last executing test programs: 2.825032071s ago: executing program 2 (id=7637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000280)=0x10) 1.842759762s ago: executing program 2 (id=7661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1.659105638s ago: executing program 4 (id=7664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) 1.651177973s ago: executing program 2 (id=7665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x1e1, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89, 0x9, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x400, [0x6, 0x8000000000000001, 0x8001, 0xfff, 0xb8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x45, 0x0, 0x9, 0x1, 0x0, 0x8, 0x64}, @dstopts={0x88, 0xf, '\x00', [@padn={0x1, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xe}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0xa, 0x2, [0x4000000000000, 0x2, 0x8162, 0x8, 0x100, 0x7, 0x3, 0x9]}}]}, @dstopts={0x0, 0x13, '\x00', [@generic={0x3, 0x49, "9f86ede23e4b5e46fd18f951f5293428bfc295cad0e6fdb5166386700881a5b42ba6584d508731faccfbfda607b975d139ac880ba0c02e3676a60122f381a290715f0be2b3edf289be"}, @jumbo, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x8}, @generic={0x67, 0x3e, "5b76d1f8828609f172173e9b6bdf401948dee242de0603816f355fda9a1321bbb3e89770928f478fdeceecb7523167c295b67126a259d8732fc4e90637c7"}]}], {0x4e24, 0x4e21, 0x51, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef40042f"}}}}}, 0x217) 1.560884937s ago: executing program 4 (id=7666): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x9}, 0x1c) 1.407600963s ago: executing program 4 (id=7668): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x44080) 1.264680109s ago: executing program 2 (id=7671): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)=ANY=[@ANYBLOB="340000001a00010029bd7000000000000220200500c0f1000000000008000300", @ANYRES32=r1, @ANYBLOB="080002007f"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.253832463s ago: executing program 4 (id=7673): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) 1.049223514s ago: executing program 2 (id=7674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r0}, 0x38) 846.010229ms ago: executing program 0 (id=7677): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 844.684328ms ago: executing program 1 (id=7678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 733.231738ms ago: executing program 2 (id=7680): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 697.304648ms ago: executing program 0 (id=7681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022cbd7000ffdbdf250a000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) 653.149104ms ago: executing program 3 (id=7682): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010001", 0x7) 602.955856ms ago: executing program 1 (id=7683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44840) 563.528328ms ago: executing program 0 (id=7684): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000001500)=0x5, 0x4) 535.139793ms ago: executing program 3 (id=7685): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) 479.343291ms ago: executing program 1 (id=7686): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xbb8) 446.747154ms ago: executing program 0 (id=7687): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 406.263213ms ago: executing program 3 (id=7688): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 346.468242ms ago: executing program 1 (id=7689): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 302.692594ms ago: executing program 0 (id=7690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={0x54, r1, 0xfe12482fe0801d65, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x400006}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) 278.895556ms ago: executing program 4 (id=7691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)='q', 0x1) 263.022245ms ago: executing program 3 (id=7692): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) 169.062878ms ago: executing program 1 (id=7693): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) sendto$inet(r0, &(0x7f0000000300)="9cc3", 0x2, 0x28028894, 0x0, 0x0) 156.827663ms ago: executing program 0 (id=7694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14}}, 0x70}}, 0x0) 92.37179ms ago: executing program 4 (id=7695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 85.392153ms ago: executing program 3 (id=7696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 807.099µs ago: executing program 1 (id=7697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x4, 0x9, 0x0, 0x1, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 0s ago: executing program 3 (id=7698): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feff"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r0 = socket(0x15, 0x5, 0x0) connect$netrom(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) kernel console output (not intermixed with test programs): ributes in process `syz.4.1758'. [ 184.806182][ T9555] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 185.074798][ T9570] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1766'. [ 185.076954][ T9572] xt_bpf: check failed: parse error [ 185.235499][ T9576] netlink: 'syz.4.1769': attribute type 2 has an invalid length. [ 185.324168][ T9576] : entered promiscuous mode [ 185.895474][ T9607] bond0: option lp_interval: invalid value (18446744073709551604) [ 185.913040][ T9607] bond0: option lp_interval: allowed values 1 - 2147483647 [ 185.942614][ T9612] netlink: 'syz.2.1784': attribute type 1 has an invalid length. [ 185.983582][ T9612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.292514][ T9626] veth0_macvtap: left promiscuous mode [ 186.329420][ T9626] macvtap0: entered promiscuous mode [ 186.335789][ T9626] macvtap0: entered allmulticast mode [ 186.377331][ T9629] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1791'. [ 186.416161][ T9629] tc_dump_action: action bad kind [ 186.547969][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1797'. [ 186.775491][ T9653] x_tables: (null)_tables: pkttype.0 match: invalid size 8 (kernel) != (user) 16 [ 186.884323][ T9658] xt_TPROXY: Can be used only with -p tcp or -p udp [ 186.997222][ T9664] netlink: 'syz.0.1807': attribute type 1 has an invalid length. [ 187.034922][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 187.313144][ T9676] netlink: 'syz.3.1814': attribute type 12 has an invalid length. [ 187.358583][ T9676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1814'. [ 187.391150][ T9678] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 187.667875][ T9693] netlink: 'syz.4.1821': attribute type 16 has an invalid length. [ 187.692259][ T9693] netlink: 'syz.4.1821': attribute type 17 has an invalid length. [ 187.813063][ T9693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.599715][ T9737] ip6erspan0: entered allmulticast mode [ 188.768481][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1841'. [ 188.813067][ T9746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1841'. [ 188.874595][ T9749] netlink: 'syz.4.1844': attribute type 11 has an invalid length. [ 189.190722][ T9760] warning: `syz.4.1849' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 189.422959][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 189.499791][ T9780] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 189.610682][ T9780] team0: Port device dummy0 added [ 190.004973][ T9801] netlink: 'syz.0.1865': attribute type 2 has an invalid length. [ 190.652516][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 190.946370][ T9842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1885'. [ 190.973081][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 190.982110][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1883'. [ 191.017548][ T9842] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1885'. [ 191.022835][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1883'. [ 191.094829][ T9842] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 191.165294][ T9842] gretap1: entered promiscuous mode [ 191.185899][ T9842] gretap1: entered allmulticast mode [ 191.469513][ T9869] netlink: 'syz.2.1894': attribute type 10 has an invalid length. [ 191.522827][ T9869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1894'. [ 191.556364][ T9869] batman_adv: batadv0: Adding interface: virt_wifi0 [ 191.571407][ T9869] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.638545][ T9869] batman_adv: batadv0: Interface activated: virt_wifi0 [ 192.010477][ T9895] netlink: 'syz.1.1903': attribute type 10 has an invalid length. [ 192.039247][ T9895] veth1_vlan: entered allmulticast mode [ 192.096599][ T9895] team0: Device veth1_vlan failed to register rx_handler [ 192.103591][ T9898] netlink: 'syz.3.1906': attribute type 21 has an invalid length. [ 192.111515][ T9898] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1906'. [ 192.182825][ T9898] netlink: 'syz.3.1906': attribute type 4 has an invalid length. [ 192.190617][ T9898] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1906'. [ 192.384694][ T9910] netlink: 'syz.1.1911': attribute type 29 has an invalid length. [ 192.392842][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 194.195734][ T9992] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 194.387219][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.399035][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.765829][T10020] netlink: 'syz.0.1961': attribute type 9 has an invalid length. [ 196.119506][T10063] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 196.151630][T10063] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 196.618028][T10088] netlink: 'syz.4.1996': attribute type 1 has an invalid length. [ 196.642552][T10088] netlink: 'syz.4.1996': attribute type 2 has an invalid length. [ 196.909550][T10103] __nla_validate_parse: 5 callbacks suppressed [ 196.909571][T10103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2003'. [ 197.429194][T10124] Cannot find del_set index 4 as target [ 197.520167][T10132] tipc: Can't bind to reserved service type 0 [ 197.825779][T10148] lo: left allmulticast mode [ 197.950140][T10150] netlink: 'syz.0.2028': attribute type 10 has an invalid length. [ 197.994856][T10150] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 198.001990][T10150] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 198.091050][T10150] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 198.776398][T10187] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 198.801577][T10187] CPU: 0 UID: 0 PID: 10187 Comm: syz.3.2043 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 198.801610][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.801624][T10187] Call Trace: [ 198.801633][T10187] [ 198.801643][T10187] dump_stack_lvl+0x189/0x250 [ 198.801699][T10187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.801733][T10187] ? __pfx__printk+0x10/0x10 [ 198.801757][T10187] ? kernfs_path_from_node+0x2c/0x260 [ 198.801783][T10187] ? kernfs_path_from_node+0x2c/0x260 [ 198.801805][T10187] ? kernfs_path_from_node+0x2c/0x260 [ 198.801831][T10187] ? kernfs_path_from_node+0x22c/0x260 [ 198.801853][T10187] ? kernfs_path_from_node+0x2c/0x260 [ 198.801880][T10187] sysfs_warn_dup+0x8e/0xa0 [ 198.801904][T10187] sysfs_do_create_link_sd+0xc0/0x110 [ 198.801931][T10187] device_add_class_symlinks+0x1cf/0x240 [ 198.801958][T10187] device_add+0x475/0xb50 [ 198.801985][T10187] wiphy_register+0x1ba6/0x28d0 [ 198.802031][T10187] ? __pfx_wiphy_register+0x10/0x10 [ 198.802055][T10187] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 198.802094][T10187] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 198.802129][T10187] ieee80211_register_hw+0x33e1/0x4120 [ 198.802188][T10187] ? ieee80211_register_hw+0x1461/0x4120 [ 198.802230][T10187] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 198.802266][T10187] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 198.802297][T10187] ? __hrtimer_setup+0x187/0x210 [ 198.802326][T10187] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 198.802358][T10187] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 198.802417][T10187] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 198.802439][T10187] ? trace_kmalloc+0x1f/0xd0 [ 198.802468][T10187] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 198.802489][T10187] ? kstrndup+0xbf/0x160 [ 198.802525][T10187] hwsim_new_radio_nl+0xea4/0x1b10 [ 198.802553][T10187] ? __pfx___nla_validate_parse+0x10/0x10 [ 198.802603][T10187] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 198.802639][T10187] ? __nla_parse+0x40/0x60 [ 198.802671][T10187] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 198.802713][T10187] genl_family_rcv_msg_doit+0x212/0x300 [ 198.802753][T10187] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.802798][T10187] ? bpf_lsm_capable+0x9/0x20 [ 198.802815][T10187] ? security_capable+0x7e/0x2e0 [ 198.802848][T10187] genl_rcv_msg+0x60e/0x790 [ 198.802886][T10187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.802917][T10187] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 198.802959][T10187] netlink_rcv_skb+0x208/0x470 [ 198.802985][T10187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.803018][T10187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.803064][T10187] ? down_read+0x1ad/0x2e0 [ 198.803093][T10187] genl_rcv+0x28/0x40 [ 198.803121][T10187] netlink_unicast+0x75b/0x8d0 [ 198.803163][T10187] netlink_sendmsg+0x805/0xb30 [ 198.803198][T10187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.803228][T10187] ? aa_sock_msg_perm+0x94/0x160 [ 198.803256][T10187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.803279][T10187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.803306][T10187] __sock_sendmsg+0x219/0x270 [ 198.803331][T10187] ____sys_sendmsg+0x505/0x830 [ 198.803366][T10187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.803405][T10187] ? import_iovec+0x74/0xa0 [ 198.803429][T10187] ___sys_sendmsg+0x21f/0x2a0 [ 198.803478][T10187] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.803553][T10187] ? __fget_files+0x2a/0x420 [ 198.803574][T10187] ? __fget_files+0x3a0/0x420 [ 198.803616][T10187] __x64_sys_sendmsg+0x19b/0x260 [ 198.803650][T10187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.803697][T10187] ? rcu_is_watching+0x15/0xb0 [ 198.803738][T10187] ? do_syscall_64+0xbe/0x3b0 [ 198.803768][T10187] do_syscall_64+0xfa/0x3b0 [ 198.803791][T10187] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.803815][T10187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.803835][T10187] ? clear_bhb_loop+0x60/0xb0 [ 198.803862][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.803883][T10187] RIP: 0033:0x7f46a358e929 [ 198.803911][T10187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.803928][T10187] RSP: 002b:00007f46a4422038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.803955][T10187] RAX: ffffffffffffffda RBX: 00007f46a37b5fa0 RCX: 00007f46a358e929 [ 198.803971][T10187] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 198.803985][T10187] RBP: 00007f46a3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 198.803998][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.804010][T10187] R13: 0000000000000000 R14: 00007f46a37b5fa0 R15: 00007ffe4704e518 [ 198.804044][T10187] [ 199.417884][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 