last executing test programs: 4m2.921994604s ago: executing program 4 (id=2160): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x20, "4372070500fff9004786b89e6fb2be5c3f000000a6060000002b082507000000"}}) 4m2.76231103s ago: executing program 4 (id=2165): r0 = socket$caif_stream(0x25, 0x1, 0x5) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) 4m2.644865884s ago: executing program 4 (id=2170): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000006000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd0000000c000100080c10000000000000000000", 0x58}], 0x1) 4m2.513677588s ago: executing program 4 (id=2174): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000480)="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", &(0x7f0000000140)=""/230, 0x4}, 0x52) 4m2.39332678s ago: executing program 4 (id=2178): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x10, 0x0, &(0x7f00000002c0)="2f97bd05f75e410000000000000008fa", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m2.277534463s ago: executing program 4 (id=2183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 3m47.176329453s ago: executing program 32 (id=2183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m24.981269068s ago: executing program 1 (id=5250): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x28}], 0x1}, 0x0) 2m24.823517733s ago: executing program 1 (id=5257): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000005c00)={0xa, 0x4e22, 0x9, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}}], 0x1, 0x24000000) 2m24.650476274s ago: executing program 1 (id=5262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c000280050001f9ffffffff2b0001"], 0x88}}, 0x0) 2m24.54602674s ago: executing program 1 (id=5267): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2m24.364688843s ago: executing program 1 (id=5272): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x117, 0x1}, {0x10, 0x110, 0x1}], 0x20}, 0xfc40) 2m24.156959793s ago: executing program 1 (id=5279): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 2m9.126237492s ago: executing program 33 (id=5279): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 1.828927725s ago: executing program 6 (id=9557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 1.64943846s ago: executing program 6 (id=9561): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f080000000000009dcd000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa1000000000b0007010000f8ffffffb702000008000000b7030000080000008500000006000000bf910000000000f2b6020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 1.530781399s ago: executing program 0 (id=9564): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 1.001253895s ago: executing program 3 (id=9572): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 861.649335ms ago: executing program 3 (id=9574): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000c00)) 754.810051ms ago: executing program 3 (id=9577): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 692.223243ms ago: executing program 6 (id=9578): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000005cfb00000000220000000a000100774a70616e3100"], 0x20}}, 0x4000000) 691.223438ms ago: executing program 2 (id=9579): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r0, &(0x7f0000000f00)=[{{&(0x7f0000000200)=@phonet={0x23, 0x9, 0x0, 0x5}, 0x80, 0x0}}], 0x1, 0x200088d0) 666.042741ms ago: executing program 5 (id=9580): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000002000000000200000000", @ANYRES32=0x0, @ANYBLOB="0386010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 578.827233ms ago: executing program 0 (id=9581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) 571.779952ms ago: executing program 6 (id=9582): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) 528.906141ms ago: executing program 2 (id=9583): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000080), 0x4) 524.212047ms ago: executing program 5 (id=9584): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 457.32379ms ago: executing program 6 (id=9585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 443.480573ms ago: executing program 2 (id=9586): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 399.021547ms ago: executing program 3 (id=9587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 398.727497ms ago: executing program 0 (id=9588): unshare(0x22020600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8912, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 363.746773ms ago: executing program 5 (id=9589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) 330.214951ms ago: executing program 2 (id=9590): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180000002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000001085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x1}, 0x94) 308.484733ms ago: executing program 6 (id=9591): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 298.272173ms ago: executing program 0 (id=9592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 263.657859ms ago: executing program 3 (id=9593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 208.976846ms ago: executing program 5 (id=9594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) 207.925325ms ago: executing program 2 (id=9595): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 140.598269ms ago: executing program 0 (id=9596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @rand_addr=0x64010102}}, 0xffff, 0x4}, 0x90) sendto$inet6(r0, &(0x7f0000000280)="ba", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback, 0x1}, 0x1c) 104.257093ms ago: executing program 5 (id=9597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x1ff, 0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000012c0)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 92.576936ms ago: executing program 3 (id=9598): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffbf, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000000)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES8=r0], 0x40}, 0x20000000) 628.441µs ago: executing program 0 (id=9599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 365.769µs ago: executing program 2 (id=9600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x64, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x2, 0x0, 0x40}, 0x8000) 0s ago: executing program 5 (id=9601): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x8, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): the MTU to 1532 would solve the problem. [ 167.274325][T11416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.374892][T11416] hsr_slave_0: entered promiscuous mode [ 167.383411][T11416] hsr_slave_1: entered promiscuous mode [ 167.410136][T11416] debugfs: 'hsr0' already exists in 'hsr' [ 167.424551][T11416] Cannot create hsr debugfs directory [ 167.508062][T11512] netlink: 'syz.3.2709': attribute type 1 has an invalid length. [ 167.768248][T11525] xt_TCPMSS: Only works on TCP SYN packets [ 167.936989][ T5837] Bluetooth: hci5: command tx timeout [ 167.973136][T11416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.996489][T11416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.039676][T11416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.060997][T11416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.259375][T11416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.331435][T11416] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.357576][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.364744][T11461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.396993][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.404154][T11461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.559680][T11578] netlink: 'syz.1.2737': attribute type 2 has an invalid length. [ 168.763073][T11416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.838940][T11596] openvswitch: netlink: Message has 4 unknown bytes. [ 168.845692][T11596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.254494][T11416] veth0_vlan: entered promiscuous mode [ 169.274871][T11416] veth1_vlan: entered promiscuous mode [ 169.377102][T11416] veth0_macvtap: entered promiscuous mode [ 169.399114][T11416] veth1_macvtap: entered promiscuous mode [ 169.444250][T11416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.474328][T11416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.512496][ T1145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.546335][T11637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.554177][T11637] IPv6: NLM_F_CREATE should be set when creating new route [ 169.561463][T11637] IPv6: NLM_F_CREATE should be set when creating new route [ 169.572207][T11639] vti0: entered promiscuous mode [ 169.583031][ T1145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.594757][T11643] netlink: 'syz.2.2765': attribute type 2 has an invalid length. [ 169.613843][ T1145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.643279][T11643] !: entered promiscuous mode [ 169.675491][ T1145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.705435][T11649] netlink: 'syz.0.2768': attribute type 1 has an invalid length. [ 169.753669][T11649] __nla_validate_parse: 7 callbacks suppressed [ 169.753686][T11649] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2768'. [ 169.973686][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.001992][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.015936][ T5837] Bluetooth: hci5: command tx timeout [ 170.066613][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.075086][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.284074][T11676] bond1: option arp_interval: invalid value (18446744073709551615) [ 170.293023][T11676] bond1: option arp_interval: allowed values 0 - 2147483647 [ 170.308610][T11676] bond1 (unregistering): Released all slaves [ 171.177093][T11740] netlink: 'syz.1.2810': attribute type 11 has an invalid length. [ 171.367552][T11755] netlink: 'syz.0.2816': attribute type 39 has an invalid length. [ 171.543982][T11764] netlink: 'syz.1.2821': attribute type 5 has an invalid length. [ 171.844520][T11782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2830'. [ 172.104376][ T5837] Bluetooth: hci5: command tx timeout [ 172.185300][T11805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.267985][T11805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.293492][T11805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.318699][T11805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.514951][T11824] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 172.555854][T11824] netlink: 'syz.2.2850': attribute type 2 has an invalid length. [ 172.949370][ T30] audit: type=1107 audit(1769090862.332:2): pid=11850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 172.961270][T11855] netlink: 'syz.1.2865': attribute type 1 has an invalid length. [ 173.337309][T11874] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 173.347430][T11874] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 173.379008][T11874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.556731][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2883'. [ 173.827835][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2892'. [ 173.924858][T11913] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 173.970737][T11913] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0/file1 [ 174.177123][ T5837] Bluetooth: hci5: command tx timeout [ 174.232837][T11929] xfrm1: entered allmulticast mode [ 174.599843][T11951] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2911'. [ 174.612979][T11951] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 174.638608][T11953] netlink: 'syz.3.2912': attribute type 39 has an invalid length. [ 175.066654][T11977] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2924'. [ 175.132394][T11982] netlink: 'syz.5.2926': attribute type 1 has an invalid length. [ 175.553396][T12004] netlink: 'syz.1.2937': attribute type 1 has an invalid length. [ 175.892379][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2948'. [ 175.949132][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2948'. [ 176.522676][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2963'. [ 176.540882][T12068] netlink: zone id is out of range [ 176.609194][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 176.625189][T12073] netlink: 'syz.0.2967': attribute type 4 has an invalid length. [ 176.700604][T12076] xt_TCPMSS: Only works on TCP SYN packets [ 176.845506][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'. [ 176.907768][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2977'. [ 177.120730][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 177.154783][T12110] Cannot find del_set index 3 as target [ 177.363729][T12122] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 177.471486][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2995'. [ 177.540482][T12138] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 177.627730][T12144] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 177.651987][T12145] netlink: 'syz.2.3002': attribute type 6 has an invalid length. [ 177.777137][T12154] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 178.583056][T12211] netlink: 'syz.1.3035': attribute type 10 has an invalid length. [ 178.595377][T12212] netlink: 'syz.5.3036': attribute type 5 has an invalid length. [ 178.605397][T12211] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3035'. [ 178.819960][T12222] netlink: 'syz.3.3042': attribute type 1 has an invalid length. [ 178.856762][T12222] netlink: 'syz.3.3042': attribute type 2 has an invalid length. [ 179.189950][T12247] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.023134][T12305] batadv1: entered promiscuous mode [ 180.059978][T12305] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 180.127131][T12314] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3084'. [ 180.345077][T12329] netlink: 'syz.0.3091': attribute type 6 has an invalid length. [ 180.859104][T12363] netlink: 'syz.5.3108': attribute type 1 has an invalid length. [ 180.875926][T12363] netlink: 14436 bytes leftover after parsing attributes in process `syz.5.3108'. [ 181.077427][T12373] netlink: 'syz.0.3112': attribute type 2 has an invalid length. [ 181.117613][T12376] netlink: 'syz.2.3114': attribute type 6 has an invalid length. [ 181.151773][T12376] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.299009][T12390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3120'. [ 181.426688][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3124'. [ 181.454593][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3124'. [ 181.638760][T12412] netlink: 'syz.0.3132': attribute type 10 has an invalid length. [ 181.652669][T12412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3132'. [ 181.672059][T12412] dummy0: entered promiscuous mode [ 181.692153][T12412] bridge0: port 3(dummy0) entered blocking state [ 181.714402][T12412] bridge0: port 3(dummy0) entered disabled state [ 181.746117][T12412] dummy0: entered allmulticast mode [ 181.777513][T12412] bridge0: port 3(dummy0) entered blocking state [ 181.784098][T12412] bridge0: port 3(dummy0) entered forwarding state [ 181.929771][T12428] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.031902][T12434] Cannot find del_set index 4 as target [ 182.246936][T12448] netlink: zone id is out of range [ 182.262877][T12448] netlink: zone id is out of range [ 182.295885][T12448] netlink: zone id is out of range [ 182.440411][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3155'. [ 182.498842][T12463] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 182.502873][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3159'. [ 182.566840][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3159'. [ 182.586868][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3159'. [ 182.777089][T12481] netlink: 'syz.2.3166': attribute type 10 has an invalid length. [ 182.803160][T12481] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 183.158403][T12508] netlink: 'syz.0.3180': attribute type 8 has an invalid length. [ 184.038718][T12567] bridge2: entered allmulticast mode [ 184.147715][T12571] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 184.178218][T12571] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 184.437109][T12594] netlink: 'syz.3.3220': attribute type 21 has an invalid length. [ 184.468991][T12594] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.503988][T12594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.511277][T12594] IPv6: NLM_F_CREATE should be set when creating new route [ 184.518552][T12594] IPv6: NLM_F_CREATE should be set when creating new route [ 184.525824][T12594] IPv6: NLM_F_CREATE should be set when creating new route [ 184.729783][T12613] sctp: [Deprecated]: syz.1.3232 (pid 12613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.729783][T12613] Use struct sctp_sack_info instead [ 184.753867][T12612] bond0: option all_slaves_active: invalid value (60) [ 185.000179][T12630] openvswitch: netlink: Multiple metadata blocks provided [ 185.311849][T12650] __nla_validate_parse: 72 callbacks suppressed [ 185.311866][T12650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3249'. [ 185.406226][T12656] netlink: 712 bytes leftover after parsing attributes in process `syz.5.3253'. [ 185.415310][T12656] netlink: 5504 bytes leftover after parsing attributes in process `syz.5.3253'. [ 185.446656][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3253'. [ 185.543788][T12664] bond2: entered promiscuous mode [ 185.561450][T12669] openvswitch: netlink: IP tunnel TTL not specified. [ 185.638203][T12664] bond2: entered allmulticast mode [ 185.662466][T12673] xt_TCPMSS: Only works on TCP SYN packets [ 185.663142][T12664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.848759][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3269'. [ 185.878654][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3269'. [ 186.034295][T12699] netlink: 'syz.2.3274': attribute type 10 has an invalid length. [ 186.068073][T12701] x_tables: unsorted underflow at hook 4 [ 186.113756][T12699] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 186.864279][T12753] ip6erspan0: entered allmulticast mode [ 187.399911][T12755] infiniband !yz!: set active [ 187.415349][T12755] infiniband !yz!: added team_slave_0 [ 187.449478][T12779] netlink: 'syz.3.3313': attribute type 5 has an invalid length. [ 187.481584][T12779] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3313'. [ 187.493815][T12755] RDS/IB: !yz!: added [ 187.499105][T12755] smc: adding ib device !yz! with port count 1 [ 187.505586][T12755] smc: ib device !yz! port 1 has no pnetid [ 187.643142][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 