last executing test programs: 3m59.222376493s ago: executing program 1 (id=5720): r0 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000002f80)=[{r0, 0x8e}], 0x1, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) 3m59.064848116s ago: executing program 1 (id=5725): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ffc}, 0x50) 3m58.976468887s ago: executing program 1 (id=5728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xffe}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 3m58.826974167s ago: executing program 1 (id=5733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000000b010400000000000000000000000a080003400000000108000100647272000800024008"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x22000004) 3m58.702574606s ago: executing program 1 (id=5737): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x3f8, 0x2e0, 0x2e0, 0x3f8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xc}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x5}, {0xffffffffffffffff, 0x1, 0x7}, 0x2, 0x5be}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) 3m58.565780291s ago: executing program 1 (id=5742): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) 3m43.516144122s ago: executing program 32 (id=5742): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) 2m42.119447335s ago: executing program 2 (id=7756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x38}}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 2m41.948980831s ago: executing program 2 (id=7759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x85}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 2m41.755045173s ago: executing program 2 (id=7765): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7b}, 0x90) 2m41.530670189s ago: executing program 2 (id=7772): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000000240)) 2m41.371925552s ago: executing program 2 (id=7778): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x16) 2m41.161070319s ago: executing program 2 (id=7784): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m26.070087645s ago: executing program 33 (id=7784): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2.030638159s ago: executing program 6 (id=11636): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008b000000000000000b20800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000bd0a0600000000007500f4fffcffffff18000000ff01000000000000411f0000bf91000000000000b702000002000000850000002a000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x1001, &(0x7f0000000780)=""/4097, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.159848179s ago: executing program 4 (id=11654): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) 964.304372ms ago: executing program 4 (id=11655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, r1, 0x701, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10000080) 958.933434ms ago: executing program 0 (id=11656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb8c}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 845.800381ms ago: executing program 5 (id=11657): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4083, 0x197}, {&(0x7f00000006c0)=""/107, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/76, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/7, 0x1e0}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x40010360, &(0x7f0000003700)={0x77359400}) 845.380888ms ago: executing program 4 (id=11658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) close(0x3) 808.747509ms ago: executing program 3 (id=11659): syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 807.815159ms ago: executing program 6 (id=11660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x40) 731.875992ms ago: executing program 0 (id=11661): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000005cfb00000000220000000a000100774a70616e3100"], 0x20}}, 0x4000000) 730.319165ms ago: executing program 5 (id=11662): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x3c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 661.7507ms ago: executing program 3 (id=11663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4109}}}, 0x1c}}, 0x0) 649.843542ms ago: executing program 6 (id=11664): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xcb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="a7", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)=']', 0x1}], 0x1}}], 0x2, 0x200400c0) 590.371865ms ago: executing program 5 (id=11665): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)='>n', 0x2) 588.290689ms ago: executing program 0 (id=11666): r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 486.712006ms ago: executing program 3 (id=11667): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 457.251112ms ago: executing program 5 (id=11668): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000a00)=""/274, 0x112}, {&(0x7f0000000d00)=""/4056, 0xfd8}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f00000000c0)=""/178, 0xb2}], 0x8}, 0x10182) 402.634401ms ago: executing program 6 (id=11669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x64, r1, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) 395.973858ms ago: executing program 4 (id=11670): unshare(0x28000600) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0x0, &(0x7f0000000040)) 390.110591ms ago: executing program 0 (id=11671): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 279.156052ms ago: executing program 0 (id=11672): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x5, 0xa, 0x1}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c) 271.56751ms ago: executing program 3 (id=11673): syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 252.315528ms ago: executing program 6 (id=11674): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x7, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x84f, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 252.070129ms ago: executing program 4 (id=11675): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) accept4(r0, &(0x7f0000000340)=@isdn, 0x0, 0x80800) 215.284707ms ago: executing program 5 (id=11676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x100, r1, 0xe701ac47a3d23ecd, 0x0, 0x10002, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800) 120.183392ms ago: executing program 0 (id=11677): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x20000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 119.41542ms ago: executing program 3 (id=11678): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 100.8732ms ago: executing program 5 (id=11679): r0 = socket(0x11, 0x2, 0x10001) recvfrom(r0, 0x0, 0x0, 0x40010100, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) 99.992918ms ago: executing program 4 (id=11680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 70.915048ms ago: executing program 6 (id=11681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2517000000080003"], 0x64}}, 0x0) 0s ago: executing program 3 (id=11682): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) kernel console output (not intermixed with test programs): has an invalid length. [ 282.037697][T14739] netlink: 'syz.2.4257': attribute type 1 has an invalid length. [ 282.289189][T14759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4267'. [ 282.364661][T14761] netlink: 65173 bytes leftover after parsing attributes in process `syz.2.4268'. [ 282.414342][T14765] netlink: 'syz.0.4269': attribute type 10 has an invalid length. [ 282.442772][T14765] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4269'. [ 282.765744][T14783] netlink: 'syz.2.4278': attribute type 10 has an invalid length. [ 282.926052][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4282'. [ 283.207425][T14810] netlink: 'syz.1.4289': attribute type 1 has an invalid length. [ 283.419320][ T30] audit: type=1800 audit(1770633919.887:2): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4292" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4160 res=0 errno=0 [ 283.937136][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4308'. [ 283.950903][T14857] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4307'. [ 284.277447][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4316'. [ 285.152288][T14928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4333'. [ 286.562835][T15015] openvswitch: netlink: Duplicate or invalid key (type 0). [ 286.593066][T15015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.865829][T15031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.136912][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4391'. [ 287.199200][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4391'. [ 288.051326][T15101] __nla_validate_parse: 1 callbacks suppressed [ 288.051346][T15101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4418'. [ 288.274116][T15114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.425023][T15126] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 289.410234][T15186] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 289.506941][T15193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.072473][T15231] netlink: 'syz.3.4482': attribute type 1 has an invalid length. [ 290.118875][T15237] netlink: 'syz.0.4485': attribute type 10 has an invalid length. [ 290.133932][T15231] netlink: 'syz.3.4482': attribute type 3 has an invalid length. [ 290.170174][T15231] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4482'. [ 290.184592][T15237] team0: Device veth0_vlan failed to register rx_handler [ 290.198728][T15241] x_tables: duplicate entry at hook 2 [ 290.500538][T15260] netlink: 'syz.2.4496': attribute type 10 has an invalid length. [ 290.508743][T15260] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4496'. [ 290.529441][T15262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4497'. [ 290.971751][T15286] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 290.994582][T15288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4510'. [ 291.184587][T15297] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.333772][T15275] veth3: entered promiscuous mode [ 293.344628][T15301] netlink: 'syz.0.4516': attribute type 4 has an invalid length. [ 293.468422][T15313] netlink: 'syz.3.4523': attribute type 7 has an invalid length. [ 293.822453][T15335] netlink: 'syz.2.4531': attribute type 1 has an invalid length. [ 293.839962][T15335] netlink: 'syz.2.4531': attribute type 2 has an invalid length. [ 295.014457][T15394] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4550'. [ 295.807063][T15440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.233094][T15464] batadv0: entered promiscuous mode [ 296.252664][T15464] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 296.716244][T15496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.386650][T15538] netlink: 'syz.3.4620': attribute type 21 has an invalid length. [ 297.417826][T15538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4620'. [ 297.522918][T15546] netlink: 'syz.2.4624': attribute type 2 has an invalid length. [ 297.545402][T15546] netlink: 'syz.2.4624': attribute type 11 has an invalid length. [ 297.571424][T15546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4624'. [ 297.641874][T15554] netlink: 'syz.0.4628': attribute type 2 has an invalid length. [ 297.686916][T15554] netlink: 1696 bytes leftover after parsing attributes in process `syz.0.4628'. [ 297.996209][T15578] batadv0: entered promiscuous mode [ 298.007259][T15578] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 298.492644][T15608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.500017][T15608] IPv6: NLM_F_CREATE should be set when creating new route [ 298.507333][T15608] IPv6: NLM_F_CREATE should be set when creating new route [ 298.847852][T15631] ipt_ECN: cannot use operation on non-tcp rule [ 298.913505][T15634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4665'. [ 299.070564][T15641] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4667'. [ 299.228638][T15651] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 299.736991][T15679] veth3: entered promiscuous mode [ 299.744702][T15685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4688'. [ 299.753794][T15685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4688'. [ 299.787344][T15687] netlink: 'syz.4.4691': attribute type 6 has an invalid length. [ 299.917366][T15693] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 300.261087][T15716] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4705'. [ 300.338937][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'. [ 300.846000][T15753] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 300.875684][T15758] xfrm0: entered promiscuous mode [ 300.892851][T15758] xfrm0: entered allmulticast mode [ 300.958416][T15762] IPv6: sit1: Disabled Multicast RS [ 301.156100][T15775] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4734'. [ 301.304339][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4741'. [ 301.329698][T15789] netlink: 'syz.4.4740': attribute type 21 has an invalid length. [ 301.338954][T15789] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.342865][T15782] bond0: option arp_all_targets: invalid value (129) [ 301.367609][T15782] bond0 (unregistering): Released all slaves [ 301.396530][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4741'. [ 301.644367][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4747'. [ 301.693827][T15804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4748'. [ 301.791533][T15808] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 301.916644][T15815] netlink: 'syz.4.4755': attribute type 1 has an invalid length. [ 301.932589][T15815] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4755'. [ 302.302434][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4767'. [ 302.597839][T15863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.537207][T15920] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 304.062817][T15942] netlink: 'syz.4.4815': attribute type 1 has an invalid length. [ 304.093576][T15942] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4815'. [ 304.111826][T15947] openvswitch: netlink: Message has -1 unknown bytes. [ 304.441815][T15961] bridge0: entered allmulticast mode [ 304.630314][T15972] netlink: 'syz.2.4830': attribute type 2 has an invalid length. [ 304.671085][T15972] 9: entered promiscuous mode [ 304.809740][T15982] netlink: 'syz.0.4835': attribute type 1 has an invalid length. [ 305.071791][T16003] netlink: 'syz.0.4846': attribute type 5 has an invalid length. [ 305.079920][T16003] netlink: 'syz.0.4846': attribute type 5 has an invalid length. [ 305.681874][T16033] ipt_ECN: cannot use operation on non-tcp rule [ 306.111911][T16060] __nla_validate_parse: 2 callbacks suppressed [ 306.112331][T16060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4874'. [ 306.423899][T16081] netlink: 'syz.2.4882': attribute type 11 has an invalid length. [ 306.580735][T16091] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 306.737291][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4894'. [ 306.797085][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4895'. [ 306.977756][T16113] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.176247][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4907'. [ 307.333412][T16139] netlink: 'syz.4.4914': attribute type 13 has an invalid length. [ 307.350673][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4913'. [ 307.364343][T16139] netlink: 'syz.4.4914': attribute type 17 has an invalid length. [ 307.595515][T16139] bridge0: left allmulticast mode [ 307.609999][T16139] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.623514][T16139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.843672][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'. [ 