][T26017] debugfs: 'hsr0' already exists in 'hsr' [ 597.879059][T26017] Cannot create hsr debugfs directory [ 597.896328][ T1159] .`: left promiscuous mode [ 597.896363][ T1159] bond_slave_0: left promiscuous mode [ 597.896568][ T1159] bond_slave_1: left promiscuous mode [ 597.897013][ T1159] batadv_slave_1: left promiscuous mode [ 597.907871][ T1159] bridge0: port 3(.`) entered disabled state [ 597.937540][ T1159] bridge_slave_1: left allmulticast mode [ 597.937584][ T1159] bridge_slave_1: left promiscuous mode [ 597.947024][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.968233][ T1159] bridge_slave_0: left allmulticast mode [ 597.968275][ T1159] bridge_slave_0: left promiscuous mode [ 597.973855][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.624791][ T1159] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.634859][ T1159] bond_slave_0: left allmulticast mode [ 598.645169][ T1159] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.658174][ T1159] bond_slave_1: left allmulticast mode [ 598.671179][ T1159] .` (unregistering): (slave batadv_slave_1): Releasing backup interface [ 598.684787][ T1159] batadv_slave_1: left allmulticast mode [ 598.693445][ T1159] .` (unregistering): Released all slaves [ 599.204520][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9493'. [ 599.299291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.300238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.300504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.765610][T25893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 599.887932][T25893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.902803][T25893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 599.951051][T25893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.271805][T25893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 600.314702][T25893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.326822][T25893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 600.388733][T25893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 601.669957][T26017] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 601.727965][T26017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 601.763022][T26346] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9509'. [ 601.958207][T26017] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 602.006601][T26017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.125378][T26350] netlink: 'syz.2.9510': attribute type 1 has an invalid length. [ 602.125415][T26350] netlink: 'syz.2.9510': attribute type 2 has an invalid length. [ 602.125445][T26350] netlink: 'syz.2.9510': attribute type 2 has an invalid length. [ 602.125463][T26350] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9510'. [ 602.176268][T25893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.184773][T26017] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 602.206522][T26017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.290349][T26017] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 602.313261][T26352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9511'. [ 602.363103][T26017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 602.579291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.579539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.757976][T25893] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.948626][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.948785][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.236974][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.237139][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.780387][T26017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.848874][T26390] pimreg: tun_chr_ioctl cmd 1074812118 [ 603.877230][T26017] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.035906][T21458] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.036320][T21458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.057901][T21458] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.058050][T21458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.339251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.339482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.339711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.339910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.446152][ T1159] hsr_slave_0: left promiscuous mode [ 608.670688][ T1159] hsr_slave_1: left promiscuous mode [ 608.678524][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.687251][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.880616][ T283] smc: removing ib device syz2 [ 610.196490][ T248] smbdirect: ib_dev[syz0] removed [ 610.309152][T17497] dummy0 speed is unknown, defaulting to 1000 [ 610.309357][T17497] infiniband syz0: ib_query_port failed (-19) [ 610.362454][ T30] ================================================================== [ 610.362526][ T30] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 610.362590][ T30] Read of size 1 at addr ffff8880785dce09 by task kworker/1:1/30 [ 610.362640][ T30] [ 610.362676][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 610.362720][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 610.362734][ T30] Workqueue: events smc_ib_port_event_work [ 610.362804][ T30] Call Trace: [ 610.362812][ T30] [ 610.362822][ T30] dump_stack_lvl+0xe8/0x150 [ 610.362862][ T30] print_address_description+0x55/0x1e0 [ 610.362898][ T30] ? __ethtool_get_link_ksettings+0x230/0x250 [ 610.362919][ T30] print_report+0x58/0x70 [ 610.362944][ T30] kasan_report+0x117/0x150 [ 610.362974][ T30] ? __ethtool_get_link_ksettings+0x230/0x250 [ 610.363000][ T30] __ethtool_get_link_ksettings+0x230/0x250 [ 610.363025][ T30] __ethtool_get_link_ksettings+0x11f/0x250 [ 610.363049][ T30] ib_get_eth_speed+0x180/0x7f0 [ 610.363154][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 610.363189][ T30] ? do_raw_spin_unlock+0xf5/0x200 [ 610.363221][ T30] ? rxe_query_port+0x6b/0x3d0 [ 610.363286][ T30] rxe_query_port+0x93/0x3d0 [ 610.363318][ T30] ib_query_port+0x16e/0x830 [ 610.363375][ T30] smc_ib_port_event_work+0x147/0x920 [ 610.363410][ T30] ? rcu_is_watching+0x16/0xb0 [ 610.363442][ T30] ? process_scheduled_works+0x97a/0x1630 [ 610.363480][ T30] process_scheduled_works+0xc3d/0x1630 [ 610.363525][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 610.363556][ T30] ? assign_work+0x3cf/0x5d0 [ 610.363584][ T30] worker_thread+0xa47/0xfb0 [ 610.363633][ T30] kthread+0x38b/0x480 [ 610.363653][ T30] ? __pfx_worker_thread+0x10/0x10 [ 610.363679][ T30] ? __pfx_kthread+0x10/0x10 [ 610.363699][ T30] ret_from_fork+0x514/0xb70 [ 610.363735][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 610.363754][ T30] ? __switch_to+0xc89/0x1420 [ 610.363783][ T30] ? __pfx_kthread+0x10/0x10 [ 610.363803][ T30] ret_from_fork_asm+0x1a/0x30 [ 610.363848][ T30] [ 610.363857][ T30] [ 610.363861][ T30] Allocated by task 5618: [ 610.363897][ T30] kasan_save_track+0x3e/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 610.363918][ T30] __kasan_kmalloc+0x93/0xb0 [ 610.363939][ T30] __kvmalloc_node_noprof+0x50f/0x820 [ 610.363971][ T30] alloc_netdev_mqs+0xa9/0x12a0 [ 610.363999][ T30] rtnl_create_link+0x321/0xd70 [ 610.364086][ T30] rtnl_newlink_create+0x258/0x7b0 [ 610.364110][ T30] rtnl_newlink+0x166d/0x1c30 [ 610.364131][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 610.364150][ T30] netlink_rcv_skb+0x226/0x4a0 [ 610.364175][ T30] netlink_unicast+0x7bd/0x940 [ 610.364198][ T30] netlink_sendmsg+0x813/0xb40 [ 610.364223][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 610.364252][ T30] __sys_sendto+0x408/0x5a0 [ 610.364271][ T30] __x64_sys_sendto+0xde/0x100 [ 610.364291][ T30] do_syscall_64+0x166/0x520 [ 610.364312][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.364331][ T30] [ 610.364336][ T30] Freed by task 1159: [ 610.364345][ T30] kasan_save_track+0x3e/0x80 [ 610.364365][ T30] kasan_save_free_info+0x40/0x50 [ 610.364393][ T30] __kasan_slab_free+0x5c/0x80 [ 610.364414][ T30] kfree+0x1c5/0x650 [ 610.364441][ T30] device_release+0xc4/0x1f0 [ 610.364466][ T30] kobject_put+0x222/0x550 [ 610.364575][ T30] netdev_run_todo+0xeee/0x1060 [ 610.364600][ T30] default_device_exit_batch+0x6d9/0x760 [ 610.364620][ T30] ops_undo_list+0x4b4/0x8d0 [ 610.364663][ T30] cleanup_net+0x572/0x810 [ 610.364682][ T30] process_scheduled_works+0xc3d/0x1630 [ 610.364706][ T30] worker_thread+0xa47/0xfb0 [ 610.364731][ T30] kthread+0x38b/0x480 [ 610.364746][ T30] ret_from_fork+0x514/0xb70 [ 610.364762][ T30] ret_from_fork_asm+0x1a/0x30 [ 610.364790][ T30] [ 610.364795][ T30] The buggy address belongs to the object at ffff8880785dc000 [ 610.364795][ T30] which belongs to the cache kmalloc-cg-4k of size 4096 [ 610.364813][ T30] The buggy address is located 3593 bytes inside of [ 610.364813][ T30] freed 4096-byte region [ffff8880785dc000, ffff8880785dd000) [ 610.364840][ T30] [ 610.364846][ T30] The buggy address belongs to the physical page: [ 610.364861][ T30] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880785d8000 pfn:0x785d8 [ 610.364881][ T30] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 610.364897][ T30] memcg:ffff8880325e6b41 [ 610.364906][ T30] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 610.364933][ T30] page_type: f5(slab) [ 610.364952][ T30] raw: 00fff00000000240 ffff88801b04b500 ffffea0001597010 ffffea0001e5c010 [ 610.364970][ T30] raw: ffff8880785d8000 0000000200040003 00000000f5000000 ffff8880325e6b41 [ 610.364989][ T30] head: 00fff00000000240 ffff88801b04b500 ffffea0001597010 ffffea0001e5c010 [ 610.365007][ T30] head: ffff8880785d8000 0000000200040003 00000000f5000000 ffff8880325e6b41 [ 610.365025][ T30] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 610.365043][ T30] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 610.365054][ T30] page dumped because: kasan: bad access detected [ 610.365068][ T30] page_owner tracks the page as allocated [ 610.365076][ T30] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5623, tgid 5623 (syz-executor), ts 87361620588 [ 610.365110][ T30] post_alloc_hook+0x1f9/0x250 [ 610.365140][ T30] get_page_from_freelist+0x2209/0x2280 [ 610.365161][ T30] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 610.365182][ T30] allocate_slab+0x7d/0x620 [ 610.365206][ T30] refill_objects+0x2d5/0x350 [ 610.365231][ T30] __pcs_replace_empty_main+0x2c8/0x6c0 [ 610.365255][ T30] __kvmalloc_node_noprof+0x63c/0x820 [ 610.365275][ T30] alloc_netdev_mqs+0xa9/0x12a0 [ 610.365301][ T30] rtnl_create_link+0x321/0xd70 [ 610.365327][ T30] rtnl_newlink_create+0x258/0x7b0 [ 610.365350][ T30] rtnl_newlink+0x166d/0x1c30 [ 610.365370][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 610.365389][ T30] netlink_rcv_skb+0x226/0x4a0 [ 610.365414][ T30] netlink_unicast+0x7bd/0x940 [ 610.365437][ T30] netlink_sendmsg+0x813/0xb40 [ 610.365462][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 610.365494][ T30] page last free pid 5279 tgid 5279 ts 61740226305 stack trace: [ 610.365509][ T30] __free_frozen_pages+0xc93/0xd90 [ 610.365526][ T30] __slab_free+0x274/0x2c0 [ 610.365544][ T30] qlist_free_all+0x99/0x100 [ 610.365562][ T30] kasan_quarantine_reduce+0x148/0x160 [ 610.365582][ T30] __kasan_slab_alloc+0x22/0x80 [ 610.365603][ T30] kmem_cache_alloc_node_noprof+0x354/0x610 [ 610.365621][ T30] __alloc_skb+0x1db/0x7a0 [ 610.365661][ T30] alloc_skb_with_frags+0xc6/0x760 [ 610.365705][ T30] sock_alloc_send_pskb+0x878/0x990 [ 610.365730][ T30] unix_dgram_sendmsg+0x4da/0x17b0 [ 610.365819][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 610.365853][ T30] sock_write_iter+0x2de/0x3e0 [ 610.365879][ T30] vfs_write+0x612/0xba0 [ 610.365901][ T30] ksys_write+0x150/0x270 [ 610.365917][ T30] do_syscall_64+0x166/0x520 [ 610.365935][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.365954][ T30] [ 610.365959][ T30] Memory state around the buggy address: [ 610.365970][ T30] ffff8880785dcd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.365983][ T30] ffff8880785dcd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.365997][ T30] >ffff8880785dce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.366007][ T30] ^ [ 610.366018][ T30] ffff8880785dce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.366032][ T30] ffff8880785dcf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.366042][ T30] ================================================================== [ 610.746600][ T30] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 611.172989][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 611.182211][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 611.192295][ T30] Workqueue: events smc_ib_port_event_work [ 611.198149][ T30] Call Trace: [ 611.201439][ T30] [ 611.204392][ T30] vpanic+0x56d/0xa60 [ 611.208411][ T30] ? __pfx_vpanic+0x10/0x10 [ 611.212949][ T30] panic+0xc5/0xd0 [ 611.216709][ T30] ? __pfx_panic+0x10/0x10 [ 611.221181][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 611.226579][ T30] ? __ethtool_get_link_ksettings+0x230/0x250 [ 611.232662][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 611.238055][ T30] ? __ethtool_get_link_ksettings+0x230/0x250 [ 611.244143][ T30] check_panic_on_warn+0x89/0xb0 [ 611.249136][ T30] ? __ethtool_get_link_ksettings+0x230/0x250 [ 611.255218][ T30] end_report+0x73/0x170 [ 611.259481][ T30] ? __ethtool_get_link_ksettings+0x230/0x250 [ 611.265571][ T30] kasan_report+0x128/0x150 [ 611.270123][ T30] ? __ethtool_get_link_ksettings+0x230/0x250 [ 611.276215][ T30] __ethtool_get_link_ksettings+0x230/0x250 [ 611.282136][ T30] __ethtool_get_link_ksettings+0x11f/0x250 [ 611.288047][ T30] ib_get_eth_speed+0x180/0x7f0 [ 611.292932][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 611.298332][ T30] ? do_raw_spin_unlock+0xf5/0x200 [ 611.303464][ T30] ? rxe_query_port+0x6b/0x3d0 [ 611.308255][ T30] rxe_query_port+0x93/0x3d0 [ 611.312872][ T30] ib_query_port+0x16e/0x830 [ 611.317490][ T30] smc_ib_port_event_work+0x147/0x920 [ 611.322907][ T30] ? rcu_is_watching+0x16/0xb0 [ 611.327710][ T30] ? process_scheduled_works+0x97a/0x1630 [ 611.333455][ T30] process_scheduled_works+0xc3d/0x1630 [ 611.339042][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 611.345051][ T30] ? assign_work+0x3cf/0x5d0 [ 611.349660][ T30] worker_thread+0xa47/0xfb0 [ 611.354297][ T30] kthread+0x38b/0x480 [ 611.358393][ T30] ? __pfx_worker_thread+0x10/0x10 [ 611.363527][ T30] ? __pfx_kthread+0x10/0x10 [ 611.368157][ T30] ret_from_fork+0x514/0xb70 [ 611.372777][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 611.377913][ T30] ? __switch_to+0xc89/0x1420 [ 611.382649][ T30] ? __pfx_kthread+0x10/0x10 [ 611.387274][ T30] ret_from_fork_asm+0x1a/0x30 [ 611.392081][ T30] [ 611.395720][ T30] Kernel Offset: disabled [ 611.400073][ T30] Rebooting in 86400 seconds..