last executing test programs: 1.193311739s ago: executing program 4 (id=9697): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r1, 0x37, 0xce2d3afaee44ac6a, 0x4}, 0x20) 1.118728281s ago: executing program 4 (id=9701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x87, &(0x7f0000000800)}, 0x10) 1.054913956s ago: executing program 4 (id=9705): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4a, &(0x7f0000000ac0)={0xff00, 0x0}, 0x8) 1.019119265s ago: executing program 4 (id=9707): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.001712525s ago: executing program 2 (id=9708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010100, 0x0, 0xffff, 0x4e21, 0x0, 0xa}}}, 0xb8}}, 0x0) 941.313659ms ago: executing program 4 (id=9712): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2ca00000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c00098008000200030000000c000280080001"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 887.800012ms ago: executing program 2 (id=9713): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 887.358163ms ago: executing program 2 (id=9714): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB=' w'], 0x8) 858.973461ms ago: executing program 4 (id=9715): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x3}, 0x8) 778.631099ms ago: executing program 0 (id=9716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 778.488317ms ago: executing program 2 (id=9717): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010300000000000000000a0000000003"], 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) 699.372412ms ago: executing program 2 (id=9719): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 698.753465ms ago: executing program 0 (id=9720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 653.150982ms ago: executing program 2 (id=9722): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) 628.68517ms ago: executing program 0 (id=9724): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7, r2}, &(0x7f0000000040)=0x10) 603.164984ms ago: executing program 0 (id=9725): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) 466.079672ms ago: executing program 0 (id=9729): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='+\r', 0x100000}], 0x1}, 0x0) 394.626267ms ago: executing program 0 (id=9732): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="9e", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, 0x0, 0x0) 185.718056ms ago: executing program 3 (id=9740): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'full', 0x20, 0x3, 0x20, 0x801}, 0x2f) 185.332848ms ago: executing program 1 (id=9742): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x11}, 0xfffffffc}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)="bc039355", 0x4}], 0x1}}], 0x1, 0x4) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 148.520452ms ago: executing program 3 (id=9743): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a954b1c552dd0c694cfb9602293ae990ec006080f3af9c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 99.899749ms ago: executing program 1 (id=9744): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) 99.54265ms ago: executing program 3 (id=9745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 99.2982ms ago: executing program 1 (id=9746): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x802) 67.327391ms ago: executing program 1 (id=9747): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) 67.131288ms ago: executing program 3 (id=9748): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) 37.242734ms ago: executing program 3 (id=9749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) 34.440416ms ago: executing program 1 (id=9750): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000200)=""/108, 0x6c, 0xff) 2.506033ms ago: executing program 3 (id=9751): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=9752): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 0s ago: executing program 4 (id=9755): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) kernel console output (not intermixed with test programs): 6][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.669754][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.717356][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.732347][ T5875] veth0_vlan: entered promiscuous mode [ 65.740462][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.773633][ T5866] veth0_vlan: entered promiscuous mode [ 65.787508][ T5857] veth0_vlan: entered promiscuous mode [ 65.797019][ T5866] veth1_vlan: entered promiscuous mode [ 65.803507][ T5875] veth1_vlan: entered promiscuous mode [ 65.812181][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.820919][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.835803][ T5857] veth1_vlan: entered promiscuous mode [ 65.872571][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.877831][ T5864] veth0_vlan: entered promiscuous mode [ 65.907529][ T5875] veth0_macvtap: entered promiscuous mode [ 65.919583][ T5864] veth1_vlan: entered promiscuous mode [ 65.930224][ T5866] veth0_macvtap: entered promiscuous mode [ 65.939157][ T5875] veth1_macvtap: entered promiscuous mode [ 65.955426][ T5879] Bluetooth: hci0: command tx timeout [ 65.960962][ T5877] Bluetooth: hci4: command tx timeout [ 65.960975][ T5863] Bluetooth: hci2: command tx timeout [ 65.961000][ T5863] Bluetooth: hci1: command tx timeout [ 65.966776][ T5860] Bluetooth: hci3: command tx timeout [ 65.992326][ T5866] veth1_macvtap: entered promiscuous mode [ 66.025979][ T5857] veth0_macvtap: entered promiscuous mode [ 66.039362][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.068025][ T5857] veth1_macvtap: entered promiscuous mode [ 66.081937][ T5864] veth0_macvtap: entered promiscuous mode [ 66.091200][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.108708][ T5864] veth1_macvtap: entered promiscuous mode [ 66.120786][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.132290][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.159755][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.171098][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.198457][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.212237][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.239146][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.251508][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.262402][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.282248][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.291195][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.302313][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.340119][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.351610][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.393089][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.405692][ T1014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.432243][ T1014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.467017][ T1014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.483525][ T1014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.513205][ T1014] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.527581][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.527714][ T1014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.549826][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.564495][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.572604][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.585517][ T1014] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.642706][ T3598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.661306][ T3598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.672614][ T3598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.703207][ T3598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.725439][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.733315][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.771223][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.786767][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.826011][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.842487][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.862200][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.885412][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.033904][ T5860] Bluetooth: hci3: command tx timeout [ 68.038241][ T5874] Bluetooth: hci0: command tx timeout [ 68.039327][ T5877] Bluetooth: hci2: command tx timeout [ 68.048417][ T5874] Bluetooth: hci1: command tx timeout [ 68.055889][ T5863] Bluetooth: hci4: command tx timeout [ 70.115523][ T5863] Bluetooth: hci4: command tx timeout [ 70.121345][ T5874] Bluetooth: hci1: command tx timeout [ 70.123541][ T5877] Bluetooth: hci2: command tx timeout [ 70.127119][ T5874] Bluetooth: hci3: command tx timeout [ 70.132922][ T5860] Bluetooth: hci0: command tx timeout [ 70.746556][ T6321] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 71.636586][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.646285][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.359497][ T6962] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 81.387777][ T7169] IPv6: addrconf: prefix option has invalid lifetime [ 81.878118][ T9] cfg80211: failed to load regulatory.db [ 84.786426][ T7468] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 86.496525][ T7619] can: request_module (can-proto-0) failed. [ 86.969170][ T7661] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 90.042099][ T7940] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 90.616936][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.492755][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 93.915384][ T8274] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1146'. [ 94.030906][ T8283] netlink: 'syz.4.1150': attribute type 21 has an invalid length. [ 94.082100][ T8283] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.103910][ T8283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.111719][ T8283] IPv6: NLM_F_CREATE should be set when creating new route [ 94.119270][ T8283] IPv6: NLM_F_CREATE should be set when creating new route [ 94.126968][ T8283] IPv6: NLM_F_CREATE should be set when creating new route [ 94.555199][ T8318] netlink: 'syz.2.1168': attribute type 2 has an invalid length. [ 94.860037][ T8340] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 94.879279][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1180'. [ 94.978537][ T8350] IPv6: sit1: Disabled Multicast RS [ 95.003620][ T8350] sit1: entered allmulticast mode [ 95.020938][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1185'. [ 95.046583][ T8355] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 95.057796][ T8351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1183'. [ 95.083284][ T8351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1183'. [ 95.271924][ T8370] netlink: 'syz.4.1193': attribute type 3 has an invalid length. [ 95.310004][ T8370] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1193'. [ 95.315683][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'. [ 95.387751][ T8377] netlink: 'syz.1.1196': attribute type 9 has an invalid length. [ 96.155314][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 96.915458][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.932312][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.377806][ T8516] netlink: 'syz.4.1258': attribute type 11 has an invalid length. [ 97.440773][ T8520] netlink: 'syz.1.1261': attribute type 3 has an invalid length. [ 97.699474][ T8539] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.795614][ T8541] syz.2.1271 uses obsolete (PF_INET,SOCK_PACKET) [ 97.940541][ T8553] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1276'. [ 98.510355][ T8599] unsupported nlmsg_type 40 [ 98.542911][ T8602] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1301'. [ 98.603444][ T8605] netlink: 'syz.0.1302': attribute type 1 has an invalid length. [ 98.619211][ T8602] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1301'. [ 98.623882][ T8605] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1302'. [ 98.965952][ T8634] warning: `syz.4.1318' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.266394][ T8659] netlink: 'syz.3.1329': attribute type 10 has an invalid length. [ 99.285546][ T8659] veth0_vlan: entered allmulticast mode [ 99.314988][ T8659] veth0_vlan: left promiscuous mode [ 99.361925][ T8659] veth0_vlan: entered promiscuous mode [ 99.368206][ T8667] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 99.377706][ T8666] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 99.394374][ T8659] team0: Device veth0_vlan failed to register rx_handler [ 99.414136][ T8667] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1332'. [ 99.468295][ T8666] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1331'. [ 99.591233][ T8676] netlink: 'syz.0.1337': attribute type 23 has an invalid length. [ 99.813160][ T8695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.830797][ T8697] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 99.971187][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1353'. [ 100.213424][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1361'. [ 100.399533][ T8737] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 100.427020][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 100.442121][ T8745] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.473105][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 100.718626][ T8766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1381'. [ 101.111931][ T8792] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 101.477400][ T8823] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 101.962523][ T8858] netlink: 'syz.2.1427': attribute type 8 has an invalid length. [ 102.106903][ T8866] sctp: [Deprecated]: syz.4.1432 (pid 8866) Use of int in maxseg socket option. [ 102.106903][ T8866] Use struct sctp_assoc_value instead [ 102.166128][ T8872] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 102.496234][ T8894] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 103.513598][ T8961] netlink: 'syz.1.1477': attribute type 8 has an invalid length. [ 104.078987][ T9008] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 104.094403][ T9015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.104027][ T9008] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 104.152495][ T9008] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 104.262608][ T9025] __nla_validate_parse: 2 callbacks suppressed [ 104.262627][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 104.286592][ T9025] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1507'. [ 104.299127][ T9025] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1507'. [ 104.477827][ T9043] pimreg: entered allmulticast mode [ 104.541339][ T9047] sctp: [Deprecated]: syz.2.1518 (pid 9047) Use of int in max_burst socket option. [ 104.541339][ T9047] Use struct sctp_assoc_value instead [ 105.040891][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 105.110772][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 105.609401][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 105.668261][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 106.086787][ T9182] sctp: [Deprecated]: syz.1.1580 (pid 9182) Use of int in maxseg socket option. [ 106.086787][ T9182] Use struct sctp_assoc_value instead [ 106.196515][ T9191] ksmbd: Unknown IPC event: 3, ignore. [ 106.267920][ T9201] Unsupported ieee802154 address type: 0 [ 106.299346][ T9203] tunl0: entered promiscuous mode [ 106.307965][ T9203] netlink: 'syz.1.1591': attribute type 3 has an invalid length. [ 106.337041][ T9203] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1591'. [ 