307.852866][T16158] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4923'. [ 308.086169][T16168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.220313][T16174] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4932'. [ 308.290181][T16176] bond0: option miimon: invalid value (18446744073709551607) [ 308.314346][T16176] bond0: option miimon: allowed values 0 - 2147483647 [ 308.336391][T16176] bond0 (unregistering): Released all slaves [ 308.409996][T16183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.600485][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4942'. [ 308.843081][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4948'. [ 309.042190][T16220] netlink: 'syz.4.4953': attribute type 1 has an invalid length. [ 309.435834][T16246] netlink: 'syz.3.4963': attribute type 3 has an invalid length. [ 309.443656][T16246] netlink: 'syz.3.4963': attribute type 3 has an invalid length. [ 309.861193][T16270] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 309.948078][T16273] xt_cluster: node mask cannot exceed total number of nodes [ 310.542093][T16309] SET target dimension over the limit! [ 310.605811][T16312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.120264][T16341] netlink: 'syz.2.5004': attribute type 29 has an invalid length. [ 311.415077][T16357] netlink: 'syz.0.5012': attribute type 1 has an invalid length. [ 311.441575][T16357] netlink: 'syz.0.5012': attribute type 2 has an invalid length. [ 311.754806][T16378] __nla_validate_parse: 9 callbacks suppressed [ 311.754826][T16378] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5021'. [ 312.496427][T16422] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5043'. [ 312.505835][T16422] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5043'. [ 312.604580][T16429] netlink: 'syz.4.5045': attribute type 1 has an invalid length. [ 313.357240][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5055'. [ 313.392482][T16457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5059'. [ 313.456521][T16457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5059'. [ 313.507300][T16457] netlink: 'syz.1.5059': attribute type 5 has an invalid length. [ 313.532948][T16464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5063'. [ 313.544165][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5063'. [ 313.892388][T16484] netlink: 'syz.0.5073': attribute type 1 has an invalid length. [ 313.913101][T16484] netlink: 'syz.0.5073': attribute type 1 has an invalid length. [ 314.570810][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 314.777428][T16534] bond1: entered promiscuous mode [ 314.783190][T16534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 315.079008][T16556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.428590][T16580] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5120'. [ 315.463868][T16582] veth0_macvtap: left promiscuous mode [ 316.024478][T16616] : renamed from veth0_to_bond [ 316.473671][T16653] netlink: 'syz.1.5156': attribute type 13 has an invalid length. [ 316.505488][T16653] netlink: 'syz.1.5156': attribute type 17 has an invalid length. [ 316.664011][T16653] bridge0: port 3(bond0) entered blocking state [ 316.670545][T16653] bridge0: port 3(bond0) entered forwarding state [ 316.685240][T16653] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.715273][T16653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.745404][T11438] lo speed is unknown, defaulting to 1000 [ 316.760100][T11438] syz2: Port: 1 Link ACTIVE [ 316.975825][T16677] netlink: 'syz.3.5167': attribute type 2 has an invalid length. [ 317.085829][T16683] __nla_validate_parse: 2 callbacks suppressed [ 317.085852][T16683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5171'. [ 317.126638][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5173'. [ 317.140908][T16688] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.405443][T16703] tc_dump_action: action bad kind [ 317.796873][T16731] netlink: 'syz.4.5194': attribute type 1 has an invalid length. [ 317.828852][T16731] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5194'. [ 318.085733][T16749] netlink: 'syz.2.5202': attribute type 21 has an invalid length. [ 318.093627][T16749] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5202'. [ 318.163300][T16749] netlink: 'syz.2.5202': attribute type 5 has an invalid length. [ 318.171884][T16749] netlink: 'syz.2.5202': attribute type 6 has an invalid length. [ 318.180526][T16749] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5202'. [ 318.287253][T16761] netlink: 'syz.4.5209': attribute type 4 has an invalid length. [ 318.605880][T16781] netlink: 'syz.4.5218': attribute type 2 has an invalid length. [ 318.789610][T16794] x_tables: unsorted entry at hook 1 [ 318.810558][T16796] netlink: 'syz.1.5224': attribute type 3 has an invalid length. [ 318.835249][T16796] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5224'. [ 318.853767][T16796] NCSI netlink: No device for ifindex 808464432 [ 318.984853][T16805] xt_CONNSECMARK: invalid mode: 253 [ 319.069851][T16810] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5233'. [ 319.984428][T16867] netlink: 'syz.4.5260': attribute type 11 has an invalid length. [ 320.319569][ T30] audit: type=1107 audit(1770633956.787:3): pid=16882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 320.673608][T16907] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.5280'. [ 320.694400][T16907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5280'. [ 320.703415][T16907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5280'. [ 320.975383][T16927] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 320.996528][T16921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.038367][T16921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.791376][T16977] validate_nla: 1 callbacks suppressed [ 321.791397][T16977] netlink: 'syz.1.5315': attribute type 7 has an invalid length. [ 321.814369][T16977] netlink: 'syz.1.5315': attribute type 5 has an invalid length. [ 321.859157][T16982] netlink: zone id is out of range [ 321.865513][T16982] netlink: zone id is out of range [ 321.870676][T16982] netlink: zone id is out of range [ 321.876200][T16982] netlink: zone id is out of range [ 321.881352][T16982] netlink: zone id is out of range [ 321.886873][T16982] netlink: zone id is out of range [ 321.892062][T16982] netlink: zone id is out of range [ 321.934578][T16982] netlink: zone id is out of range [ 321.939873][T16982] netlink: zone id is out of range [ 321.946087][T16982] netlink: zone id is out of range [ 322.113727][T16996] __nla_validate_parse: 3 callbacks suppressed [ 322.113749][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5322'. [ 322.301876][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.308464][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.635024][T17020] bridge2: entered promiscuous mode [ 323.009605][T17043] netlink: 'syz.4.5344': attribute type 11 has an invalid length. [ 323.174824][T17051] netlink: 'syz.2.5349': attribute type 5 has an invalid length. [ 323.203720][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5350'. [ 323.377433][T17066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5356'. [ 323.487040][T17073] netlink: 'syz.3.5360': attribute type 8 has an invalid length. [ 323.487998][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5359'. [ 323.736114][T17087] ip6gretap2: entered promiscuous mode [ 323.743216][T17087] ip6gretap2: entered allmulticast mode [ 325.020901][T17147] netlink: 'syz.2.5397': attribute type 4 has an invalid length. [ 325.232953][T17163] xt_TCPMSS: Only works on TCP SYN packets [ 325.336166][T17167] netlink: 'syz.4.5408': attribute type 1 has an invalid length. [ 325.525397][T17178] netlink: 'syz.4.5412': attribute type 8 has an invalid length. [ 325.789296][T17190] bond3: entered promiscuous mode [ 325.813976][T17190] bond3: entered allmulticast mode [ 325.829442][T17190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.852666][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5421'. [ 325.861944][T17196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5421'. [ 325.896632][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5421'. [ 325.926726][T17196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5421'. [ 325.954264][T17196] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5421'. [ 325.987547][T17203] netlink: 'syz.1.5425': attribute type 21 has an invalid length. [ 325.996262][T17203] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5425'. [ 326.554426][T17232] netlink: 'syz.4.5439': attribute type 6 has an invalid length. [ 326.927458][T17253] netlink: 'syz.3.5448': attribute type 1 has an invalid length. [ 327.360654][T17277] xt_l2tp: invalid flags combination: 8 [ 327.798131][T17303] netlink: 'syz.2.5470': attribute type 5 has an invalid length. [ 327.820073][T17302] __nla_validate_parse: 2 callbacks suppressed [ 327.820097][T17302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5474'. [ 328.520841][T17349] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5495'. [ 328.574647][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5498'. [ 329.110587][ T30] audit: type=1107 audit(1770633965.577:4): pid=17382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 329.323365][T17401] netlink: 'syz.3.5518': attribute type 1 has an invalid length. [ 329.510692][T17408] netlink: 'syz.4.5521': attribute type 15 has an invalid length. [ 329.544102][T17408] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5521'. [ 329.918384][T17410] bridge0: port 3(bond0) entered disabled state [ 330.028585][T17432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5533'. [ 330.057575][T17413] netlink: 'syz.2.5524': attribute type 4 has an invalid length. [ 330.072406][ T1209] lo speed is unknown, defaulting to 1000 [ 330.078723][ T1209] syz2: Port: 1 Link DOWN [ 330.427559][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5543'. [ 330.444495][T17454] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5544'. [ 330.464834][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5543'. [ 330.554900][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5548'. [ 330.594802][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5548'. [ 330.626324][T17461] net_ratelimit: 6 callbacks suppressed [ 330.626346][T17461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.935247][T17481] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 330.944551][T17483] netlink: 'syz.3.5559': attribute type 11 has an invalid length. [ 330.952410][T17483] netlink: 'syz.3.5559': attribute type 11 has an invalid length. [ 331.420591][T17510] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 331.503786][T17512] ip6erspan1: entered allmulticast mode [ 332.434445][T17569] netlink: 'syz.4.5601': attribute type 5 has an invalid length. [ 332.917234][T17599] __nla_validate_parse: 3 callbacks suppressed [ 332.917253][T17599] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5617'. [ 333.377336][T17615] delete_channel: no stack [ 333.514532][T17624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5628'. [ 333.526126][T17623] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5629'. [ 334.072313][T17648] ip6t_rpfilter: unknown options [ 334.432805][T17667] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5650'. [ 334.527557][T17671] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5652'. [ 334.552054][T17671] 0ªX¹¦À: renamed from caif0 [ 334.674501][T17671] 0ªX¹¦À: entered allmulticast mode [ 334.680039][T17671] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 336.280978][T17755] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5692'. [ 336.309661][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5695'. [ 336.360148][T17761] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5694'. [ 336.394388][T17761] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5694'. [ 336.403595][T17761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5694'. [ 336.513532][T17768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.814851][T17790] netlink: 'syz.3.5709': attribute type 9 has an invalid length. [ 336.840607][T17785] bond0: entered promiscuous mode [ 336.846553][T17785] bond0: entered allmulticast mode [ 336.856993][T17785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.960619][T17789] netlink: 'syz.1.5708': attribute type 13 has an invalid length. [ 338.239124][T17879] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 338.284587][T17884] __nla_validate_parse: 4 callbacks suppressed [ 338.284609][T17884] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5754'. [ 338.355770][T17888] ip6erspan0: entered promiscuous mode [ 339.792986][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5803'. [ 339.802237][T17983] tc_dump_action: action bad kind [ 340.135052][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5811'. [ 340.275519][T18013] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5817'. [ 340.717723][T18043] netlink: 'syz.2.5830': attribute type 64 has an invalid length. [ 340.941207][T18058] Cannot find set identified by id 3 to match [ 341.264752][T18078] netlink: 'syz.3.5847': attribute type 15 has an invalid length. [ 341.335394][T18084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5850'. [ 341.364730][T18084] netlink: 'syz.2.5850': attribute type 1 has an invalid length. [ 341.510170][T18094] netlink: ct family unspecified [ 341.524338][T18094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.670573][T18102] netlink: 'syz.3.5858': attribute type 1 has an invalid length. [ 341.682141][T18102] netlink: 476 bytes leftover after parsing attributes in process `syz.3.5858'. [ 341.691745][T18102] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.5858'. [ 341.855012][T18116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5866'. [ 341.865409][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5866'. [ 341.907612][T18116] tc_dump_action: action bad kind [ 341.982763][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5868'. [ 342.010798][T18124] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 342.235826][T18137] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 342.283285][T18140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.368028][T18142] ip6gretap3: entered promiscuous mode [ 342.763842][T18170] netlink: 'syz.3.5895': attribute type 61 has an invalid length. [ 342.892366][T18180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.116342][T18259] __nla_validate_parse: 4 callbacks suppressed [ 344.116364][T18259] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5937'. [ 344.143962][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5938'. [ 344.427315][T18277] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5946'. [ 344.449020][T18277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 344.846481][T18306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5959'. [ 345.107388][T18323] netlink: 'syz.3.5969': attribute type 6 has an invalid length. [ 345.238703][T18332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.359557][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5978'. [ 345.405434][T18340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5976'. [ 345.734884][T18355] bond2 (unregistering): Released all slaves [ 345.910743][T18373] xt_policy: neither incoming nor outgoing policy selected [ 346.862818][T18437] netlink: 'syz.3.6025': attribute type 10 has an invalid length. [ 347.576596][T18484] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 347.746371][T18494] batadv0: entered promiscuous mode [ 347.757449][T18494] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 347.919022][T18505] TCP: TCP_TX_DELAY enabled [ 348.133503][T18522] netlink: 'syz.0.6061': attribute