199.639313][T10209] netlink: 'syz.4.2057': attribute type 2 has an invalid length. [ 199.765770][T10216] netlink: get zone limit has 4 unknown bytes [ 199.796917][T10221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2058'. [ 199.952386][T10228] xt_ecn: cannot match TCP bits for non-tcp packets [ 200.052323][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 200.099668][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 200.159705][T10239] sit0: entered promiscuous mode [ 200.187984][T10239] netlink: 'syz.0.2069': attribute type 1 has an invalid length. [ 200.218781][T10239] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2069'. [ 200.693199][T10257] netdevsim netdevsim1: Direct firmware load for 2Q failed with error -2 [ 200.745430][T10257] netdevsim netdevsim1: Falling back to sysfs fallback for: 2Q [ 200.991257][T10269] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2083'. [ 201.121468][T10275] Cannot find add_set index 0 as target [ 201.290326][T10285] Timeout policy `syz1' can only be used by L3 protocol number 41216 [ 201.691241][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2100'. [ 201.827449][T10311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.370326][T10339] netlink: 4344 bytes leftover after parsing attributes in process `syz.4.2118'. [ 202.406321][T10342] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2119'. [ 202.445470][T10342] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2119'. [ 202.476908][T10343] geneve1: entered promiscuous mode [ 202.503499][T10343] geneve1: entered allmulticast mode [ 202.640438][T10343] syz.1.2120 (10343) used greatest stack depth: 20008 bytes left [ 202.739592][T10351] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.747416][T10351] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.844815][T10361] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 202.854326][T10361] netlink: 'syz.0.2129': attribute type 3 has an invalid length. [ 202.879614][T10361] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2129'. [ 203.116748][T10351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.131989][T10351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.641178][T10392] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 203.677015][T10392] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2144'. [ 203.692107][ T3515] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.709973][ T3515] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.747578][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2146'. [ 203.786521][ T3515] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.828940][ T3515] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.213319][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 204.674551][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'. [ 204.708864][T10443] netlink: 'syz.3.2165': attribute type 3 has an invalid length. [ 205.577356][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 205.694581][T10489] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 205.742455][T10489] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 205.777170][T10489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 205.859169][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 206.529046][T10531] ip6t_srh: unknown srh invflags 4000 [ 206.776959][T10543] netlink: 'syz.0.2208': attribute type 2 has an invalid length. [ 206.791366][T10543] netlink: 'syz.0.2208': attribute type 1 has an invalid length. [ 207.122847][T10561] netlink: 'syz.2.2217': attribute type 6 has an invalid length. [ 207.373230][T10572] __nla_validate_parse: 6 callbacks suppressed [ 207.373250][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2222'. [ 207.420927][T10572] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 207.433023][T10579] netlink: 'syz.3.2224': attribute type 1 has an invalid length. [ 207.513724][T10579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.522407][T10581] netlink: 'syz.2.2227': attribute type 1 has an invalid length. [ 207.749899][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 207.775930][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2232'. [ 208.052223][T10606] netlink: 'syz.3.2237': attribute type 11 has an invalid length. [ 208.084322][T10606] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2237'. [ 208.277004][T10614] netlink: 'syz.2.2242': attribute type 10 has an invalid length. [ 208.339656][T10622] openvswitch: netlink: Key type 73 is out of range max 32 [ 208.361355][T10614] team0: Port device syz_tun added [ 208.593722][T10628] netlink: zone id is out of range [ 208.598921][T10628] netlink: zone id is out of range [ 208.647876][T10628] netlink: zone id is out of range [ 208.666262][T10628] netlink: zone id is out of range [ 208.703194][T10628] netlink: zone id is out of range [ 208.710886][T10628] netlink: zone id is out of range [ 208.803152][T10634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.087631][T10654] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 209.187751][T10654] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 209.621611][T10674] batadv1: entered promiscuous mode [ 210.183712][T10699] x_tables: duplicate entry at hook 1 [ 210.843872][T10731] netlink: 'syz.0.2298': attribute type 10 has an invalid length. [ 210.915140][T10731] team0: Port device syz_tun added [ 210.916571][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2301'. [ 211.047721][T10737] net_ratelimit: 166 callbacks suppressed [ 211.047742][T10737] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 211.178489][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 211.196639][T10745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2307'. [ 211.283045][T10747] lo: entered allmulticast mode [ 211.301018][T10747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.477766][T10761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2315'. [ 211.490104][T10761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2315'. [ 211.499532][T10762] netlink: 'syz.3.2314': attribute type 4 has an invalid length. [ 211.609181][T10765] netlink: ct family unspecified [ 211.643029][T10765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.824904][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 211.831026][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.838202][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 211.844317][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 211.850359][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 211.961405][T10780] netlink: 'syz.1.2322': attribute type 1 has an invalid length. [ 212.059938][T10780] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2322'. [ 212.095799][T10786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.569326][T10811] netlink: 'syz.1.2338': attribute type 9 has an invalid length. [ 212.580950][T10811] netlink: 'syz.1.2338': attribute type 6 has an invalid length. [ 212.589324][T10811] netlink: 'syz.1.2338': attribute type 7 has an invalid length. [ 212.612900][T10811] netlink: 'syz.1.2338': attribute type 8 has an invalid length. [ 212.993561][T10829] __nla_validate_parse: 1 callbacks suppressed [ 212.993580][T10829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2347'. [ 213.034825][T10834] netlink: 'syz.2.2350': attribute type 10 has an invalid length. [ 213.095825][T10834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.107855][T10834] team0: Port device bond0 added [ 213.721456][T10866] netlink: 'syz.4.2367': attribute type 11 has an invalid length. [ 213.883045][T10872] netlink: 'syz.2.2368': attribute type 1 has an invalid length. [ 213.891018][T10872] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2368'. [ 214.005597][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'. [ 214.081141][T10878] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2373'. [ 214.528406][T10906] netlink: 'syz.1.2386': attribute type 21 has an invalid length. [ 214.536558][T10906] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2386'. [ 214.810372][T10918] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 214.833144][T10920] netlink: set zone limit has 8 unknown bytes [ 215.042593][T10928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.269407][T10942] netlink: 'syz.2.2405': attribute type 8 has an invalid length. [ 216.164421][T10985] netlink: 'syz.3.2424': attribute type 12 has an invalid length. [ 216.449558][T10997] netlink: 'syz.1.2431': attribute type 1 has an invalid length. [ 216.492885][T10997] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2431'. [ 216.522932][T10997] netlink: 'syz.1.2431': attribute type 1 has an invalid length. [ 216.571715][T11001] _ÐZ`Ô€@: entered promiscuous mode [ 216.794302][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 216.805822][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 217.290325][T11038] xt_l2tp: missing protocol rule (udp|l2tpip) [ 217.865960][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 217.917811][T11071] netlink: 'syz.3.2467': attribute type 1 has an invalid length. [ 218.079555][T11079] openvswitch: netlink: Missing valid actions attribute. [ 218.128421][T11079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.214013][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 218.388539][T11091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2477'. [ 218.676081][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 218.718252][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 218.724162][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2487'. [ 218.748594][T11109] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453) [ 218.832877][T11109] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 219.378300][ T9] IPVS: starting estimator thread 0... [ 219.460869][T11147] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2504'. [ 219.482851][T11141] IPVS: using max 28 ests per chain, 67200 per kthread [ 219.966655][T11175] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 220.169300][T11180] netlink: 'syz.0.2520': attribute type 2 has an invalid length. [ 220.193162][T11180] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2520'. [ 220.210187][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2522'. [ 220.234013][T11184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.425367][T11194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2525'. [ 220.454058][T11194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2525'. [ 220.951706][T11217] netlink: 'syz.2.2538': attribute type 2 has an invalid length. [ 220.984412][T11218] xt_l2tp: v2 doesn't support IP mode [ 222.409492][T11290] sock: sock_timestamping_bind_phc: sock not bind to device [ 222.632346][T11298] netlink: 'syz.2.2578': attribute type 9 has an invalid length. [ 223.941646][T11366] netlink: 'syz.3.2612': attribute type 11 has an invalid length. [ 224.637365][T11405] __nla_validate_parse: 6 callbacks suppressed [ 224.637388][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2631'. [ 225.211167][T11431] geneve2: entered allmulticast mode [ 225.252736][ T3515] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.261504][ T3515] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.322703][ T3515] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.331492][ T3515] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.405097][T11439] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 225.442210][T11439] bond0: (slave netdevsim0): Releasing backup interface [ 225.494855][T11439] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.508774][T11445] sctp: [Deprecated]: syz.1.2651 (pid 11445) Use of int in maxseg socket option. [ 225.508774][T11445] Use struct sctp_assoc_value instead [ 225.939523][T11464] netlink: 'syz.0.2659': attribute type 1 has an invalid length. [ 225.980853][T11464] netlink: 'syz.0.2659': attribute type 2 has an invalid length. [ 226.470835][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 226.506126][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 226.554948][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 226.597258][T11497] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2677'. [ 226.606508][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 226.662900][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 226.689365][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 226.706563][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 226.718186][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 226.763763][T11503] netlink: 'syz.0.2680': attribute type 1 has an invalid length. [ 226.797652][T11503] netlink: 'syz.0.2680': attribute type 11 has an invalid length. [ 226.809669][T11505] netlink: 'syz.3.2681': attribute type 3 has an invalid length. [ 228.406291][T11584] syz.2.2721 uses obsolete (PF_INET,SOCK_PACKET) [ 228.441462][T11584] hsr0: entered promiscuous mode [ 228.463051][T11584] hsr0: entered allmulticast mode [ 228.485491][T11584] hsr_slave_0: entered allmulticast mode [ 228.518033][T11584] hsr_slave_1: entered allmulticast mode [ 228.716365][T11601] netlink: 'syz.0.2728': attribute type 2 has an invalid length. [ 228.719181][T11593] netlink: 'syz.1.2725': attribute type 4 has an invalid length. [ 229.224806][T11624] netlink: 'syz.4.2739': attribute type 1 has an invalid length. [ 229.337011][T11626] xfrm1: entered allmulticast mode [ 229.508667][T11638] netlink: 'syz.3.2746': attribute type 11 has an invalid length. [ 229.675105][T11644] vxcan2: entered promiscuous mode [ 229.925754][T11656] __nla_validate_parse: 53 callbacks suppressed [ 229.925777][T11656] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2754'. [ 230.414430][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2765'. [ 230.435486][T11682] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 230.655311][T11692] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2771'. [ 230.696577][T11694] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2772'. [ 230.762740][T11694] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2772'. [ 230.799681][T11694] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2772'. [ 230.873968][T11700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 230.965875][T11700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 231.173328][T11716] netlink: 'syz.2.2783': attribute type 3 has an invalid length. [ 231.188855][T11718] netlink: 'syz.3.2785': attribute type 8 has an invalid length. [ 231.286523][T11722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.587200][T11736] netlink: zone id is out of range [ 231.641673][T11740] lo speed is unknown, defaulting to 1000 [ 231.672420][T11740] lo speed is unknown, defaulting to 1000 [ 231.713378][T11740] lo speed is unknown, defaulting to 1000 [ 231.755700][T11740] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 231.801090][T11740] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 231.954392][T11740] lo speed is unknown, defaulting to 1000 [ 231.962486][T11740] lo speed is unknown, defaulting to 1000 [ 232.016534][T11740] lo speed is unknown, defaulting to 1000 [ 232.029520][T11740] lo speed is unknown, defaulting to 1000 [ 232.061774][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2803'. [ 232.072679][T11740] lo speed is unknown, defaulting to 1000 [ 232.254493][T11764] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2808'. [ 