106.355496][ T9206] netlink: 'syz.4.1593': attribute type 2 has an invalid length. [ 106.462905][ T9216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.503611][ T9217] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 106.682357][ T9231] hsr0 speed is unknown, defaulting to 1000 [ 106.720616][ T9231] hsr0 speed is unknown, defaulting to 1000 [ 106.744325][ T9231] hsr0 speed is unknown, defaulting to 1000 [ 106.809624][ T9231] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.869293][ T9231] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.935703][ T9231] hsr0 speed is unknown, defaulting to 1000 [ 106.954832][ T9231] hsr0 speed is unknown, defaulting to 1000 [ 106.971987][ T9231] hsr0 speed is unknown, defaulting to 1000 [ 106.980124][ T9231] hsr0 speed is unknown, defaulting to 1000 [ 107.003162][ T9231] hsr0 speed is unknown, defaulting to 1000 [ 107.155318][ T9265] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.1622'. [ 107.468576][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 107.641117][ T9300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.612544][ T9387] netlink: 'syz.3.1675': attribute type 12 has an invalid length. [ 109.105002][ T9430] netlink: 'syz.1.1695': attribute type 10 has an invalid length. [ 109.149108][ T9430] team0: Port device geneve0 added [ 109.335096][ T9451] __nla_validate_parse: 6 callbacks suppressed [ 109.335115][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 109.515502][ T9464] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 109.553328][ T9464] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1713'. [ 109.855049][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1723'. [ 109.902969][ T9495] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 110.344000][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 110.567961][ T9547] bond1: entered promiscuous mode [ 110.591625][ T9547] bond1: entered allmulticast mode [ 110.603397][ T9547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.955661][ T9585] netlink: 'syz.0.1760': attribute type 1 has an invalid length. [ 110.981671][ T9585] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1760'. [ 111.008022][ T9590] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1765'. [ 111.044384][ T9590] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1765'. [ 111.056028][ T9590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1765'. [ 111.649371][ T9646] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1794'. [ 111.785535][ T9659] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1798'. [ 112.057882][ T9685] netlink: 'syz.0.1813': attribute type 5 has an invalid length. [ 112.118570][ T9689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.197779][ T9696] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 112.343032][ T9707] netlink: 'syz.4.1823': attribute type 24 has an invalid length. [ 112.671133][ T9734] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 112.777790][ T9734] bond2: entered promiscuous mode [ 112.783297][ T9734] bond2: entered allmulticast mode [ 112.790176][ T9734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.416868][ T9806] netlink: 'syz.3.1870': attribute type 1 has an invalid length. [ 113.489012][ T9810] netlink: 'syz.2.1873': attribute type 10 has an invalid length. [ 113.515573][ T9810] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 113.538314][ T9810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.539300][ T9818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.630032][ T9816] bond3 (unregistering): Released all slaves [ 113.962965][ T9851] Driver unsupported XDP return value 0 on prog (id 203) dev N/A, expect packet loss! [ 114.245076][ T9876] netlink: 'syz.2.1905': attribute type 5 has an invalid length. [ 114.424365][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 114.431605][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 114.438972][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 114.468540][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 114.480098][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 114.493233][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 114.503624][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 114.631274][ T9904] __nla_validate_parse: 8 callbacks suppressed [ 114.631292][ T9904] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1919'. [ 114.887570][ T9923] bridge4: entered promiscuous mode [ 114.893613][ T9923] bridge4: entered allmulticast mode [ 115.243897][ T9953] netlink: 'syz.2.1941': attribute type 6 has an invalid length. [ 115.558521][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 116.122096][T10030] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 116.521841][T10063] tipc: Trying to set illegal importance in message [ 117.170789][T10127] !: renamed from dummy0 (while UP) [ 117.583376][ T1014] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.707611][T10176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2047'. [ 117.792342][T10182] netlink: 'syz.4.2053': attribute type 21 has an invalid length. [ 117.888671][T10189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2055'. [ 118.056137][T10205] netlink: 'syz.4.2063': attribute type 24 has an invalid length. [ 118.250306][T10221] netlink: 'syz.1.2070': attribute type 2 has an invalid length. [ 118.259201][T10223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2071'. [ 118.673182][T10258] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 118.707493][T10258] netlink: 'syz.1.2087': attribute type 2 has an invalid length. [ 118.769626][T10265] netlink: 'syz.3.2091': attribute type 8 has an invalid length. [ 118.838616][T10273] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 118.866664][T10275] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2096'. [ 119.227584][T10309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2113'. [ 119.435331][T10327] net_ratelimit: 255 callbacks suppressed [ 119.435350][T10327] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 119.486746][T10332] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 119.523773][T10332] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 119.796820][T10286] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 119.832026][T10361] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 119.978468][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2142'. [ 119.999451][T10374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2143'. [ 120.008198][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 120.021438][T10376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2144'. [ 120.034246][T10376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2144'. [ 120.046534][T10377] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 120.185772][T10386] netlink: set zone limit has 8 unknown bytes [ 120.201862][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2150'. [ 120.341063][T10397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.460007][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'. [ 120.565835][T10416] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 120.611529][T10416] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 120.722975][T10431] netlink: 'syz.1.2172': attribute type 10 has an invalid length. [ 120.742937][T10431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2172'. [ 120.757213][T10431] batadv0: entered promiscuous mode [ 120.763183][T10431] batadv0: entered allmulticast mode [ 120.776498][T10431] bridge0: port 3(batadv0) entered blocking state [ 120.789259][T10431] bridge0: port 3(batadv0) entered disabled state [ 120.836181][T10431] bridge0: port 3(batadv0) entered blocking state [ 120.843290][T10431] bridge0: port 3(batadv0) entered forwarding state [ 121.004314][ T5860] Bluetooth: hci0: command 0x0c20 tx timeout [ 121.011905][T10451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.035511][T10458] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 121.074410][ T1014] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 121.085418][ T1014] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 121.190639][T10468] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2189'. [ 121.235134][T10473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2192'. [ 121.357529][T10482] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 121.488405][T10492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.521350][T10499] netlink: ct family unspecified [ 121.527273][T10499] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.989847][T10540] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 122.021265][T10540] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 122.635237][T10595] !€ÿ: renamed from bond_slave_0 (while UP) [ 122.971327][T10624] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 123.074761][T10624] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 123.129918][ T919] hsr0 speed is unknown, defaulting to 1000 [ 123.137070][ T919] syz1: Port: 1 Link DOWN [ 123.204413][T10642] netlink: 'syz.0.2276': attribute type 11 has an invalid length. [ 123.457217][T10665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.048654][T10718] netlink: 'syz.1.2312': attribute type 11 has an invalid length. [ 125.200775][T10811] bond1: left allmulticast mode [ 125.221155][T10811] bond2: left allmulticast mode [ 125.301039][T10823] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 125.364085][T10823] __nla_validate_parse: 13 callbacks suppressed [ 125.364103][T10823] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2358'. [ 125.404292][T10823] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 125.472867][T10834] netlink: 'syz.4.2364': attribute type 3 has an invalid length. [ 125.490064][T10836] net_ratelimit: 2 callbacks suppressed [ 125.490083][T10836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.514626][T10834] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2364'. [ 126.021036][T10878] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 126.072286][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 126.144955][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 126.521839][T10925] netlink: 'syz.4.2402': attribute type 12 has an invalid length. [ 126.663923][T10938] netlink: 'syz.0.2406': attribute type 4 has an invalid length. [ 127.129291][T10975] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2426'. [ 127.507939][T11005] netlink: 'syz.1.2440': attribute type 1 has an invalid length. [ 127.549965][T11005] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2440'. [ 127.562840][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 127.735782][T11026] bridge2: entered promiscuous mode [ 127.754860][T11026] bridge2: entered allmulticast mode [ 127.785023][T11029] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 127.809896][T11029] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 128.062943][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 128.256951][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'. [ 128.322740][T11072] netlink: 'syz.1.2473': attribute type 15 has an invalid length. [ 128.442202][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'. [ 129.407067][T11170] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 129.425332][T11174] netlink: 'syz.2.2524': attribute type 1 has an invalid length. [ 129.436230][T11170] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 129.509325][T11180] netlink: 'syz.4.2529': attribute type 1 has an invalid length. [ 129.526201][T11183] netlink: 'syz.3.2528': attribute type 5 has an invalid length. [ 129.638119][T11190] xfrm1: entered allmulticast mode [ 130.450569][T11267] __nla_validate_parse: 10 callbacks suppressed [ 130.450588][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2568'. [ 131.945250][T11399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2629'. [ 132.542610][T11446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.757108][T11467] ip6gre1: entered allmulticast mode [ 132.825664][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2660'. [ 133.081142][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.087948][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.202486][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2673'. [ 133.248704][T11512] netlink: 'syz.2.2675': attribute type 11 has an invalid length. [ 133.299070][T11512] netlink: 'syz.2.2675': attribute type 11 has an invalid length. [ 133.355306][T11512] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2675'. [ 133.655831][T11546] netlink: 'syz.2.2690': attribute type 7 has an invalid length. [ 133.863157][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2698'. [ 133.882557][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2698'. [ 133.894940][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2698'. [ 134.318650][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 134.381143][T11607] netlink: 'syz.1.2720': attribute type 3 has an invalid length. [ 134.418513][T11607] netlink: 'syz.1.2720': attribute type 1 has an invalid length. [ 134.746427][T11639] IPv6: Can't replace route, no match found [ 134.798125][T11643] netlink: 'syz.0.2737': attribute type 7 has an invalid length. [ 134.941468][T11656] netlink: 'syz.1.2745': attribute type 1 has an invalid length. [ 134.997024][T11656] netlink: 'syz.1.2745': attribute type 1 has an invalid length. [ 135.148341][T11678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.634624][T11719] lo: entered promiscuous mode [ 135.641935][T11719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.756704][T11730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.891607][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2786'. [ 135.911505][T11744] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2787'. [ 136.031541][T11754] netlink: 'syz.4.2793': attribute type 1 has an invalid length. [ 136.053834][T11754] netlink: 'syz.4.2793': attribute type 1 has an invalid length. [ 136.063590][T11754] netlink: 'syz.4.2793': attribute type 1 has an invalid length. [ 136.086336][T11754] netlink: 'syz.4.2793': attribute type 2 has an invalid length. [ 136.122054][T11754] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2793'. [ 136.270040][ T5935] IPVS: starting estimator thread 0... [ 136.393781][T11773] IPVS: using max 54 ests per chain, 129600 per kthread [ 136.829826][T11827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2829'. [ 137.732821][T11906] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2862'. [ 137.793828][T11906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.867389][T11920] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 137.975852][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 138.293606][T11961] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2889'. [ 138.528238][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 138.679826][T11991] validate_nla: 5 callbacks suppressed [ 138.679845][T11991] netlink: 'syz.4.2904': attribute type 26 has an invalid length. [ 138.996966][T12026] netlink: 'syz.4.2920': attribute type 1 has an invalid length. [ 139.017748][T12026] netlink: 'syz.4.2920': attribute type 2 has an invalid length. [ 139.572683][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 139.642525][T12085] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 139.663414][T12085] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2946'. [ 139.753965][T12097] tc_dump_action: action bad kind [ 139.875076][T12109] syz.1.2961 uses old SIOCAX25GETINFO [ 139.942506][T12113] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 140.049894][T12127] netlink: 'syz.2.2968': attribute type 2 has an invalid length. [ 140.183110][T12138] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 