187.738852][T12797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3321'. [ 187.801987][T12792] bond3: entered promiscuous mode [ 187.826352][T12792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.113355][T12813] netlink: 'syz.5.3329': attribute type 1 has an invalid length. [ 188.378093][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3336'. [ 188.520770][T12833] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 188.805898][T12849] netlink: 'syz.5.3347': attribute type 2 has an invalid length. [ 188.894837][T12857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.253654][T12876] netlink: 'syz.3.3360': attribute type 11 has an invalid length. [ 189.286264][T12876] netlink: 'syz.3.3360': attribute type 23 has an invalid length. [ 189.602133][T12897] netlink: 'syz.5.3372': attribute type 2 has an invalid length. [ 189.625931][T12897] netlink: 'syz.5.3372': attribute type 1 has an invalid length. [ 189.890006][T12911] netlink: 'syz.5.3378': attribute type 1 has an invalid length. [ 190.475133][T12955] delete_channel: no stack [ 190.584514][T12964] netlink: 'syz.0.3405': attribute type 10 has an invalid length. [ 190.616309][T12964] bridge0: port 3(dummy0) entered disabled state [ 190.622869][T12964] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.630638][T12964] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.653990][T12970] netlink: 'syz.1.3407': attribute type 5 has an invalid length. [ 190.693687][T12964] bridge0: port 3(dummy0) entered blocking state [ 190.700252][T12964] bridge0: port 3(dummy0) entered forwarding state [ 190.707091][T12964] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.714269][T12964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.721797][T12964] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.729022][T12964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.768715][T12964] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 190.909038][T12979] bond2: Removing last ns target with arp_interval on [ 190.962733][T12989] __nla_validate_parse: 6 callbacks suppressed [ 190.962750][T12989] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3416'. [ 190.981869][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3416'. [ 190.990915][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3416'. [ 191.038462][T12991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.219358][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 191.225007][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 191.225411][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 191.231784][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 191.271393][T13010] netlink: 'syz.2.3426': attribute type 13 has an invalid length. [ 191.287908][T13010] gretap0: refused to change device tx_queue_len [ 191.332390][T13010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 191.809017][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 191.899324][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 191.981272][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 192.470304][T13097] xt_hashlimit: overflow, try lower: 3/0 [ 192.894503][T13126] bond1: option all_slaves_active: invalid value (13) [ 192.902522][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 192.913299][T13126] bond1 (unregistering): Released all slaves [ 192.919901][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3483'. [ 193.088553][T13141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.292087][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3497'. [ 193.438616][T13168] xt_TCPMSS: Only works on TCP SYN packets [ 193.948904][T13207] ipt_REJECT: ECHOREPLY no longer supported. [ 194.024988][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3525'. [ 194.117853][T13214] veth3: entered promiscuous mode [ 194.270990][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.277392][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.992141][T13284] xt_TCPMSS: Only works on TCP SYN packets [ 195.602156][T13329] netlink: 'syz.5.3579': attribute type 12 has an invalid length. [ 195.830549][T13339] bond3: option all_slaves_active: invalid value (13) [ 195.830929][T13350] openvswitch: netlink: Unknown key attributes 2 [ 195.869724][T13339] bond3 (unregistering): Released all slaves [ 196.066514][T13362] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 196.312579][T13380] netlink: 'syz.3.3604': attribute type 1 has an invalid length. [ 196.347037][T13380] __nla_validate_parse: 3 callbacks suppressed [ 196.347054][T13380] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3604'. [ 196.469183][T13389] bond3: option all_slaves_active: invalid value (13) [ 196.507839][T13389] bond3 (unregistering): Released all slaves [ 196.587538][T13400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.608872][T13403] netlink: 'syz.1.3615': attribute type 2 has an invalid length. [ 197.049456][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3630'. [ 197.075584][T13438] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 197.329570][T13457] netlink: 'syz.1.3642': attribute type 3 has an invalid length. [ 197.716064][T13487] netlink: 'syz.1.3656': attribute type 1 has an invalid length. [ 198.006670][T13513] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3668'. [ 198.140667][T13522] netlink: 'syz.5.3672': attribute type 1 has an invalid length. [ 198.158117][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3673'. [ 198.392801][T13540] nftables ruleset with unbound chain [ 198.430146][T13541] netlink: 820 bytes leftover after parsing attributes in process `syz.2.3683'. [ 198.466480][T13541] netlink: 820 bytes leftover after parsing attributes in process `syz.2.3683'. [ 198.819342][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3699'. [ 199.203514][T13604] netlink: 'syz.1.3714': attribute type 12 has an invalid length. [ 199.246124][T13604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3714'. [ 199.311937][T13611] netlink: 'syz.2.3717': attribute type 1 has an invalid length. [ 199.322900][T13611] netlink: 'syz.2.3717': attribute type 2 has an invalid length. [ 199.411740][T13616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.567027][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3725'. [ 199.593026][T13626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3725'. [ 199.756533][T13644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.304498][T13674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.502657][T13684] xt_hashlimit: max too large, truncated to 1048576 [ 200.865990][T13708] netlink: 'syz.1.3763': attribute type 8 has an invalid length. [ 201.429585][T13751] netlink: 'syz.0.3781': attribute type 11 has an invalid length. [ 201.594314][T13765] netlink: 'syz.1.3786': attribute type 13 has an invalid length. [ 201.608458][T13765] netlink: 'syz.1.3786': attribute type 12 has an invalid length. [ 202.137008][T13806] bond0: (slave bridge0): Releasing backup interface [ 202.173211][T13806] bridge0: port 3(dummy0) entered disabled state [ 202.179886][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.187409][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.213522][T13806] bond0: (slave team0): Releasing backup interface [ 202.233035][T13806] dummy0: left allmulticast mode [ 202.244785][T13806] bridge0: port 3(dummy0) entered disabled state [ 202.287038][T13806] bridge_slave_0: left allmulticast mode [ 202.297679][T13806] bridge_slave_0: left promiscuous mode [ 202.308043][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.353432][T13806] bridge_slave_1: left allmulticast mode [ 202.359464][T13806] bridge_slave_1: left promiscuous mode [ 202.365456][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.004277][T13806] bond0: (slave bond_slave_0): Releasing backup interface [ 203.049729][T13806] bond0: (slave bond_slave_1): Releasing backup interface [ 203.085541][T13806] team0: Port device team_slave_0 removed [ 203.108210][T13806] team0: Port device team_slave_1 removed [ 203.122970][T13806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.142897][T13809] netlink: 'syz.3.3805': attribute type 5 has an invalid length. [ 203.274334][T13826] __nla_validate_parse: 2 callbacks suppressed [ 203.274353][T13826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3814'. [ 203.324160][T13826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3814'. [ 203.587894][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3825'. [ 203.627114][T13852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.814577][T13864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3834'. [ 204.196413][T13893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3846'. [ 204.231188][T13896] netlink: 'syz.1.3849': attribute type 1 has an invalid length. [ 204.269381][T13896] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3849'. [ 204.403892][T13910] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.3855'. [ 204.439494][T13910] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 204.538293][T13916] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 204.584666][T13919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3858'. [ 204.754044][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 204.800927][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3863'. [ 204.906072][T13938] Zero length message leads to an empty skb [ 205.412909][T13972] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 