232.439519][T11774] netlink: 'syz.4.2813': attribute type 1 has an invalid length. [ 232.710321][T11785] vti0: entered promiscuous mode [ 233.318023][T11819] netlink: 'syz.3.2835': attribute type 4 has an invalid length. [ 233.900387][T11846] netlink: 'syz.4.2848': attribute type 2 has an invalid length. [ 234.841234][T11892] xt_ecn: cannot match TCP bits for non-tcp packets [ 235.242779][T11912] delete_channel: no stack [ 235.292252][T11918] __nla_validate_parse: 6 callbacks suppressed [ 235.292273][T11918] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2882'. [ 235.313766][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2882'. [ 235.364314][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2882'. [ 235.409590][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2882'. [ 235.480469][T11927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2886'. [ 235.616748][T11932] netlink: 'syz.3.2890': attribute type 10 has an invalid length. [ 235.663042][T11932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2890'. [ 235.706541][T11932] team0: Port device geneve0 added [ 236.002032][T11950] siw: device registration error -23 [ 236.585926][T11958] infiniband syz0: set down [ 236.590733][T11958] infiniband syz0: added ipvlan1 [ 236.727657][T11958] RDS/IB: syz0: added [ 236.735132][T11958] smc: adding ib device syz0 with port count 1 [ 236.741527][T11958] smc: ib device syz0 port 1 has pnetid [ 236.812576][T11983] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 236.832062][T11983] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 236.862490][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2915'. [ 236.919681][T11985] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2915'. [ 237.166652][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'. [ 238.115689][T12035] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.2940'. [ 238.385385][T12047] netlink: 'syz.2.2944': attribute type 7 has an invalid length. [ 238.432743][T12047] netlink: 'syz.2.2944': attribute type 8 has an invalid length. [ 238.593721][T12054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.390878][T12129] No such timeout policy "syz0" [ 241.660173][T12192] x_tables: duplicate underflow at hook 4 [ 241.898794][T12203] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 242.067421][T12210] unsupported nla_type 52263 [ 242.180800][T12218] netlink: 'syz.3.3031': attribute type 21 has an invalid length. [ 242.214950][T12218] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.251425][T12218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.259200][T12218] IPv6: NLM_F_CREATE should be set when creating new route [ 242.263021][T12220] netlink: 'syz.0.3032': attribute type 8 has an invalid length. [ 242.266629][T12218] IPv6: NLM_F_CREATE should be set when creating new route [ 242.281440][T12218] IPv6: NLM_F_CREATE should be set when creating new route [ 242.383749][T12226] __nla_validate_parse: 1 callbacks suppressed [ 242.383769][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3035'. [ 242.762072][T12244] netlink: 'syz.2.3044': attribute type 84 has an invalid length. [ 242.774419][T12243] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 242.836782][T12248] netlink: 'syz.3.3046': attribute type 13 has an invalid length. [ 242.863451][T12248] macvtap0: entered promiscuous mode [ 242.885942][T12248] macvtap0: refused to change device tx_queue_len [ 243.194536][T12266] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.201161][T12265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 243.262700][T12265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 243.337500][T12270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3057'. [ 243.380849][T12270] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3057'. [ 243.566292][T12282] xt_l2tp: invalid flags combination: c [ 243.989878][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3072'. [ 244.392911][T12321] netlink: 'syz.2.3082': attribute type 13 has an invalid length. [ 244.437882][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3085'. [ 244.691477][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 244.893959][T12349] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.921942][T12347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3095'. [ 245.679505][T12383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3113'. [ 246.363500][T12421] raw_sendmsg: syz.2.3132 forgot to set AF_INET. Fix it! [ 247.505126][T12479] netlink: 'syz.4.3159': attribute type 4 has an invalid length. [ 247.531014][T12479] netlink: 'syz.4.3159': attribute type 17 has an invalid length. [ 247.574243][T12477] lo speed is unknown, defaulting to 1000 [ 248.283269][T12511] __nla_validate_parse: 5 callbacks suppressed [ 248.283288][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3178'. [ 248.665022][ T3515] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.668446][T12571] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3202'. [ 250.016763][T12573] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3203'. [ 250.069540][T12573] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3203'. [ 250.131112][T12573] netlink: 81 bytes leftover after parsing attributes in process `syz.0.3203'. [ 250.796016][T12604] netlink: 'syz.2.3215': attribute type 9 has an invalid length. [ 251.022492][T12616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3221'. [ 252.606287][T12681] ip6gre1: entered promiscuous mode [ 253.144632][T12712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3260'. [ 253.221834][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3261'. [ 253.772784][T12743] netlink: 'syz.3.3273': attribute type 32 has an invalid length. [ 254.213785][T12766] netlink: 316 bytes leftover after parsing attributes in process `syz.4.3281'. [ 254.256635][T12767] netlink: 'syz.2.3283': attribute type 2 has an invalid length. [ 254.292859][T12767] netlink: 'syz.2.3283': attribute type 1 has an invalid length. [ 254.310962][T12767] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3283'. [ 254.695272][T12788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3293'. [ 255.129885][T12812] netlink: 'syz.2.3305': attribute type 21 has an invalid length. [ 255.148684][T12812] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3305'. [ 255.186093][T12812] netlink: 'syz.2.3305': attribute type 4 has an invalid length. [ 255.202348][T12814] sctp: [Deprecated]: syz.0.3306 (pid 12814) Use of int in maxseg socket option. [ 255.202348][T12814] Use struct sctp_assoc_value instead [ 255.222439][T12812] netlink: 'syz.2.3305': attribute type 5 has an invalid length. [ 255.235715][T12812] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3305'. [ 255.300052][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3309'. [ 255.332814][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3309'. [ 255.839862][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.856726][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.457435][T12879] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3338'. [ 257.390739][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3363'. [ 257.469956][T12930] netlink: 'syz.1.3365': attribute type 21 has an invalid length. [ 257.813278][T12952] xt_hashlimit: size too large, truncated to 1048576 [ 257.835854][T12952] xt_hashlimit: max too large, truncated to 1048576 [ 257.844905][T12951] xt_l2tp: v2 doesn't support IP mode [ 258.059139][T12961] netlink: 'syz.1.3378': attribute type 282 has an invalid length. [ 258.661258][T12991] sctp: [Deprecated]: syz.3.3393 (pid 12991) Use of int in max_burst socket option. [ 258.661258][T12991] Use struct sctp_assoc_value instead [ 259.069430][T13013] dummy0: mtu less than device minimum [ 259.384283][T13030] netlink: 'syz.1.3411': attribute type 2 has an invalid length. [ 259.553379][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3415'. [ 259.733368][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3419'. [ 259.742391][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3419'. [ 259.951521][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3425'. [ 260.032037][T13062] netlink: 'syz.4.3429': attribute type 3 has an invalid length. [ 260.067998][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3428'. [ 260.093862][T13064] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 260.810850][T13101] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3447'. [ 260.831429][T13104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3449'. [ 261.033770][T13110] netlink: 508 bytes leftover after parsing attributes in process `syz.0.3451'. [ 261.540999][T13138] xt_hashlimit: invalid interval [ 261.555320][T13136] bond2: entered promiscuous mode [ 261.560786][T13136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.821651][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3472'. [ 261.854822][T13153] gre0: Master is either lo or non-ether device [ 262.023003][T13162] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3477'. [ 262.211749][T13170] netlink: 'syz.3.3481': attribute type 7 has an invalid length. [ 262.315679][T13175] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 262.411145][T13181] netlink: 'syz.0.3488': attribute type 15 has an invalid length. [ 262.560596][T13187] ieee802154 phy0 wpan0: encryption failed: -90 [ 263.203811][T13220] xt_connbytes: Forcing CT accounting to be enabled [ 263.252126][T13220] xt_bpf: check failed: parse error [ 263.801491][T13245] xt_hashlimit: max too large, truncated to 1048576 [ 263.834213][T13245] No such timeout policy "syz1" [ 264.223347][T13269] netlink: 'syz.0.3530': attribute type 10 has an invalid length. [ 264.479819][T13285] xt_cgroup: invalid path, errno=-2 [ 264.705741][T13295] __nla_validate_parse: 6 callbacks suppressed [ 264.705760][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 264.736960][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 264.768018][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 264.795756][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3546'. [ 264.831016][T13301] netlink: 'syz.0.3546': attribute type 1 has an invalid length. [ 264.985006][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3549'. [ 264.998147][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3549'. [ 265.012766][T13306] netlink: 'syz.3.3549': attribute type 6 has an invalid length. [ 265.720338][T13344] Timeout policy `syz0' can only be used by L3 protocol number 17157 [ 266.107781][T13360] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3572'. [ 266.126035][T13364] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 266.437858][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 266.472939][T13380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.483335][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 266.514623][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 266.661897][T13384] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 266.857718][T13393] ip6t_srh: unknown srh invflags 4449 [ 266.915757][T13400] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 266.924103][T13399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.205202][T13412] IPv6: sit1: Disabled Multicast RS [ 268.177535][T13459] vlan0: entered promiscuous mode [ 269.333005][T13521] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 269.484696][T13527] netlink: 'syz.4.3651': attribute type 21 has an invalid length. [ 270.161064][T13565] xt_cluster: node mask cannot exceed total number of nodes [ 270.208767][T13567] __nla_validate_parse: 79 callbacks suppressed [ 270.208786][T13567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3672'. [ 270.250981][T13567] unsupported nlmsg_type 40 [ 271.201452][T13613] netlink: 'syz.4.3694': attribute type 10 has an invalid length. [ 271.344822][T13613] team0: Port device wlan1 added [ 271.623072][T13631] ip6t_REJECT: ECHOREPLY is not supported [ 272.002582][T13645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3709'. [ 272.582089][T13673] netlink: 'syz.4.3722': attribute type 15 has an invalid length. [ 272.919045][T13687] IPv6: Can't replace route, no match found [ 273.129599][T13699] netlink: 'syz.4.3737': attribute type 5 has an invalid length. [ 273.394889][T13711] netlink: 'syz.2.3743': attribute type 1 has an invalid length. [ 273.418999][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 273.450786][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 273.672871][T13727] netlink: 'syz.2.3750': attribute type 2 has an invalid length. [ 273.678407][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3749'. [ 273.911411][T13739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.966707][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3758'. [ 274.745009][T13777] mac80211_hwsim hwsim10 : renamed from wlan1 (while UP) [ 274.849766][T13783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3778'. [ 274.912350][T13787] netlink: 'syz.0.3780': attribute type 1 has an invalid length. [ 274.920963][T13787] netlink: 'syz.0.3780': attribute type 3 has an invalid length. [ 274.936695][T13787] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3780'. [ 274.967479][T13787] NCSI netlink: No device for ifindex 246 [ 275.087438][T13795] netlink: 'syz.1.3784': attribute type 1 has an invalid length. [ 275.131404][T13795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3784'. [ 275.141018][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 275.509670][T13813] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 275.533200][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'. [ 275.588738][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3796'. [ 275.615544][T13819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.819577][T13829] syz.4.3798 uses old SIOCAX25GETINFO [ 275.866240][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3803'. [ 275.921873][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 275.935157][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 275.949722][ T49] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 275.967505][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.329020][T13851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3812'. [ 276.516129][T13860] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 276.560693][T13825] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 276.784990][T13874] netlink: 'syz.3.3822': attribute type 3 has an invalid length. [ 276.800757][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3823'. [ 276.821702][T13874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3822'. [ 277.046022][T13886] netlink: 'syz.4.3828': attribute type 1 has an invalid length. [ 277.055023][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3827'. [ 277.118816][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 277.361223][T13899] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.3834'. [ 277.379918][T13902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3837'. [ 277.571939][T13912] xt_hashlimit: size too large, truncated to 1048576 [ 277.574931][T13911] netlink: 'syz.1.3842': attribute type 1 has an invalid length. [ 277.830265][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 278.600041][T13952] netlink: 'syz.2.3860': attribute type 1 has an invalid length. [ 278.607956][T13953] netlink: 'syz.0.3861': attribute