140.646984][T12184] bond4: entered promiscuous mode [ 140.656216][T12184] bond4: entered allmulticast mode [ 140.661673][T12184] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.119146][T12227] netlink: 'syz.0.3016': attribute type 2 has an invalid length. [ 141.151617][T12233] __nla_validate_parse: 3 callbacks suppressed [ 141.151635][T12233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3018'. [ 141.487154][T12264] netlink: 'syz.1.3030': attribute type 7 has an invalid length. [ 141.748714][T12213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.762732][T12213] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 141.876956][T12213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.892044][T12213] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 141.916769][T12299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.957111][T12304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3048'. [ 142.004872][T12213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.011362][T12213] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 142.093000][T12213] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.117827][T12213] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 142.213064][T12325] sctp: [Deprecated]: syz.3.3055 (pid 12325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.213064][T12325] Use struct sctp_sack_info instead [ 142.233218][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3058'. [ 142.812951][T12377] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3075'. [ 142.888309][T12383] netlink: 'syz.1.3079': attribute type 1 has an invalid length. [ 142.926416][T12383] netlink: 'syz.1.3079': attribute type 1 has an invalid length. [ 143.122393][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3084'. [ 143.127131][T12402] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 143.151336][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3084'. [ 143.214289][T12409] netlink: 'syz.2.3089': attribute type 64 has an invalid length. [ 143.241385][T12410] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3090'. [ 143.259008][T12409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3089'. [ 143.418558][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 143.452177][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 144.307057][T12508] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.633256][T12536] delete_channel: no stack [ 144.887335][T12555] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 145.068997][T12572] validate_nla: 1 callbacks suppressed [ 145.069017][T12572] netlink: 'syz.1.3151': attribute type 2 has an invalid length. [ 145.102245][T12575] netlink: 'syz.4.3153': attribute type 1 has an invalid length. [ 145.134038][T12575] netlink: 'syz.4.3153': attribute type 3 has an invalid length. [ 145.647346][T12628] netlink: zone id is out of range [ 145.666217][T12628] netlink: get zone limit has 8 unknown bytes [ 146.230416][T12688] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.371576][T12702] __nla_validate_parse: 6 callbacks suppressed [ 146.371595][T12702] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3205'. [ 146.731251][T12734] netlink: 'syz.0.3219': attribute type 30 has an invalid length. [ 146.741139][T12731] bond5: entered promiscuous mode [ 146.748951][T12731] bond5: entered allmulticast mode [ 146.755432][T12731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.764069][T12740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3220'. [ 146.796829][T12734] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 146.837733][T12734] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 146.916445][ T5860] Bluetooth: hci0: command tx timeout [ 147.388543][T12797] netlink: 'syz.4.3245': attribute type 11 has an invalid length. [ 147.417009][T12797] netlink: 'syz.4.3245': attribute type 4 has an invalid length. [ 147.438538][T12797] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3245'. [ 147.492590][T12807] netlink: 'syz.0.3249': attribute type 1 has an invalid length. [ 147.650692][T12822] tipc: Can't bind to reserved service type 0 [ 147.738297][T12830] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3256'. [ 147.805545][T12837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3261'. [ 148.153940][T12868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.175230][T12870] netlink: 'syz.2.3274': attribute type 1 has an invalid length. [ 148.183098][T12870] netlink: 'syz.2.3274': attribute type 1 has an invalid length. [ 148.511280][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3286'. [ 148.649110][T12916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3294'. [ 149.458248][T12996] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3326'. [ 149.702495][T13018] netlink: 'syz.2.3337': attribute type 21 has an invalid length. [ 150.087517][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 150.124367][T13058] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 150.436157][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3366'. [ 150.617294][T13109] netlink: 'syz.3.3374': attribute type 1 has an invalid length. [ 151.459176][T13188] netlink: 'syz.1.3408': attribute type 1 has an invalid length. [ 151.675775][T13209] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 151.712925][T13209] __nla_validate_parse: 3 callbacks suppressed [ 151.712940][T13209] netlink: 784 bytes leftover after parsing attributes in process `syz.4.3416'. [ 151.748097][T13216] gtp0: entered promiscuous mode [ 151.763441][T13216] gtp0: entered allmulticast mode [ 151.978703][T13236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.355729][T13270] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 152.394554][T13275] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 152.458750][T13275] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3442'. [ 152.475708][T13275] nbd: illegal input index 1048576 [ 152.775019][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3460'. [ 152.877083][T13317] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.928725][T13322] netlink: 'syz.3.3466': attribute type 11 has an invalid length. [ 153.171893][T13343] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 153.488171][T13377] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.557202][T13384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3499'. [ 153.879661][T13415] batadv1: entered allmulticast mode [ 154.000202][T13429] netlink: 'syz.1.3521': attribute type 11 has an invalid length. [ 154.010806][T13429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3521'. [ 154.127285][T13440] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3526'. [ 154.362295][T13459] : renamed from hsr0 (while UP) [ 154.379962][T13465] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 154.596687][T13485] netlink: 'syz.0.3550': attribute type 1 has an invalid length. [ 154.916909][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3564'. [ 154.949932][T13517] tc_dump_action: action bad kind [ 155.128607][T13538] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3576'. [ 155.146126][T13538] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 155.168504][T13538] 0ªî{X¹¦: entered allmulticast mode [ 155.193466][T13538] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 155.447169][T13572] netlink: 'syz.4.3591': attribute type 25 has an invalid length. [ 155.637518][T13573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.648205][T13573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.713814][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.723178][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.767005][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.798679][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.933639][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3609'. [ 155.982590][T13611] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.327548][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3628'. [ 156.507677][T13659] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 156.536846][T13659] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 156.550760][T13664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.890721][T13694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.010859][T13705] bridge_slave_0: left allmulticast mode [ 157.038509][T13705] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.065717][T13705] bridge_slave_1: left allmulticast mode [ 157.071977][T13705] bridge_slave_1: left promiscuous mode [ 157.090499][T13705] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.114474][T13705] bond0: (slave bond_slave_0): Releasing backup interface [ 157.140670][T13705] bond0: (slave bond_slave_1): Releasing backup interface [ 157.141532][T13718] netlink: 'syz.1.3657': attribute type 1 has an invalid length. [ 157.163308][T13718] netlink: 'syz.1.3657': attribute type 3 has an invalid length. [ 157.172065][T13718] __nla_validate_parse: 1 callbacks suppressed [ 157.172081][T13718] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3657'. [ 157.190605][T13705] team0: Port device team_slave_0 removed [ 157.200952][T13705] team0: Port device team_slave_1 removed [ 157.215566][T13705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.231818][T13705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.560473][T13745] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 158.068125][T13794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3694'. [ 158.124542][T13800] netlink: 'syz.1.3698': attribute type 1 has an invalid length. [ 158.132791][T13800] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3698'. [ 158.140186][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3695'. [ 158.263270][T13812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3703'. [ 158.401290][T13825] openvswitch: netlink: IP tunnel dst address not specified [ 158.435728][T13830] netlink: 'syz.2.3712': attribute type 1 has an invalid length. [ 158.620050][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3721'. [ 158.659006][T13852] netlink: 'syz.1.3722': attribute type 1 has an invalid length. [ 158.767787][T13859] netlink: 'syz.3.3725': attribute type 2 has an invalid length. [ 158.797677][T13864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3727'. [ 158.824426][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3727'. [ 158.890133][T13864] veth3: entered allmulticast mode [ 159.046312][T13884] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 159.073488][T13887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3739'. [ 159.096711][T13888] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3740'. [ 159.152350][T13894] netlink: 'syz.2.3743': attribute type 7 has an invalid length. [ 159.305289][T13910] netlink: 'syz.1.3750': attribute type 2 has an invalid length. [ 159.502783][T13927] netlink: 'syz.4.3759': attribute type 10 has an invalid length. [ 159.541121][T13927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.561968][T13927] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.636142][T13941] netlink: 'syz.0.3764': attribute type 1 has an invalid length. [ 159.811469][T13953] gre1: entered promiscuous mode [ 159.861772][T13953] gre1: entered allmulticast mode [ 161.787932][T14151] netlink: 'syz.0.3866': attribute type 11 has an invalid length. [ 162.732006][T14247] __nla_validate_parse: 13 callbacks suppressed [ 162.732025][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'. [ 162.758004][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'. [ 162.784333][T14253] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3917'. [ 162.890731][T14262] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3923'. [ 163.029014][T14273] validate_nla: 6 callbacks suppressed [ 163.029032][T14273] netlink: 'syz.1.3927': attribute type 75 has an invalid length. [ 163.225879][T14289] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3937'. [ 163.238207][T14289] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3937'. [ 163.261569][T14289] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3937'. [ 163.542706][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3952'. [ 163.655210][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3954'. [ 163.826839][T14339] sit0: entered promiscuous mode [ 163.858880][T14339] netlink: 'syz.1.3961': attribute type 1 has an invalid length. [ 163.881908][T14339] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3961'. [ 163.905275][T14343] netlink: 'syz.3.3962': attribute type 29 has an invalid length. [ 164.202642][T14365] netlink: 'syz.1.3974': attribute type 1 has an invalid length. [ 164.235711][T14365] netlink: 'syz.1.3974': attribute type 2 has an invalid length. [ 164.590215][T14393] sock: sock_timestamping_bind_phc: sock not bind to device [ 164.693803][T14399] netlink: 'syz.1.3991': attribute type 21 has an invalid length. [ 164.694230][T14401] netlink: 'syz.4.3992': attribute type 8 has an invalid length. [ 164.845353][T14417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.285811][T14459] netlink: 'syz.1.4022': attribute type 1 has an invalid length. [ 165.831966][T14514] netlink: 'syz.1.4048': attribute type 8 has an invalid length. [ 166.054748][T14535] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 166.346845][T14567] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 166.586661][T14586] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 166.596710][T14590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.643337][T14586] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 166.667429][T14596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.675602][T14586] gretap0: entered promiscuous mode [ 166.682725][T14586] gretap0: entered allmulticast mode [ 167.539400][T14685] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.546164][T14685] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.763648][T14707] __nla_validate_parse: 11 callbacks suppressed [ 167.781906][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'. [ 167.818633][T14710] netlink: 'syz.4.4142': attribute type 7 has an invalid length. [ 167.837933][T14710] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4142'. [ 167.839955][T14712] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4143'. [ 167.872535][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4141'. [ 167.890021][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4143'. [ 167.905626][T14712] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4143'. [ 167.932518][T14712] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4143'. [ 168.700568][T14793] bond0: option ad_select: unable to set because the bond device is up [ 169.063850][T14827] validate_nla: 2 callbacks suppressed [ 169.063869][T14827] netlink: 'syz.2.4198': attribute type 1 has an invalid length. [ 169.118529][T14827] netlink: 'syz.2.4198': attribute type 3 has an invalid length. [ 169.148332][T14837] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4202'. [ 169.161216][T14827] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4198'. [ 169.187310][T14827] NCSI netlink: No device for ifindex 0 [ 169.259803][T14844] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 169.701556][T14889] netlink: 808 bytes leftover after parsing attributes in process `syz.1.4228'. [ 170.727976][T14990] bond0: entered allmulticast mode [ 170.740204][T14990] bond_slave_0: entered allmulticast mode [ 170.749212][T14990] bond_slave_1: entered allmulticast mode [ 170.757852][T14990] batadv0: entered allmulticast mode [ 171.068563][T15026] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.492773][T15068] netlink: 'syz.2.4314': attribute type 16 has an invalid length. [ 171.516041][T15068] netlink: 'syz.2.4314': attribute