type 1 has an invalid length. [ 348.180299][T18522] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6061'. [ 348.226405][T18526] netlink: 'syz.2.6064': attribute type 10 has an invalid length. [ 348.234672][T18526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6064'. [ 348.248947][T18527] x_tables: unsorted entry at hook 3 [ 348.520258][T18545] netlink: 'syz.2.6075': attribute type 10 has an invalid length. [ 348.655511][T18552] rdma_rxe: rxe_newlink: failed to add bond0 [ 348.680487][T18555] openvswitch: netlink: IP tunnel dst address not specified [ 348.900508][T18569] --map-set only usable from mangle table [ 348.907111][T18568] netlink: 488 bytes leftover after parsing attributes in process `syz.4.6084'. [ 348.919179][T18568] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6084'. [ 349.198909][T18587] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.280385][T18590] No such timeout policy "syz1" [ 349.365235][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6098'. [ 349.426755][T18599] bond1: option resend_igmp: invalid value (2878) [ 349.433254][T18599] bond1: option resend_igmp: allowed values 0 - 255 [ 349.457739][T18599] bond1 (unregistering): Released all slaves [ 349.590424][T18597] netlink: set zone limit has 4 unknown bytes [ 349.854412][T18621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6112'. [ 350.117548][T18640] netlink: 'syz.3.6118': attribute type 21 has an invalid length. [ 350.134490][T18640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6118'. [ 350.386465][T18651] xt_TPROXY: Can be used only with -p tcp or -p udp [ 351.476101][T18695] netdevsim0: mtu less than device minimum [ 351.828228][T18719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.016811][T18729] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 352.317359][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6170'. [ 352.328582][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6170'. [ 352.459468][T18752] netlink: 'syz.3.6173': attribute type 4 has an invalid length. [ 352.606195][T18763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.716119][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6181'. [ 353.118971][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.128706][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.137409][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.145667][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.153526][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.183653][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.206295][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.213767][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.222150][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.230428][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.329456][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6196'. [ 353.412432][T18790] lo speed is unknown, defaulting to 1000 [ 353.438450][T18790] xfrm0 speed is unknown, defaulting to 1000 [ 353.643245][T18816] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 353.786546][T18821] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.857841][T18790] lo speed is unknown, defaulting to 1000 [ 354.203751][T18790] virt_wifi0 speed is unknown, defaulting to 1000 [ 354.369878][T18851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6221'. [ 354.483503][T18790] chnl_net:caif_netlink_parms(): no params data found [ 354.655096][T18790] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.702618][T18869] netlink: 'syz.4.6226': attribute type 9 has an invalid length. [ 354.711132][T18790] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.727114][T18790] bridge_slave_0: entered allmulticast mode [ 354.739983][T18790] bridge_slave_0: entered promiscuous mode [ 354.811875][T18790] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.830022][T18790] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.840985][T18790] bridge_slave_1: entered allmulticast mode [ 354.852630][T18790] bridge_slave_1: entered promiscuous mode [ 354.953959][T18790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.977866][T18790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.062210][T18790] team0: Port device team_slave_0 added [ 355.071117][T18790] team0: Port device team_slave_1 added [ 355.180972][T18790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.194891][T18790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.254327][T18790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.254475][ T5829] Bluetooth: hci5: command tx timeout [ 355.283588][T18790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.304268][T18790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.333276][T18790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.490108][T18790] hsr_slave_0: entered promiscuous mode [ 355.511804][T18790] hsr_slave_1: entered promiscuous mode [ 355.526361][T18790] debugfs: 'hsr0' already exists in 'hsr' [ 355.532436][T18790] Cannot create hsr debugfs directory [ 355.726228][T18916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6250'. [ 356.005517][T18930] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 356.019293][T18790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.059656][T18790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 356.111214][T18790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 356.148598][T18790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.301502][T18953] netlink: 'syz.2.6267': attribute type 16 has an invalid length. [ 356.348029][T18953] netlink: 'syz.2.6267': attribute type 17 has an invalid length. [ 356.465560][T18790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.512997][T18790] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.546618][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.553856][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.596736][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.603983][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.208576][T18790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.274809][T18990] x_tables: unsorted entry at hook 2 [ 357.341765][ T5829] Bluetooth: hci5: command tx timeout [ 357.747313][T18790] veth0_vlan: entered promiscuous mode [ 357.782774][T18790] veth1_vlan: entered promiscuous mode [ 357.874436][T18790] veth0_macvtap: entered promiscuous mode [ 357.912247][T18790] veth1_macvtap: entered promiscuous mode [ 357.977151][T18790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.009153][T18790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.053399][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.070578][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.112540][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.128108][T19027] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 358.159776][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.344755][T15367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.352654][T15367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.475646][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.499999][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.708533][T19050] SET target dimension over the limit! [ 358.762885][T19058] netlink: 'syz.5.6187': attribute type 32 has an invalid length. [ 359.416595][ T5829] Bluetooth: hci5: command tx timeout [ 359.562046][T19103] ieee802154 phy1 wpan1: encryption failed: -22 [ 360.134852][T19137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.184365][T19137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.495182][ T5829] Bluetooth: hci5: command tx timeout [ 361.977287][T19231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6397'. [ 362.427466][T19260] bond0: Error: Cannot enslave bond to itself. [ 362.462380][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6412'. [ 362.599206][T19269] netlink: 'syz.0.6415': attribute type 3 has an invalid length. [ 362.758652][T19282] netlink: 'syz.5.6421': attribute type 13 has an invalid length. [ 362.784466][T19282] netlink: 'syz.5.6421': attribute type 12 has an invalid length. [ 363.577436][T19317] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 363.768774][T19334] delete_channel: no stack [ 364.260004][T19364] netlink: 'syz.0.6462': attribute type 33 has an invalid length. [ 364.438250][T19373] Unsupported ieee802154 address type: 0 [ 364.935029][T19398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6477'. [ 365.111524][T19412] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6480'. [ 365.153095][T19412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6480'. [ 365.183290][T19412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6480'. [ 365.314912][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6486'. [ 365.344349][T19423] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6486'. [ 365.364096][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6486'. [ 365.393251][T19423] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6486'. [ 365.418088][T19427] netlink: 'syz.3.6488': attribute type 1 has an invalid length. [ 365.427807][T19427] netlink: 'syz.3.6488': attribute type 1 has an invalid length. [ 365.732765][T19445] x_tables: unsorted underflow at hook 4 [ 365.747618][T19447] netlink: 'syz.2.6498': attribute type 21 has an invalid length. [ 365.784502][T19447] netlink: 'syz.2.6498': attribute type 4 has an invalid length. [ 365.792302][T19447] netlink: 'syz.2.6498': attribute type 5 has an invalid length. [ 366.473778][T19485] bond2 (unregistering): Released all slaves [ 366.665307][T19502] netlink: 'syz.5.6523': attribute type 21 has an invalid length. [ 367.129047][T19531] __nla_validate_parse: 5 callbacks suppressed [ 367.129066][T19531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6539'. [ 367.374600][T19544] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 367.445028][T19549] netlink: 'syz.3.6547': attribute type 21 has an invalid length. [ 367.454234][T19550] netlink: 'syz.0.6548': attribute type 21 has an invalid length. [ 367.462104][T19550] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6548'. [ 367.471411][T19549] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6547'. [ 367.494693][T19549] netlink: 'syz.3.6547': attribute type 4 has an invalid length. [ 367.503867][T19549] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6547'. [ 367.513565][T19550] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6548'. [ 368.018457][T19577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6560'. [ 368.045987][T19575] bond2: option updelay: invalid value (18446744072924056005) [ 368.063949][T19575] bond2: option updelay: allowed values 0 - 2147483647 [ 368.077087][T19575] bond2 (unregistering): Released all slaves [ 368.206851][T19556] infiniband !yz!: set active [ 368.217693][T19556] infiniband !yz!: added team_slave_0 [ 368.275024][T19556] RDS/IB: !yz!: added [ 368.279210][T19556] smc: adding ib device !yz! with port count 1 [ 368.285631][T19556] smc: ib device !yz! port 1 has no pnetid [ 368.966853][T19616] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6580'. [ 369.316380][T19630] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6588'. [ 369.505612][T19641] lo: entered promiscuous mode [ 369.529696][T19641] tunl0: entered promiscuous mode [ 369.555127][T19641] gre0: entered promiscuous mode [ 369.570904][T19641] gretap0: entered promiscuous mode [ 369.588746][T19641] erspan0: entered promiscuous mode [ 369.595246][T19641] ip_vti0: entered promiscuous mode [ 369.946660][T19665] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 370.205621][T19677] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 370.364357][T19685] validate_nla: 4 callbacks suppressed [ 370.364376][T19685] netlink: 'syz.2.6614': attribute type 1 has an invalid length. [ 371.151795][T19719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6631'. [ 371.201098][T19719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6631'. [ 372.286400][T19761] netlink: 'syz.0.6651': attribute type 13 has an invalid length. [ 372.325451][T19761] __nla_validate_parse: 2 callbacks suppressed [ 372.325470][T19761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6651'. [ 372.533696][T19771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6656'. [ 372.586132][T19771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6656'. [ 373.120682][T19807] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 373.129789][T19806] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6674'. [ 373.327248][T19817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.766690][T19842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.978954][T19857] netlink: 'syz.0.6697': attribute type 89 has an invalid length. [ 374.502335][T19888] openvswitch: netlink: Message has 16 unknown bytes. [ 374.603242][T19895] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 374.737685][T19900] geneve1: entered promiscuous mode [ 374.836085][T19908] netlink: 'syz.2.6724': attribute type 33 has an invalid length. [ 374.843966][T19908] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6724'. [ 376.004012][T19956] xt_CT: No such helper "snmp_trap" [ 376.414352][T19982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6759'. [ 376.752547][T19978] infiniband syû: set down [ 376.765679][T19978] infiniband syû: added bond_slave_0 [ 376.862411][T20007] xt_ecn: cannot match TCP bits for non-tcp packets [ 376.918238][T19978] RDS/IB: syû: added [ 376.922381][T19978] smc: adding ib device syû with port count 1 [ 376.929157][T19978] smc: ib device syû port 1 has no pnetid [ 377.246599][T20027] netlink: 'syz.4.6780': attribute type 1 has an invalid length. [ 377.256717][T20027] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6780'. [ 377.589161][T20041] netlink: 'syz.5.6787': attribute type 21 has an invalid length. [ 378.422906][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6810'. [ 378.452705][T20088] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6810'. [ 378.649140][T20096] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6814'. [ 379.095756][T20122] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.6825'. [ 379.276905][T20132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6832'. [ 380.024991][T20168] netlink: 'syz.0.6850': attribute type 1 has an invalid length. [ 380.197606][T20178] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 380.346977][T20185] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6859'. [ 380.506373][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6863'. [ 380.532697][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6865'. [ 380.836592][T20212] netlink: 'syz.0.6870': attribute type 4 has an invalid length. [ 380.898500][T20214] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6873'. [ 381.003972][T20222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6877'. [ 381.174676][T20230] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 382.190667][T20291] netlink: 'syz.5.6910': attribute type 16 has an invalid length. [ 382.219893][T20291] netlink: 'syz.5.6910': attribute type 17 has an invalid length. [ 382.401350][T20291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.596410][T20315] openvswitch: netlink: IP tunnel dst address not specified [ 383.234402][T20352] netlink: 'syz.3.6941': attribute type 5 has an invalid length. [ 383.538580][T20373] __nla_validate_parse: 5 callbacks suppressed [ 383.538603][T20373] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6952'. [ 383.738996][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.244020][T20418] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6971'. [ 384.475951][T20428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6980'. [ 384.536263][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6982'. [ 