type 7 has an invalid length. [ 279.011169][T13972] x_tables: unsorted entry at hook 2 [ 279.183407][T13979] netlink: 'syz.2.3875': attribute type 21 has an invalid length. [ 279.223886][T13979] netlink: 'syz.2.3875': attribute type 5 has an invalid length. [ 279.398612][T13991] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.607207][T14053] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 280.844094][T14063] validate_nla: 3 callbacks suppressed [ 280.844113][T14063] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 280.890113][T14063] __nla_validate_parse: 3 callbacks suppressed [ 280.890130][T14063] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3916'. [ 280.922313][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3916'. [ 281.151563][T14081] ip6t_srh: unknown srh match flags 5294 [ 281.365547][T14091] x_tables: duplicate underflow at hook 2 [ 281.507190][T14097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.826148][T14112] netlink: 'syz.2.3939': attribute type 1 has an invalid length. [ 281.857175][T14112] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3939'. [ 281.941542][T14119] netlink: 'syz.0.3943': attribute type 11 has an invalid length. [ 282.228936][T14131] netlink: 'syz.1.3949': attribute type 11 has an invalid length. [ 282.474123][T14141] netlink: 'syz.1.3953': attribute type 2 has an invalid length. [ 282.502509][T14141] netlink: 'syz.1.3953': attribute type 1 has an invalid length. [ 282.519091][T14141] netlink: 'syz.1.3953': attribute type 1 has an invalid length. [ 282.892728][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3964'. [ 283.408577][T14187] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.417230][T14188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3977'. [ 283.449709][T14185] set match dimension is over the limit! [ 284.322154][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'. [ 284.429467][T14236] batadv1: entered allmulticast mode [ 284.476081][T14236] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 284.701541][T14250] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 284.717148][T14253] netlink: 'syz.4.4008': attribute type 32 has an invalid length. [ 284.757818][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4008'. [ 284.783787][T14253] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 284.890791][T14256] !: renamed from dummy0 [ 285.219679][T14274] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 285.260174][T14274] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 285.798611][T14302] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4033'. [ 286.511323][T14338] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.532279][T14338] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.756418][T14348] netlink: 'syz.1.4056': attribute type 1 has an invalid length. [ 286.788493][T14348] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4056'. [ 286.817859][T14352] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 287.253665][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4067'. [ 287.491455][T14374] Cannot find del_set index 286 as target [ 287.899080][T14395] netlink: 'syz.3.4078': attribute type 10 has an invalid length. [ 287.933392][T14397] netlink: 'syz.0.4081': attribute type 11 has an invalid length. [ 287.947109][T14395] bridge0: port 3(netdevsim0) entered blocking state [ 287.950899][T14397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4081'. [ 287.973202][T14395] bridge0: port 3(netdevsim0) entered disabled state [ 287.990499][T14395] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 288.021672][T14395] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 288.082043][T14403] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 288.417026][T14418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4091'. [ 288.553409][T14388] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 288.636138][T14431] netlink: 'syz.0.4096': attribute type 15 has an invalid length. [ 288.670126][T14431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4096'. [ 288.848701][T14438] @ÿ: renamed from bond_slave_0 (while UP) [ 289.149562][T14453] nftables ruleset with unbound set [ 289.442485][T14470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4114'. [ 289.468947][T14468] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 289.742761][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 289.966811][T14498] netlink: 'syz.1.4126': attribute type 21 has an invalid length. [ 289.971724][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4128'. [ 290.279290][T14513] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 290.545925][T14526] netlink: 'syz.2.4142': attribute type 1 has an invalid length. [ 290.565102][T14526] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4142'. [ 290.623680][T14532] netlink: 'syz.3.4145': attribute type 5 has an invalid length. [ 290.652731][T14534] sctp: [Deprecated]: syz.4.4146 (pid 14534) Use of int in maxseg socket option. [ 290.652731][T14534] Use struct sctp_assoc_value instead [ 290.693612][T14532] ip6erspan0: entered allmulticast mode [ 290.906760][T14544] netlink: 'syz.3.4153': attribute type 11 has an invalid length. [ 290.972789][T14544] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4153'. [ 291.035442][T14554] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4154'. [ 291.553597][T14554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.619021][T14554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.648457][T14554] bond0 (unregistering): Released all slaves [ 291.924543][T14587] __nla_validate_parse: 2 callbacks suppressed [ 291.924562][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4172'. [ 291.983394][T14590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4174'. [ 292.227641][T14602] IPv6: syztnl1: Disabled Multicast RS [ 292.335242][T14611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4185'. [ 292.872166][T14636] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4197'. [ 293.310929][T14662] netlink: 'syz.0.4210': attribute type 1 has an invalid length. [ 293.363871][T14660] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 293.484907][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4212'. [ 293.494805][T14668] openvswitch: netlink: Missing key (keys=40, expected=100) [ 293.560746][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4215'. [ 293.776751][T14680] netlink: 'syz.0.4219': attribute type 10 has an invalid length. [ 294.096003][T14700] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4229'. [ 294.251391][T14708] netlink: 'syz.2.4232': attribute type 3 has an invalid length. [ 294.327527][T14700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.339712][T14700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.353408][T14700] bond0 (unregistering): Released all slaves [ 294.644348][T14724] netlink: 'syz.2.4238': attribute type 3 has an invalid length. [ 294.652228][T14724] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4238'. [ 294.732063][T14728] netlink: 'syz.1.4243': attribute type 1 has an invalid length. [ 294.777379][T14732] netlink: 'syz.3.4245': attribute type 10 has an invalid length. [ 294.812760][T14732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4245'. [ 294.831576][T14732] bridge0: port 4(0!) entered blocking state [ 294.856098][T14732] bridge0: port 4(0!) entered disabled state [ 294.871285][T14732] !: entered allmulticast mode [ 294.893009][T14732] !: entered promiscuous mode [ 295.097237][ T24] IPVS: starting estimator thread 0... [ 295.222898][T14749] IPVS: using max 26 ests per chain, 62400 per kthread [ 295.658744][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 297.514997][T14880] netlink: 'syz.2.4315': attribute type 4 has an invalid length. [ 298.437328][T14911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.900964][T14930] xt_CT: No such helper "syz0" [ 299.249424][T14958] __nla_validate_parse: 1 callbacks suppressed [ 299.249442][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4353'. [ 299.357615][T14962] netlink: 'syz.3.4355': attribute type 1 has an invalid length. [ 299.466552][T14969] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 299.669650][T14978] netlink: 'syz.1.4362': attribute type 2 has an invalid length. [ 299.984818][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4371'. [ 300.213058][T15004] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 300.305899][T15010] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 300.329303][T15010] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 300.452955][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4383'. [ 300.685229][T15032] xt_TCPMSS: Only works on TCP SYN packets [ 300.877477][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4393'. [ 300.896980][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4393'. [ 300.917070][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4393'. [ 300.981512][T15039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.183614][T15053] xt_l2tp: invalid flags combination: 4 [ 301.332389][T15062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.557795][T15076] netlink: 'syz.2.4412': attribute type 5 has an invalid length. [ 301.735894][T15084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.060818][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4425'. [ 302.441275][T15123] netlink: 'syz.1.4436': attribute type 1 has an invalid length. [ 302.465326][T15126] SET target dimension over the limit! [ 302.482712][T15123] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4436'. [ 302.650078][T15135] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 302.905325][T15144] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.630178][T15183] openvswitch: netlink: Message has 1 unknown bytes. [ 303.668659][T15183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.225609][T15211] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 304.264219][T15211] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 304.282834][T15213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4474'. [ 304.342301][T15218] netlink: 'syz.3.4476': attribute type 2 has an invalid length. [ 304.491440][T15224] netlink: 'syz.1.4479': attribute type 5 has an invalid length. [ 304.507007][T15224] netlink: 'syz.1.4479': attribute type 7 has an invalid length. [ 304.528505][T15224] : entered promiscuous mode [ 304.814936][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4484'. [ 305.081343][T15248] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 305.203219][T15256] netlink: 'syz.2.4492': attribute type 2 has an invalid length. [ 305.285339][T15262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4494'. [ 305.531693][T15272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4498'. [ 305.807715][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4506'. [ 305.833572][T15287] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 305.992519][T15295] ip6gre1: entered promiscuous mode [ 306.262075][T15309] netlink: 'syz.1.4514': attribute type 1 has an invalid length. [ 306.288667][T15313] netlink: 'syz.2.4513': attribute type 10 has an invalid length. [ 306.312763][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4514'. [ 306.313386][T15313] hsr0: left promiscuous mode [ 306.342757][T15313] hsr0: left allmulticast mode [ 306.352693][T15313] hsr_slave_0: left allmulticast mode [ 306.365219][T15313] hsr_slave_1: left allmulticast mode [ 306.402852][T15313] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 306.479900][T15313] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 306.499729][T15313] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 306.712935][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4522'. [ 307.336795][T15363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.754868][T15431] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4565'. [ 309.173526][T15452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.824478][T15487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4589'. [ 309.866504][T15487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4589'. [ 310.121180][T15502] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4594'. [ 310.262962][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4595'. [ 310.574827][T15524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4602'. [ 310.642750][T15524] netlink: 'syz.2.4602': attribute type 1 has an invalid length. [ 310.924396][T15540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4609'. [ 311.031435][T15545] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4613'. [ 311.080422][T15547] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.316210][T15556] ipt_REJECT: ECHOREPLY no longer supported. [ 312.058036][T15592] openvswitch: netlink: Missing valid actions attribute. [ 312.095901][T15592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.133828][T15597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.899266][T15637] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4649'. [ 313.177633][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4657'. [ 313.222881][T15653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4655'. [ 313.312963][T15658] netlink: 'syz.1.4658': attribute type 1 has an invalid length. [ 314.855363][T15737] __nla_validate_parse: 4 callbacks suppressed [ 314.855381][T15737] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.4692'. [ 315.046750][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4696'. [ 315.101187][T15749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4696'. [ 315.125093][T15749] netlink: 336 bytes leftover after parsing attributes in process `syz.4.4696'. [ 315.149547][T15754] xt_bpf: check failed: parse error [ 315.170636][T15749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4696'. [ 315.333073][T15760] netlink: 'syz.3.4702': attribute type 10 has an invalid length. [ 315.592892][T15776] xt_TCPMSS: Only works on TCP SYN packets [ 316.134666][T15806] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4719'. [ 316.192326][T15810] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 316.255987][T15812] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 317.273697][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.118995][T15908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4761'. [ 319.395882][T15975] netlink: 'syz.4.4792': attribute type 10 has an invalid length. [ 319.419767][T15975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4792'. [ 319.460519][T15975] dummy0: entered promiscuous mode [ 319.484553][T15975] dummy0: entered allmulticast mode [ 319.494260][T15979] siw: device registration error -23 [ 319.546939][T15975] team0: Port device dummy0 removed [ 319.589975][T15975] bridge0: port 3(dummy0) entered blocking state [ 319.623390][T15975] bridge0: port 3(dummy0) entered disabled state [ 319.739394][T15988] netlink: 'syz.3.4795': attribute type 13 has an invalid length. [ 320.071498][ T59] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.137546][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.172724][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.209673][ T59] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.220546][T16005] netlink: 'syz.2.4801': attribute type 5 has an invalid length. [ 320.252807][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4801'. [ 