type 17 has an invalid length. [ 171.542245][T15068] lo: left promiscuous mode [ 171.639132][T15068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.908569][T15104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.067129][T15115] netlink: 'syz.3.4335': attribute type 6 has an invalid length. [ 172.102060][T15115] netlink: 'syz.3.4335': attribute type 5 has an invalid length. [ 172.144742][T15126] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 172.150748][T15122] erspan0: entered promiscuous mode [ 172.176165][T15122] erspan0: entered allmulticast mode [ 172.494561][T15159] atomic_op ffff88807cd16998 conn xmit_atomic 0000000000000000 [ 172.579607][T15165] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 172.588614][ T5935] IPVS: starting estimator thread 0... [ 172.606869][T15169] gretap0: entered promiscuous mode [ 172.725266][T15170] IPVS: using max 39 ests per chain, 93600 per kthread [ 172.845386][T15198] __nla_validate_parse: 12 callbacks suppressed [ 172.845404][T15198] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4370'. [ 172.871861][T15189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4370'. [ 173.030864][T15217] netlink: 'syz.2.4382': attribute type 7 has an invalid length. [ 173.056180][T15217] : entered promiscuous mode [ 173.250719][T15231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.285396][T15237] Bluetooth: MGMT ver 1.23 [ 173.323528][T15240] raw_sendmsg: syz.1.4383 forgot to set AF_INET. Fix it! [ 173.392878][T15246] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 173.630114][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4409'. [ 173.811233][T15286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4417'. [ 174.193795][ T5860] Bluetooth: hci0: command tx timeout [ 174.544339][T15349] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 174.928402][T15387] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4467'. [ 174.953366][T15391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.048119][T15399] pimreg3: entered allmulticast mode [ 175.071995][T15402] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4474'. [ 175.139157][T15409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4478'. [ 175.487067][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 175.503468][T15448] tipc: Enabling of bearer rejected, failed to enable media [ 175.579955][T15458] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 175.820791][T15483] xt_socket: unknown flags 0x50 [ 175.924736][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 176.073515][T15509] tipc: Started in network mode [ 176.081520][T15509] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 176.095501][T15509] tipc: Enabled bearer , priority 10 [ 176.182672][T15520] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4532'. [ 176.361932][T15536] netlink: 'syz.2.4537': attribute type 10 has an invalid length. [ 176.554297][T15557] openvswitch: netlink: IPv6 tunnel dst address is zero [ 176.617903][T15563] netlink: 'syz.2.4552': attribute type 1 has an invalid length. [ 176.913925][T15594] nbd: must specify a device to reconfigure [ 177.224536][ T5935] tipc: Node number set to 4269801514 [ 177.843468][T15695] lo: entered allmulticast mode [ 177.864175][T15695] lo: left allmulticast mode [ 177.872656][T15697] tipc: Started in network mode [ 177.882408][T15697] tipc: Node identity f8ffffffffffffff590c, cluster identity 4711 [ 178.238027][ T5935] IPVS: starting estimator thread 0... [ 178.333794][T15737] IPVS: using max 47 ests per chain, 112800 per kthread [ 178.432465][T15754] netlink: 'syz.0.4644': attribute type 2 has an invalid length. [ 178.503415][T15766] nbd: must specify at least one socket [ 178.706445][T15788] tipc: MTU too low for tipc bearer [ 178.760577][T15794] __nla_validate_parse: 3 callbacks suppressed [ 178.760597][T15794] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4663'. [ 178.802205][T15798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4666'. [ 178.900480][T15808] IPVS: ip_vs_edit_dest(): server weight less than zero [ 179.355948][T15849] : entered promiscuous mode [ 179.444687][T15858] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.546161][T15868] netlink: 'syz.1.4695': attribute type 1 has an invalid length. [ 179.716009][T15881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4700'. [ 179.738294][T15886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4702'. [ 179.763621][T15886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4702'. [ 180.351218][T15930] IPVS: Error connecting to the multicast addr [ 180.585681][T15950] Bluetooth: MGMT ver 1.23 [ 180.861170][T15972] bridge0: port 4(syz_tun) entered blocking state [ 180.869058][T15972] bridge0: port 4(syz_tun) entered disabled state [ 180.875821][T15972] syz_tun: entered allmulticast mode [ 180.882240][T15972] syz_tun: entered promiscuous mode [ 180.888182][T15972] bridge0: port 4(syz_tun) entered blocking state [ 180.894733][T15972] bridge0: port 4(syz_tun) entered forwarding state [ 181.006664][T15987] netlink: 'syz.1.4750': attribute type 1 has an invalid length. [ 181.014538][T15987] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4750'. [ 181.137950][T15999] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4756'. [ 181.272717][T16011] netlink: 'syz.1.4763': attribute type 2 has an invalid length. [ 181.277336][T16013] netlink: del zone limit has 4 unknown bytes [ 181.356267][T16019] sctp: [Deprecated]: syz.1.4766 (pid 16019) Use of int in maxseg socket option. [ 181.356267][T16019] Use struct sctp_assoc_value instead [ 181.467344][T16027] netlink: 'syz.1.4772': attribute type 11 has an invalid length. [ 182.137615][T16094] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4803'. [ 182.171312][T16094] vlan2: entered allmulticast mode [ 182.276275][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4808'. [ 182.292212][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4808'. [ 182.359702][T16118] syz.4.4814 (16118) used obsolete PPPIOCDETACH ioctl [ 182.953878][T16186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.715983][T16231] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 183.982746][T16247] team0: Device gtp0 is of different type [ 184.123607][T16258] __nla_validate_parse: 2 callbacks suppressed [ 184.123626][T16258] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4880'. [ 184.347578][T16277] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 184.650808][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4906'. [ 184.671286][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4907'. [ 184.719109][T16310] netlink: 'syz.1.4906': attribute type 3 has an invalid length. [ 184.989441][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 185.137296][T16368] Bluetooth: MGMT ver 1.23 [ 185.450807][T16393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4947'. [ 185.475457][T16395] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 185.869640][T16439] Dead loop on virtual device ip6_vti0, fix it urgently! [ 185.877734][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4968'. [ 185.916161][T16437] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 185.978350][T16437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.988235][T16445] netlink: 'syz.3.4971': attribute type 1 has an invalid length. [ 186.283290][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 186.359973][T16490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4994'. [ 186.654149][T16520] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5007'. [ 186.681321][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5009'. [ 186.898052][T16545] netlink: 'syz.4.5020': attribute type 6 has an invalid length. [ 186.912295][T16545] netlink: 'syz.4.5020': attribute type 5 has an invalid length. [ 187.937475][T16640] netlink: 'syz.1.5066': attribute type 2 has an invalid length. [ 188.107601][T16654] netlink: 'syz.4.5073': attribute type 2 has an invalid length. [ 188.426575][T16684] netlink: 'syz.2.5088': attribute type 1 has an invalid length. [ 188.435432][T16684] netlink: 'syz.2.5088': attribute type 1 has an invalid length. [ 188.691603][T16709] Zero length message leads to an empty skb [ 188.726315][T16714] bridge_slave_0: left allmulticast mode [ 188.746721][T16714] bridge_slave_0: left promiscuous mode [ 188.764754][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.781645][T16714] bridge_slave_1: left allmulticast mode [ 188.788027][T16714] bridge_slave_1: left promiscuous mode [ 188.795123][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.810497][T16714] bond0: (slave 1!€ÿ): Releasing backup interface [ 188.822700][T16714] bond0: (slave bond_slave_1): Releasing backup interface [ 188.839644][T16714] team0: Port device team_slave_0 removed [ 188.852291][T16714] team0: Port device team_slave_1 removed [ 188.860500][T16714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.869057][T16714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.877682][T16714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.885846][T16714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.900243][T16718] hsr0 speed is unknown, defaulting to 1000 [ 189.238331][ T5858] IPVS: starting estimator thread 0... [ 189.335210][T16765] IPVS: using max 45 ests per chain, 108000 per kthread [ 189.659376][T16813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.293180][ T30] audit: type=1800 audit(1756376269.202:2): pid=16869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5175" name="memory.events" dev="tmpfs" ino=5331 res=0 errno=0 [ 190.315902][ T30] audit: type=1804 audit(1756376269.202:3): pid=16869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5175" name="/newroot/1061/memory.events" dev="tmpfs" ino=5331 res=1 errno=0 [ 190.414346][T16877] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 190.499659][T16887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.780268][T16910] __nla_validate_parse: 12 callbacks suppressed [ 190.780281][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5195'. [ 191.195418][T16944] sit1: entered promiscuous mode [ 191.200462][T16944] sit1: entered allmulticast mode [ 191.268790][T16950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.354859][T16959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.362138][T16959] IPv6: NLM_F_CREATE should be set when creating new route [ 191.624055][T16984] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5232'. [ 191.631567][T16987] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5234'. [ 191.732823][T17000] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5240'. [ 191.836435][T17007] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5243'. [ 192.029291][T17024] pim6reg: entered allmulticast mode [ 192.173879][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5259'. [ 192.316443][T17054] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5267'. [ 192.351988][T17058] nbd: socks must be embedded in a SOCK_ITEM attr [ 192.505001][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5277'. [ 192.789084][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5290'. [ 192.850018][T17112] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5294'. [ 192.978214][T17124] openvswitch: netlink: Message has 5 unknown bytes. [ 193.120035][T17139] netlink: 'syz.2.5307': attribute type 62 has an invalid length. [ 193.158178][T17143] sctp: [Deprecated]: syz.3.5309 (pid 17143) Use of int in max_burst socket option deprecated. [ 193.158178][T17143] Use struct sctp_assoc_value instead [ 193.370719][T17166] netlink: 'syz.2.5320': attribute type 13 has an invalid length. [ 193.380129][T17166] veth0_macvtap: left promiscuous mode [ 193.390069][T17166] macvtap0: entered allmulticast mode [ 193.425930][T17166] macvtap0: refused to change device tx_queue_len [ 193.986391][T17231] xt_limit: Overflow, try lower: 604147548/4200216962 [ 194.518983][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.525461][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.318100][T17352] netlink: 'syz.0.5399': attribute type 2 has an invalid length. [ 195.414159][T17362] tipc: Started in network mode [ 195.419667][T17362] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 195.431982][T17362] tipc: Enabled bearer , priority 10 [ 196.108503][T17433] netlink: 'syz.4.5438': attribute type 1 has an invalid length. [ 196.125222][T17433] __nla_validate_parse: 7 callbacks suppressed [ 196.125237][T17433] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5438'. [ 196.161408][T17438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.236852][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5443'. [ 196.416314][T17455] netlink: 'syz.3.5450': attribute type 1 has an invalid length. [ 196.543739][ T5935] tipc: Node number set to 10463914 [ 196.806591][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5466'. [ 196.856984][T17493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.861627][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5466'. [ 197.232768][T17527] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 197.325967][T17538] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5491'. [ 197.377912][T17544] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5493'. [ 197.419274][T17547] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5495'. [ 197.443894][T17547] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5495'. [ 197.466230][T17547] netlink: 'syz.4.5495': attribute type 5 has an invalid length. [ 197.478322][T17547] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5495'. [ 197.580080][T17565] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 197.968920][T17598] xt_limit: Overflow, try lower: 271964/0 [ 198.219574][T17624] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 198.302208][T17634] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5537'. [ 198.715048][T17676] netlink: 'syz.2.5558': attribute type 6 has an invalid length. [ 199.181610][T17726] netlink: 'syz.0.5583': attribute type 18 has an invalid length. [ 199.219031][ T1014] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.241732][T17728] tipc: Started in network mode [ 199.249917][T17728] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 199.258111][T17728] tipc: Enabled bearer , priority 10 [ 199.271826][ T1014] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.280693][T17733] netlink: 'syz.3.5584': attribute type 1 has an invalid length. [ 199.293188][ T1014] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.306140][T17733] netlink: 'syz.3.5584': attribute type 3 has an invalid length. [ 199.315716][ T1014] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.325865][T17733] NCSI netlink: No device for ifindex 131080 [ 199.390211][T17744] tipc: Enabling of bearer rejected, failed to enable media [ 199.544647][T17759] netlink: 'syz.3.5598': attribute type 9 has an invalid length. [ 199.572372][T17766] xt_policy: too many policy elements [ 200.358897][T17833] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 200.373961][ T5935] tipc: Node number set to 10136234 [ 200.404400][T17837] netlink: 'syz.3.5636': attribute type 3 has an invalid length. [ 200.611646][T17856] netlink: 'syz.0.5644': attribute type 29 has an invalid length. [ 200.694395][T17869] netlink: 'syz.1.5651': attribute type 1 has an invalid length. [ 200.712037][T17869] netlink: 'syz.1.5651': attribute type 1 has an invalid length. [ 201.243884][T17926] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 201.397990][T17937] netlink: 'syz.1.5684': attribute type 3 has an invalid length. [ 201.403395][T17936] __nla_validate_parse: 9 callbacks suppressed [ 201.403412][T17936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5683'. [ 