205.876073][T14007] xt_l2tp: wrong L2TP version: 0 [ 205.968145][T14013] xt_TCPMSS: Only works on TCP SYN packets [ 206.147130][T14027] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 206.158099][T14027] bridge3: entered allmulticast mode [ 206.980322][T14091] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.856795][T14161] xfrm1: entered allmulticast mode [ 208.300720][T14197] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 208.502618][T14211] __nla_validate_parse: 5 callbacks suppressed [ 208.502637][T14211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4004'. [ 208.572670][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4007'. [ 208.624812][T14217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4007'. [ 208.989239][T14246] netlink: 'syz.2.4021': attribute type 3 has an invalid length. [ 208.995915][T14245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4022'. [ 209.057761][T14245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4022'. [ 209.164853][T14255] netdevsim netdevsim1: Direct firmware load for /. failed with error -2 [ 209.182724][T14255] netdevsim netdevsim1: Falling back to sysfs fallback for: /. [ 209.629908][T14293] xt_hashlimit: max too large, truncated to 1048576 [ 209.639111][T14293] xt_bpf: check failed: parse error [ 209.931960][T14309] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 209.944915][T14309] bond1 (unregistering): Released all slaves [ 210.646428][T14365] bridge_slave_0: left allmulticast mode [ 210.652128][T14365] bridge_slave_0: left promiscuous mode [ 210.658899][T14365] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.697043][T14365] bridge_slave_1: left allmulticast mode [ 210.705944][T14365] bridge_slave_1: left promiscuous mode [ 210.711765][T14365] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.744300][T14365] bond0: (slave bond_slave_0): Releasing backup interface [ 210.767858][T14365] bond_slave_0: left promiscuous mode [ 210.807705][T14365] bond0: (slave bond_slave_1): Releasing backup interface [ 210.827234][T14365] bond_slave_1: left promiscuous mode [ 210.871068][T14365] team0: Port device team_slave_0 removed [ 210.893842][T14365] team0: Port device team_slave_1 removed [ 210.908500][T14365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.916062][T14365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.937549][T14365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.945368][T14365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.955921][T14365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.973272][T14370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4082'. [ 211.093781][T14376] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 211.126791][T14376] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 211.146844][ T5942] !yz!: Port: 1 Link DOWN [ 211.278816][T14402] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 211.685121][T14430] netlink: 'syz.3.4111': attribute type 1 has an invalid length. [ 211.794534][T14439] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4116'. [ 211.809836][T14440] xt_hashlimit: size too large, truncated to 1048576 [ 211.826068][T14440] xt_hashlimit: max too large, truncated to 1048576 [ 211.892551][T14446] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 211.978682][T14448] netlink: 'syz.0.4121': attribute type 13 has an invalid length. [ 212.284873][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4128'. [ 212.295241][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4128'. [ 212.546781][T14466] bridge_slave_0: left allmulticast mode [ 212.552772][T14466] bridge_slave_0: left promiscuous mode [ 212.561770][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.596830][T14466] bridge_slave_1: left allmulticast mode [ 212.608262][T14466] bridge_slave_1: left promiscuous mode [ 212.623639][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.659391][T14466] bond0: (slave bond_slave_0): Releasing backup interface [ 212.690977][T14466] bond0: (slave bond_slave_1): Releasing backup interface [ 212.715576][T14466] team0: Port device team_slave_0 removed [ 212.731437][T14466] team0: Port device team_slave_1 removed [ 212.743492][T14466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.757081][T14488] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4140'. [ 212.766214][T14466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.780885][T14466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.799015][T14466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.848511][T14466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.892833][ T7051] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.919173][ T7051] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.952384][ T7051] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.029016][ T7051] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.066678][T14500] netlink: 'syz.2.4146': attribute type 7 has an invalid length. [ 213.088385][T14500] netlink: 'syz.2.4146': attribute type 8 has an invalid length. [ 213.534133][T14534] __nla_validate_parse: 1 callbacks suppressed [ 213.534151][T14534] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4163'. [ 213.729350][T14550] netlink: 'syz.2.4170': attribute type 6 has an invalid length. [ 214.012146][T14571] netlink: 'syz.2.4177': attribute type 21 has an invalid length. [ 214.486310][T14608] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4198'. [ 214.543547][T14608] bond0 (unregistering): Released all slaves [ 214.985530][T14641] bond0: option min_links: invalid value (18446744073709551612) [ 215.017586][T14641] bond0: option min_links: allowed values 0 - 2147483647 [ 215.074610][T14641] bond0 (unregistering): Released all slaves [ 215.158277][T14653] geneve3: entered promiscuous mode [ 215.176864][T14653] geneve3: entered allmulticast mode [ 215.219421][T14657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4219'. [ 215.379963][T14667] bridge1: entered promiscuous mode [ 215.402415][T14667] bridge1: entered allmulticast mode [ 215.734269][T14695] x_tables: unsorted underflow at hook 1 [ 216.089216][T14727] netlink: 'syz.0.4252': attribute type 1 has an invalid length. [ 216.148926][T14727] netlink: 'syz.0.4252': attribute type 2 has an invalid length. [ 216.184702][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4254'. [ 216.492072][T14753] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4262'. [ 216.523363][T14755] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4264'. [ 217.336155][T14819] netlink: 'syz.5.4294': attribute type 1 has an invalid length. [ 217.685625][T14846] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.752044][T14853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4313'. [ 217.784004][T14855] xt_addrtype: ipv6 does not support BROADCAST matching [ 217.889114][T14862] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 218.311271][T14894] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 218.578338][T14913] xt_l2tp: invalid flags combination: 8 [ 218.650327][T14919] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4345'. [ 218.680576][T14919] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 218.918031][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4354'. [ 218.953530][T14943] netlink: 'syz.2.4356': attribute type 1 has an invalid length. [ 218.973387][T14943] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4356'. [ 219.040142][T14943] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4356'. [ 219.075794][T14943] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4356'. [ 219.321089][T14973] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4371'. [ 219.356360][T14973] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 219.600060][T14991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.629217][T14995] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 219.706557][T14999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4387'. [ 219.862052][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4390'. [ 219.886448][T15010] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 219.907021][T15010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4390'. [ 219.998512][T15019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4395'. [ 220.093497][T15029] netlink: 'syz.3.4400': attribute type 4 has an invalid length. [ 220.105570][T15030] netlink: 'syz.1.4399': attribute type 1 has an invalid length. [ 220.300273][T15039] xt_CT: No such helper "netbios-ns" [ 220.683383][T15071] netlink: 'syz.5.4420': attribute type 12 has an invalid length. [ 221.482160][T15129] netlink: 'syz.0.4448': attribute type 8 has an invalid length. [ 221.508651][T15133] netlink: 'syz.1.4450': attribute type 30 has an invalid length. [ 221.610918][T15133] bond0: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 221.655466][T15133] bond0 (unregistering): Released all slaves [ 221.891715][T15159] netlink: 'syz.0.4461': attribute type 1 has an invalid length. [ 222.548019][T15209] netlink: 'syz.0.4487': attribute type 21 has an invalid length. [ 223.074897][T15247] netlink: 'syz.2.4504': attribute type 30 has an invalid length. [ 223.252280][T15251] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 223.805141][T15302] __nla_validate_parse: 13 callbacks suppressed [ 223.805161][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4532'. [ 