320.410770][T16005] bridge3: entered promiscuous mode [ 320.463743][T16005] bridge3: entered allmulticast mode [ 320.620948][T16020] netlink: 'syz.1.4808': attribute type 11 has an invalid length. [ 320.841002][T16030] netlink: 'syz.1.4813': attribute type 1 has an invalid length. [ 321.051311][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4818'. [ 321.088913][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4818'. [ 321.911615][T16090] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4837'. [ 321.993721][T16090] hsr_slave_0: left promiscuous mode [ 322.012705][T16090] hsr_slave_1: left promiscuous mode [ 322.036081][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4839'. [ 322.221252][T16061] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 322.379718][T16108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.009684][T16139] netlink: 'syz.0.4857': attribute type 5 has an invalid length. [ 323.423505][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 323.838403][T16186] SET target dimension over the limit! [ 323.899178][T16190] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.156586][T16208] netlink: 'syz.0.4889': attribute type 10 has an invalid length. [ 324.183448][T16208] team0: Device hsr_slave_0 failed to register rx_handler [ 325.014886][T16254] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 325.427155][T16279] netlink: 'syz.0.4925': attribute type 13 has an invalid length. [ 325.669929][T16285] netlink: 'syz.1.4928': attribute type 2 has an invalid length. [ 325.704359][T16285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4928'. [ 325.724773][T16279] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.827437][T16279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.845674][T16279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.090535][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.125291][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.164902][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.674931][T16325] bond0: option ad_select: unable to set because the bond device is up [ 326.730826][T16330] netlink: 'syz.1.4949': attribute type 13 has an invalid length. [ 326.748697][T16331] x_tables: duplicate underflow at hook 2 [ 326.880357][T16337] netlink: 'syz.0.4953': attribute type 3 has an invalid length. [ 327.547620][T16330] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.555567][T16330] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.347365][T16330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.395296][T16330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.083288][T16393] bond0 (uninitialized): Unable to set up delay as MII monitoring is disabled [ 329.168616][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.193449][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.235819][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.272746][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.304888][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.329564][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.361085][T16412] xt_connbytes: Forcing CT accounting to be enabled [ 329.368991][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.388101][T16412] Cannot find set identified by id 0 to match [ 329.388825][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.421325][T16416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4981'. [ 329.456993][T16416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4981'. [ 329.493094][T16420] tc_dump_action: action bad kind [ 329.646745][T16431] netlink: 'syz.1.4986': attribute type 1 has an invalid length. [ 329.665213][T16431] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4986'. [ 329.715479][T16434] netlink: 'syz.0.4990': attribute type 10 has an invalid length. [ 329.728160][T16434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4990'. [ 329.778702][T16434] veth0_vlan: left promiscuous mode [ 329.800484][T16434] veth0_vlan: entered promiscuous mode [ 329.862462][T16434] veth0_vlan: entered allmulticast mode [ 329.877990][T16434] bridge0: port 2(veth0_vlan) entered blocking state [ 329.890760][T16434] bridge0: port 2(veth0_vlan) entered disabled state [ 329.904624][T16434] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 330.263864][T16458] xt_hashlimit: size too large, truncated to 1048576 [ 330.270617][T16458] xt_hashlimit: max too large, truncated to 1048576 [ 330.882844][T16494] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 331.562868][T16527] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5036'. [ 331.572313][T16527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.168177][T16552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5050'. [ 332.316812][T16557] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 332.394901][T16565] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 332.410129][T16562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.748909][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5060'. [ 332.862755][T16585] wireguard0: entered promiscuous mode [ 332.960861][T16585] wireguard0: entered allmulticast mode [ 333.370748][T16606] netlink: 288 bytes leftover after parsing attributes in process `syz.3.5071'. [ 333.893797][T16632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5082'. [ 334.508636][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5095'. [ 334.703091][T16675] netlink: 'syz.4.5099': attribute type 21 has an invalid length. [ 334.739035][T16677] x_tables: duplicate underflow at hook 1 [ 334.990048][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5106'. [ 335.454074][T16714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5116'. [ 336.043818][T16738] vlan0: entered promiscuous mode [ 336.107654][T16742] netlink: 'syz.4.5129': attribute type 5 has an invalid length. [ 337.011197][T16784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5147'. [ 337.202521][T16794] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5149'. [ 337.282673][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5152'. [ 337.317426][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5152'. [ 337.352716][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5152'. [ 338.335579][T16858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.976808][T16894] netlink: 'syz.4.5194': attribute type 5 has an invalid length. [ 339.012912][T16894] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5194'. [ 339.505934][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5208'. [ 339.524585][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5208'. [ 339.550266][T16924] netlink: 'syz.0.5208': attribute type 4 has an invalid length. [ 339.695580][T16932] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 339.720401][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5215'. [ 339.926586][T16945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5219'. [ 340.303226][T16968] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 340.323076][T16968] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 340.358326][T16968] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 340.771201][T16992] netlink: 'syz.3.5245': attribute type 1 has an invalid length. [ 341.412735][T17030] netlink: 'syz.1.5260': attribute type 3 has an invalid length. [ 341.650340][T17041] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 341.660419][T17045] delete_channel: no stack [ 341.709583][T17047] xt_limit: Overflow, try lower: 262144/524288 [ 341.836414][T17055] sctp: [Deprecated]: syz.3.5274 (pid 17055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.836414][T17055] Use struct sctp_sack_info instead [ 341.944214][T17059] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 342.131387][T17071] __nla_validate_parse: 8 callbacks suppressed [ 342.131416][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5280'. [ 342.150852][T17070] netlink: 'syz.0.5282': attribute type 2 has an invalid length. [ 342.165504][T17070] netlink: 'syz.0.5282': attribute type 8 has an invalid length. [ 342.177166][T17070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5282'. [ 342.741824][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5297'. [ 342.903658][T17109] netlink: 'syz.1.5301': attribute type 29 has an invalid length. [ 343.183024][T17127] xt_TCPMSS: Only works on TCP SYN packets [ 343.490807][T17143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5317'. [ 343.735699][T17151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5322'. [ 343.895025][T17155] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5323'. [ 343.934955][T17155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5323'. [ 344.150823][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5329'. [ 344.167280][T17167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5329'. [ 344.754490][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'. [ 344.974513][T17199] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 345.009452][T17199] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 345.032795][T17201] netlink: 'syz.3.5345': attribute type 2 has an invalid length. [ 345.059189][T17201] netlink: 'syz.3.5345': attribute type 2 has an invalid length. [ 345.222822][T17210] netlink: 'syz.1.5349': attribute type 33 has an invalid length. [ 345.396079][T17221] netlink: 'syz.2.5354': attribute type 1 has an invalid length. [ 346.599549][T17293] netlink: 'syz.4.5390': attribute type 1 has an invalid length. [ 346.692663][T17295] netlink: 'syz.1.5392': attribute type 3 has an invalid length. [ 346.725087][T17297] netlink: 'syz.2.5393': attribute type 2 has an invalid length. [ 347.319282][T17330] __nla_validate_parse: 5 callbacks suppressed [ 347.319300][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5409'. [ 347.386740][T17335] openvswitch: netlink: IP tunnel dst address not specified [ 347.954821][T17365] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5424'. [ 348.167787][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5431'. [ 348.192809][T17380] netlink: 'syz.0.5431': attribute type 5 has an invalid length. [ 348.211120][T17380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5431'. [ 348.259584][T17380] geneve3: entered promiscuous mode [ 348.266320][T17380] geneve3: entered allmulticast mode [ 348.274421][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 348.297630][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 348.327539][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 348.552000][T17399] netlink: 'syz.4.5438': attribute type 1 has an invalid length. [ 348.679890][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 348.723271][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 348.930598][T17413] netlink: 'syz.0.5446': attribute type 8 has an invalid length. [ 349.122233][T17426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5451'. [ 349.489607][T17449] ipt_ECN: cannot use operation on non-tcp rule [ 349.707377][T17459] IPv6: sit1: Disabled Multicast RS [ 350.357785][T17493] syz_tun: entered allmulticast mode [ 350.386025][T17493] team0: Port device syz_tun removed [ 350.397678][T17493] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 350.608713][T17505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5488'. [ 350.988754][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5498'. [ 351.013153][T17529] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 351.175751][T17536] vlan0: entered promiscuous mode [ 351.240912][T17541] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 351.260991][T17543] netlink: 'syz.4.5506': attribute type 25 has an invalid length. [ 351.352263][T17545] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0 [ 351.364874][T17547] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 351.695006][T17565] xt_nfacct: accounting object `syz1' does not exists [ 352.197064][T17592] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 352.648681][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5543'. [ 352.814875][T17624] netlink: 'syz.1.5547': attribute type 1 has an invalid length. [ 352.828499][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5547'. [ 352.946953][T17633] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 353.013464][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5553'. [ 353.439423][T17659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.584758][T17668] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 354.341674][T17712] netlink: 'syz.1.5585': attribute type 13 has an invalid length. [ 354.710933][T17725] netlink: 'syz.1.5592': attribute type 33 has an invalid length. [ 354.729681][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5593'. [ 354.733389][T17725] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5592'. [ 354.773323][T17728] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 354.799919][T17728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.975217][T17741] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5600'. [ 355.071078][T17747] netlink: 'syz.1.5603': attribute type 5 has an invalid length. [ 355.112340][T17747] ip6erspan0: entered promiscuous mode [ 355.140216][T17751] netlink: 'syz.2.5605': attribute type 1 has an invalid length. [ 355.171172][T17751] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5605'. [ 355.344306][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5610'. [ 355.396268][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5610'. [ 355.456605][T17766] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5614'. [ 355.601812][T17772] netlink: 'syz.2.5616': attribute type 1 has an invalid length. [ 356.183143][T17808] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 356.483702][T17823] netlink: 'syz.2.5640': attribute type 10 has an invalid length. [ 356.491913][T17823] team0: entered promiscuous mode [ 356.499990][T17823] team_slave_0: entered promiscuous mode [ 356.506441][T17823] team_slave_1: entered promiscuous mode [ 356.512277][T17823] syz_tun: entered promiscuous mode [ 356.527926][T17823] bond0: entered promiscuous mode [ 356.538520][T17823] bond_slave_0: entered promiscuous mode [ 356.546294][T17823] bond_slave_1: entered promiscuous mode [ 356.552435][T17823] team0: entered allmulticast mode [ 356.564199][T17823] team_slave_0: entered allmulticast mode [ 356.570106][T17823] team_slave_1: entered allmulticast mode [ 356.581976][T17823] syz_tun: entered allmulticast mode [ 356.588476][T17823] bond0: entered allmulticast mode [ 356.602418][T17823] bond_slave_0: entered allmulticast mode [ 356.618889][T17823] bond_slave_1: entered allmulticast mode [ 356.647281][T17823] bridge0: port 3(team0) entered blocking state [ 356.666697][T17823] bridge0: port 3(team0) entered disabled state [ 356.698160][T17823] bridge0: port 3(team0) entered blocking state [ 356.704614][T17823] bridge0: port 3(team0) entered listening state [ 358.326580][T17910] __nla_validate_parse: 2 callbacks suppressed [ 358.326599][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5683'. [ 358.379136][T17913] netlink: 'syz.3.5686': attribute type 10 has an invalid length. [ 358.428960][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5685'. [ 358.521900][T17921] xt_hashlimit: size too large, truncated to 1048576 [ 358.528781][T17921] xt_hashlimit: max too large, truncated to 1048576 [ 