201.433265][T17936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5683'. [ 201.890837][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5708'. [ 201.900992][T17987] openvswitch: netlink: Unknown nsh attribute 0 [ 201.907410][T17987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.916889][T17989] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5709'. [ 201.990175][T17996] tipc: Enabling of bearer rejected, failed to enable media [ 202.312183][T18031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.319456][T18031] IPv6: NLM_F_CREATE should be set when creating new route [ 202.326728][T18031] IPv6: NLM_F_CREATE should be set when creating new route [ 202.333964][T18031] IPv6: NLM_F_CREATE should be set when creating new route [ 202.369976][T18031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.532440][T18051] pim6reg: entered allmulticast mode [ 202.547723][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5742'. [ 202.548956][T18051] pim6reg: left allmulticast mode [ 202.564841][T18056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5742'. [ 202.656904][T18063] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 203.148215][T18112] IPVS: Scheduler module ip_vs_sip not found [ 203.297122][T18132] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5781'. [ 203.387407][T18140] tipc: Invalid UDP bearer configuration [ 203.387444][T18140] tipc: Enabling of bearer rejected, failed to enable media [ 203.426129][T18144] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5786'. [ 203.735154][T18174] validate_nla: 1 callbacks suppressed [ 203.735172][T18174] netlink: 'syz.0.5801': attribute type 7 has an invalid length. [ 204.144029][T18224] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 204.266937][T18234] netlink: 'syz.2.5831': attribute type 6 has an invalid length. [ 204.296194][T18234] netlink: 'syz.2.5831': attribute type 6 has an invalid length. [ 204.338044][T18240] netlink: 'syz.4.5834': attribute type 1 has an invalid length. [ 204.460514][T18254] pim6reg: entered allmulticast mode [ 204.745527][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5858'. [ 204.847614][T18298] tipc: Enabling of bearer rejected, failed to enable media [ 205.049474][T18318] x_tables: ip_tables: udp match: only valid for protocol 17 [ 205.092649][T18324] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 205.108877][T18322] ip6gre2: entered allmulticast mode [ 205.282522][T18341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5884'. [ 205.341773][T18346] netlink: 'syz.3.5886': attribute type 12 has an invalid length. [ 205.356667][T18346] netlink: 'syz.3.5886': attribute type 11 has an invalid length. [ 205.870413][T18404] netlink: 'syz.2.5916': attribute type 4 has an invalid length. [ 206.012640][T18410] syz.4.5918 (18410) used greatest stack depth: 17992 bytes left [ 206.105660][ T49] tipc: Subscription rejected, illegal request [ 206.403360][T18456] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 206.403535][T18455] IPVS: stopping backup sync thread 18456 ... [ 206.477785][T18462] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 206.696596][T18477] __nla_validate_parse: 5 callbacks suppressed [ 206.696612][T18477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5951'. [ 207.571013][T18542] team0: Device vti0 is up. Set it down before adding it as a team port [ 208.075723][T18602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.385391][T18630] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6021'. [ 208.618239][T18660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6035'. [ 208.670247][T18662] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 208.716860][T18668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6039'. [ 209.315008][T18727] netlink: 'syz.2.6064': attribute type 1 has an invalid length. [ 209.347282][T18727] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6064'. [ 209.371496][T18732] netlink: 'syz.0.6066': attribute type 10 has an invalid length. [ 209.946484][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6093'. [ 209.963511][T18786] netlink: 'syz.1.6094': attribute type 2 has an invalid length. [ 210.079590][T18798] ipvlan2: entered promiscuous mode [ 210.199449][T18810] netlink: 'syz.0.6106': attribute type 2 has an invalid length. [ 210.224138][T18817] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6107'. [ 210.999300][T18903] netlink: 'syz.0.6151': attribute type 1 has an invalid length. [ 211.009081][T18903] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6151'. [ 211.024028][T18903] block nbd1: not configured, cannot reconfigure [ 211.346343][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6170'. [ 211.381736][T18948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6173'. [ 211.874850][T19005] __nla_validate_parse: 3 callbacks suppressed [ 211.874867][T19005] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6200'. [ 211.925909][T19007] netlink: 'syz.2.6201': attribute type 23 has an invalid length. [ 212.092163][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6207'. [ 212.112556][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6207'. [ 212.320212][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6215'. [ 212.331820][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6215'. [ 212.636990][T19057] netlink: 'syz.4.6226': attribute type 1 has an invalid length. [ 212.885468][T19079] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 212.917545][T19082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6238'. [ 212.975899][T19086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6240'. [ 213.431618][T19132] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 213.691180][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6276'. [ 213.706193][T19160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.087257][T19209] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6298'. [ 214.169580][T19217] netlink: 'syz.4.6302': attribute type 1 has an invalid length. [ 214.188134][T19217] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6302'. [ 214.200746][T19217] netlink: 'syz.4.6302': attribute type 1 has an invalid length. [ 214.218058][T19217] netlink: 'syz.4.6302': attribute type 2 has an invalid length. [ 214.771062][T19272] veth3: entered allmulticast mode [ 214.889609][T19291] netlink: 'syz.4.6335': attribute type 1 has an invalid length. [ 214.900405][T19291] netlink: 'syz.4.6335': attribute type 3 has an invalid length. [ 214.959444][T19298] netlink: 'syz.4.6340': attribute type 1 has an invalid length. [ 215.425389][T19334] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 215.437677][T19334] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 216.490646][T19450] netlink: 'syz.1.6416': attribute type 3 has an invalid length. [ 217.348704][T19546] __nla_validate_parse: 5 callbacks suppressed [ 217.348722][T19546] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6460'. [ 217.647212][T19583] tipc: Enabling of bearer rejected, failed to enable media [ 217.700299][T19585] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 218.039767][T19617] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 218.166475][T19630] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6499'. [ 218.191270][T19634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6501'. [ 218.783104][T19696] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 218.823203][T19698] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6532'. [ 218.845786][T19702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.851850][T19698] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6532'. [ 218.907167][T19708] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 218.976374][T19713] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6539'. [ 218.991332][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 219.031616][T19718] netlink: 'syz.4.6543': attribute type 5 has an invalid length. [ 219.050266][T19718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6543'. [ 219.181225][T19737] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 219.240156][T19741] netlink: 'syz.3.6553': attribute type 10 has an invalid length. [ 219.255862][T19741] team0: Device ipvlan1 failed to register rx_handler [ 219.267046][T19745] netlink: 'syz.4.6554': attribute type 1 has an invalid length. [ 219.373338][T19755] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 219.381393][T19755] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.430241][T19757] tipc: Enabling of bearer rejected, media not registered [ 219.518409][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6565'. [ 219.527688][T19766] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6564'. [ 219.597401][T19772] netlink: 'syz.3.6568': attribute type 1 has an invalid length. [ 219.621642][T19775] vlan2: entered promiscuous mode [ 219.627571][T19775] gretap0: entered promiscuous mode [ 220.049794][T19814] tipc: Enabling not permitted [ 220.064130][T19814] tipc: Enabling of bearer rejected, failed to enable media [ 220.127531][T19820] netlink: 'syz.0.6592': attribute type 83 has an invalid length. [ 220.332313][T19842] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 220.375884][T19842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.411797][ T59] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.432476][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.458679][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.495753][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.729374][T19881] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 221.463073][T19964] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 221.518296][T19964] openvswitch: netlink: Message has 6332 unknown bytes. [ 221.722637][T19992] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 222.268930][T20053] xt_HMARK: spi-set and port-set can't be combined [ 223.020608][T20124] __nla_validate_parse: 6 callbacks suppressed [ 223.020627][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6742'. [ 223.040964][T20124] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 223.050808][T20124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.655190][T20192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.760961][T20202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6780'. [ 223.799442][T20205] tipc: Enabling of bearer rejected, failed to enable media [ 224.027398][T20232] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6795'. [ 224.038222][T20232] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6795'. [ 224.049644][T20232] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 224.112621][T20240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6798'. [ 224.773493][T20309] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6832'. [ 224.787929][T20309] xt_policy: neither incoming nor outgoing policy selected [ 225.154685][T20346] netlink: 'syz.3.6851': attribute type 1 has an invalid length. [ 225.265366][T20359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.416844][T20373] team0: Device ip6gre1 is of different type [ 225.553536][T20384] sctp: [Deprecated]: syz.1.6869 (pid 20384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.553536][T20384] Use struct sctp_sack_info instead [ 225.558731][T20388] netlink: 'syz.0.6871': attribute type 3 has an invalid length. [ 225.596413][T20384] sctp: [Deprecated]: syz.1.6869 (pid 20384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.596413][T20384] Use struct sctp_sack_info instead [ 225.826272][T20409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6881'. [ 225.846460][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6881'. [ 225.857159][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6881'. [ 226.083464][T20434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6893'. [ 226.119559][T20431] delete_channel: no stack [ 227.021851][T20538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.112825][T20549] tipc: Enabling of bearer rejected, failed to enable media [ 227.609943][T20592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.217764][T20660] __nla_validate_parse: 4 callbacks suppressed [ 228.217782][T20660] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7003'. [ 228.471396][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7016'. [ 228.657963][T20706] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7026'. [ 228.725610][T20714] xt_socket: unknown flags 0xe4 [ 228.795372][T20718] netlink: 'syz.0.7031': attribute type 1 has an invalid length. [ 228.825137][T20718] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7031'. [ 228.835374][T20718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7031'. [ 228.861447][T20725] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7035'. [ 228.941339][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7039'. [ 228.969463][T20734] netlink: 'syz.1.7039': attribute type 30 has an invalid length. [ 228.978879][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7039'. [ 229.099849][T20749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7046'. [ 229.217523][T20760] netlink: 'syz.1.7051': attribute type 1 has an invalid length. [ 229.226301][T20760] netlink: 'syz.1.7051': attribute type 2 has an invalid length. [ 229.234290][T20760] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.7051'. [ 229.498679][T20778] "syz.2.7060" (20778) uses obsolete ecb(arc4) skcipher [ 229.576991][T20794] netlink: 'syz.2.7066': attribute type 2 has an invalid length. [ 230.070010][T20842] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 230.276917][T20862] netlink: 'syz.2.7099': attribute type 1 has an invalid length. [ 230.292794][T20865] netlink: 'syz.4.7102': attribute type 2 has an invalid length. [ 230.335848][T20865] netlink: 'syz.4.7102': attribute type 2 has an invalid length. [ 230.386440][T20872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.544720][T20889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.583995][T20890] netlink: 'syz.1.7112': attribute type 3 has an invalid length. [ 230.804628][T20914] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 231.513454][T20988] netlink: 'syz.4.7163': attribute type 5 has an invalid length. [ 231.658811][T21008] netlink: 'syz.0.7172': attribute type 32 has an invalid length. [ 231.686905][T21008] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 231.848316][T21028] netlink: 'syz.3.7181': attribute type 29 has an invalid length. [ 232.331433][T21077] netlink: 'syz.2.7206': attribute type 58 has an invalid length. [ 232.721120][T21114] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 233.041536][T21144] netlink: 'syz.3.7239': attribute type 1 has an invalid length. [ 233.049574][T21144] netlink: 'syz.3.7239': attribute type 1 has an invalid length. [ 233.091218][T21148] netlink: zone id is out of range [ 233.097850][T21148] netlink: zone id is out of range [ 233.103157][T21148] netlink: zone id is out of range [ 233.108517][T21148] netlink: zone id is out of range [ 233.116026][T21148] netlink: zone id is out of range [ 233.125848][T21148] netlink: zone id is out of range [ 233.143410][ T9] IPVS: starting estimator thread 0... [ 233.243970][T21151] IPVS: using max 46 ests per chain, 110400 per kthread [ 233.495303][T21187] __nla_validate_parse: 11 callbacks suppressed [ 233.495319][T21187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7260'. [ 233.515307][T21187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7260'. [ 233.526184][T21187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7260'. [ 233.535404][T21187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7260'. [ 233.696015][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7270'. [ 