223.885769][T15302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4532'. [ 223.894757][T15302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4532'. [ 223.935835][T15302] netlink: 540 bytes leftover after parsing attributes in process `syz.3.4532'. [ 223.985445][T15316] xfrm0 speed is unknown, defaulting to 1000 [ 224.008203][T15316] xfrm0 speed is unknown, defaulting to 1000 [ 224.014990][T15316] xfrm0 speed is unknown, defaulting to 1000 [ 224.220999][T15330] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 224.432099][T15316] infiniband syz1: set down [ 224.436786][ T5942] xfrm0 speed is unknown, defaulting to 1000 [ 224.458778][T15316] infiniband syz1: added xfrm0 [ 224.510832][T15316] RDS/IB: syz1: added [ 224.515005][T15316] smc: adding ib device syz1 with port count 1 [ 224.522439][T15316] smc: ib device syz1 port 1 has no pnetid [ 224.528880][ T5942] xfrm0 speed is unknown, defaulting to 1000 [ 224.564590][T15316] xfrm0 speed is unknown, defaulting to 1000 [ 225.105025][T15371] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 225.205681][T15316] xfrm0 speed is unknown, defaulting to 1000 [ 225.688190][T15396] netlink: 'syz.5.4577': attribute type 2 has an invalid length. [ 225.703654][T15394] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 225.733501][T15394] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.781319][T15316] xfrm0 speed is unknown, defaulting to 1000 [ 225.898576][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4582'. [ 225.917925][T15406] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4582'. [ 225.966087][T15410] Cannot find map_set index 135 as target [ 226.188688][T15420] bond4: option xmit_hash_policy: invalid value (10) [ 226.217910][T15420] bond4 (unregistering): Released all slaves [ 226.263096][T15316] xfrm0 speed is unknown, defaulting to 1000 [ 226.447714][T15431] bond1 (unregistering): Released all slaves [ 226.797135][T15316] xfrm0 speed is unknown, defaulting to 1000 [ 226.813247][T15458] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 226.895629][T15463] netlink: 'syz.3.4610': attribute type 4 has an invalid length. [ 226.915910][T15463] netlink: 'syz.3.4610': attribute type 1 has an invalid length. [ 226.923780][T15463] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4610'. [ 227.027643][T15472] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4614'. [ 227.085558][T15472] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4614'. [ 227.118826][T15476] netlink: 'syz.1.4616': attribute type 4 has an invalid length. [ 227.122620][T15472] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4614'. [ 227.255325][T15316] xfrm0 speed is unknown, defaulting to 1000 [ 228.404864][T15545] netlink: 'syz.0.4650': attribute type 5 has an invalid length. [ 228.566218][T15552] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 228.959131][T15577] __nla_validate_parse: 1 callbacks suppressed [ 228.959149][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4663'. [ 229.041298][T15581] xt_TCPMSS: Only works on TCP SYN packets [ 229.170188][T15586] wg1: entered promiscuous mode [ 229.175100][T15586] wg1: entered allmulticast mode [ 229.355971][T15598] netlink: 'syz.5.4669': attribute type 1 has an invalid length. [ 229.370426][T15599] openvswitch: netlink: IP tunnel dst address not specified [ 229.792569][T15626] netlink: 'syz.3.4679': attribute type 4 has an invalid length. [ 230.364068][T15667] xt_nfacct: accounting object `syz0' does not exist [ 230.509297][T15677] bridge4: entered promiscuous mode [ 231.265963][T15729] netlink: 'syz.1.4723': attribute type 6 has an invalid length. [ 231.278562][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4722'. [ 231.287638][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4723'. [ 231.309459][T15729] netlink: 'syz.1.4723': attribute type 6 has an invalid length. [ 231.506651][T15689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.522255][T15689] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 231.587731][T15689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.604144][T15689] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 231.684629][T15689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.702618][T15689] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 231.800378][T15689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.853485][T15689] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 231.976162][T15768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4736'. [ 232.094361][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4737'. [ 232.235496][T15689] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 232.265635][T15689] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 232.364063][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4741'. [ 232.391024][T15789] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 232.566438][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4744'. [ 232.955912][T15825] netlink: 'syz.0.4755': attribute type 21 has an invalid length. [ 233.052547][T15833] ip6t_REJECT: ECHOREPLY is not supported [ 233.763493][T15887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4778'. [ 233.795825][T15887] netlink: 560 bytes leftover after parsing attributes in process `syz.1.4778'. [ 233.832823][T15886] bond1: Removing last arp target with arp_interval on [ 233.840762][T15886] bond1: entered promiscuous mode [ 233.846723][T15886] bond1: entered allmulticast mode [ 233.852292][T15886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.453634][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4799'. [ 234.818633][T15963] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 235.737411][T16030] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4840'. [ 235.898517][T16044] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4847'. [ 235.959487][T16044] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4847'. [ 235.984153][T16044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4847'. [ 236.393078][T16078] xt_ecn: cannot match TCP bits for non-tcp packets [ 236.508993][T16088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4869'. [ 236.664316][T16101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4874'. [ 236.699154][T16106] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 236.916067][T16118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4882'. [ 236.945437][T16121] netlink: 'syz.3.4885': attribute type 1 has an invalid length. [ 236.963575][T16121] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4885'. [ 237.163174][T16137] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4891'. [ 237.188981][T16142] netlink: 'syz.0.4892': attribute type 2 has an invalid length. [ 237.339853][T16154] netlink: 'syz.5.4900': attribute type 1 has an invalid length. [ 237.996178][T16204] : renamed from veth0_to_bond (while UP) [ 238.061214][T16209] IPv6: NLM_F_REPLACE set, but no existing node found! [ 238.502886][T16244] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 238.517283][T16246] netlink: 'syz.0.4947': attribute type 1 has an invalid length. [ 238.686201][T16258] IPv6: Can't replace route, no match found [ 238.922662][T16277] netlink: 'syz.2.4960': attribute type 64 has an invalid length. [ 239.251226][T16303] netlink: 'syz.3.4973': attribute type 1 has an invalid length. [ 239.652617][T16336] Cannot find set identified by id 65534 to match [ 239.659323][T16335] __nla_validate_parse: 8 callbacks suppressed [ 239.659342][T16335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4990'. [ 239.820504][T16347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.846163][T16350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4997'. [ 240.330885][T16386] sit0: entered promiscuous mode [ 240.347604][T16386] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5016'. [ 240.796343][T16421] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 241.038184][T16432] ip6gretap1: entered allmulticast mode [ 241.619554][T16482] openvswitch: netlink: IP tunnel TTL not specified. [ 241.711546][T16490] Cannot find add_set index 3 as target [ 242.007262][T16512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5078'. [ 242.062132][T16512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5078'. [ 242.329860][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5091'. [ 242.533870][T16553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5099'. [ 242.792141][T16558] netlink: set zone limit has 4 unknown bytes [ 242.792778][T16571] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5108'. [ 243.022239][T16586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.058472][T16589] SET target dimension over the limit! [ 243.119388][T16591] mac80211_hwsim hwsim16 ;: renamed from wlan0 [ 243.260235][T16604] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5124'. [ 243.284281][T16604] unsupported nlmsg_type 40 [ 243.691598][T16637] openvswitch: netlink: IP tunnel dst address not specified [ 243.884109][T16651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.044341][T16655] bond2: option resend_igmp: invalid value (2878) [ 244.051210][T16655] bond2: option resend_igmp: allowed values 0 - 255 [ 244.075364][T16655] bond2 (unregistering): Released all slaves [ 244.301196][T16670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5153'. [ 244.869139][T16694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5162'. [ 