358.739567][T17929] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5693'. [ 359.375167][T17962] xt_connbytes: Forcing CT accounting to be enabled [ 359.395172][T17962] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 359.530530][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5712'. [ 359.992903][T17998] netlink: 'syz.4.5725': attribute type 12 has an invalid length. [ 360.029073][T17998] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.5725'. [ 360.501643][T18021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5739'. [ 360.745358][T18038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5747'. [ 360.762748][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5747'. [ 360.952403][T18046] netlink: 'syz.1.5751': attribute type 2 has an invalid length. [ 360.975722][T18046] netlink: 'syz.1.5751': attribute type 1 has an invalid length. [ 361.033634][T18054] lo: entered promiscuous mode [ 361.039300][T18054] tunl0: entered promiscuous mode [ 361.086092][T18054] gre0: entered promiscuous mode [ 361.105568][T18054] gretap0: entered promiscuous mode [ 361.111607][T18054] erspan0: entered promiscuous mode [ 361.130806][T18054] ip_vti0: entered promiscuous mode [ 361.139074][T18054] ip6_vti0: entered promiscuous mode [ 361.160351][T18054] sit0: entered promiscuous mode [ 361.185611][T18054] ip6tnl0: entered promiscuous mode [ 361.198494][T18054] ip6gre0: entered promiscuous mode [ 361.224286][T18054] ip6gretap0: entered promiscuous mode [ 361.248405][T18054] bridge0: entered promiscuous mode [ 361.260300][T18054] vcan0: entered promiscuous mode [ 361.280630][T18054] dummy0: entered promiscuous mode [ 361.290097][T18054] nlmon0: entered promiscuous mode [ 361.353293][T18054] caif0: entered promiscuous mode [ 361.358576][T18054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.398601][T18069] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 361.433821][T18069] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.957829][T18096] netlink: 'syz.0.5776': attribute type 11 has an invalid length. [ 362.395603][T18124] xt_NFQUEUE: number of total queues is 0 [ 362.857721][T18148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.053575][T18158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5808'. [ 363.123865][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5807'. [ 363.426475][T18180] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 363.659461][T18192] __nla_validate_parse: 4 callbacks suppressed [ 363.659481][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5822'. [ 363.749245][T18197] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.831983][T18200] bond0: entered promiscuous mode [ 363.840851][T18200] bond0: entered allmulticast mode [ 363.846948][T18200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.305302][T18229] netlink: 'syz.2.5841': attribute type 13 has an invalid length. [ 364.375818][T18229] netlink: 'syz.2.5841': attribute type 17 has an invalid length. [ 364.392828][T18238] netlink: 'syz.3.5844': attribute type 1 has an invalid length. [ 364.433214][T18229] lo: left promiscuous mode [ 364.450089][T18229] tunl0: left promiscuous mode [ 364.477621][T18229] gre0: left promiscuous mode [ 364.512517][T18229] gretap0: left promiscuous mode [ 364.552297][T18229] erspan0: left promiscuous mode [ 364.585378][T18229] ip_vti0: left promiscuous mode [ 364.599383][T18229] ip6_vti0: left promiscuous mode [ 364.609400][T18244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.624298][T18229] sit0: left promiscuous mode [ 364.640302][T18229] ip6tnl0: left promiscuous mode [ 364.663578][T18229] ip6gre0: left promiscuous mode [ 364.687792][T18229] ip6gretap0: left promiscuous mode [ 364.738617][T18229] bridge0: left promiscuous mode [ 364.772834][T18229] vcan0: left promiscuous mode [ 364.809893][T18229] dummy0: left promiscuous mode [ 364.817166][T18229] nlmon0: left promiscuous mode [ 364.846567][T18229] caif0: left promiscuous mode [ 364.851381][T18229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.218838][T18274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5860'. [ 365.245697][T18274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5860'. [ 365.277244][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5860'. [ 365.328171][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5861'. [ 365.642978][T18295] netlink: 'syz.3.5870': attribute type 1 has an invalid length. [ 365.650805][T18295] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5870'. [ 366.111514][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5883'. [ 366.160156][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5883'. [ 366.179766][T18323] SET target dimension over the limit! [ 366.299558][T18328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5888'. [ 366.325303][T18332] netlink: 'syz.1.5889': attribute type 1 has an invalid length. [ 366.848122][T18360] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.5903'. [ 367.061777][T18370] xt_CONNSECMARK: invalid mode: 254 [ 367.332825][T18379] netlink: 'syz.4.5912': attribute type 7 has an invalid length. [ 367.340635][T18379] netlink: 'syz.4.5912': attribute type 8 has an invalid length. [ 369.148518][T18451] netlink: 'syz.0.5949': attribute type 6 has an invalid length. [ 369.369201][T18459] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 369.381150][T18464] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 369.955186][T18492] __nla_validate_parse: 6 callbacks suppressed [ 369.955205][T18492] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5968'. [ 370.292355][T18512] ieee802154 phy1 wpan1: encryption failed: -22 [ 370.775606][T18540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.806796][T18541] netlink: 'syz.3.5992': attribute type 1 has an invalid length. [ 370.817456][T18541] netlink: 'syz.3.5992': attribute type 11 has an invalid length. [ 370.826494][T18541] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5992'. [ 371.286892][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6006'. [ 371.389517][T18571] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 371.570198][T18584] netlink: 'syz.4.6013': attribute type 1 has an invalid length. [ 371.584287][T18583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6012'. [ 371.628177][T18586] netlink: 'syz.0.6014': attribute type 2 has an invalid length. [ 371.861479][T18599] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.303385][ C1] bridge0: port 3(team0) entered learning state [ 372.536891][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6036'. [ 372.748439][T18648] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6043'. [ 372.852795][T18652] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6044'. [ 373.093477][T18663] netlink: 'syz.0.6048': attribute type 7 has an invalid length. [ 373.099440][T18661] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6050'. [ 373.101264][T18663] netlink: 'syz.0.6048': attribute type 3 has an invalid length. [ 373.140143][T18661] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 373.162877][T18663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6048'. [ 373.175397][T18668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6051'. [ 373.630572][T18689] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 373.716075][T18689] bond4: entered promiscuous mode [ 373.721250][T18689] bond4: entered allmulticast mode [ 373.726937][T18689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 374.616304][T18739] netlink: 'syz.1.6079': attribute type 1 has an invalid length. [ 375.369425][T18778] __nla_validate_parse: 2 callbacks suppressed [ 375.369446][T18778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6096'. [ 375.446526][T18785] netlink: 'syz.4.6098': attribute type 1 has an invalid length. [ 375.472759][T18785] NCSI netlink: No device for ifindex 0 [ 375.932762][T18811] netlink: 'syz.4.6110': attribute type 21 has an invalid length. [ 375.940633][T18811] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6110'. [ 376.013488][T18811] netlink: 'syz.4.6110': attribute type 4 has an invalid length. [ 376.021273][T18811] netlink: 'syz.4.6110': attribute type 5 has an invalid length. [ 376.079149][T18811] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6110'. [ 376.089949][T18820] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6114'. [ 376.295424][T18826] netlink: 'syz.3.6116': attribute type 32 has an invalid length. [ 376.313263][T18828] netlink: 'syz.2.6119': attribute type 1 has an invalid length. [ 376.343008][T18828] netlink: 784 bytes leftover after parsing attributes in process `syz.2.6119'. [ 376.461106][T18836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6122'. [ 376.665583][T18846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6127'. [ 376.920502][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6130'. [ 376.962710][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6133'. [ 376.978826][T18863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6133'. [ 377.507115][T18892] syz.3.6147: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 377.542045][T18892] CPU: 1 UID: 0 PID: 18892 Comm: syz.3.6147 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 377.542078][T18892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.542106][T18892] Call Trace: [ 377.542116][T18892] [ 377.542126][T18892] dump_stack_lvl+0x189/0x250 [ 377.542169][T18892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.542208][T18892] ? __pfx__printk+0x10/0x10 [ 377.542231][T18892] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 377.542255][T18892] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 377.542281][T18892] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 377.542307][T18892] warn_alloc+0x214/0x310 [ 377.542330][T18892] ? stack_depot_save_flags+0x429/0x900 [ 377.542361][T18892] ? __pfx_warn_alloc+0x10/0x10 [ 377.542386][T18892] ? kasan_save_track+0x4f/0x80 [ 377.542417][T18892] ? xskq_create+0x56/0x170 [ 377.542439][T18892] ? xsk_init_queue+0xb0/0x110 [ 377.542457][T18892] ? xsk_setsockopt+0x43f/0x710 [ 377.542474][T18892] ? do_sock_setsockopt+0x25a/0x3e0 [ 377.542501][T18892] ? __x64_sys_setsockopt+0x18b/0x220 [ 377.542527][T18892] ? do_syscall_64+0xfa/0x3b0 [ 377.542555][T18892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.542584][T18892] __vmalloc_node_range_noprof+0x125/0x12f0 [ 377.542639][T18892] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 377.542664][T18892] ? xskq_create+0x56/0x170 [ 377.542687][T18892] ? __kasan_kmalloc+0x93/0xb0 [ 377.542710][T18892] vmalloc_user_noprof+0xad/0xf0 [ 377.542732][T18892] ? xskq_create+0xbf/0x170 [ 377.542755][T18892] xskq_create+0xbf/0x170 [ 377.542781][T18892] xsk_init_queue+0xb0/0x110 [ 377.542805][T18892] xsk_setsockopt+0x43f/0x710 [ 377.542829][T18892] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.542848][T18892] ? __lock_acquire+0xab9/0xd20 [ 377.542888][T18892] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 377.542915][T18892] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.542938][T18892] do_sock_setsockopt+0x25a/0x3e0 [ 377.542969][T18892] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 377.543004][T18892] ? __fget_files+0x2a/0x420 [ 377.543036][T18892] __x64_sys_setsockopt+0x18b/0x220 [ 377.543073][T18892] do_syscall_64+0xfa/0x3b0 [ 377.543095][T18892] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.543117][T18892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.543137][T18892] ? clear_bhb_loop+0x60/0xb0 [ 377.543163][T18892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.543191][T18892] RIP: 0033:0x7f46a358e929 [ 377.543211][T18892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.543231][T18892] RSP: 002b:00007f46a4422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.543254][T18892] RAX: ffffffffffffffda RBX: 00007f46a37b5fa0 RCX: 00007f46a358e929 [ 377.543270][T18892] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 377.543283][T18892] RBP: 00007f46a3610b39 R08: 0000000000000004 R09: 0000000000000000 [ 377.543297][T18892] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.543310][T18892] R13: 0000000000000000 R14: 00007f46a37b5fa0 R15: 00007ffe4704e518 [ 377.543344][T18892] [ 377.855494][T18892] Mem-Info: [ 377.858659][T18892] active_anon:5737 inactive_anon:0 isolated_anon:0 [ 377.858659][T18892] active_file:1159 inactive_file:39936 isolated_file:0 [ 377.858659][T18892] unevictable:768 dirty:247 writeback:0 [ 377.858659][T18892] slab_reclaimable:11391 slab_unreclaimable:201334 [ 377.858659][T18892] mapped:29246 shmem:1377 pagetables:1531 [ 377.858659][T18892] sec_pagetables:0 bounce:0 [ 377.858659][T18892] kernel_misc_reclaimable:0 [ 377.858659][T18892] free:1221461 free_pcp:18793 free_cma:0 [ 377.867590][T18900] syz_tun: left promiscuous mode [ 377.909498][T18900] syz_tun: left allmulticast mode [ 377.949179][T18900] team0: Port device syz_tun removed [ 377.956489][T18900] bond0: left promiscuous mode [ 377.961310][T18900] bond_slave_0: left promiscuous mode [ 377.967317][T18900] bond_slave_1: left promiscuous mode [ 377.972756][T18892] Node 0 active_anon:23048kB inactive_anon:0kB active_file:4636kB inactive_file:159536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116984kB dirty:984kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12680kB pagetables:5692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.973143][T18900] bond0: left allmulticast mode [ 378.011048][T18900] bond_slave_0: left allmulticast mode [ 378.016791][T18900] bond_slave_1: left allmulticast mode [ 378.045034][T18892] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.081499][T18900] team0: Port device bond0 removed [ 378.087336][T18900] team0: left allmulticast mode [ 378.092255][T18900] team_slave_0: left allmulticast mode [ 378.096137][T18892] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.097921][T18900] team_slave_1: left allmulticast mode [ 378.132174][T18900] team0: left promiscuous mode [ 378.137123][T18900] team_slave_0: left promiscuous mode [ 378.142812][T18900] team_slave_1: left promiscuous mode [ 378.148651][T18900] bridge0: port 3(team0) entered disabled state [ 378.181023][T18900] bridge_slave_0: left allmulticast mode [ 378.186291][T18892] lowmem_reserve[]: 0 2500 2502 2502 [ 378.186905][T18900] bridge_slave_0: left promiscuous mode [ 378.187166][T18900] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.209239][T18892] 2502 [ 378.210503][T18900] bridge_slave_1: left allmulticast mode [ 378.217891][T18892] Node 0 DMA32 free:971452kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23048kB inactive_anon:0kB active_file:4636kB inactive_file:157708kB unevictable:1536kB writepending:1008kB present:3129332kB managed:2560932kB mlocked:0kB bounce:0kB free_pcp:52944kB local_pcp:19652kB free_cma:0kB [ 378.254622][T18900] bridge_slave_1: left promiscuous mode [ 378.260468][T18900] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.288383][T18900] bond0: (slave bond_slave_0): Releasing backup interface [ 378.300095][T18892] lowmem_reserve[]: 0 0 1 1 1 [ 378.320520][T18900] bond0: (slave bond_slave_1): Releasing backup interface [ 378.335730][T18892] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 378.398556][T18900] team0: Port device team_slave_0 removed [ 378.411526][T18892] lowmem_reserve[]: 0 0 0 0 0 [ 378.424345][T18892] Node 1 Normal