233.758693][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7274'. [ 233.991280][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7286'. [ 234.025231][T21244] bridge0: entered promiscuous mode [ 234.030705][T21244] macsec1: entered promiscuous mode [ 234.037876][T21244] bridge0: port 5(macsec1) entered blocking state [ 234.045219][T21244] bridge0: port 5(macsec1) entered disabled state [ 234.051964][T21244] macsec1: entered allmulticast mode [ 234.060249][T21244] bridge0: entered allmulticast mode [ 234.073132][T21244] macsec1: left allmulticast mode [ 234.079109][T21244] bridge0: left allmulticast mode [ 234.088641][T21244] bridge0: left promiscuous mode [ 234.800150][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7322'. [ 235.178114][T21361] net_ratelimit: 11 callbacks suppressed [ 235.178137][T21361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.250434][T21363] tipc: Enabled bearer , priority 0 [ 235.719618][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7367'. [ 235.747367][T21423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7368'. [ 235.871297][T21436] NCSI netlink: No device for ifindex 0 [ 235.948505][T21445] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.240985][T21479] tipc: Enabled bearer , priority 12 [ 237.354360][ T9] tipc: Node number set to 1577844736 [ 237.407075][T21571] validate_nla: 3 callbacks suppressed [ 237.407092][T21571] netlink: 'syz.2.7439': attribute type 1 has an invalid length. [ 237.987741][T21630] openvswitch: netlink: Unknown key attributes 2 [ 238.214403][T21649] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 238.639982][T21692] __nla_validate_parse: 8 callbacks suppressed [ 238.640000][T21692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7498'. [ 238.653327][T21695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7500'. [ 238.659389][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7498'. [ 238.675039][T21695] tipc: Invalid UDP bearer configuration [ 238.675078][T21695] tipc: Enabling of bearer rejected, failed to enable media [ 238.806438][T21707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7506'. [ 238.978099][T21726] macsec0: entered promiscuous mode [ 238.983383][T21726] macsec0: entered allmulticast mode [ 239.012302][T21730] bridge_slave_0: default FDB implementation only supports local addresses [ 239.042350][T21726] veth1_macvtap: entered allmulticast mode [ 239.060096][T21726] macsec0: left promiscuous mode [ 239.080316][T21726] macsec0: left allmulticast mode [ 239.105130][T21726] veth1_macvtap: left allmulticast mode [ 239.526834][T21776] netlink: 'syz.2.7540': attribute type 2 has an invalid length. [ 239.843134][T21807] netlink: 796 bytes leftover after parsing attributes in process `syz.0.7556'. [ 239.958810][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7560'. [ 240.018019][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7562'. [ 240.046961][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7562'. [ 240.329300][T21849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7575'. [ 240.453487][T21859] netlink: 'syz.2.7580': attribute type 1 has an invalid length. [ 240.463010][T21859] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.7580'. [ 240.771034][T21894] openvswitch: netlink: Message has 5 unknown bytes. [ 240.988434][T21915] : entered promiscuous mode [ 241.196765][T21931] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 241.229735][T21931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.657390][T21983] hsr0 speed is unknown, defaulting to 1000 [ 241.761270][T21990] vlan3: entered allmulticast mode [ 241.768949][T21990] bond0: entered allmulticast mode [ 243.327372][T22135] tipc: Enabling of bearer rejected, already enabled [ 243.840010][T22189] bond0: option mode: unable to set because the bond device has slaves [ 243.929028][T22199] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 244.048467][T22207] netlink: 'syz.3.7746': attribute type 5 has an invalid length. [ 244.347522][T22233] __nla_validate_parse: 12 callbacks suppressed [ 244.347539][T22233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7760'. [ 244.841003][T22288] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.852963][T22288] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.877757][T22288] tipc: Resetting bearer [ 244.883469][T22288] tipc: Resetting bearer [ 244.890686][T22293] netlink: 'syz.2.7786': attribute type 16 has an invalid length. [ 244.902238][ T3603] tipc: Resetting bearer [ 244.924694][T22293] netlink: 'syz.2.7786': attribute type 17 has an invalid length. [ 244.935129][T22293] erspan0: left promiscuous mode [ 244.940110][T22293] erspan0: left allmulticast mode [ 244.967313][T22295] netlink: 'syz.4.7788': attribute type 83 has an invalid length. [ 244.986542][T22293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.071889][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7789'. [ 245.232290][T22317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7798'. [ 245.263124][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7797'. [ 245.458887][T22340] netlink: 'syz.2.7809': attribute type 6 has an invalid length. [ 245.468809][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7808'. [ 245.489852][T22339] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 245.512000][T22339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.128987][T22386] netlink: 'syz.2.7831': attribute type 83 has an invalid length. [ 246.430433][T22413] netlink: 'syz.4.7843': attribute type 83 has an invalid length. [ 246.939872][T22466] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7870'. [ 247.126321][T22483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7876'. [ 247.250565][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7885'. [ 247.310164][T22498] team_slave_0: entered promiscuous mode [ 247.315900][T22498] team_slave_1: entered promiscuous mode [ 247.319047][T22506] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7889'. [ 247.411760][T22514] bridge8: entered promiscuous mode [ 247.418925][T22514] bridge8: entered allmulticast mode [ 247.712465][T22543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7907'. [ 247.941783][T22566] netem: change failed [ 247.995893][T22572] 8021q: VLANs not supported on wg1 [ 249.087542][T22669] IPVS: persistence engine module ip_vs_pe_À not found [ 249.169007][ T3603] tipc: Subscription rejected, illegal request [ 249.672334][T22738] netlink: 'syz.3.7989': attribute type 1 has an invalid length. [ 249.717123][T22740] sctp: [Deprecated]: syz.0.7991 (pid 22740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.717123][T22740] Use struct sctp_sack_info instead [ 249.970045][T22768] __nla_validate_parse: 7 callbacks suppressed [ 249.970063][T22768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8005'. [ 249.987647][T22768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8005'. [ 250.348666][T22804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8022'. [ 250.515826][T22826] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8032'. [ 250.646785][T22839] netlink: 'syz.4.8039': attribute type 11 has an invalid length. [ 251.019828][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8058'. [ 251.100618][T22887] netlink: 'syz.3.8061': attribute type 8 has an invalid length. [ 251.214592][T22891] nbd0: detected capacity change from 0 to 127 [ 251.237861][ T5860] block nbd0: Receive control failed (result -32) [ 251.254325][ T5872] block nbd0: Dead connection, failed to find a fallback [ 251.272587][ T5872] block nbd0: shutting down sockets [ 251.287937][ T5872] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.307159][ T5872] Buffer I/O error on dev nbd0, logical block 0, async page read [ 251.310479][T22904] netlink: 'syz.4.8069': attribute type 2 has an invalid length. [ 251.317417][ T5872] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.335839][ T5872] Buffer I/O error on dev nbd0, logical block 1, async page read [ 251.345728][ T5872] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.362583][T22910] netlink: 'syz.0.8074': attribute type 28 has an invalid length. [ 251.381093][ T5872] Buffer I/O error on dev nbd0, logical block 2, async page read [ 251.384314][T22911] netem: incorrect ge model size [ 251.393124][ T5872] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.405565][T22911] netem: change failed [ 251.416286][T22910] netlink: 'syz.0.8074': attribute type 3 has an invalid length. [ 251.434800][T22910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8074'. [ 251.435357][ T5872] Buffer I/O error on dev nbd0, logical block 3, async page read [ 251.460591][ T5872] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.498643][ T5872] Buffer I/O error on dev nbd0, logical block 0, async page read [ 251.513488][ T5872] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.546549][ T5872] Buffer I/O error on dev nbd0, logical block 1, async page read [ 251.573459][ T5872] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.595311][ T5872] Buffer I/O error on dev nbd0, logical block 2, async page read [ 251.603180][ T5872] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.642912][ T5872] Buffer I/O error on dev nbd0, logical block 3, async page read [ 251.664888][ T5872] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.675504][T22937] netlink: 'syz.3.8084': attribute type 11 has an invalid length. [ 251.678539][ T5872] Buffer I/O error on dev nbd0, logical block 0, async page read [ 251.694058][ T5872] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.703937][ T5872] Buffer I/O error on dev nbd0, logical block 1, async page read [ 251.714467][ T5872] ldm_validate_partition_table(): Disk read failed. [ 251.732198][ T5872] Dev nbd0: unable to read RDB block 0 [ 251.771669][ T5872] nbd0: unable to read partition table [ 251.798592][ T5872] ldm_validate_partition_table(): Disk read failed. [ 251.819576][ T5872] Dev nbd0: unable to read RDB block 0 [ 251.829468][ T5872] nbd0: unable to read partition table [ 252.078974][T22976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8101'. [ 252.092522][T22976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8101'. [ 252.106491][T22978] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.8104'. [ 252.303511][T23003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8115'. [ 252.307619][T23004] netlink: 'syz.3.8116': attribute type 5 has an invalid length. [ 252.550869][T23021] netlink: 'syz.3.8124': attribute type 16 has an invalid length. [ 252.559294][T23021] netlink: 'syz.3.8124': attribute type 17 has an invalid length. [ 252.579327][T23021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.226453][T23184] veth0: entered promiscuous mode [ 254.233246][T23183] veth0: left promiscuous mode [ 254.695793][T23228] bridge0: port 3(vlan3) entered blocking state [ 254.703521][T23228] bridge0: port 3(vlan3) entered disabled state [ 254.723488][T23228] vlan3: entered allmulticast mode [ 254.736856][T23228] bridge0: entered allmulticast mode [ 254.745342][T23228] vlan3: left allmulticast mode [ 254.762455][T23228] bridge0: left allmulticast mode [ 255.040149][T23260] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 255.310492][T23293] __nla_validate_parse: 10 callbacks suppressed [ 255.310511][T23293] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8255'. [ 255.362800][T23301] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8259'. [ 255.455904][T23309] validate_nla: 2 callbacks suppressed [ 255.455922][T23309] netlink: 'syz.1.8263': attribute type 1 has an invalid length. [ 255.470104][T23309] netlink: 'syz.1.8263': attribute type 3 has an invalid length. [ 255.479113][T23309] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8263'. [ 255.497612][T23309] NCSI netlink: No device for ifindex 813332851 [ 255.795298][T23340] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8279'. [ 255.840860][T23346] block nbd0: Unsupported socket: shutdown callout must be supported. [ 255.931367][T23357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8285'. [ 255.971781][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.978441][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.036869][T23367] netlink: 'syz.1.8291': attribute type 1 has an invalid length. [ 256.082334][T23367] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8291'. [ 256.102163][T23367] netlink: 'syz.1.8291': attribute type 1 has an invalid length. [ 256.322803][T23401] ip6gre0: Master is either lo or non-ether device [ 256.447760][T23416] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 256.567705][T23429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8320'. [ 256.793050][T23453] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8332'. [ 256.894200][T23463] netlink: 'syz.3.8337': attribute type 1 has an invalid length. [ 256.902086][T23463] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8337'. [ 256.913444][T23463] netlink: 'syz.3.8337': attribute type 1 has an invalid length. [ 257.051808][T23477] team0 (unregistering): Port device team_slave_0 removed [ 257.071716][T23477] team0 (unregistering): Port device team_slave_1 removed [ 257.090097][T23481] batman_adv: batadv0: Adding interface: wlan1 [ 257.096713][T23481] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.130908][T23481] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 257.507627][T23522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8365'. [ 258.808490][T23623] netem: unknown loss type 0 [ 258.824103][T23623] netem: change failed [ 258.944871][T23635] tun0: tun_chr_ioctl cmd 1074025675 [ 258.950237][T23635] tun0: persist disabled [ 259.342312][T23671] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 259.450914][T23673] hsr_slave_1 (unregistering): left promiscuous mode [ 259.512710][T23691] sch_fq: defrate 0 ignored. [ 259.674191][T23703] netlink: 'syz.1.8447': attribute type 1 has an invalid length. [ 259.692496][T23703] nbd: error processing sock list [ 259.698692][T23703] block nbd1: shutting down sockets [ 260.260576][T23764] bond3: entered promiscuous mode [ 260.266206][T23764] bond3: entered allmulticast mode [ 260.272650][T23764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.305122][T23764] bond3 (unregistering): Released all slaves [ 260.496486][ T5860] block nbd1: Receive control failed (result -32) [ 260.666762][T23812] __nla_validate_parse: 10 callbacks suppressed [ 260.666779][T23812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8501'. [ 260.845363][ T30] audit: type=1804 audit(1756376339.752:4): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8509" name="/newroot/1710/cgroup.controllers" dev="tmpfs" ino=8592 res=1 errno=0 [ 260.889348][ T30] audit: type=1800 audit(1756376339.752:5): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8509" name="cgroup.controllers" dev="tmpfs" ino=8592 res=0 errno=0 [ 260.967947][T23843] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8516'. [ 261.095649][T23857] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8525'. [ 261.140455][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8524'. [ 261.174017][T23861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8524'. [ 261.309177][T23877] netlink: 'syz.0.8531': attribute type 3 has an invalid length. [ 261.321521][T23877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.699090][T23921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8553'. [ 261.858749][T23937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8560'. [ 262.181701][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8573'. [ 262.181959][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8574'. [ 262.381707][ T5860] block nbd2: Receive control failed (result -32) [ 262.463557][T24002] veth1_macvtap: left promiscuous