244.878965][T16694] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5162'. [ 245.143964][T16709] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5170'. [ 245.205911][T16709] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5170'. [ 245.696520][T16740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5185'. [ 246.147855][T16763] netlink: 'syz.5.5194': attribute type 2 has an invalid length. [ 246.186028][T16763] netlink: 'syz.5.5194': attribute type 5 has an invalid length. [ 246.272035][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5197'. [ 246.292007][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5197'. [ 246.303184][T16765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.730725][T16790] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5209'. [ 246.754773][T16790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.772022][T16794] netlink: 'syz.0.5210': attribute type 41 has an invalid length. [ 246.844736][T16802] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 247.161622][T16827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5225'. [ 247.178714][T16829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5227'. [ 247.430682][T16847] netlink: 'syz.0.5237': attribute type 5 has an invalid length. [ 248.003813][T16889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.641723][T16943] netlink: 'syz.2.5281': attribute type 2 has an invalid length. [ 249.689340][T17019] bond4: entered promiscuous mode [ 249.694961][T17019] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.889280][T17036] geneve2: entered promiscuous mode [ 249.894531][T17036] geneve2: entered allmulticast mode [ 250.091604][T17056] __nla_validate_parse: 12 callbacks suppressed [ 250.091622][T17056] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5334'. [ 250.241252][T17068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5341'. [ 250.252120][T17069] openvswitch: netlink: Flow key attr not present in new flow. [ 250.725675][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5358'. [ 250.760919][T17108] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.867577][T17116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5364'. [ 251.045193][T17130] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 251.236682][T17141] netlink: 'syz.0.5377': attribute type 2 has an invalid length. [ 251.246998][T17141] netlink: 'syz.0.5377': attribute type 8 has an invalid length. [ 251.254742][T17141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5377'. [ 252.143530][T17179] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5395'. [ 252.161263][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5398'. [ 252.196140][T17179] 0{X: renamed from gretap0 (while UP) [ 252.214816][T17179] 0{X: entered allmulticast mode [ 252.220797][T17179] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 252.482335][T17207] netlink: 'syz.3.5409': attribute type 13 has an invalid length. [ 252.500504][T17207] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5409'. [ 252.540257][T17207] syz_tun: refused to change device tx_queue_len [ 252.547769][T17207] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 252.725614][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5419'. [ 252.821227][T17233] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5422'. [ 253.033500][T17249] netlink: 'syz.3.5430': attribute type 8 has an invalid length. [ 253.064413][T17253] netlink: 'syz.0.5432': attribute type 2 has an invalid length. [ 253.410676][T17279] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 253.429955][T17281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.436704][T17279] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 253.724974][T17305] netlink: 'syz.5.5458': attribute type 1 has an invalid length. [ 253.911426][T17308] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 253.940349][T17308] bond1 (unregistering): Released all slaves [ 254.149013][T17331] netlink: 'syz.2.5470': attribute type 61 has an invalid length. [ 254.165376][T17331] netlink: 'syz.2.5470': attribute type 62 has an invalid length. [ 254.185586][T17335] netlink: 'syz.5.5472': attribute type 2 has an invalid length. [ 254.298095][T17339] netlink: 'syz.0.5476': attribute type 2 has an invalid length. [ 254.670308][T17372] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 254.770371][T17379] netlink: get zone limit has 8 unknown bytes [ 255.212404][T17408] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 255.230681][T17408] bond2 (unregistering): Released all slaves [ 255.397949][T17422] __nla_validate_parse: 9 callbacks suppressed [ 255.397968][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5513'. [ 255.656282][T17440] ip6gre1: entered promiscuous mode [ 255.708089][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.714373][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.761879][T17449] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5527'. [ 255.858240][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5529'. [ 255.900407][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.925317][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.951918][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.982977][T17457] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 256.048827][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.074788][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.086922][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.095376][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.110799][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.119925][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.138722][T17471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5537'. [ 256.340693][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5544'. [ 256.646188][T17511] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 256.723693][T17516] siw: device registration error -23 [ 256.871258][T17524] validate_nla: 3 callbacks suppressed [ 256.871277][T17524] netlink: 'syz.0.5563': attribute type 21 has an invalid length. [ 257.565899][T17570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5586'. [ 257.972075][T17603] x_tables: duplicate entry at hook 1 [ 258.104303][T17607] xt_CT: No such helper "snmp" [ 258.629878][T17655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5628'. [ 258.758112][T17663] netlink: 'syz.5.5632': attribute type 7 has an invalid length. [ 258.792563][T17667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5634'. [ 258.917109][T17675] netlink: 'syz.5.5638': attribute type 9 has an invalid length. [ 258.929901][T17675] netlink: 'syz.5.5638': attribute type 7 has an invalid length. [ 258.949660][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5639'. [ 258.958783][T17675] netlink: 'syz.5.5638': attribute type 8 has an invalid length. [ 259.160676][T17695] netlink: 'syz.0.5648': attribute type 15 has an invalid length. [ 259.168738][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5648'. [ 259.415277][T17711] Unsupported ieee802154 address type: 0 [ 259.473073][T17719] bond0: (slave erspan0): Opening slave failed [ 259.678392][T17735] netlink: 'syz.0.5667': attribute type 1 has an invalid length. [ 260.106969][T17763] netlink: 'syz.2.5681': attribute type 10 has an invalid length. [ 260.121368][T17763] bridge0: port 3(macsec0) entered blocking state [ 260.128249][T17763] bridge0: port 3(macsec0) entered disabled state [ 260.136178][T17763] macsec0: entered allmulticast mode [ 260.144633][T17763] veth1_macvtap: entered allmulticast mode [ 260.156847][T17763] macsec0: entered promiscuous mode [ 260.234031][T17769] netlink: 'syz.5.5686': attribute type 2 has an invalid length. [ 260.462265][T17789] netlink: 'syz.2.5696': attribute type 5 has an invalid length. [ 260.674015][T17803] gre1: entered allmulticast mode [ 261.032996][T17835] tipc: Can't bind to reserved service type 2 [ 261.040774][T17836] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.131877][T17843] __nla_validate_parse: 2 callbacks suppressed [ 261.131896][T17843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5721'. [ 261.146287][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5724'. [ 261.150725][T17843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5721'. [ 261.167754][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5721'. [ 261.270615][ T5943] IPVS: starting estimator thread 0... [ 261.329810][T17856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 261.386131][T17854] IPVS: using max 33 ests per chain, 79200 per kthread [ 261.524096][T17864] xt_CT: No such helper "snmp_trap" [ 261.801681][T17890] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5743'. [ 261.820055][T17890] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5743'. [ 262.054445][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5752'. [ 262.071677][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5754'. [ 262.564348][T17949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5772'. [ 262.701373][T17959] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5778'. [ 263.035300][T17987] netlink: 'syz.5.5791': attribute type 11 has an invalid length. [ 263.160035][T17995] bond4: option tlb_dynamic_lb: invalid value (5) [ 263.171342][T17995] bond4 (unregistering): Released all slaves [ 263.403766][T18012] batadv0: entered promiscuous mode [ 263.419138][T18012] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 