384.562597][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6982'. [ 384.677445][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6984'. [ 384.917429][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6991'. [ 385.335048][T20478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.684298][T20493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7011'. [ 385.713348][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7012'. [ 385.738089][T20495] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7012'. [ 385.963317][T20505] netlink: 'syz.5.7017': attribute type 7 has an invalid length. [ 386.824422][T20559] openvswitch: netlink: Tunnel attr 154 out of range max 16 [ 387.921065][T20627] SET target dimension over the limit! [ 388.074439][T20637] netlink: 'syz.2.7080': attribute type 2 has an invalid length. [ 388.085519][T20637] netlink: 'syz.2.7080': attribute type 1 has an invalid length. [ 388.351015][T20653] netlink: 'syz.5.7089': attribute type 1 has an invalid length. [ 388.413960][T20659] netlink: 'syz.3.7090': attribute type 10 has an invalid length. [ 388.780473][T20682] __nla_validate_parse: 7 callbacks suppressed [ 388.780494][T20682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7102'. [ 389.898648][T20731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.954125][T20737] netlink: 'syz.3.7131': attribute type 30 has an invalid length. [ 390.001476][T20737] bond2: option arp_missed_max: invalid value (0) [ 390.009428][T20737] bond2: option arp_missed_max: allowed values 1 - 255 [ 390.020399][T20737] bond2 (unregistering): Released all slaves [ 390.132466][T20746] netlink: 'syz.0.7133': attribute type 1 has an invalid length. [ 390.176669][T20750] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7137'. [ 390.186032][T20750] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7137'. [ 390.195570][T20750] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7137'. [ 392.626181][T20877] xt_ecn: cannot match TCP bits for non-tcp packets [ 392.770740][T20887] netlink: 'syz.0.7194': attribute type 89 has an invalid length. [ 392.812499][T20888] delete_channel: no stack [ 393.027484][T20902] netlink: 'syz.0.7199': attribute type 96 has an invalid length. [ 393.293234][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7206'. [ 394.020312][T20947] netlink: 'syz.3.7219': attribute type 2 has an invalid length. [ 394.228082][T20960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7226'. [ 394.355769][T20967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7229'. [ 394.390176][T20967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7229'. [ 394.460271][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7231'. [ 394.480053][T20973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.520179][T20973] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 394.598445][T20973] bond0: (slave sit0): Error -95 calling set_mac_address [ 394.859886][T20990] netlink: 'syz.5.7240': attribute type 1 has an invalid length. [ 394.881601][T20990] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7240'. [ 394.924459][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7239'. [ 395.344224][T21016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7249'. [ 395.374369][T21016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7249'. [ 395.932157][T21041] netlink: 'syz.3.7260': attribute type 1 has an invalid length. [ 396.994349][T21104] netlink: 'syz.3.7286': attribute type 61 has an invalid length. [ 397.002254][T21104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7286'. [ 397.421722][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7293'. [ 397.530325][T21123] veth5: entered promiscuous mode [ 397.803114][T21144] netlink: 'syz.0.7302': attribute type 4 has an invalid length. [ 398.045979][T21156] ipt_rpfilter: unknown options [ 399.597484][T21249] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.914569][T21267] __nla_validate_parse: 5 callbacks suppressed [ 399.914592][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7356'. [ 400.103812][T21278] netlink: 'syz.3.7357': attribute type 33 has an invalid length. [ 400.126726][T21278] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7357'. [ 400.156445][T21278] `: renamed from team0 [ 400.461197][T21295] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 400.481425][T21296] netlink: 'syz.0.7366': attribute type 21 has an invalid length. [ 400.524789][T21296] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7366'. [ 400.727623][T21311] : renamed from bond_slave_0 [ 401.212205][T21341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7392'. [ 401.272995][T21346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7394'. [ 401.289692][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7393'. [ 402.207946][T21403] xfrm0 speed is unknown, defaulting to 1000 [ 402.425023][T21414] openvswitch: netlink: Message has 4 unknown bytes. [ 402.458190][T21414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.971678][T21447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7443'. [ 403.452582][T21474] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.7456'. [ 403.483982][T21474] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 403.648916][T21486] xt_hashlimit: max too large, truncated to 1048576 [ 403.664858][T21486] xt_hashlimit: overflow, try lower: 13/0 [ 404.058808][T21506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7470'. [ 404.167736][T21512] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 404.174544][T21511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7473'. [ 404.224403][T21514] IPVS: length: 35 != 24 [ 404.996581][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7498'. [ 405.078809][T21564] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 405.429237][T21584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7510'. [ 405.464553][T21584] unsupported nlmsg_type 40 [ 405.504323][T21591] xt_ecn: cannot match TCP bits for non-tcp packets [ 406.215756][T21638] netlink: 'syz.0.7535': attribute type 2 has an invalid length. [ 406.224020][T21638] netlink: 'syz.0.7535': attribute type 9 has an invalid length. [ 406.232594][T21638] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7535'. [ 406.995373][T21681] Cannot find del_set index 2 as target [ 407.731517][T21724] netlink: 'syz.3.7578': attribute type 2 has an invalid length. [ 407.753956][T21728] SET target dimension over the limit! [ 407.838059][T21732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7582'. [ 407.863649][T21732] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7582'. [ 407.887624][T21734] netlink: 'syz.5.7583': attribute type 10 has an invalid length. [ 407.905107][T21732] netlink: 'syz.0.7582': attribute type 5 has an invalid length. [ 407.912897][T21732] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7582'. [ 407.934258][T21734] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7583'. [ 408.128396][T21746] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 408.184866][T21748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7590'. [ 408.286031][T21752] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 408.344534][T21752] bond2 (unregistering): Released all slaves [ 408.377204][T21763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7597'. [ 408.727732][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7605'. [ 408.884969][T21791] tipc: Trying to set illegal importance in message [ 409.541418][T21835] netlink: 'syz.4.7632': attribute type 11 has an invalid length. [ 410.476930][T21894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.571364][T21902] __nla_validate_parse: 6 callbacks suppressed [ 410.571387][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7659'. [ 410.645853][T21902] gretap3: entered promiscuous mode [ 411.098898][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'. [ 411.129322][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'. [ 411.159446][T21928] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7672'. [ 411.535137][T21959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7684'. [ 411.588172][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7686'. [ 411.634356][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7686'. [ 411.749781][T21971] IPv6: NLM_F_REPLACE set, but no existing node found! [ 412.093545][T21992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.185107][T21996] lo: left promiscuous mode [ 412.191246][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7700'. [ 412.258699][T21996] tunl0: left promiscuous mode [ 412.286786][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7700'. [ 412.334803][T21996] gre0: left promiscuous mode [ 412.369100][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7700'. [ 412.378844][T21996] gretap0: left promiscuous mode [ 412.385458][T21996] erspan0: left promiscuous mode [ 412.405560][T21996] ip_vti0: left promiscuous mode [ 412.428167][T21996] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.459882][T21996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.478058][T22008] netlink: 'syz.4.7706': attribute type 1 has an invalid length. [ 412.718886][T22021] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 412.967692][T22036] netlink: 'syz.2.7717': attribute type 1 has an invalid length. [ 413.503367][T22072] openvswitch: netlink: IP tunnel dst address not specified [ 413.638078][T22083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.972381][T22101] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16) [ 414.024350][T22101] openvswitch: netlink: Message has 16 unknown bytes. [ 414.290886][ T30] audit: type=1107 audit(1770634050.757:5): pid=22118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 414.315103][T22122] xt_bpf: check failed: parse error [ 414.330015][T22125] netlink: 'syz.0.7755': attribute type 3 has an invalid length. [ 414.359932][T22125] netlink: 'syz.0.7755': attribute type 3 has an invalid length. [ 414.612857][T22137] ip6t_srh: unknown srh invflags BA61 [ 415.187615][T22176] netlink: 'syz.4.7780': attribute type 2 has an invalid length. [ 415.332266][T22183] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 415.355137][T22183] bond2 (unregistering): Released all slaves [ 415.500341][T22197] tc_dump_action: action bad kind [ 416.354990][T22250] netlink: 'syz.4.7816': attribute type 21 has an invalid length. [ 416.394301][T22250] __nla_validate_parse: 21 callbacks suppressed [ 416.394329][T22250] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7816'. [ 416.433735][T22250] netlink: 'syz.4.7816': attribute type 5 has an invalid length. [ 416.446510][T22250] netlink: 'syz.4.7816': attribute type 6 has an invalid length. [ 416.470440][T22250] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7816'. [ 416.584336][T22260] netlink: 'syz.5.7822': attribute type 1 has an invalid length. [ 416.592811][T22260] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7822'. [ 417.034417][T22280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7832'. [ 417.086890][T22283] netlink: 708 bytes leftover after parsing attributes in process `syz.4.7834'. [ 417.098563][T22284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7833'. [ 417.107723][T22283] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 417.714799][T22313] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7847'. [ 417.745757][T22313] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7847'. [ 418.104580][T22339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.561509][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7873'. [ 419.083339][T22399] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7891'. [ 420.148436][T22463] netlink: 'syz.4.7921': attribute type 4 has an invalid length. [ 420.885102][T22510] mÿ5nè‹Ò: entered promiscuous mode [ 421.047262][T22519] openvswitch: netlink: Missing key (keys=40, expected=80) [ 421.682777][T22560] __nla_validate_parse: 7 callbacks suppressed [ 421.682804][T22560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7966'. [ 421.866302][T22572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7973'. [ 421.915539][T22573] bond0: (slave rose0): Enslaving as an active interface with an up link [ 421.996042][T22581] SET target dimension over the limit! [ 422.736291][T22633] netlink: 'syz.4.8003': attribute type 23 has an invalid length. [ 422.999914][T22647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8010'. [ 423.052016][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8010'. [ 423.333787][T22669] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8021'. [ 423.944360][T22689] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8031'. [ 424.011014][T22693] netlink: 'syz.4.8033': attribute type 1 has an invalid length. [ 425.026280][T22751] xt_NFQUEUE: number of total queues is 0 [ 425.055261][T22753] netlink: 'syz.5.8056': attribute type 13 has an invalid length. [ 425.212688][T22762] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 425.502698][T22778] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8068'. [ 425.669873][T22789] dummy0: entered allmulticast mode [ 425.679427][T22788] dummy0: left allmulticast mode [ 425.712901][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8076'. [ 426.282812][T22826] netlink: 'syz.0.8091': attribute type 1 has an invalid length. [ 426.301203][T22826] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8091'. [ 426.346714][T22826] NCSI netlink: No device for ifindex 0 [ 426.438856][T22830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.645070][T22846] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 426.778097][T22856] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8105'. [ 427.212247][T22884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8122'. [ 427.352809][T22894] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 427.439960][T22899] xt_bpf: check failed: parse error [ 427.520261][T22904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.537125][T11442] lo speed is unknown, defaulting to 1000 [ 427.764641][T22919] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 427.914969][T22928] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8143'. [ 428.313079][T22952] xt_TCPMSS: Only works on TCP SYN packets [ 428.853113][T22981] xt_hashlimit: size too large, truncated to 1048576 [ 429.323779][T23009] netlink: 'syz.4.8183': attribute type 2 has an invalid length. [ 429.337266][T23009] netlink: 'syz.4.8183': attribute type 1 has an invalid length. [ 429.380954][T23009] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8183'. [ 429.519384][T23018] rdma_op ffff888056fa41f0 conn xmit_rdma 0000000000000000 [ 429.684280][ T5829] Bluetooth: hci5: link tx timeout [ 429.690488][ T5829] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.829772][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8193'. [ 429.848641][T23044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8195'. [ 430.417504][T23074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8209'. [ 430.459170][T23074] netlink: 'syz.3.8209': attribute type 1 has an invalid length. [ 430.641566][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 430.654622][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.662837][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.671708][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 430.688855][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 430.699407][T23086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8214'. [ 430.761419][T23082] lo speed is unknown, defaulting to 1000 [ 430.770076][T23082] xfrm0 speed is unknown, defaulting to 1000 [ 430.925226][T23092] netlink: 296 bytes leftover after parsing attributes in process `syz.3.8217'. [ 431.157032][T23082] lo speed is unknown, defaulting to 1000 [ 431.472658][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8230'. [ 431.641194][T23124] delete_channel: no stack [ 431.679664][T23082] virt_wifi0 speed is unknown, defaulting to 1000 [ 431.734496][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 431.985574][T23135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8238'. [ 432.344477][T23139] tipc: Started in network mode [ 432.349667][T23139] tipc: Node identity ac14140f, cluster identity 4711 [ 432.378589][T23139] tipc: Enabled bearer , priority 10 [ 432.774994][ T5140] Bluetooth: hci6: command tx timeout [ 433.064106][T23180] netlink: 'syz.4.8259': attribute type 1 has an invalid length. [ 433.075659][T23180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8259'. [ 433.086015][T23180] netlink: 658 bytes leftover after parsing attributes in process `syz.4.8259'. [ 433.095898][T23180] netlink: 'syz.4.8259': attribute type 1 has an invalid length. [ 433.198560][T23082] chnl_net:caif_netlink_parms(): no params data found [ 433.381733][T23082] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.389197][T23082] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.397723][T23082] bridge_slave_0: entered allmulticast mode [ 433.405749][T23082] bridge_slave_0: entered promiscuous mode [ 433.415016][T23082] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.422242][T23082] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.429736][T23082] bridge_slave_1: entered allmulticast mode [ 433.437783][T23082] bridge_slave_1: entered promiscuous mode [ 433.463084][T23200] rdma_op ffff88807aee91f0 conn xmit_rdma 0000000000000000 [ 433.505902][ T1209] tipc: Node number set to 2886997007 [ 433.518499][T23082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.531507][T23082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.592101][T23082] team0: Port device team_slave_0 added [ 433.620085][T23082] team0: Port device team_slave_1 added [ 433.738666][T23082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.760317][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.817886][T23082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.884403][T23082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.891414][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.954547][T23082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.253217][T23082] hsr_slave_0: entered promiscuous mode [ 434.261871][T23082] hsr_slave_1: entered promiscuous mode [ 434.277782][T23082] debugfs: 'hsr0' already exists in 'hsr' [ 434.283584][T23082] Cannot create hsr debugfs directory [ 434.303729][T23238] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8284'. [ 434.839797][T23265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8297'. [ 434.857533][ T5140] Bluetooth: hci6: command tx timeout [ 434.869877][T23265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8297'. [ 434.970775][T23273] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 435.008917][T23082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 435.058348][T23082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 435.114619][T23082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 435.148519][T23082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 435.419558][T23082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.471079][T23082] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.499903][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.507126][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.581136][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.588360][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.728469][T23082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.218897][T23340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8329'. [ 436.254038][T23082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.262906][T23340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8329'. [ 436.463411][T23356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8335'. [ 436.639447][T23367] sctp: [Deprecated]: syz.4.8339 (pid 23367) Use of int in max_burst socket option. [ 436.639447][T23367] Use struct sctp_assoc_value instead [ 436.843116][T23082] veth0_vlan: entered promiscuous mode [ 436.868443][T23082] veth1_vlan: entered promiscuous mode [ 436.934789][ T5140] Bluetooth: hci6: command tx timeout [ 436.953410][T23082] veth0_macvtap: entered promiscuous mode [ 437.006682][T23082] veth1_macvtap: entered promiscuous mode [ 437.059911][T23082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.073483][T23082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.181332][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.190316][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.239354][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.253872][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.402849][T15367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.417783][T15367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.436492][T23396] sctp: [Deprecated]: syz.4.8351 (pid 23396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.436492][T23396] Use struct sctp_sack_info instead [ 437.493122][T23396] sctp: [Deprecated]: syz.4.8351 (pid 23396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.493122][T23396] Use struct sctp_sack_info instead [ 437.515971][T23392] dummy0: entered promiscuous mode [ 437.551316][T23392] dummy0: left promiscuous mode [ 437.601731][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.614760][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.867522][T23419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8359'. [ 437.897278][T23419] nbd: illegal input index 38656 [ 438.115222][T23431] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8365'. [ 438.195973][T23436] smc: removing ib device syz1 [ 438.553794][T23455] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8374'. [ 439.023567][ T5140] Bluetooth: hci6: command tx timeout [ 439.121261][T23476] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8383'. [ 439.155207][T23476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8383'. [ 439.188168][T23476] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8383'. [ 439.217147][T23476] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8383'. [ 439.930422][T11438] IPVS: starting estimator thread 0... [ 440.036464][T23507] IPVS: using max 26 ests per chain, 62400 per kthread [ 440.729228][T23534] sctp: [Deprecated]: syz.5.8409 (pid 23534) Use of int in maxseg socket option. [ 440.729228][T23534] Use struct sctp_assoc_value instead [ 441.251664][T23557] netlink: 744 bytes leftover after parsing attributes in process `syz.4.8422'. [ 441.503150][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8427'. [ 441.533047][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8427'. [ 441.573072][T23569] netlink: 'syz.3.8427': attribute type 13 has an invalid length. [ 441.598934][T23569] netlink: 'syz.3.8427': attribute type 11 has an invalid length. [ 441.819073][T23587] bridge0: entered promiscuous mode [ 442.058895][T23600] Bluetooth: MGMT ver 1.23 [ 443.460094][T23685] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8485'. [ 443.472449][T23686] IPVS: Error connecting to the multicast addr [ 443.532780][T23690] netlink: 'syz.3.8487': attribute type 1 has an invalid length. [ 443.812831][T23701] x_tables: duplicate underflow at hook 1 [ 443.847511][T23701] No such timeout policy "syz1" [ 444.011984][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8496'. [ 444.709843][T23748] netlink: 64106 bytes leftover after parsing attributes in process `syz.0.8514'. [ 444.766606][T23754] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8516'. [ 444.777144][T23754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8516'. [ 445.166879][T23774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8526'. [ 445.423548][T23790] netlink: 'syz.6.8535': attribute type 2 has an invalid length. [ 446.153491][T23822] netlink: 'syz.3.8553': attribute type 62 has an invalid length. [ 447.069624][T23870] netlink: 'syz.6.8573': attribute type 1 has an invalid length. [ 447.086055][T23874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8575'. [ 447.221595][T23880] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.8577'. [ 447.895402][T23914] netlink: 'syz.6.8593': attribute type 58 has an invalid length. [ 447.919234][T23914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8593'. [ 448.800487][T23953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8612'. [ 449.098939][T23962] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8616'. [ 449.369852][T23970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 449.404363][T13517] IPVS: starting estimator thread 0... [ 449.526779][T23982] geneve0: entered promiscuous mode [ 449.535018][T23978] IPVS: using max 31 ests per chain, 74400 per kthread [ 449.562341][T23982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 449.570030][T23982] team0: Device macvlan2 is already an upper device of the team interface [ 449.580925][T23982] geneve0: left promiscuous mode [ 449.844009][T23996] pim6reg99999999: entered allmulticast mode [ 450.437714][T24021] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 450.592853][T24026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8646'. [ 450.929313][T24035] nbd: must specify a size in bytes for the device [ 451.151045][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8656'. [ 452.464335][T24109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8685'. [ 452.637889][T24111] netlink: 'syz.3.8687': attribute type 83 has an invalid length. [ 452.785625][T24114] netlink: 'syz.3.8688': attribute type 58 has an invalid length. [ 452.806940][T24114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8688'. [ 452.936176][T24119] bridge0: port 3(macvlan2) entered blocking state [ 452.951168][T24119] bridge0: port 3(macvlan2) entered disabled state [ 452.958505][T24119] macvlan2: entered allmulticast mode [ 452.964010][T24119] bridge0: entered allmulticast mode [ 453.000517][T24119] macvlan2: left allmulticast mode [ 453.022627][T24119] bridge0: left allmulticast mode [ 453.187272][T24135] netlink: 'syz.0.8697': attribute type 3 has an invalid length. [ 453.233148][T24135] netlink: 'syz.0.8697': attribute type 1 has an invalid length. [ 453.255550][T24135] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8697'. [ 454.063752][T24181] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8720'. [ 455.898848][T24284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.174360][T24297] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8776'. [ 456.210679][T24297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8776'. [ 456.698082][T24328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8790'. [ 457.474438][T24356] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8803'. [ 457.653825][T24366] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8808'. [ 457.978993][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8818'. [ 458.049678][T24389] vlan0: entered promiscuous mode [ 458.092619][T24389] bridge0: entered promiscuous mode [ 458.687968][T24414] netlink: 'syz.5.8830': attribute type 8 has an invalid length. [ 458.775136][T24417] netlink: 'syz.6.8832': attribute type 29 has an invalid length. [ 458.912008][T24421] : entered promiscuous mode [ 458.976089][T24429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8838'. [ 459.033793][T24431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8839'. [ 459.096491][T24433] C: renamed from team_slave_0 (while UP) [ 459.126745][T24433] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8841'. [ 459.197889][T24439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8843'. [ 459.218674][T24441] tipc: Enabling of bearer rejected, failed to enable media [ 459.395911][T24448] Bluetooth: MGMT ver 1.23 [ 459.801834][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8860'. [ 460.126291][T24492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8869'. [ 460.162891][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8869'. [ 460.183256][T24492] netlink: 'syz.6.8869': attribute type 13 has an invalid length. [ 460.200495][T24492] netlink: 'syz.6.8869': attribute type 12 has an invalid length. [ 460.880029][T24531] netlink: 'syz.6.8887': attribute type 1 has an invalid length. [ 460.899131][T24531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.035213][T24535] bond0: option downdelay: invalid value (18446744073709551607) [ 461.042933][T24535] bond0: option downdelay: allowed values 0 - 2147483647 [ 462.121776][T24575] veth0_virt_wifi: entered promiscuous mode [ 462.152444][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8909'. [ 462.163698][T24575] veth0_virt_wifi: left promiscuous mode [ 462.173310][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8909'. [ 462.769305][T24611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8925'. [ 463.202496][T24638] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8938'. [ 463.427472][T24651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8945'. [ 464.049707][T24686] vlan3: entered allmulticast mode [ 464.064815][T24686] team0: entered allmulticast mode [ 464.070511][T24686] C: entered allmulticast mode [ 464.091135][T24686] team_slave_1: entered allmulticast mode [ 464.120190][T24693] vlan1: entered promiscuous mode [ 464.130420][T24693] vlan1: entered allmulticast mode [ 464.144576][T24693] geneve1: entered allmulticast mode [ 465.086369][T24744] netlink: 'syz.5.8989': attribute type 1 has an invalid length. [ 465.375615][T24760] vlan2: entered promiscuous mode [ 465.382426][T24760] geneve1: entered promiscuous mode [ 465.388394][T24760] vlan2: entered allmulticast mode [ 465.393673][T24760] geneve1: entered allmulticast mode [ 465.740451][T24779] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 465.749280][T24779] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 466.492289][T24814] netlink: 'syz.3.9024': attribute type 2 has an invalid length. [ 466.507260][T24814] __nla_validate_parse: 2 callbacks suppressed [ 466.507280][T24814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9024'. [ 466.548117][T24816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9023'. [ 466.591756][T24818] bridge_slave_1: invalid flags given to default FDB implementation [ 466.657161][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9026'. [ 466.758971][T24826] C: entered promiscuous mode [ 466.764080][T24826] team_slave_1: entered promiscuous mode [ 466.792289][T24826] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 466.897343][T24830] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9031'. [ 466.947303][T24832] macsec1: entered promiscuous mode [ 466.956414][T24832] ip6gretap0: entered promiscuous mode [ 466.962103][T24832] macsec1: entered allmulticast mode [ 466.968099][T24832] ip6gretap0: entered allmulticast mode [ 467.001100][T24832] ip6gretap0: left allmulticast mode [ 467.009343][T24832] ip6gretap0: left promiscuous mode [ 467.056517][T24836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9034'. [ 467.569470][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 467.683278][T24870] xt_l2tp: invalid flags combination: 0 [ 467.934741][T24884] netlink: 240 bytes leftover after parsing attributes in process `syz.5.9056'. [ 467.981948][T24884] netlink: 'syz.5.9056': attribute type 9 has an invalid length. [ 468.354557][T24908] netlink: 'syz.4.9068': attribute type 142 has an invalid length. [ 468.538695][T24914] tipc: Started in network mode [ 468.563063][T24914] tipc: Node identity ac14142f, cluster identity 4711 [ 468.593486][T24914] tipc: New replicast peer: 0.0.0.0 [ 468.616256][T24914] tipc: Enabled bearer , priority 10 [ 469.345953][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 