mode [ 262.587501][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8596'. [ 262.666384][T24026] netlink: 'syz.2.8602': attribute type 1 has an invalid length. [ 262.683870][T24024] veth0: entered promiscuous mode [ 262.689939][T24022] veth0: left promiscuous mode [ 263.045317][T24068] netlink: 'syz.2.8623': attribute type 3 has an invalid length. [ 263.085266][T24068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.177826][ T30] audit: type=1107 audit(1756376342.092:6): pid=24085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 263.381620][T24112] veth1_macvtap: left promiscuous mode [ 263.615832][T24126] vlan3: entered promiscuous mode [ 263.625879][T24126] bridge0: entered promiscuous mode [ 264.522762][T24234] tap0: tun_chr_ioctl cmd 1074025676 [ 264.538515][T24234] tap0: owner set to 0 [ 264.714938][T24257] netlink: 'syz.4.8713': attribute type 1 has an invalid length. [ 264.722852][T24257] netlink: 'syz.4.8713': attribute type 1 has an invalid length. [ 264.873441][T24275] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 265.040368][T24293] ip6gre0: Master is either lo or non-ether device [ 265.520678][T24347] netlink: 'syz.4.8756': attribute type 1 has an invalid length. [ 265.542356][T24347] netlink: 'syz.4.8756': attribute type 1 has an invalid length. [ 265.600526][T24357] netlink: 'syz.1.8759': attribute type 1 has an invalid length. [ 265.611500][T24354] tap0: tun_chr_ioctl cmd 1074025676 [ 265.626869][T24354] tap0: owner set to 0 [ 265.636384][T24357] netlink: 'syz.1.8759': attribute type 10 has an invalid length. [ 265.957575][T24395] veth0_to_bridge: entered promiscuous mode [ 265.969491][T24395] veth0_to_bridge: left promiscuous mode [ 266.061670][T24407] __nla_validate_parse: 20 callbacks suppressed [ 266.061688][T24407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8782'. [ 266.395487][T24445] unknown channel width for channel at 909000KHz? [ 267.225584][T24520] tun0: tun_chr_ioctl cmd 1074025675 [ 267.230994][T24520] tun0: persist disabled [ 267.458768][T24541] tap0: tun_chr_ioctl cmd 1074025678 [ 267.466479][T24541] tap0: group set to 0 [ 267.504799][T24542] netlink: 'syz.3.8847': attribute type 1 has an invalid length. [ 267.534227][T24542] nbd: error processing sock list [ 267.539326][T24542] block nbd3: shutting down sockets [ 267.770013][T24571] sch_fq: defrate 0 ignored. [ 268.200867][T24622] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 269.118729][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8892'. [ 269.904289][T24726] sctp: [Deprecated]: syz.1.8939 (pid 24726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.904289][T24726] Use struct sctp_sack_info instead [ 270.213442][T24756] sctp: [Deprecated]: syz.0.8952 (pid 24756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.213442][T24756] Use struct sctp_sack_info instead [ 270.592777][T24796] netem: change failed [ 270.844970][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8989'. [ 270.855412][T24827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8989'. [ 271.025057][T24842] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8996'. [ 271.157619][T24856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9003'. [ 271.204806][T24861] tipc: New replicast peer: 255.255.255.255 [ 271.222889][T24861] tipc: Enabled bearer , priority 10 [ 271.375887][T24874] macvtap1: entered promiscuous mode [ 271.387795][T24874] vlan0: entered promiscuous mode [ 271.397103][T24874] macvtap1: entered allmulticast mode [ 271.404570][T24874] vlan0: entered allmulticast mode [ 271.410646][T24874] veth0_vlan: entered allmulticast mode [ 271.557830][T24900] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9023'. [ 271.659211][T24909] netlink: 165 bytes leftover after parsing attributes in process `syz.3.9027'. [ 271.810282][T24923] tipc: New replicast peer: 255.255.255.255 [ 271.819345][T24923] tipc: Enabled bearer , priority 10 [ 271.889023][T24930] netlink: 'syz.2.9036': attribute type 2 has an invalid length. [ 272.134469][T24957] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 272.148771][T24957] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 272.231900][T24964] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.9053'. [ 272.255076][T24967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9055'. [ 272.285765][T24967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9055'. [ 272.339301][T24970] netlink: 165 bytes leftover after parsing attributes in process `syz.0.9058'. [ 272.468184][T24988] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 272.538343][T24994] macvtap1: entered promiscuous mode [ 272.547277][T24994] vlan0: entered promiscuous mode [ 272.552655][T24994] macvtap1: entered allmulticast mode [ 272.558148][T24994] vlan0: entered allmulticast mode [ 272.563338][T24994] veth0_vlan: entered allmulticast mode [ 272.605598][T25000] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 272.674281][T25009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9074'. [ 272.766769][T25019] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 272.802347][T25024] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9080'. [ 273.008119][T25043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9100'. [ 273.042038][T25043] xfrm1: entered promiscuous mode [ 273.056575][T25043] xfrm1: entered allmulticast mode [ 273.586229][T25107] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 273.833929][T25126] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 274.246171][T25163] netlink: 'syz.2.9149': attribute type 21 has an invalid length. [ 274.249792][T25162] xfrm1: entered promiscuous mode [ 274.270767][T25162] xfrm1: entered allmulticast mode [ 274.389870][T25171] tap0: tun_chr_ioctl cmd 1074025672 [ 274.407436][T25171] tap0: ignored: set checksum disabled [ 274.494613][T25178] nbd3: detected capacity change from 0 to 549764202496 [ 274.504735][ T5860] block nbd3: Receive control failed (result -104) [ 274.930662][T25229] ªªªªªª: renamed from vlan0 [ 274.976890][T25232] netlink: 'syz.4.9184': attribute type 21 has an invalid length. [ 275.549003][T25301] netlink: 'syz.3.9219': attribute type 5 has an invalid length. [ 276.133960][T25363] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 276.246638][T25374] __nla_validate_parse: 13 callbacks suppressed [ 276.246657][T25374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9253'. [ 276.255050][T25377] netlink: 'syz.0.9255': attribute type 1 has an invalid length. [ 276.277674][T25377] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9255'. [ 276.301082][T25379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9257'. [ 276.330840][T25377] netlink: 'syz.0.9255': attribute type 1 has an invalid length. [ 276.356217][T25385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9259'. [ 276.462511][T25391] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 276.810505][T25429] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9276'. [ 276.832770][T25425] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 276.945806][T25436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9280'. [ 277.127105][T25455] netlink: 'syz.1.9290': attribute type 1 has an invalid length. [ 277.152906][T25455] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9290'. [ 277.163131][T25455] netlink: 'syz.1.9290': attribute type 1 has an invalid length. [ 277.259596][T25467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9296'. [ 277.270287][T25467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9296'. [ 277.284937][T25470] veth0: entered promiscuous mode [ 277.291422][T25468] veth0: left promiscuous mode [ 277.383037][T25479] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 277.622090][T25504] netlink: 'syz.4.9314': attribute type 1 has an invalid length. [ 277.973073][T25542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9330'. [ 278.194990][ T5860] Bluetooth: hci1: command tx timeout [ 278.815950][T25643] netlink: 'syz.3.9376': attribute type 1 has an invalid length. [ 278.972872][T25659] team0: Cannot enslave team device to itself [ 279.212650][T25680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 279.807157][T25720] netlink: 'syz.3.9410': attribute type 1 has an invalid length. [ 280.057614][T25743] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 280.405163][T25788] netlink: 'syz.2.9442': attribute type 1 has an invalid length. [ 280.866285][T25836] netlink: 'syz.2.9464': attribute type 10 has an invalid length. [ 280.878587][T25836] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 281.681367][T25865] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 281.878413][T25882] __nla_validate_parse: 10 callbacks suppressed [ 281.878434][T25882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9486'. [ 281.957540][T25886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9489'. [ 282.233286][T25922] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 282.312032][T25928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9508'. [ 283.172136][T25990] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 283.849478][T26035] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 284.088793][T26059] macvlan2: entered allmulticast mode [ 284.101978][T26059] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 284.136353][T26066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9569'. [ 284.210163][T26072] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.9575'. [ 284.492824][T26106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9588'. [ 284.589654][T26116] netlink: 'syz.4.9592': attribute type 1 has an invalid length. [ 284.600510][T26116] netlink: 'syz.4.9592': attribute type 4 has an invalid length. [ 284.608451][T26116] netlink: 192 bytes leftover after parsing attributes in process `syz.4.9592'. [ 284.632387][T26119] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 285.288015][T26143] syz.0.9603: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 285.305492][T26143] CPU: 0 UID: 0 PID: 26143 Comm: syz.0.9603 Not tainted syzkaller #0 PREEMPT(full) [ 285.305520][T26143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.305538][T26143] Call Trace: [ 285.305546][T26143] [ 285.305554][T26143] dump_stack_lvl+0x189/0x250 [ 285.305586][T26143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.305603][T26143] ? __pfx__printk+0x10/0x10 [ 285.305620][T26143] ? lock_release+0x4b/0x3e0 [ 285.305641][T26143] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 285.305657][T26143] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 285.305673][T26143] warn_alloc+0x214/0x310 [ 285.305693][T26143] ? stack_depot_save_flags+0x40/0x860 [ 285.305712][T26143] ? __pfx_warn_alloc+0x10/0x10 [ 285.305731][T26143] ? kasan_save_track+0x4f/0x80 [ 285.305747][T26143] ? xskq_create+0x56/0x170 [ 285.305764][T26143] ? xsk_init_queue+0xb0/0x110 [ 285.305779][T26143] ? xsk_setsockopt+0x4dc/0x8d0 [ 285.305793][T26143] ? do_sock_setsockopt+0x17c/0x1b0 [ 285.305806][T26143] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 285.305818][T26143] ? do_syscall_64+0xfa/0x3b0 [ 285.305837][T26143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.305854][T26143] __vmalloc_node_range_noprof+0x125/0x12f0 [ 285.305882][T26143] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.305901][T26143] ? xsk_setsockopt+0x462/0x8d0 [ 285.305917][T26143] ? __kasan_kmalloc+0x93/0xb0 [ 285.305934][T26143] vmalloc_user_noprof+0xad/0xf0 [ 285.305953][T26143] ? xskq_create+0xbf/0x170 [ 285.305969][T26143] xskq_create+0xbf/0x170 [ 285.305987][T26143] xsk_init_queue+0xb0/0x110 [ 285.306004][T26143] xsk_setsockopt+0x4dc/0x8d0 [ 285.306020][T26143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.306036][T26143] ? __pfx_aa_sk_perm+0x10/0x10 [ 285.306054][T26143] ? lock_release+0x4b/0x3e0 [ 285.306071][T26143] ? aa_sock_opt_perm+0xff/0x1b0 [ 285.306096][T26143] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 285.306111][T26143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.306128][T26143] do_sock_setsockopt+0x17c/0x1b0 [ 285.306143][T26143] __x64_sys_setsockopt+0x13f/0x1b0 [ 285.306158][T26143] do_syscall_64+0xfa/0x3b0 [ 285.306178][T26143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.306191][T26143] ? clear_bhb_loop+0x60/0xb0 [ 285.306205][T26143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.306219][T26143] RIP: 0033:0x7fccd138ebe9 [ 285.306236][T26143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.306248][T26143] RSP: 002b:00007fccd2135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.306265][T26143] RAX: ffffffffffffffda RBX: 00007fccd15b5fa0 RCX: 00007fccd138ebe9 [ 285.306276][T26143] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 285.306284][T26143] RBP: 00007fccd1411e19 R08: 0000000000000004 R09: 0000000000000000 [ 285.306294][T26143] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.306303][T26143] R13: 00007fccd15b6038 R14: 00007fccd15b5fa0 R15: 00007fff889faf58 [ 285.306319][T26143] [ 285.306333][T26143] Mem-Info: [ 285.608223][T26143] active_anon:5308 inactive_anon:0 isolated_anon:0 [ 285.608223][T26143] active_file:3213 inactive_file:39913 isolated_file:0 [ 285.608223][T26143] unevictable:768 dirty:149 writeback:0 [ 285.608223][T26143] slab_reclaimable:12041 slab_unreclaimable:103671 [ 285.608223][T26143] mapped:29142 shmem:1366 pagetables:1563 [ 285.608223][T26143] sec_pagetables:0 bounce:0 [ 285.608223][T26143] kernel_misc_reclaimable:0 [ 285.608223][T26143] free:1312423 free_pcp:18613 free_cma:0 [ 285.663822][T26143] Node 0 active_anon:21232kB inactive_anon:0kB active_file:12852kB inactive_file:159448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116568kB dirty:596kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12692kB pagetables:6084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.729582][T26143] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.762786][T26143] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.800355][T26143] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 285.833938][T26143] Node 0 DMA32 free:1342396kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21084kB inactive_anon:0kB active_file:12852kB inactive_file:157884kB unevictable:1536kB writepending:596kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:57024kB local_pcp:21048kB free_cma:0kB [ 285.842140][T26165] netlink: 'syz.2.9614': attribute type 4 has an invalid length. [ 285.867471][T26143] lowmem_reserve[]: 0 0 1 1 1 [ 285.882219][T26143] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 285.913137][T26143] lowmem_reserve[]: 0 0 0 0 0 [ 285.918697][T26143] Node 1 Normal free:3891412kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18764kB local_pcp:11112kB free_cma:0kB [ 285.950684][T26143] lowmem_reserve[]: 0 0 0 0 0 [ 285.955536][T26143] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 285.974720][T26143] Node 0 DMA32: 285*4kB (UME) 316*8kB (UM) 263*16kB (UM) 996*32kB (UM) 613*64kB (U) 373*128kB (UM) 358*256kB (UME) 281*512kB (UME) 169*1024kB (UME) 6*2048kB (UME) 194*4096kB (UM) = 1342212kB [ 285.994182][T26143] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 285.995137][T26167] team0: Device wireguard0 is of different type [ 286.012135][T26143] Node 1 Normal: 175*4kB (UE) 43*8kB (UME) 42*16kB (UME) 65*32kB (UME) 24*64kB (UME) 8*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891412kB [ 286.032072][T26143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.042497][T26143] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.051903][T26143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.064421][T26143] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.073920][T26143] 44488 total pagecache pages [ 286.078610][T26143] 0 pages in swap cache [ 286.082760][T26143] Free swap = 