free:3903232kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17664kB local_pcp:9536kB free_cma:0kB [ 378.486938][T18900] team0: Port device team_slave_1 removed [ 378.508356][T18900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.522821][T18900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.532353][T18892] lowmem_reserve[]: 0 0 0 0 0 [ 378.550751][T18892] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 378.574477][T18900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.582017][T18900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.603377][T18892] Node 0 DMA32: 3356*4kB (UME) 1285*8kB (UME) 653*16kB (UM) 765*32kB (UME) 570*64kB (UME) 589*128kB (UME) 452*256kB (UM) 290*512kB (UM) 158*1024kB (UM) 5*2048kB (UME) 89*4096kB (M) = 971272kB [ 378.641427][T18900] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 378.649141][T18892] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 378.661498][T18900] batman_adv: batadv0: Removing interface: virt_wifi0 [ 378.670970][T18892] Node 1 Normal: 194*4kB (UM) 47*8kB (UME) 44*16kB (UME) 160*32kB (UME) 35*64kB (UME) 10*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 949*4096kB (M) = 3903232kB [ 378.689393][T18892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.699550][T18892] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.714614][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.738187][T18892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.748045][T18892] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.820993][T18892] 42468 total pagecache pages [ 378.834037][T18892] 0 pages in swap cache [ 378.838252][T18892] Free swap = 124996kB [ 378.842437][T18892] Total swap = 124996kB [ 378.912630][T18892] 2097051 pages RAM [ 378.930018][T18892] 0 pages HighMem/MovableOnly [ 378.946720][T18892] 424712 pages reserved [ 378.951029][T18892] 0 pages cma reserved [ 379.096755][T18932] netlink: 'syz.0.6166': attribute type 10 has an invalid length. [ 379.127260][T18932] batadv0: entered promiscuous mode [ 379.132541][T18932] batadv0: entered allmulticast mode [ 379.207398][T18932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.221429][T18932] bridge0: port 2(batadv0) entered blocking state [ 379.240477][T18932] bridge0: port 2(batadv0) entered disabled state [ 379.440519][T18950] netlink: 'syz.1.6175': attribute type 5 has an invalid length. [ 379.513600][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 379.523340][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 379.653125][T18959] netlink: 'syz.0.6179': attribute type 1 has an invalid length. [ 379.780068][T18965] x_tables: ip_tables: osf match: only valid for protocol 6 [ 381.021516][T19029] ip6tnl2: entered promiscuous mode [ 381.042866][T19029] ip6tnl2: entered allmulticast mode [ 381.410577][T19051] __nla_validate_parse: 6 callbacks suppressed [ 381.410597][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6225'. [ 381.874058][T19077] netlink: 'syz.3.6237': attribute type 1 has an invalid length. [ 382.026076][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6241'. [ 382.146873][T19093] sit0: left promiscuous mode [ 382.278121][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6249'. [ 382.468430][T19112] gretap3: entered promiscuous mode [ 382.478975][T19112] gretap3: entered allmulticast mode [ 382.739357][T19128] bridge0: port 3(dummy0) entered blocking state [ 382.746624][T19128] bridge0: port 3(dummy0) entered forwarding state [ 382.781506][T19128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.032064][T19182] openvswitch: netlink: Message has 8 unknown bytes. [ 384.903871][T19226] netlink: 'syz.0.6310': attribute type 1 has an invalid length. [ 384.911739][T19226] netlink: 'syz.0.6310': attribute type 1 has an invalid length. [ 385.049392][T19233] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.396155][T19253] xt_l2tp: missing protocol rule (udp|l2tpip) [ 385.782826][T19272] SET target dimension over the limit! [ 386.126233][T19295] netlink: 'syz.1.6341': attribute type 32 has an invalid length. [ 386.231360][T19298] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6343'. [ 386.355043][T19305] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 386.602261][T19323] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6355'. [ 386.761663][T19328] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6359'. [ 386.822799][T19333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6360'. [ 387.013284][T19337] netlink: 'syz.3.6362': attribute type 1 has an invalid length. [ 387.053416][T19337] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6362'. [ 387.519055][T19366] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 387.783798][T19380] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6378'. [ 388.231473][T19404] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 388.522729][T19418] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6396'. [ 388.582456][T19418] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6396'. [ 389.058804][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6408'. [ 389.093768][T19448] openvswitch: netlink: Unknown nsh attribute 0 [ 389.119073][T19448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.620969][T19477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.628300][T19477] IPv6: NLM_F_CREATE should be set when creating new route [ 389.635656][T19477] IPv6: NLM_F_CREATE should be set when creating new route [ 389.642932][T19477] IPv6: NLM_F_CREATE should be set when creating new route [ 389.670028][T19477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.719565][T19477] Zero length message leads to an empty skb [ 389.866101][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6424'. [ 389.909676][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6424'. [ 389.931914][T19488] netlink: 'syz.2.6424': attribute type 5 has an invalid length. [ 389.953361][T19488] netlink: 'syz.2.6424': attribute type 6 has an invalid length. [ 390.502939][T19510] syz.0.6435 (19510) used obsolete PPPIOCDETACH ioctl [ 392.014041][T19592] tipc: Enabling of bearer rejected, failed to enable media [ 393.184986][T19656] netlink: 320 bytes leftover after parsing attributes in process `syz.1.6497'. [ 393.450348][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6506'. [ 393.682080][T19685] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6511'. [ 393.721563][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6511'. [ 394.087503][T19706] tipc: Enabling of bearer rejected, failed to enable media [ 394.263802][T19711] netlink: 212364 bytes leftover after parsing attributes in process `syz.4.6525'. [ 394.299236][T19711] openvswitch: netlink: Message has 5 unknown bytes. [ 394.985110][T19744] netlink: 'syz.1.6542': attribute type 3 has an invalid length. [ 395.007741][T19744] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6542'. [ 395.255674][T19751] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6545'. [ 395.533453][T19763] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.543377][T19763] team0: Port device bond5 added [ 395.842795][T19783] netlink: 'syz.2.6559': attribute type 3 has an invalid length. [ 396.236036][T19803] netlink: 'syz.0.6569': attribute type 1 has an invalid length. [ 396.416299][T19811] netlink: 'syz.3.6573': attribute type 58 has an invalid length. [ 396.430056][T19811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6573'. [ 397.127451][T19845] xt_cgroup: invalid path, errno=-2 [ 397.303890][T19853] Bluetooth: MGMT ver 1.23 [ 397.927016][T19883] netlink: 'syz.2.6607': attribute type 2 has an invalid length. [ 397.949953][T19883] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6607'. [ 398.266874][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6613'. [ 398.770580][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6627'. [ 399.639066][T19962] Bluetooth: MGMT ver 1.23 [ 399.981886][T19982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6651'. [ 400.140964][T19985] macsec1: entered promiscuous mode [ 400.169192][T19985] bridge0: entered promiscuous mode [ 400.193974][T19985] bridge0: port 3(macsec1) entered blocking state [ 400.200937][T19985] bridge0: port 3(macsec1) entered disabled state [ 400.221719][T19985] macsec1: entered allmulticast mode [ 400.227594][T19985] bridge0: entered allmulticast mode [ 400.256030][T19985] macsec1: left allmulticast mode [ 400.261160][T19985] bridge0: left allmulticast mode [ 400.272793][T19985] bridge0: left promiscuous mode [ 400.503647][T20003] netlink: 'syz.2.6663': attribute type 42 has an invalid length. [ 401.156421][T20039] netlink: 'syz.3.6681': attribute type 1 has an invalid length. [ 401.631415][T20061] @ÿ: renamed from bond_slave_0 [ 401.744343][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 401.752844][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 401.938912][T20075] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6697'. [ 402.714094][T20108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6714'. [ 402.840991][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6718'. [ 402.966375][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6721'. [ 403.620405][T20159] nbd: must specify at least one socket [ 403.873639][T20170] netlink: 'syz.1.6740': attribute type 25 has an invalid length. [ 403.910924][T20170] netlink: 'syz.1.6740': attribute type 25 has an invalid length. [ 403.972895][ T43] IPVS: starting estimator thread 0... [ 404.063606][T20176] IPVS: using max 29 ests per chain, 69600 per kthread [ 405.059115][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6762'. [ 405.763654][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6775'. [ 405.901454][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6775'. [ 406.010693][T20266] tipc: Enabling of bearer rejected, failed to enable media [ 406.438440][T20285] netlink: 34 bytes leftover after parsing attributes in process `syz.0.6791'. [ 406.482522][T20285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6791'. [ 406.516915][T20288] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6794'. [ 408.622055][T20384] lo speed is unknown, defaulting to 1000 [ 408.722114][T20393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6843'. [ 408.968656][T20399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6846'. [ 409.273353][T20411] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 409.514519][T20419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6856'. [ 409.687839][T20427] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20001 [ 410.203336][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6870'. [ 410.660972][T20470] tipc: Enabling of bearer rejected, failed to enable media [ 410.694102][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6882'. [ 410.905581][T20484] netlink: 'syz.2.6888': attribute type 4 has an invalid length. [ 410.935649][T20484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6888'. [ 410.986411][T20490] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 411.088195][T20494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6893'. [ 411.121553][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6894'. [ 411.144100][T20497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6894'. [ 411.165955][T20497] netlink: 'syz.2.6894': attribute type 18 has an invalid length. [ 411.341980][T20506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6899'. [ 411.958174][T20528] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 413.150258][T20574] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 413.158772][T20576] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6932'. [ 413.176349][T20576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6932'. [ 413.216122][T20574] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 413.549892][T20596] xt_socket: unknown flags 0xfc [ 414.198584][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6958'. [ 414.238993][T20631] netlink: 'syz.3.6958': attribute type 14 has an invalid length. [ 414.274327][T20635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.143207][T20683] atomic_op ffff888078a70198 conn xmit_atomic 0000000000000000 [ 415.636458][T20707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.305181][T20736] lo: entered allmulticast mode [ 416.331815][T20736] lo: left allmulticast mode [ 416.602398][T20754] __nla_validate_parse: 2 callbacks suppressed [ 416.602419][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7019'. [ 416.881211][T20768] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7025'. [ 417.214018][T20785] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 417.955435][T20821] tipc: Started in network mode [ 417.960370][T20821] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 417.999669][T20821] tipc: Enabling of bearer rejected, failed to enable media [ 418.197272][T20835] netlink: zone id is out of range [ 418.220141][T20835] netlink: zone id is out of range [ 418.248583][T20835] netlink: zone id is out of range [ 418.263150][T20835] netlink: zone id is out of range [ 418.282994][T20835] netlink: zone id is out of range [ 418.297339][T20835] netlink: zone id is out of range [ 418.335484][T20835] netlink: zone id is out of range [ 418.673191][T20857] nbd: must specify at least one socket [ 419.462473][T20890] Bluetooth: MGMT ver 1.23 [ 419.694015][T20900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7090'. [ 419.730076][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7090'. [ 419.975948][T20909] net_ratelimit: 6 callbacks suppressed [ 419.975970][T20909] netlink: zone id is out of range [ 420.012451][T20909] netlink: zone id is out of range [ 420.017827][T20909] netlink: zone id is out of range [ 420.032832][T20909] netlink: zone id is out of range [ 420.043293][T20909] netlink: zone id is out of range [ 420.054557][T20909] netlink: zone id is out of range [ 420.072779][T20909] netlink: zone id is out of range [ 420.083087][T20909] netlink: zone id is out of range [ 420.092802][T20909] netlink: zone id is out of range [ 420.112814][T20909] netlink: zone id is out of range [ 420.307791][T16402] IPVS: starting estimator thread 0... [ 420.424518][T20929] IPVS: using max 34 ests per chain, 81600 per kthread [ 420.436185][T20931] netlink: 'syz.2.7104': attribute type 10 has an invalid length. [ 420.446833][T20935] netlink: 'syz.3.7105': attribute type 1 has an invalid length. [ 420.475209][T20931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7104'. [ 420.642176][T20946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7111'. [ 420.826076][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7114'. [ 421.001987][T20960] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7117'. [ 421.038331][T20960] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7117'. [ 421.051655][T20960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7117'. [ 421.182775][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 421.189139][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 421.399896][T20985] vlan2: entered promiscuous mode [ 421.429660][T20985] bridge0: entered promiscuous mode [ 422.334724][T21029] __nla_validate_parse: 3 callbacks suppressed [ 422.334744][T21029] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.7150'. [ 423.611066][T21088] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7176'. [ 423.772766][T21096] tipc: Started in network