469.552297][T24953] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 469.616768][T13517] tipc: Node number set to 2886997039 [ 469.847049][T24970] bridge_slave_1: left allmulticast mode [ 469.863505][T24970] bridge_slave_1: left promiscuous mode [ 469.881875][T24970] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.926507][T24970] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 470.213323][T24990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9105'. [ 470.574410][T25010] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9116'. [ 470.621841][T25012] vlan3: entered promiscuous mode [ 470.630766][T25012] geneve1: entered promiscuous mode [ 470.637164][T25012] vlan3: entered allmulticast mode [ 470.642826][T25012] geneve1: entered allmulticast mode [ 470.654499][T25014] netlink: 'syz.5.9119': attribute type 12 has an invalid length. [ 470.696942][T25014] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9119'. [ 470.855268][T25020] openvswitch: netlink: Message has 572 unknown bytes. [ 470.882634][T25020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.048375][T25030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9127'. [ 472.123220][T25094] netlink: 'syz.6.9159': attribute type 1 has an invalid length. [ 472.733143][T25132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.112906][T25158] pim6reg: entered allmulticast mode [ 473.156657][T25158] pim6reg: left allmulticast mode [ 473.406968][T25170] tipc: Enabled bearer , priority 10 [ 473.430436][T25174] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9198'. [ 474.142731][T25212] vlan4: entered promiscuous mode [ 474.551947][T25237] netlink: 'syz.5.9227': attribute type 1 has an invalid length. [ 474.565147][T25237] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9227'. [ 474.604988][T25237] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9227'. [ 474.626929][T25237] netlink: 'syz.5.9227': attribute type 1 has an invalid length. [ 474.645311][T25237] netlink: 'syz.5.9227': attribute type 8 has an invalid length. [ 474.674364][T25237] netlink: 606 bytes leftover after parsing attributes in process `syz.5.9227'. [ 474.995125][T25253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9235'. [ 475.372169][T25276] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) ! [ 475.752611][T25298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9257'. [ 475.990438][T25309] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.495128][T25337] netlink: 'syz.4.9277': attribute type 11 has an invalid length. [ 476.552250][T25337] netlink: 'syz.4.9277': attribute type 4 has an invalid length. [ 476.581926][T25337] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.9277'. [ 476.623160][T25343] netlink: 'syz.0.9280': attribute type 1 has an invalid length. [ 476.661626][T25343] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9280'. [ 476.693170][T25343] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9280'. [ 476.709319][T25347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9282'. [ 476.744896][T25347] netlink: 'syz.6.9282': attribute type 1 has an invalid length. [ 477.763859][T25406] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 478.473592][T25451] netlink: 'syz.6.9327': attribute type 12 has an invalid length. [ 478.493115][T25451] __nla_validate_parse: 2 callbacks suppressed [ 478.493135][T25451] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9327'. [ 478.654691][T25455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.917331][T25475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9337'. [ 478.948258][T25475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9337'. [ 479.142593][T25488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9342'. [ 480.225323][T25537] netlink: 'syz.3.9366': attribute type 11 has an invalid length. [ 480.434181][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9373'. [ 480.775105][T25569] netlink: 'syz.6.9380': attribute type 8 has an invalid length. [ 481.615150][T25617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9402'. [ 481.903581][T25634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9412'. [ 482.076268][T25642] lo speed is unknown, defaulting to 1000 [ 482.083975][T25642] lo speed is unknown, defaulting to 1000 [ 482.453005][T25642] virt_wifi0 speed is unknown, defaulting to 1000 [ 483.045329][T25684] Bluetooth: MGMT ver 1.23 [ 483.072649][T25687] netlink: 332 bytes leftover after parsing attributes in process `syz.6.9436'. [ 483.096218][T25687] netlink: 'syz.6.9436': attribute type 9 has an invalid length. [ 483.104008][T25687] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9436'. [ 483.142088][T25687] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9436'. [ 483.715798][T25720] __nla_validate_parse: 1 callbacks suppressed [ 483.715819][T25720] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9450'. [ 483.736055][ T5829] Bluetooth: hci6: command 0x0405 tx timeout [ 483.818251][T25722] macsec1: entered promiscuous mode [ 483.823620][T25722] macsec1: entered allmulticast mode [ 483.991524][T25726] pimreg: entered allmulticast mode [ 484.044635][T25726] pimreg: left allmulticast mode [ 484.161620][T25736] netlink: 'syz.0.9460': attribute type 4 has an invalid length. [ 484.198372][T25736] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9460'. [ 485.272158][T25787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9484'. [ 485.587380][T25802] netlink: 'syz.6.9492': attribute type 66 has an invalid length. [ 485.916837][T25823] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9502'. [ 485.930225][T25823] nbd: couldn't find a device at index 0 [ 486.954842][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9532'. [ 487.277174][T25900] netlink: 'syz.6.9540': attribute type 3 has an invalid length. [ 487.516308][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9548'. [ 487.860944][T25938] netlink: 'syz.5.9560': attribute type 2 has an invalid length. [ 488.343514][T25972] Bluetooth: MGMT ver 1.23 [ 488.415179][T25974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.666431][T25989] bridge0: port 1(veth0_to_bridge) entered blocking state [ 488.678497][T25989] bridge0: port 1(veth0_to_bridge) entered disabled state [ 488.687291][T25989] veth0_to_bridge: entered allmulticast mode [ 488.701840][T25989] veth0_to_bridge: entered promiscuous mode [ 488.863529][T25998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9588'. [ 489.624262][T26043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9609'. [ 489.682410][T26043] nbd: illegal input index -1113835520 [ 489.785219][T26054] netlink: 'syz.3.9614': attribute type 5 has an invalid length. [ 489.809145][T26055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9613'. [ 490.459157][T26086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9628'. [ 490.715686][T26102] netlink: 'syz.3.9636': attribute type 29 has an invalid length. [ 490.736033][T26102] netlink: 'syz.3.9636': attribute type 29 has an invalid length. [ 490.935593][T26112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9640'. [ 491.133791][T26122] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9645'. [ 491.325720][T26134] netlink: 'syz.5.9651': attribute type 1 has an invalid length. [ 491.361794][T26134] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9651'. [ 491.382352][T26134] netlink: 'syz.5.9651': attribute type 1 has an invalid length. [ 491.392510][T26134] netlink: 'syz.5.9651': attribute type 8 has an invalid length. [ 491.412285][T26134] netlink: 606 bytes leftover after parsing attributes in process `syz.5.9651'. [ 491.860161][T26154] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9661'. [ 491.884923][T26154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.072103][T26159] macsec0: entered promiscuous mode [ 492.084739][T26159] macsec0: left promiscuous mode [ 492.405657][T26177] sch_fq: defrate 4294967293 ignored. [ 494.861734][T26295] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.9728'. [ 495.031591][T26304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9732'. [ 495.058173][T26306] netlink: 'syz.6.9734': attribute type 7 has an invalid length. [ 495.090364][T26306] netlink: 'syz.6.9734': attribute type 8 has an invalid length. [ 495.563674][T26332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9747'. [ 495.998803][T26354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9758'. [ 496.432966][T26383] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9772'. [ 496.587812][ T1209] IPVS: starting estimator thread 0... [ 496.694526][T26391] IPVS: using max 28 ests per chain, 67200 per kthread [ 496.887222][T26408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9783'. [ 497.926281][T26462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9810'. [ 498.949357][T26527] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9841'. [ 499.323144][T26548] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.9851'. [ 499.352473][T26554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9854'. [ 499.373107][T26548] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 499.393330][T26554] veth1_to_hsr: entered promiscuous mode [ 499.405682][T26554] macvtap1: entered promiscuous mode [ 499.417331][T26554] macvtap1: entered allmulticast mode [ 499.428853][T26554] veth1_to_hsr: entered allmulticast mode [ 499.935554][T26586] tipc: Started in network mode [ 499.940598][T26586] tipc: Node identity ac14140f, cluster identity 4711 [ 499.950457][T26586] tipc: Enabled bearer , priority 26 [ 500.564885][T26618] netlink: 'syz.3.9886': attribute type 9 has an invalid length. [ 500.658579][T26624] __nla_validate_parse: 2 callbacks suppressed [ 500.658599][T26624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9889'. [ 500.699684][T26628] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9890'. [ 501.064287][T11438] tipc: Node number set to 2886997007 [ 501.091140][T26648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9900'. [ 501.118599][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9900'. [ 501.148583][T26648] netlink: 'syz.5.9900': attribute type 15 has an invalid length. [ 501.609016][T26678] ip6gretap0: entered promiscuous mode [ 501.628553][T26678] macsec2: entered promiscuous mode [ 501.661739][T26678] ip6gretap0: left promiscuous mode [ 501.751480][T26685] tipc: Started in network mode [ 501.766323][T26685] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 501.802928][T26685] tipc: Enabling of bearer rejected, failed to enable media [ 502.207361][T26713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9933'. [ 502.296712][T26718] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9937'. [ 502.868550][T26752] netlink: 'syz.4.9951': attribute type 1 has an invalid length. [ 502.912006][T26752] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9951'. [ 502.934470][T26752] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9951'. [ 502.980867][T26752] netlink: 'syz.4.9951': attribute type 1 has an invalid length. [ 503.026262][T26752] netlink: 634 bytes leftover after parsing attributes in process `syz.4.9951'. [ 503.568805][T26773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9960'. [ 505.240900][T26845] netlink: 'syz.4.9993': attribute type 1 has an invalid length. [ 505.263701][T26845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.721934][T26866] __nla_validate_parse: 2 callbacks suppressed [ 505.721963][T26866] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10003'. [ 505.754906][T26866] netlink: 43 bytes leftover after parsing attributes in process `syz.4.10003'. [ 505.764011][T26866] netlink: 'syz.4.10003': attribute type 5 has an invalid length. [ 505.772483][T26866] netlink: 43 bytes leftover after parsing attributes in process `syz.4.10003'. [ 506.040591][T26882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10009'. [ 506.055887][T26882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10009'. [ 506.490442][T26912] netlink: 292 bytes leftover after parsing attributes in process `syz.0.10026'. [ 506.896518][T26934] netlink: 'syz.4.10036': attribute type 16 has an invalid length. [ 507.351327][T26960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10049'. [ 508.060600][T26992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10064'. [ 508.070689][T26992] netlink: 'syz.4.10064': attribute type 4 has an invalid length. [ 508.296443][T27003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10069'. [ 508.975458][T27022] netlink: 'syz.3.10076': attribute type 3 has an invalid length. [ 509.824744][T27056] IPVS: Scheduler module ip_vs_sip not found [ 510.449613][T27098] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 510.497263][T27098] batman_adv: batadv0: Adding interface: gretap1 [ 510.504530][T27098] batman_adv: batadv0: Interface activated: gretap1 [ 511.347876][T27142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10133'. [ 511.366059][T27142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10133'. [ 511.375962][T27142] netlink: 'syz.4.10133': attribute type 13 has an invalid length. [ 511.559547][T27154] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10138'. [ 511.821953][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10147'. [ 512.965743][T27229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10175'. [ 513.243981][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10183'. [ 513.271289][T27245] tipc: Enabled bearer , priority 10 [ 514.106496][T27301] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 515.517142][T27371] macsec1: entered promiscuous mode [ 515.535820][T27371] macsec1: entered allmulticast mode [ 515.806922][ T36] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 515.825027][ T36] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 515.834654][T13517] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 516.172115][T27406] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10260'. [ 516.194839][ T1209] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 516.224410][T27406] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10260'. [ 516.376146][T13517] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 516.555238][T27425] netlink: 120 bytes leftover after parsing attributes in process `syz.6.10270'. [ 517.139444][T27452] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 517.473640][T27465] netlink: 'syz.3.10288': attribute type 29 has an invalid length. [ 517.515871][T27465] netlink: 'syz.3.10288': attribute type 29 has an invalid length. [ 517.870167][T27479] netlink: 'syz.0.10293': attribute type 3 has an invalid length. [ 518.322204][T27507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10306'. [ 518.439329][T27512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10307'. [ 518.484530][T27512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10307'. [ 518.493671][T27515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10308'. [ 518.517587][T27517] netlink: 'syz.4.10309': attribute type 1 has an invalid length. [ 518.544416][T27517] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10309'. [ 518.888279][T27535] žÿ: renamed from team_slave_1 (while UP) [ 518.921611][T27541] netlink: 'syz.4.10319': attribute type 23 has an invalid length. [ 519.075105][T27548] netlink: 'syz.5.10322': attribute type 1 has an invalid length. [ 519.136250][T27550] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 519.175719][T27550] tipc: Enabled bearer , priority 26 [ 519.394157][T27565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10329'. [ 519.974490][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 520.048587][T27594] bond2: invalid ARP target 0.0.0.0 specified for addition [ 520.094225][T27594] bond2: option arp_ip_target: invalid value (0) [ 520.132361][T27594] bond2 (unregistering): Released all slaves [ 520.243421][T27600] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10342'. [ 520.265783][ T1209] tipc: Node number set to 4278255617 [ 520.914697][T27650] »»»»»»: renamed from vlan1 [ 521.929939][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10374'. [ 522.031173][T27695] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.10376'. [ 522.633634][T27726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10387'. [ 522.664324][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10387'. [ 522.675838][T27726] netlink: 'syz.3.10387': attribute type 14 has an invalid length. [ 522.724374][T27726] netlink: 'syz.3.10387': attribute type 11 has an invalid length. [ 522.837924][T27739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10392'. [ 522.880483][T27739] openvswitch: netlink: Unknown nsh attribute 0 [ 523.077450][T27752] netlink: 17 bytes leftover after parsing attributes in process `syz.6.10398'. [ 523.927858][T27797] xt_time: unknown flags 0xf4 [ 524.044665][T27800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10417'. [ 524.497362][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10426'. [ 524.919842][T27847] netlink: 248 bytes leftover after parsing attributes in process `syz.6.10436'. [ 525.117369][T27859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10442'. [ 526.768750][T27952] tipc: Enabling of bearer rejected, failed to enable media [ 527.781254][T27998] netlink: 'syz.4.10510': attribute type 5 has an invalid length. [ 527.862052][T28002] __nla_validate_parse: 1 callbacks suppressed [ 527.862072][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10511'. [ 528.324186][T28029] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 528.384350][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 528.504463][T28034] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10527'. [ 528.530408][T28034] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10527'. [ 528.559971][T28034] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10527'. [ 528.814901][T28048] netlink: 'syz.4.10534': attribute type 2 has an invalid length. [ 528.895353][T28051] pim6reg: entered allmulticast mode [ 528.904461][T28051] pim6reg: left allmulticast mode [ 529.275647][T28056] netlink: 'syz.5.10537': attribute type 3 has an invalid length. [ 529.400163][T28062] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10540'. [ 529.552373][T28068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10543'. [ 529.744439][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10547'. [ 529.896233][T28087] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10553'. [ 529.919335][T28087] netlink: 51 bytes leftover after parsing attributes in process `syz.5.10553'. [ 529.934185][T28087] netlink: 'syz.5.10553': attribute type 4 has an invalid length. [ 530.268540][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10565'. [ 530.586942][T28130] IPVS: Error connecting to the multicast addr [ 532.686432][T28227] netlink: 'syz.6.10620': attribute type 3 has an invalid length. [ 532.991240][T28244] bridge_slave_0: left allmulticast mode [ 533.009308][T28247] __nla_validate_parse: 2 callbacks suppressed [ 533.009330][T28247] netlink: 11 bytes leftover after parsing attributes in process `syz.3.10630'. [ 533.026370][T28244] bridge_slave_0: left promiscuous mode [ 533.040420][T28244] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.063733][T28244] bridge_slave_1: left allmulticast mode [ 533.069603][T28244] bridge_slave_1: left promiscuous mode [ 533.075931][T28244] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.100467][T28244] bond0: (slave bond_slave_0): Releasing backup interface [ 533.134867][T28244] bond0: (slave bond_slave_1): Releasing backup interface [ 533.155155][T28244] C: left allmulticast mode [ 533.170172][T28244] C: left promiscuous mode [ 533.188728][T28244] team0: Port device C removed [ 533.195009][T28244] team_slave_1: left allmulticast mode [ 533.214601][T28244] team_slave_1: left promiscuous mode [ 533.228393][T28244] team0: Port device team_slave_1 removed [ 533.236719][T28244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.274844][T28244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.296678][T28244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.313530][T28244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.345135][T28244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.381493][T28252] netlink: 'syz.0.10633': attribute type 322 has an invalid length. [ 533.413404][T28262] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 533.703466][T28278] netlink: 216 bytes leftover after parsing attributes in process `syz.5.10646'. [ 533.742676][T28278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10646'. [ 533.763663][T28278] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10646'. [ 533.791376][T28282] netlink: 84 bytes leftover after parsing attributes in process `syz.6.10648'. [ 533.845743][T28282] netlink: 84 bytes leftover after parsing attributes in process `syz.6.10648'. [ 533.870159][T28282] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 534.116504][T28300] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10657'. [ 534.459404][T28325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10668'. [ 534.700736][T28325] syz.0.10668 (28325) used greatest stack depth: 17656 bytes left [ 534.734257][T28340] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 535.183454][T28368] xt_hashlimit: size too large, truncated to 1048576 [ 535.528089][T28382] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10696'. [ 535.572106][T28386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10697'. [ 535.685608][T28391] netlink: 'syz.5.10700': attribute type 3 has an invalid length. [ 535.693570][T28391] netlink: 'syz.5.10700': attribute type 3 has an invalid length. [ 538.400335][T28520] netlink: 'syz.5.10763': attribute type 27 has an invalid length. [ 538.459324][T28523] __nla_validate_parse: 5 callbacks suppressed [ 538.459348][T28523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10764'. [ 538.764058][T28538] gretap0: entered promiscuous mode [ 538.776707][T28538] vlan4: entered promiscuous mode [ 539.406575][T28578] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10792'. [ 539.655488][T28591] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 540.208209][T28618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10810'. [ 540.223754][T28618] netlink: 620 bytes leftover after parsing attributes in process `syz.3.10810'. [ 540.808215][T28634] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.966123][T28634] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.136248][T28634] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.163724][T28652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10828'. [ 541.286535][T28634] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.435474][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.467657][ T36] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.505487][ T36] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.566312][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.978888][T28692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10846'. [ 543.230990][T28759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10879'. [ 543.479543][T28778] xt_HMARK: spi-set and port-set can't be combined [ 543.808001][T28799] netlink: 'syz.4.10897': attribute type 2 has an invalid length. [ 543.922686][T28806] netlink: 'syz.4.10899': attribute type 2 has an invalid length. [ 543.935878][T28806] netlink: 'syz.4.10899': attribute type 2 has an invalid length. [ 544.313714][T28826] syz.4.10910: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 544.345752][T28826] CPU: 0 UID: 0 PID: 28826 Comm: syz.4.10910 Not tainted syzkaller #0 PREEMPT(full) [ 544.345798][T28826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 544.345840][T28826] Call Trace: [ 544.345849][T28826] [ 544.345859][T28826] dump_stack_lvl+0xe8/0x150 [ 544.345895][T28826] warn_alloc+0x249/0x340 [ 544.345921][T28826] ? stack_trace_save+0xa9/0x100 [ 544.345952][T28826] ? __pfx_warn_alloc+0x10/0x10 [ 544.345983][T28826] ? kasan_save_track+0x4f/0x80 [ 544.346003][T28826] ? kasan_save_track+0x3e/0x80 [ 544.346020][T28826] ? __kasan_kmalloc+0x93/0xb0 [ 544.346040][T28826] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 544.346059][T28826] ? xskq_create+0x56/0x170 [ 544.346085][T28826] ? xsk_setsockopt+0x54c/0x990 [ 544.346107][T28826] ? do_sock_setsockopt+0x17c/0x1b0 [ 544.346135][T28826] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 544.346160][T28826] ? do_syscall_64+0xe2/0xf80 [ 544.346192][T28826] __vmalloc_node_range_noprof+0x132/0x1730 [ 544.346248][T28826] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 544.346278][T28826] ? __kasan_kmalloc+0x93/0xb0 [ 544.346306][T28826] vmalloc_user_noprof+0xad/0xe0 [ 544.346327][T28826] ? xskq_create+0xbf/0x170 [ 544.346353][T28826] xskq_create+0xbf/0x170 [ 544.346383][T28826] xsk_init_queue+0xad/0x110 [ 544.346412][T28826] xsk_setsockopt+0x54c/0x990 [ 544.346448][T28826] ? __pfx_xsk_setsockopt+0x10/0x10 [ 544.346473][T28826] ? __pfx_aa_sk_perm+0x10/0x10 [ 544.346502][T28826] ? aa_sock_opt_perm+0xff/0x1a0 [ 544.346532][T28826] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 544.346554][T28826] ? __pfx_xsk_setsockopt+0x10/0x10 [ 544.346580][T28826] do_sock_setsockopt+0x17c/0x1b0 [ 544.346614][T28826] __x64_sys_setsockopt+0x13d/0x1b0 [ 544.346649][T28826] do_syscall_64+0xe2/0xf80 [ 544.346682][T28826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.346704][T28826] ? trace_irq_disable+0x37/0x100 [ 544.346725][T28826] ? clear_bhb_loop+0x60/0xb0 [ 544.346751][T28826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.346781][T28826] RIP: 0033:0x7fec20b9af79 [ 544.346802][T28826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.346821][T28826] RSP: 002b:00007fec21977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.346844][T28826] RAX: ffffffffffffffda RBX: 00007fec20e15fa0 RCX: 00007fec20b9af79 [ 544.346860][T28826] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 544.346873][T28826] RBP: 00007fec20c316e0 R08: 0000000000000004 R09: 0000000000000000 [ 544.346886][T28826] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.346900][T28826] R13: 00007fec20e16038 R14: 00007fec20e15fa0 R15: 00007ffe9abfed78 [ 544.346936][T28826] [ 544.347031][T28826] Mem-Info: [ 544.409273][T28829] netlink: 'syz.3.10912': attribute type 1 has an invalid length. [ 544.427082][T28826] active_anon:6604 inactive_anon:0 isolated_anon:0 [ 544.427082][T28826] active_file:3141 inactive_file:40113 isolated_file:0 [ 544.427082][T28826] unevictable:768 dirty:364 writeback:0 [ 544.427082][T28826] slab_reclaimable:12535 slab_unreclaimable:157881 [ 544.427082][T28826] mapped:39522 shmem:1355 pagetables:1661 [ 544.427082][T28826] sec_pagetables:0 bounce:0 [ 544.427082][T28826] kernel_misc_reclaimable:0 [ 544.427082][T28826] free:1223425 free_pcp:24676 free_cma:0 [ 544.482697][T28829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10912'. [ 544.515052][T28826] Node 0 active_anon:26516kB inactive_anon:0kB active_file:12564kB inactive_file:160248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158088kB dirty:1452kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13880kB pagetables:6508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 544.523287][T28829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10912'. [ 544.561997][T28826] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 544.619230][T28829] netlink: 'syz.3.10912': attribute type 2 has an invalid length. [ 544.760533][T28826] Node 0 [ 544.769741][T28829] netlink: 'syz.3.10912': attribute type 2 has an invalid length. [ 544.783348][T28829] netlink: 'syz.3.10912': attribute type 2 has an invalid length. [ 544.792213][T28826] DMA free:15308kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:8kB free_cma:0kB [ 544.822180][T28826] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 544.828502][T28826] Node 0 DMA32 free:1027584kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26516kB inactive_anon:0kB active_file:12564kB inactive_file:160248kB unevictable:1536kB writepending:1452kB zspages:0kB present:3129332kB managed:2554036kB mlocked:0kB bounce:0kB free_pcp:42488kB local_pcp:21528kB free_cma:0kB [ 544.863020][T28826] lowmem_reserve[]: 0 0 1 1 1 [ 544.868100][T28826] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.899157][T28826] lowmem_reserve[]: 0 0 0 0 0 [ 544.903987][T28826] Node 1 Normal free:3851008kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55852kB local_pcp:28148kB free_cma:0kB [ 544.937048][T28826] lowmem_reserve[]: 0 0 0 0 0 [ 544.941831][T28826] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15308kB [ 545.005397][T28826] Node 0 DMA32: 5078*4kB (UM) 4175*8kB (UME) 1162*16kB (UME) 552*32kB (UME) 476*64kB (UME) 796*128kB (UME) 672*256kB (UM) 475*512kB (UME) 262*1024kB (UME) 60*2048kB (UM) 0*4096kB = 1028720kB [ 545.074363][T28826] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 545.110156][T28826] Node 1 Normal: 178*4kB (UME) 43*8kB (UME) 47*16kB (UME) 159*32kB (UME) 57*64kB (UME) 16*128kB (UME) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 934*4096kB (UM) = 3851312kB [ 545.193228][T28826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 545.234497][T28826] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 545.286341][T28826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 545.297290][T28826] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 545.308042][T28826] 46257 total pagecache pages [ 545.312783][T28826] 0 pages in swap cache [ 545.327517][T28826] Free swap = 124996kB [ 545.331729][T28826] Total swap = 124996kB [ 545.345289][T28826] 2097051 pages RAM [ 545.349181][T28826] 0 pages HighMem/MovableOnly [ 545.353882][T28826] 426644 pages reserved [ 545.374336][T28826] 0 pages cma reserved [ 546.256966][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10947'. [ 546.294293][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 546.666011][T28925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10958'. [ 546.778276][T28933] netlink: 'syz.6.10960': attribute type 1 has an invalid length. [ 546.818452][T28933] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10960'. [ 546.834057][T28933] netlink: 'syz.6.10960': attribute type 1 has an invalid length. [ 546.858039][T28933] netlink: 'syz.6.10960': attribute type 8 has an invalid length. [ 546.879349][T28933] netlink: 606 bytes leftover after parsing attributes in process `syz.6.10960'. [ 546.904625][T28933] netlink: 1 bytes leftover after parsing attributes in process `syz.6.10960'. [ 547.306842][T28965] netlink: 296 bytes leftover after parsing attributes in process `syz.6.10978'. [ 547.451999][T28972] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10981'. [ 547.462993][T28972] ksmbd: Unknown IPC event: 1, ignore. [ 547.678046][T28984] tipc: MTU too low for tipc bearer [ 549.653831][T29086] netlink: 112 bytes leftover after parsing attributes in process `syz.6.11034'. [ 549.671416][T29086] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11034'. [ 549.975510][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11043'. [ 550.032339][T29106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11043'. [ 550.124949][T29106] validate_nla: 1 callbacks suppressed [ 550.124969][T29106] netlink: 'syz.0.11043': attribute type 18 has an invalid length. [ 550.494828][T29134] netlink: 'syz.0.11058': attribute type 13 has an invalid length. [ 550.513082][T29134] netlink: 14589 bytes leftover after parsing attributes in process `syz.0.11058'. [ 551.536062][T29170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11073'. [ 