124996kB [ 286.087751][T26143] Total swap = 124996kB [ 286.095065][T26143] 2097051 pages RAM [ 286.098971][T26143] 0 pages HighMem/MovableOnly [ 286.104024][T26143] 425661 pages reserved [ 286.108372][T26143] 0 pages cma reserved [ 286.261420][T26186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9623'. [ 286.297429][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.309667][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.325019][ T5978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.386145][T26199] netlink: 'syz.2.9631': attribute type 18 has an invalid length. [ 286.424859][ T5978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.437794][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9643'. [ 286.601953][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9642'. [ 286.611840][T26226] netlink: 'syz.4.9642': attribute type 30 has an invalid length. [ 286.774880][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.799456][T26249] bridge_slave_0: invalid flags given to default FDB implementation [ 287.006279][T26271] veth0: entered promiscuous mode [ 287.022344][T26270] veth0: left promiscuous mode [ 287.105799][T26283] __nla_validate_parse: 1 callbacks suppressed [ 287.105818][T26283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9668'. [ 287.159559][ T3598] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 287.176276][ T3598] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 287.184106][ T5935] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 287.245867][T26292] netlink: 'syz.0.9671': attribute type 18 has an invalid length. [ 287.296858][T26296] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9675'. [ 287.384088][ T5978] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 287.483500][T26315] bridge_slave_0: invalid flags given to default FDB implementation [ 287.498668][T26312] netlink: 'syz.1.9683': attribute type 1 has an invalid length. [ 287.506689][T26312] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9683'. [ 287.633509][T26329] netlink: 'syz.1.9691': attribute type 10 has an invalid length. [ 287.669456][T26329] team0: Port device dummy0 added [ 287.709651][T26329] netlink: 'syz.1.9691': attribute type 10 has an invalid length. [ 287.740763][T26329] team0: Port device dummy0 removed [ 287.788060][T26341] veth0: entered promiscuous mode [ 287.806588][T26340] veth0: left promiscuous mode [ 287.832317][T26347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9698'. [ 288.004478][T26365] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9708'. [ 288.077237][T26373] netlink: 'syz.4.9712': attribute type 1 has an invalid length. [ 288.088159][T26373] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9712'. [ 288.193987][ T5935] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 288.417766][T26399] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9725'. [ 288.485930][T26399] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9725'. [ 288.856600][T26440] netlink: 'syz.3.9743': attribute type 83 has an invalid length. [ 289.060957][T26464] ================================================================== [ 289.069069][T26464] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450 [ 289.077223][T26464] Read of size 1 at addr ffff88805670a970 by task syz.4.9755/26464 [ 289.085101][T26464] [ 289.087419][T26464] CPU: 1 UID: 0 PID: 26464 Comm: syz.4.9755 Not tainted syzkaller #0 PREEMPT(full) [ 289.087439][T26464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.087449][T26464] Call Trace: [ 289.087455][T26464] [ 289.087463][T26464] dump_stack_lvl+0x189/0x250 [ 289.087486][T26464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.087502][T26464] ? lock_release+0x4b/0x3e0 [ 289.087526][T26464] ? __virt_addr_valid+0x4a5/0x5c0 [ 289.087544][T26464] print_report+0xca/0x240 [ 289.087557][T26464] ? __xfrm_state_insert+0x8af/0x1450 [ 289.087571][T26464] kasan_report+0x118/0x150 [ 289.087590][T26464] ? __xfrm_state_insert+0x8af/0x1450 [ 289.087608][T26464] __xfrm_state_insert+0x8af/0x1450 [ 289.087625][T26464] ? xfrm_state_insert+0x44/0x60 [ 289.087640][T26464] xfrm_state_insert+0x54/0x60 [ 289.087653][T26464] ipcomp6_init_state+0x655/0x900 [ 289.087670][T26464] __xfrm_init_state+0xa76/0x13f0 [ 289.087686][T26464] ? __xfrm_init_state+0x7ef/0x13f0 [ 289.087703][T26464] xfrm_init_state+0x18/0xa0 [ 289.087716][T26464] pfkey_add+0x1d38/0x2e00 [ 289.087742][T26464] ? __pfx_pfkey_add+0x10/0x10 [ 289.087753][T26464] ? kmem_cache_free+0x18f/0x400 [ 289.087776][T26464] pfkey_sendmsg+0xbfe/0x1090 [ 289.087795][T26464] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 289.087814][T26464] ? plist_check_list+0x30f/0x330 [ 289.087832][T26464] ? aa_sock_msg_perm+0xf1/0x1d0 [ 289.087845][T26464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.087860][T26464] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 289.087872][T26464] __sock_sendmsg+0x21c/0x270 [ 289.087891][T26464] ____sys_sendmsg+0x52d/0x830 [ 289.087907][T26464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.087925][T26464] ? import_iovec+0x74/0xa0 [ 289.087942][T26464] ___sys_sendmsg+0x21f/0x2a0 [ 289.087958][T26464] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.087975][T26464] ? __pfx_futex_wake_mark+0x10/0x10 [ 289.088010][T26464] ? __fget_files+0x2a/0x420 [ 289.088028][T26464] ? __fget_files+0x3a0/0x420 [ 289.088050][T26464] __sys_sendmmsg+0x227/0x430 [ 289.088067][T26464] ? __pfx___sys_sendmmsg+0x10/0x10 [ 289.088080][T26464] ? do_futex+0x333/0x420 [ 289.088099][T26464] ? fdget+0x184/0x1e0 [ 289.088116][T26464] ? __pfx___se_sys_futex+0x10/0x10 [ 289.088132][T26464] ? fd_install+0x30d/0x540 [ 289.088154][T26464] __x64_sys_sendmmsg+0xa0/0xc0 [ 289.088169][T26464] do_syscall_64+0xfa/0x3b0 [ 289.088189][T26464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.088203][T26464] ? clear_bhb_loop+0x60/0xb0 [ 289.088217][T26464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.088230][T26464] RIP: 0033:0x7fcb6c18ebe9 [ 289.088244][T26464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.088257][T26464] RSP: 002b:00007fcb6d002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 289.088272][T26464] RAX: ffffffffffffffda RBX: 00007fcb6c3b5fa0 RCX: 00007fcb6c18ebe9 [ 289.088282][T26464] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 289.088292][T26464] RBP: 00007fcb6c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 289.088301][T26464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.088309][T26464] R13: 00007fcb6c3b6038 R14: 00007fcb6c3b5fa0 R15: 00007ffe5b152308 [ 289.088326][T26464] [ 289.088332][T26464] [ 289.406779][T26464] Allocated by task 26036: [ 289.411177][T26464] kasan_save_track+0x3e/0x80 [ 289.415847][T26464] __kasan_slab_alloc+0x6c/0x80 [ 289.420684][T26464] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 289.426135][T26464] xfrm_state_alloc+0x24/0x2f0 [ 289.430906][T26464] xfrm_add_sa+0x17d1/0x4070 [ 289.435484][T26464] xfrm_user_rcv_msg+0x7a3/0xab0 [ 289.440407][T26464] netlink_rcv_skb+0x208/0x470 [ 289.445160][T26464] xfrm_netlink_rcv+0x79/0x90 [ 289.449908][T26464] netlink_unicast+0x82c/0x9e0 [ 289.454658][T26464] netlink_sendmsg+0x805/0xb30 [ 289.459418][T26464] __sock_sendmsg+0x21c/0x270 [ 289.464169][T26464] ____sys_sendmsg+0x505/0x830 [ 289.468923][T26464] ___sys_sendmsg+0x21f/0x2a0 [ 289.473597][T26464] __x64_sys_sendmsg+0x19b/0x260 [ 289.478523][T26464] do_syscall_64+0xfa/0x3b0 [ 289.483031][T26464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.488961][T26464] [ 289.491271][T26464] Freed by task 5935: [ 289.495231][T26464] kasan_save_track+0x3e/0x80 [ 289.499898][T26464] kasan_save_free_info+0x46/0x50 [ 289.504908][T26464] __kasan_slab_free+0x5b/0x80 [ 289.509659][T26464] kmem_cache_free+0x18f/0x400 [ 289.514411][T26464] xfrm_state_gc_task+0x52d/0x6b0 [ 289.519423][T26464] process_scheduled_works+0xae1/0x17b0 [ 289.525210][T26464] worker_thread+0x8a0/0xda0 [ 289.529945][T26464] kthread+0x70e/0x8a0 [ 289.534002][T26464] ret_from_fork+0x3f9/0x770 [ 289.538577][T26464] ret_from_fork_asm+0x1a/0x30 [ 289.543450][T26464] [ 289.545757][T26464] The buggy address belongs to the object at ffff88805670a640 [ 289.545757][T26464] which belongs to the cache xfrm_state of size 928 [ 289.559807][T26464] The buggy address is located 816 bytes inside of [ 289.559807][T26464] freed 928-byte region [ffff88805670a640, ffff88805670a9e0) [ 289.573589][T26464] [ 289.575903][T26464] The buggy address belongs to the physical page: [ 289.582302][T26464] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56708 [ 289.591058][T26464] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 289.599744][T26464] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 289.607285][T26464] page_type: f5(slab) [ 289.611257][T26464] raw: 00fff00000000040 ffff8881426b7b40 dead000000000122 0000000000000000 [ 289.619912][T26464] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 289.628481][T26464] head: 00fff00000000040 ffff8881426b7b40 dead000000000122 0000000000000000 [ 289.637160][T26464] head: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 289.645816][T26464] head: 00fff00000000002 ffffea000159c201 00000000ffffffff 00000000ffffffff [ 289.654473][T26464] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 289.663127][T26464] page dumped because: kasan: bad access detected [ 289.669531][T26464] page_owner tracks the page as allocated [ 289.675228][T26464] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8399, tgid 8398 (syz.2.1207), ts 95713994567, free_ts 95705634130 [ 289.694488][T26464] post_alloc_hook+0x240/0x2a0 [ 289.699248][T26464] get_page_from_freelist+0x21e4/0x22c0 [ 289.704777][T26464] __alloc_frozen_pages_noprof+0x181/0x370 [ 289.710574][T26464] alloc_pages_mpol+0x232/0x4a0 [ 289.715413][T26464] allocate_slab+0x8a/0x370 [ 289.719907][T26464] ___slab_alloc+0xbeb/0x1410 [ 289.724574][T26464] kmem_cache_alloc_noprof+0x283/0x3c0 [ 289.730024][T26464] xfrm_state_alloc+0x24/0x2f0 [ 289.734782][T26464] pfkey_add+0x6e4/0x2e00 [ 289.739095][T26464] pfkey_sendmsg+0xbfe/0x1090 [ 289.743758][T26464] __sock_sendmsg+0x21c/0x270 [ 289.748423][T26464] ____sys_sendmsg+0x505/0x830 [ 289.753168][T26464] ___sys_sendmsg+0x21f/0x2a0 [ 289.757836][T26464] __x64_sys_sendmsg+0x19b/0x260 [ 289.762767][T26464] do_syscall_64+0xfa/0x3b0 [ 289.767258][T26464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.773135][T26464] page last free pid 8397 tgid 8396 stack trace: [ 289.779441][T26464] __free_frozen_pages+0xbc4/0xd30 [ 289.784543][T26464] stack_depot_save_flags+0x436/0x860 [ 289.789921][T26464] kasan_save_track+0x4f/0x80 [ 289.794591][T26464] __kasan_slab_alloc+0x6c/0x80 [ 289.799439][T26464] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 289.805407][T26464] kmalloc_reserve+0xbd/0x290 [ 289.810074][T26464] __alloc_skb+0x142/0x2d0 [ 289.814569][T26464] netlink_ack+0x146/0xa50 [ 289.819001][T26464] rdma_nl_rcv+0x3c8/0x980 [ 289.823402][T26464] netlink_unicast+0x82c/0x9e0 [ 289.828163][T26464] netlink_sendmsg+0x805/0xb30 [ 289.833006][T26464] __sock_sendmsg+0x21c/0x270 [ 289.837697][T26464] ____sys_sendmsg+0x505/0x830 [ 289.842449][T26464] ___sys_sendmsg+0x21f/0x2a0 [ 289.847200][T26464] __x64_sys_sendmsg+0x19b/0x260 [ 289.852119][T26464] do_syscall_64+0xfa/0x3b0 [ 289.856619][T26464] [ 289.858932][T26464] Memory state around the buggy address: [ 289.864565][T26464] ffff88805670a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.872718][T26464] ffff88805670a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.880875][T26464] >ffff88805670a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.889356][T26464] ^ [ 289.897056][T26464] ffff88805670a980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 289.905315][T26464] ffff88805670aa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.913381][T26464] ================================================================== [ 289.921550][T26464] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.928748][T26464] CPU: 1 UID: 0 PID: 26464 Comm: syz.4.9755 Not tainted syzkaller #0 PREEMPT(full) [ 289.938124][T26464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.948187][T26464] Call Trace: [ 289.951476][T26464] [ 289.954413][T26464] dump_stack_lvl+0x99/0x250 [ 289.959011][T26464] ? __asan_memcpy+0x40/0x70 [ 289.963626][T26464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.968827][T26464] ? __pfx__printk+0x10/0x10 [ 289.973413][T26464] vpanic+0x281/0x750 [ 289.977380][T26464] ? __pfx_vpanic+0x10/0x10 [ 289.981874][T26464] ? rcu_is_watching+0x15/0xb0 [ 289.986625][T26464] panic+0xb9/0xc0 [ 289.990335][T26464] ? __pfx_panic+0x10/0x10 [ 289.994828][T26464] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 290.000711][T26464] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 290.006591][T26464] ? __xfrm_state_insert+0x8af/0x1450 [ 290.011944][T26464] check_panic_on_warn+0x89/0xb0 [ 290.016880][T26464] ? __xfrm_state_insert+0x8af/0x1450 [ 290.022237][T26464] end_report+0x78/0x160 [ 290.026470][T26464] kasan_report+0x129/0x150 [ 290.030964][T26464] ? __xfrm_state_insert+0x8af/0x1450 [ 290.036320][T26464] __xfrm_state_insert+0x8af/0x1450 [ 290.041507][T26464] ? xfrm_state_insert+0x44/0x60 [ 290.046428][T26464] xfrm_state_insert+0x54/0x60 [ 290.051178][T26464] ipcomp6_init_state+0x655/0x900 [ 290.056279][T26464] __xfrm_init_state+0xa76/0x13f0 [ 290.061290][T26464] ? __xfrm_init_state+0x7ef/0x13f0 [ 290.066475][T26464] xfrm_init_state+0x18/0xa0 [ 290.071057][T26464] pfkey_add+0x1d38/0x2e00 [ 290.075462][T26464] ? __pfx_pfkey_add+0x10/0x10 [ 290.080217][T26464] ? kmem_cache_free+0x18f/0x400 [ 290.085150][T26464] pfkey_sendmsg+0xbfe/0x1090 [ 290.089817][T26464] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 290.094923][T26464] ? plist_check_list+0x30f/0x330 [ 290.100021][T26464] ? aa_sock_msg_perm+0xf1/0x1d0 [ 290.104944][T26464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.110215][T26464] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 290.115309][T26464] __sock_sendmsg+0x21c/0x270 [ 290.119976][T26464] ____sys_sendmsg+0x52d/0x830 [ 290.124724][T26464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.129993][T26464] ? import_iovec+0x74/0xa0 [ 290.134480][T26464] ___sys_sendmsg+0x21f/0x2a0 [ 290.139143][T26464] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.144326][T26464] ? __pfx_futex_wake_mark+0x10/0x10 [ 290.149611][T26464] ? __fget_files+0x2a/0x420 [ 290.154192][T26464] ? __fget_files+0x3a0/0x420 [ 290.158865][T26464] __sys_sendmmsg+0x227/0x430 [ 290.163532][T26464] ? __pfx___sys_sendmmsg+0x10/0x10 [ 290.168716][T26464] ? do_futex+0x333/0x420 [ 290.173390][T26464] ? fdget+0x184/0x1e0 [ 290.177467][T26464] ? __pfx___se_sys_futex+0x10/0x10 [ 290.182749][T26464] ? fd_install+0x30d/0x540 [ 290.187335][T26464] __x64_sys_sendmmsg+0xa0/0xc0 [ 290.192224][T26464] do_syscall_64+0xfa/0x3b0 [ 290.196815][T26464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.202874][T26464] ? clear_bhb_loop+0x60/0xb0 [ 290.207743][T26464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.213644][T26464] RIP: 0033:0x7fcb6c18ebe9 [ 290.218060][T26464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.237679][T26464] RSP: 002b:00007fcb6d002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 290.246131][T26464] RAX: ffffffffffffffda RBX: 00007fcb6c3b5fa0 RCX: 00007fcb6c18ebe9 [ 290.254128][T26464] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 290.262090][T26464] RBP: 00007fcb6c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 290.270048][T26464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.278033][T26464] R13: 00007fcb6c3b6038 R14: 00007fcb6c3b5fa0 R15: 00007ffe5b152308 [ 290.286088][T26464] [ 290.289252][T26464] Kernel Offset: disabled [ 290.293660][T26464] Rebooting in 86400 seconds..