mode [ 423.787905][T21096] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 423.832760][T21096] tipc: Enabling of bearer rejected, failed to enable media [ 424.028733][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7185'. [ 424.854609][T21154] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 424.882711][T21154] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 425.025760][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7208'. [ 425.083195][T21164] net_ratelimit: 47 callbacks suppressed [ 425.083214][T21164] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 425.533267][T21186] netlink: 'syz.0.7222': attribute type 322 has an invalid length. [ 425.624555][T21193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7226'. [ 425.634446][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7224'. [ 425.808487][T21203] netlink: 'syz.2.7228': attribute type 3 has an invalid length. [ 425.985286][T21212] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7234'. [ 425.985824][T21209] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 426.523676][T21241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7249'. [ 427.209613][T21276] netlink: 'syz.2.7266': attribute type 1 has an invalid length. [ 427.248707][T21276] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7266'. [ 427.292816][T21276] netlink: 'syz.2.7266': attribute type 1 has an invalid length. [ 428.486182][T21327] netlink: 'syz.3.7291': attribute type 8 has an invalid length. [ 428.968976][T21353] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 429.547894][T21382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7318'. [ 429.846688][T21396] pim6reg: entered allmulticast mode [ 430.051861][T21398] syz.4.7325 (21398) used greatest stack depth: 17992 bytes left [ 430.288825][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7336'. [ 430.321395][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7336'. [ 431.091235][T21455] netlink: 'syz.4.7354': attribute type 1 has an invalid length. [ 431.115625][T21455] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7354'. [ 431.115995][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7356'. [ 431.131044][T21455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7354'. [ 432.040711][T21489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7370'. [ 433.077355][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7385'. [ 433.112989][T21520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7385'. [ 433.152416][T21520] netlink: 'syz.4.7385': attribute type 7 has an invalid length. [ 433.478803][T21529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7389'. [ 433.483591][T21530] tipc: New replicast peer: 255.255.255.255 [ 433.536941][T21530] tipc: Enabled bearer , priority 10 [ 434.165655][T21554] netlink: 'syz.3.7401': attribute type 23 has an invalid length. [ 434.488695][T21567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.667339][ T5972] tipc: Node number set to 4278255617 [ 435.223406][T21592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7419'. [ 436.176205][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.204174][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.243072][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.252894][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.286862][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.333977][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.370219][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.389380][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.408061][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.474732][T21618] netlink: 'syz.0.7432': attribute type 29 has an invalid length. [ 436.964774][T21651] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7447'. [ 437.387326][T21670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7455'. [ 437.597924][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7461'. [ 437.617557][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7461'. [ 438.095515][T21709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7474'. [ 438.127655][T21711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7475'. [ 438.354378][T21722] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = -3, id = 0 [ 438.359266][T21716] lo speed is unknown, defaulting to 1000 [ 439.250460][T21756] IPVS: Error connecting to the multicast addr [ 439.447579][T21763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7499'. [ 439.492961][T21765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7500'. [ 439.627000][T21772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7502'. [ 440.147191][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.281687][T21795] tipc: New replicast peer: 255.255.255.31 [ 440.289373][T21795] tipc: Enabled bearer , priority 10 [ 440.898045][T21829] __nla_validate_parse: 2 callbacks suppressed [ 440.898066][T21829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7530'. [ 441.365582][T21856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7543'. [ 441.402672][T16402] tipc: Node number set to 4269801488 [ 441.732346][T21875] C: renamed from team_slave_0 (while UP) [ 441.780976][T21875] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7551'. [ 442.068338][T21890] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7561'. [ 442.454989][T21912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7570'. [ 442.571442][T21921] bridge_slave_1: default FDB implementation only supports local addresses [ 443.261197][T21960] dvmrp8: entered allmulticast mode [ 443.306890][T21959] dvmrp8: left allmulticast mode [ 443.356763][T21965] validate_nla: 30 callbacks suppressed [ 443.356782][T21965] netlink: 'syz.0.7594': attribute type 1 has an invalid length. [ 443.390091][T21965] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7594'. [ 443.880092][T21988] bridge0: port 3(dummy0) entered disabled state [ 443.935863][T21988] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.974746][T21988] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.069213][T21995] bridge0: port 3(dummy0) entered blocking state [ 444.075871][T21995] bridge0: port 3(dummy0) entered forwarding state [ 444.146973][T21995] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.154196][T21995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.200894][T21995] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.208173][T21995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.285044][T21995] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 444.304527][T21995] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 444.323187][T21995] bridge1: left promiscuous mode [ 444.329804][T21995] bond2: left promiscuous mode [ 444.346523][T21995] batadv1: left allmulticast mode [ 444.358996][T21995] bond4: left promiscuous mode [ 444.365778][T21995] bond4: left allmulticast mode [ 445.134142][T22033] nbd: must specify a size in bytes for the device [ 445.546912][T22053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7633'. [ 445.672171][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7635'. [ 445.920802][T22071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.979471][T22075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7643'. [ 446.268240][T22089] netem: change failed [ 446.652795][T22105] netlink: 'syz.0.7658': attribute type 3 has an invalid length. [ 446.798314][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7663'. [ 446.825506][T22118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7662'. [ 446.835149][T22116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.884598][T22116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.937538][T22116] bridge0: port 2(batadv0) entered disabled state [ 447.263002][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 447.268249][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7671'. [ 447.935056][T22167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7685'. [ 448.428368][ T12] ------------[ cut here ]------------ [ 448.434179][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/ip6mr.c:2376 ip6_mr_output+0xe0b/0x1040 [ 448.443122][ T12] Modules linked in: [ 448.447197][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 448.459228][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.469338][ T12] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 448.476409][ T12] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 448.481905][ T12] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 e0 18 1b ff e9 a7 fd ff ff e8 86 d0 94 f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 78 d0 94 f7 90 0f 0b 90 43 80 3c 2e 00 [ 448.501573][ T12] RSP: 0018:ffffc900001173e0 EFLAGS: 00010293 [ 448.507694][ T12] RAX: ffffffff8a2b7dea RBX: 0000000000000000 RCX: ffff88801d2ada00 [ 448.515716][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.523740][ T12] RBP: ffffc90000117658 R08: ffffc900001175c7 R09: 0000000000000000 [ 448.531733][ T12] R10: ffffc90000117570 R11: fffff52000022eb9 R12: 1ffff92000022e8c [ 448.539773][ T12] R13: dffffc0000000000 R14: ffffc90000117570 R15: ffff8880a1550c80 [ 448.547805][ T12] FS: 0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000 [ 448.556800][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.563434][ T12] CR2: 00007f03bcd7e2d8 CR3: 00000000344fe000 CR4: 00000000003526f0 [ 448.571444][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.579475][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.587520][ T12] Call Trace: [ 448.590835][ T12] [ 448.593823][ T12] ? __pfx_ip6t_do_table+0x10/0x10 [ 448.598986][ T12] ? __pfx_ip6_mr_output+0x10/0x10 [ 448.604177][ T12] ? __ip6_local_out+0x609/0x870 [ 448.609237][ T12] ? __ip6_local_out+0x82c/0x870 [ 448.614245][ T12] ? __ip6_local_out+0x609/0x870 [ 448.619224][ T12] ? __lock_acquire+0xab9/0xd20 [ 448.624166][ T12] ? udp6_set_csum+0x995/0xee0 [ 448.628959][ T12] ? skb_dst+0x4f/0xd0 [ 448.633091][ T12] ? dst_output+0x177/0x1c0 [ 448.637624][ T12] udp_tunnel6_xmit_skb+0x640/0xad0 [ 448.642916][ T12] send6+0x5ac/0x8d0 [ 448.646857][ T12] ? send6+0x220/0x8d0 [ 448.650968][ T12] ? __pfx_send6+0x10/0x10 [ 448.655478][ T12] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 448.661685][ T12] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 448.667514][ T12] wg_packet_handshake_send_worker+0x1db/0x320 [ 448.673745][ T12] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 448.680491][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.685772][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 448.691535][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 448.697349][ T12] process_scheduled_works+0xae1/0x17b0 [ 448.703027][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.709067][ T12] worker_thread+0x8a0/0xda0 [ 448.713775][ T12] kthread+0x70e/0x8a0 [ 448.717885][ T12] ? __pfx_worker_thread+0x10/0x10 [ 448.723086][ T12] ? __pfx_kthread+0x10/0x10 [ 448.727716][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.732994][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.738222][ T12] ? __pfx_kthread+0x10/0x10 [ 448.742886][ T12] ret_from_fork+0x3fc/0x770 [ 448.747523][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 448.752709][ T12] ? __switch_to_asm+0x39/0x70 [ 448.757499][ T12] ? __switch_to_asm+0x33/0x70 [ 448.762290][ T12] ? __pfx_kthread+0x10/0x10 [ 448.766964][ T12] ret_from_fork_asm+0x1a/0x30 [ 448.771777][ T12] [ 448.774855][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 448.782155][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 448.794136][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.804207][ T12] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 448.811163][ T12] Call Trace: [ 448.814467][ T12] [ 448.817429][ T12] dump_stack_lvl+0x99/0x250 [ 448.822032][ T12] ? __asan_memcpy+0x40/0x70 [ 448.826627][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.831850][ T12] ? __pfx__printk+0x10/0x10 [ 448.836450][ T12] panic+0x2db/0x790 [ 448.840356][ T12] ? __pfx_panic+0x10/0x10 [ 448.844791][ T12] ? show_trace_log_lvl+0x4fb/0x550 [ 448.850021][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 448.854964][ T12] __warn+0x31b/0x4b0 [ 448.858951][ T12] ? ip6_mr_output+0xe0b/0x1040 [ 448.863803][ T12] ? ip6_mr_output+0xe0b/0x1040 [ 448.868650][ T12] report_bug+0x2be/0x4f0 [ 448.872981][ T12] ? ip6_mr_output+0xe0b/0x1040 [ 448.877867][ T12] ? ip6_mr_output+0xe0b/0x1040 [ 448.882723][ T12] ? ip6_mr_output+0xe0d/0x1040 [ 448.887580][ T12] handle_bug+0x84/0x160 [ 448.891831][ T12] exc_invalid_op+0x1a/0x50 [ 448.896351][ T12] asm_exc_invalid_op+0x1a/0x20 [ 448.901200][ T12] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 448.906680][ T12] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 e0 18 1b ff e9 a7 fd ff ff e8 86 d0 94 f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 78 d0 94 f7 90 0f 0b 90 43 80 3c 2e 00 [ 448.926304][ T12] RSP: 0018:ffffc900001173e0 EFLAGS: 00010293 [ 448.932378][ T12] RAX: ffffffff8a2b7dea RBX: 0000000000000000 RCX: ffff88801d2ada00 [ 448.940369][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.948353][ T12] RBP: ffffc90000117658 R08: ffffc900001175c7 R09: 0000000000000000 [ 448.956349][ T12] R10: ffffc90000117570 R11: fffff52000022eb9 R12: 1ffff92000022e8c [ 448.964336][ T12] R13: dffffc0000000000 R14: ffffc90000117570 R15: ffff8880a1550c80 [ 448.972314][ T12] ? ip6_mr_output+0xe0a/0x1040 [ 448.977177][ T12] ? __pfx_ip6t_do_table+0x10/0x10 [ 448.982298][ T12] ? __pfx_ip6_mr_output+0x10/0x10 [ 448.987449][ T12] ? __ip6_local_out+0x609/0x870 [ 448.992397][ T12] ? __ip6_local_out+0x82c/0x870 [ 448.997342][ T12] ? __ip6_local_out+0x609/0x870 [ 449.002302][ T12] ? __lock_acquire+0xab9/0xd20 [ 449.007165][ T12] ? udp6_set_csum+0x995/0xee0 [ 449.011921][ T12] ? skb_dst+0x4f/0xd0 [ 449.015990][ T12] ? dst_output+0x177/0x1c0 [ 449.020520][ T12] udp_tunnel6_xmit_skb+0x640/0xad0 [ 449.025750][ T12] send6+0x5ac/0x8d0 [ 449.029658][ T12] ? send6+0x220/0x8d0 [ 449.033748][ T12] ? __pfx_send6+0x10/0x10 [ 449.038201][ T12] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 449.044371][ T12] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 449.050201][ T12] wg_packet_handshake_send_worker+0x1db/0x320 [ 449.056391][ T12] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 449.063084][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.068283][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 449.074021][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 449.079770][ T12] process_scheduled_works+0xae1/0x17b0 [ 449.085358][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 449.091387][ T12] worker_thread+0x8a0/0xda0 [ 449.096002][ T12] kthread+0x70e/0x8a0 [ 449.100075][ T12] ? __pfx_worker_thread+0x10/0x10 [ 449.105193][ T12] ? __pfx_kthread+0x10/0x10 [ 449.109787][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.114984][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.120174][ T12] ? __pfx_kthread+0x10/0x10 [ 449.124756][ T12] ret_from_fork+0x3fc/0x770 [ 449.129347][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 449.134473][ T12] ? __switch_to_asm+0x39/0x70 [ 449.139236][ T12] ? __switch_to_asm+0x33/0x70 [ 449.143991][ T12] ? __pfx_kthread+0x10/0x10 [ 449.148606][ T12] ret_from_fork_asm+0x1a/0x30 [ 449.153400][ T12] [ 449.156758][ T12] Kernel Offset: disabled [ 449.161086][ T12] Rebooting in 86400 seconds..