552.221802][T29212] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11095'. [ 552.800051][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11103'. [ 553.317065][T29249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.634688][T29309] netlink: 'syz.4.11131': attribute type 5 has an invalid length. [ 554.657704][T29269] IPVS: starting estimator thread 0... [ 554.754273][T29313] IPVS: using max 28 ests per chain, 67200 per kthread [ 554.774188][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 555.387781][T29346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11149'. [ 556.241779][T29398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11176'. [ 556.267778][T29398] vlan4: entered promiscuous mode [ 556.847248][T29434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11192'. [ 556.889969][T29437] netlink: 348 bytes leftover after parsing attributes in process `syz.5.11194'. [ 556.914547][T29437] netlink: 172 bytes leftover after parsing attributes in process `syz.5.11194'. [ 557.017374][T29445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11200'. [ 557.693570][T29482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11216'. [ 557.883893][T29496] xt_limit: Overflow, try lower: 271964/0 [ 558.004483][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11223'. [ 558.235499][T29502] batman_adv: batadv0: Interface deactivated: gretap1 [ 558.247481][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.257343][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.287180][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.334145][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.375614][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.404406][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.413453][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.437552][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.909253][T29539] lo: entered allmulticast mode [ 558.925618][T29539] lo: left allmulticast mode [ 558.984531][T29543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11245'. [ 559.176863][T29556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11252'. [ 560.031496][T29596] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.091181][T29602] vlan4: entered allmulticast mode [ 560.129755][T29602] bridge_slave_0: entered allmulticast mode [ 560.168281][T29596] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.326351][T29596] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.473238][T29596] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.651173][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.681237][T29636] __nla_validate_parse: 2 callbacks suppressed [ 560.681256][T29636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11290'. [ 560.779482][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.806453][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.835685][T29644] xt_connbytes: Forcing CT accounting to be enabled [ 560.886611][ T67] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.109132][T29659] netlink: 'syz.6.11302': attribute type 3 has an invalid length. [ 561.798756][T29699] lo speed is unknown, defaulting to 1000 [ 561.858063][T29699] lo speed is unknown, defaulting to 1000 [ 561.866459][T29703] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11323'. [ 562.140324][T29699] virt_wifi0 speed is unknown, defaulting to 1000 [ 562.952923][T29745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11342'. [ 563.238468][T29756] tc_dump_action: action bad kind [ 563.699656][T29776] vlan1: entered promiscuous mode [ 563.712425][T29776] gretap0: entered promiscuous mode [ 564.184371][T29798] netlink: 'syz.4.11369': attribute type 2 has an invalid length. [ 564.203796][T29798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11369'. [ 564.995908][T29837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11387'. [ 565.245330][T29849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11392'. [ 565.687315][T29874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11406'. [ 566.063908][T29901] netlink: 'syz.0.11417': attribute type 1 has an invalid length. [ 566.490200][T29927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11431'. [ 566.953433][T29952] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11443'. [ 567.600078][T29985] netlink: 'syz.4.11458': attribute type 4 has an invalid length. [ 567.613952][T29985] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11458'. [ 567.762456][T29994] tipc: Disabling bearer [ 568.251500][T30018] pimreg: entered allmulticast mode [ 568.473959][T30028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11479'. [ 568.942102][T30044] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 569.080259][T30055] xt_hashlimit: max too large, truncated to 1048576 [ 569.094889][T30055] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 570.654933][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11536'. [ 570.964017][T30163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11542'. [ 571.610031][T30202] netlink: 47 bytes leftover after parsing attributes in process `syz.0.11562'. [ 571.923761][T30224] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11572'. [ 571.984642][T30224] netlink: 13 bytes leftover after parsing attributes in process `syz.4.11572'. [ 572.034853][T30228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11575'. [ 572.097040][T30234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11576'. [ 572.384028][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11586'. [ 572.474334][T30255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11587'. [ 572.508248][T30260] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 572.994302][T30289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11604'. [ 574.801708][T30371] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.920109][T30384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.045442][T30371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.067302][T30371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.259985][T30371] veth1_to_hsr: left allmulticast mode [ 575.328275][T15367] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.357890][T15367] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.438310][T15367] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.459139][T15367] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.005752][T30429] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11668'. [ 576.022246][T30429] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11668'. [ 576.144653][T30439] netlink: 'syz.0.11672': attribute type 10 has an invalid length. [ 576.354488][T30454] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11681'. [ 576.374909][ T31] INFO: task syz.2.7784:22185 blocked for more than 143 seconds. [ 576.382727][ T31] Not tainted syzkaller #0 [ 576.405119][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.431966][ T31] task:syz.2.7784 state:D stack:27104 pid:22185 tgid:22184 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 576.448437][ T31] Call Trace: [ 576.451873][ T31] [ 576.459594][ T31] __schedule+0x14ea/0x5050 [ 576.464800][ T31] ? __pfx___schedule+0x10/0x10 [ 576.469816][ T31] ? schedule+0x90/0x360 [ 576.474208][ T31] schedule+0x164/0x360 [ 576.478419][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.484012][ T31] __mutex_lock+0x7fe/0x1300 [ 576.488872][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 576.494750][ T31] ? __mutex_lock+0x5ac/0x1300 [ 576.499671][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 576.505520][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.510633][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 576.516594][ T31] ? rcu_is_watching+0x15/0xb0 [ 576.521447][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 576.527770][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 576.534400][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 576.540102][ T31] ? __asan_memcpy+0x40/0x70 [ 576.544803][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 576.550964][ T31] ? bpf_lsm_capable+0x9/0x20 [ 576.555938][ T31] ? security_capable+0x7e/0x2c0 [ 576.560923][ T31] genl_rcv_msg+0x61c/0x7a0 [ 576.565586][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.570654][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 576.577103][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 576.582598][ T31] netlink_rcv_skb+0x232/0x4b0 [ 576.587755][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.592809][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.598247][ T31] ? genl_rcv+0x19/0x40 [ 576.602466][ T31] ? down_read+0x272/0x2e0 [ 576.607045][ T31] ? genl_rcv+0xd/0x40 [ 576.611163][ T31] genl_rcv+0x28/0x40 [ 576.615531][ T31] netlink_unicast+0x80f/0x9b0 [ 576.620334][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 576.625794][ T31] ? netlink_sendmsg+0x650/0xb40 [ 576.630771][ T31] ? skb_put+0x11b/0x210 [ 576.635280][ T31] netlink_sendmsg+0x813/0xb40 [ 576.640099][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.645785][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 576.650831][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.656550][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.661900][ T31] ____sys_sendmsg+0xa68/0xad0 [ 576.666848][ T31] ? __might_fault+0xaf/0x130 [ 576.671576][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.677119][ T31] ? import_iovec+0x73/0xa0 [ 576.681684][ T31] ___sys_sendmsg+0x2a5/0x360 [ 576.686545][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 576.691562][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.697133][ T31] ? futex_wait+0x29a/0x380 [ 576.701780][ T31] ? __fget_files+0x2a/0x420 [ 576.706730][ T31] ? __fget_files+0x3a0/0x420 [ 576.711526][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 576.716930][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.722445][ T31] ? rcu_is_watching+0x15/0xb0 [ 576.727432][ T31] do_syscall_64+0xe2/0xf80 [ 576.731990][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.738396][ T31] ? trace_irq_disable+0x37/0x100 [ 576.743524][ T31] ? clear_bhb_loop+0x60/0xb0 [ 576.748667][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.754731][ T31] RIP: 0033:0x7fb83ff9af79 [ 576.759308][ T31] RSP: 002b:00007fb840d70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.768246][ T31] RAX: ffffffffffffffda RBX: 00007fb840215fa0 RCX: 00007fb83ff9af79 [ 576.776713][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 576.784852][ T31] RBP: 00007fb8400316e0 R08: 0000000000000000 R09: 0000000000000000 [ 576.792865][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.801113][ T31] R13: 00007fb840216038 R14: 00007fb840215fa0 R15: 00007ffe9bf624d8 [ 576.809210][ T31] [ 576.812361][ T31] [ 576.812361][ T31] Showing all locks held in the system: [ 576.820448][ T31] 1 lock held by khungtaskd/31: [ 576.825519][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 576.835933][ T31] 2 locks held by getty/5575: [ 576.840643][ T31] #0: ffff88814d59e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 576.850547][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 576.861271][ T31] 3 locks held by kworker/0:5/5888: [ 576.866625][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 576.877793][ T31] #1: ffffc9000ade7bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 576.891201][ T31] #2: ffff888033849240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 576.901335][ T31] 2 locks held by syz.1.5742/17858: [ 576.906681][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.915074][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 576.925409][ T31] 2 locks held by syz.2.7784/22185: [ 576.930634][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.938974][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 576.949339][ T31] [ 576.951698][ T31] ============================================= [ 576.951698][ T31] [ 576.962001][ T31] NMI backtrace for cpu 0 [ 576.962019][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.962042][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 576.962054][ T31] Call Trace: [ 576.962062][ T31] [ 576.962071][ T31] dump_stack_lvl+0xe8/0x150 [ 576.962102][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 576.962126][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.962167][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 576.962192][ T31] sys_info+0x135/0x170 [ 576.962210][ T31] watchdog+0xf90/0xfe0 [ 576.962237][ T31] ? watchdog+0x209/0xfe0 [ 576.962267][ T31] kthread+0x726/0x8b0 [ 576.962294][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.962314][ T31] ? __pfx_kthread+0x10/0x10 [ 576.962340][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.962370][ T31] ? __pfx_kthread+0x10/0x10 [ 576.962388][ T31] ret_from_fork+0x51b/0xa40 [ 576.962403][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.962425][ T31] ? __switch_to+0xc82/0x1410 [ 576.962448][ T31] ? __pfx_kthread+0x10/0x10 [ 576.962466][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.962497][ T31] [ 576.962505][ T31] Sending NMI from CPU 0 to CPUs 1: [ 577.088569][ C1] NMI backtrace for cpu 1 [ 577.088587][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 577.088606][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 577.088617][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 577.088646][ C1] Code: 28 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 577.088661][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 577.088677][ C1] RAX: 0000000000057f3b RBX: ffffffff8199370d RCX: 0000000080000001 [ 577.088689][ C1] RDX: 0000000000000001 RSI: ffffffff8dcd0c10 RDI: ffffffff8c073a00 [ 577.088701][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 577.088713][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef4970 [ 577.088726][ C1] R13: 1ffff11003a54b70 R14: 0000000000000001 R15: 0000000000000001 [ 577.088737][ C1] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 577.088751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.088762][ C1] CR2: 00007f3a603e3ad8 CR3: 0000000078914000 CR4: 00000000003526f0 [ 577.088778][ C1] Call Trace: [ 577.088785][ C1] [ 577.088791][ C1] default_idle+0x9/0x20 [ 577.088806][ C1] default_idle_call+0x72/0xb0 [ 577.088823][ C1] do_idle+0x1bd/0x500 [ 577.088838][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 577.088863][ C1] ? __pfx_do_idle+0x10/0x10 [ 577.088885][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 577.088927][ C1] cpu_startup_entry+0x43/0x60 [ 577.088943][ C1] start_secondary+0x101/0x110 [ 577.088968][ C1] common_startup_64+0x13e/0x147 [ 577.088999][ C1] [ 577.268597][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 577.275498][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.284649][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 577.294732][ T31] Call Trace: [ 577.298037][ T31] [ 577.300991][ T31] vpanic+0x1e0/0x670 [ 577.305008][ T31] panic+0xc5/0xd0 [ 577.308760][ T31] ? __pfx_panic+0x10/0x10 [ 577.313205][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 577.318614][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 577.324807][ T31] watchdog+0xfda/0xfe0 [ 577.328995][ T31] ? watchdog+0x209/0xfe0 [ 577.333368][ T31] kthread+0x726/0x8b0 [ 577.337476][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.342182][ T31] ? __pfx_kthread+0x10/0x10 [ 577.346801][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.352028][ T31] ? __pfx_kthread+0x10/0x10 [ 577.356639][ T31] ret_from_fork+0x51b/0xa40 [ 577.361255][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.366394][ T31] ? __switch_to+0xc82/0x1410 [ 577.371107][ T31] ? __pfx_kthread+0x10/0x10 [ 577.375722][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.380531][ T31] [ 577.383745][ T31] Kernel Offset: disabled [ 577.388079][ T31] Rebooting in 86400 seconds..