263.830946][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.839920][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.860601][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.868768][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.879495][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.902489][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.913061][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.920482][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.931195][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.940820][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.124393][T18042] lo speed is unknown, defaulting to 1000 [ 264.576813][T18042] xfrm0 speed is unknown, defaulting to 1000 [ 264.985943][T18042] virt_wifi0 speed is unknown, defaulting to 1000 [ 265.213008][T18134] netlink: 'syz.0.5856': attribute type 1 has an invalid length. [ 265.344993][T18042] chnl_net:caif_netlink_parms(): no params data found [ 265.610993][T18042] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.620822][T18042] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.628828][T18042] bridge_slave_0: entered allmulticast mode [ 265.637158][T18042] bridge_slave_0: entered promiscuous mode [ 265.646794][T18042] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.654074][T18042] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.661820][T18042] bridge_slave_1: entered allmulticast mode [ 265.669779][T18042] bridge_slave_1: entered promiscuous mode [ 265.711832][T18042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.738849][T18042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.810054][T18042] team0: Port device team_slave_0 added [ 265.827568][T18042] team0: Port device team_slave_1 added [ 265.948001][T18042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.965758][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.992974][T18183] netlink: 'syz.2.5880': attribute type 10 has an invalid length. [ 266.015848][ T5843] Bluetooth: hci6: command tx timeout [ 266.046106][T18042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.089778][T18183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.119985][T18183] team0: Port device bond0 added [ 266.156590][T18042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.163581][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.247467][T18042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.315899][T18196] xt_hashlimit: size too large, truncated to 1048576 [ 266.331955][T18196] xt_hashlimit: invalid interval [ 266.333196][T18199] __nla_validate_parse: 6 callbacks suppressed [ 266.333211][T18199] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5885'. [ 266.436950][T18042] hsr_slave_0: entered promiscuous mode [ 266.463181][T18042] hsr_slave_1: entered promiscuous mode [ 266.490392][T18042] debugfs: 'hsr0' already exists in 'hsr' [ 266.517042][T18042] Cannot create hsr debugfs directory [ 266.546383][T18209] openvswitch: netlink: IP tunnel dst address not specified [ 267.035674][T18042] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.064144][T18042] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.096972][T18042] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.139377][T18042] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.399207][T18267] netlink: 'syz.2.5915': attribute type 1 has an invalid length. [ 267.906279][T18281] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 267.948671][T18281] bond2 (unregistering): Released all slaves [ 268.019725][ T1307] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.038231][ T1307] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.069435][ T3807] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.089838][ T3807] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.105853][ T5843] Bluetooth: hci6: command tx timeout [ 268.126566][ T3807] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.155978][ T3807] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.174636][ T3807] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.183800][ T3807] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.226315][T18042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.267167][T18303] geneve3: entered promiscuous mode [ 268.298840][ T1307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.329793][ T1307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.351048][ T1307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.352150][T18312] netlink: 'syz.0.5937': attribute type 21 has an invalid length. [ 268.364038][ T1307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.390342][T18312] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5937'. [ 268.398743][T18042] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.426144][T18312] netlink: 'syz.0.5937': attribute type 4 has an invalid length. [ 268.433907][T18312] netlink: 'syz.0.5937': attribute type 5 has an invalid length. [ 268.457261][T18312] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5937'. [ 268.481966][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.489156][T11461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.538030][ T3807] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.545135][ T3807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.900172][T18343] vlan0: entered promiscuous mode [ 268.920267][T18346] netlink: 'syz.2.5952': attribute type 15 has an invalid length. [ 268.946425][T18346] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5952'. [ 269.078616][T18042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.275987][T18370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5964'. [ 269.284975][T18370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5964'. [ 269.308166][T18370] netlink: 'syz.3.5964': attribute type 3 has an invalid length. [ 269.575360][T18042] veth0_vlan: entered promiscuous mode [ 269.575828][T18388] netlink: 'syz.3.5971': attribute type 10 has an invalid length. [ 269.605498][T18390] netlink: 508 bytes leftover after parsing attributes in process `syz.0.5973'. [ 269.617350][T18042] veth1_vlan: entered promiscuous mode [ 269.679984][T18042] veth0_macvtap: entered promiscuous mode [ 269.701913][T18042] veth1_macvtap: entered promiscuous mode [ 269.764174][T18042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.789818][T18042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.805985][T18402] netlink: 'syz.2.5977': attribute type 58 has an invalid length. [ 269.816150][ T3807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.843943][ T3807] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.860562][ T3807] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.880115][ T3807] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.021294][ T3807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.047186][ T3807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.098007][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5981'. [ 270.103103][ T3807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.137520][ T3807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.176044][ T5843] Bluetooth: hci6: command tx timeout [ 270.412153][T18422] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5808'. [ 270.614047][T18430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5988'. [ 270.684266][T18434] ipt_ECN: cannot use operation on non-tcp rule [ 270.816162][T18440] netlink: 'syz.5.5995': attribute type 11 has an invalid length. [ 271.291962][T18464] validate_nla: 1 callbacks suppressed [ 271.291981][T18464] netlink: 'syz.5.6006': attribute type 1 has an invalid length. [ 271.563546][T18482] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.620618][T18485] bridge0: port 3(erspan0) entered blocking state [ 271.643530][T18488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6018'. [ 271.668009][T18485] bridge0: port 3(erspan0) entered disabled state [ 271.674675][T18485] erspan0: entered allmulticast mode [ 271.719845][T18485] erspan0: entered promiscuous mode [ 271.737206][T18485] bridge0: port 3(erspan0) entered blocking state [ 271.743749][T18485] bridge0: port 3(erspan0) entered forwarding state [ 271.797606][T18495] netlink: 'syz.2.6021': attribute type 2 has an invalid length. [ 271.813119][T18497] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.989345][T18504] netlink: 'syz.5.6026': attribute type 11 has an invalid length. [ 272.129398][T18512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6029'. [ 272.261248][ T5843] Bluetooth: hci6: command tx timeout [ 272.509272][T18530] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6037'. [ 272.546167][T18530] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6037'. [ 272.561195][T18534] netlink: 'syz.2.6041': attribute type 1 has an invalid length. [ 272.568016][T18530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6037'. [ 272.631336][T18541] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 272.768182][T18547] netlink: 'syz.3.6045': attribute type 1 has an invalid length. [ 272.809566][T18547] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6045'. [ 273.031094][T18563] netlink: 'syz.2.6055': attribute type 1 has an invalid length. [ 273.053228][T18563] netlink: 'syz.2.6055': attribute type 3 has an invalid length. [ 273.094945][T18563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6055'. [ 273.219696][T18576] sctp: [Deprecated]: syz.0.6061 (pid 18576) Use of int in maxseg socket option. [ 273.219696][T18576] Use struct sctp_assoc_value instead [ 273.339403][T18585] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6065'. [ 273.411441][T18591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6069'. [ 274.095993][T18639] netlink: 'syz.3.6092': attribute type 3 has an invalid length. [ 274.293995][T18654] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 274.598002][T18673] ieee802154 phy0 wpan0: encryption failed: -90 [ 274.858408][T18690] raw_sendmsg: syz.3.6118 forgot to set AF_INET. Fix it! [ 274.887952][T18692] xt_hashlimit: size too large, truncated to 1048576 [ 274.975025][T18692] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 275.447813][T18718] IPv6: Can't replace route, no match found [ 275.652172][T18728] bond5: option primary_reselect: invalid value (4) [ 275.684941][T18728] bond5 (unregistering): Released all slaves [ 276.034863][T18761] netlink: 'syz.0.6152': attribute type 1 has an invalid length. [ 276.053739][T18761] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6152'. [ 276.990469][T18819] netlink: 'syz.5.6178': attribute type 1 has an invalid length. [ 277.079682][T18828] netlink: 'syz.3.6183': attribute type 2 has an invalid length. [ 277.123651][T18831] __nla_validate_parse: 2 callbacks suppressed [ 277.123669][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6186'. [ 277.166905][T18831] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6186'. [ 277.191097][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6186'. [ 277.341418][T18844] bond1: Unable to set up delay as MII monitoring is disabled [ 277.349063][T18849] netlink: 'syz.5.6194': attribute type 61 has an invalid length. [ 277.359166][T18844] bond1 (unregistering): Released all slaves [ 277.452377][T18852] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6196'. [ 277.602073][T18863] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6200'. [ 277.768284][T18873] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6205'. [ 279.474467][T18866] veth3: entered promiscuous mode [ 279.630450][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6212'. [ 280.039201][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6226'. [ 280.074899][T18915] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6226'. [ 280.105825][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6226'. [ 280.598005][T18946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.802062][T18962] netlink: 'syz.5.6249': attribute type 7 has an invalid length. [ 281.078593][T18982] netlink: 'syz.2.6259': attribute type 21 has an invalid length. [ 282.170081][T19063] netlink: 'syz.6.6300': attribute type 30 has an invalid length. [ 282.316334][T19076] __nla_validate_parse: 12 callbacks suppressed [ 282.316353][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6305'. [ 282.442724][T19083] bond1: option fail_over_mac: invalid value (127) [ 282.473374][T19083] bond1 (unregistering): Released all slaves [ 282.563969][T19088] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 282.951184][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6329'. [ 283.055615][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6334'. [ 283.084363][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6334'. [ 283.409921][T19159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.465930][T19163] netlink: 'syz.2.6348': attribute type 1 has an invalid length. [ 283.526290][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6351'. [ 283.669964][T19178] team0: Port device bond0 removed [ 283.702044][T19178] bridge_slave_0: left allmulticast mode [ 283.720048][T19178] bridge_slave_0: left promiscuous mode [ 283.728153][T19183] xt_TCPMSS: Only works on TCP SYN packets [ 283.728278][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.752598][T19178] bridge_slave_1: left allmulticast mode [ 283.765797][T19178] bridge_slave_1: left promiscuous mode [ 283.772051][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.823317][T19178] bond0: (slave 30): Releasing backup interface [ 283.836917][T19178] bond0: (slave bond_slave_1): Releasing backup interface [ 283.878394][T19178] team0: Port device team_slave_0 removed [ 283.890264][T19178] team0: Port device team_slave_1 removed [ 283.897084][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.904490][T19178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.914419][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.922177][T19178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.932850][T19178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 284.022658][T19194] netlink: 'syz.3.6363': attribute type 1 has an invalid length. [ 284.030708][T19194] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6363'. [ 284.133596][T19205] netlink: 'syz.3.6368': attribute type 1 has an invalid length. [ 284.192191][T19206] veth2: entered allmulticast mode [ 284.468991][T19232] delete_channel: no stack [ 284.680812][T19248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6390'. [ 284.861585][T19260] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6396'. [ 284.918011][T19266] No such timeout policy "syz0" [ 285.162062][T19284] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 285.352988][T19297] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6414'. [ 285.745370][T19330] ip6erspan0: entered allmulticast mode [ 285.868255][T19338] netlink: 'syz.5.6434': attribute type 21 has an invalid length. [ 285.915978][T19338] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6434'. [ 285.925449][T19338] netlink: 'syz.5.6434': attribute type 4 has an invalid length. [ 286.306833][T19374] netlink: 'syz.2.6452': attribute type 1 has an invalid length. [ 286.390790][T19378] netlink: 'syz.5.6455': attribute type 1 has an invalid length. [ 286.410397][T19382] netlink: 'syz.2.6454': attribute type 2 has an invalid length. [ 286.674992][T19395] bond1 (unregistering): Released all slaves [ 286.697351][T19403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.102401][T19433] netlink: 'syz.6.6480': attribute type 1 has an invalid length. [ 287.336547][T19450] netlink: 'syz.5.6488': attribute type 1 has an invalid length. [ 287.574114][T19469] __nla_validate_parse: 4 callbacks suppressed [ 287.574134][T19469] netlink: 276 bytes leftover after parsing attributes in process `syz.2.6498'. [ 287.646016][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6501'. [ 288.182018][T19516] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6521'. [ 288.189496][T19518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.215918][T19516] openvswitch: netlink: Missing key (keys=40, expected=100) [ 288.310031][T19524] IPv6: sit2: Disabled Multicast RS [ 288.325440][T19524] sit2: entered promiscuous mode [ 288.343085][T19524] sit2: entered allmulticast mode [ 288.409888][T19531] batadv2: entered promiscuous mode [ 288.731480][T19554] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 288.760823][T19557] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 289.218624][T19596] netlink: 'syz.2.6561': attribute type 2 has an invalid length. [ 289.502791][T19616] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.6570'. [ 290.095154][T19658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.215960][T19666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6596'. [ 290.486686][T19686] netlink: 'syz.5.6605': attribute type 15 has an invalid length. [ 290.641244][T19696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.221049][T19736] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6630'. [ 291.275794][T19736] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6630'. [ 291.513437][T19759] xt_bpf: check failed: parse error [ 291.527788][T19757] netlink: 'syz.2.6641': attribute type 2 has an invalid length. [ 291.535550][T19757] netlink: 'syz.2.6641': attribute type 9 has an invalid length. [ 291.551485][T19761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6642'. [ 291.572033][T19757] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6641'. [ 292.315978][T19815] netlink: 'syz.6.6668': attribute type 1 has an invalid length. [ 292.348155][T19815] netlink: 'syz.6.6668': attribute type 2 has an invalid length. [ 292.757888][T19844] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.809118][T19850] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6687'. [ 293.097921][ T24] IPVS: starting estimator thread 0... [ 293.205829][T19871] IPVS: using max 39 ests per chain, 93600 per kthread [ 293.655929][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6713'. [ 293.852219][T19920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6720'. [ 293.907999][T19920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6720'. [ 294.268331][T19935] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 294.301974][T19937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.693672][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6739'. [ 294.938735][T19975] netlink: 'syz.3.6749': attribute type 1 has an invalid length. [ 295.005851][T19975] netlink: 'syz.3.6749': attribute type 1 has an invalid length. [ 295.377882][T20001] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6762'. [ 295.390191][T20001] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6762'. [ 295.435838][T20001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6762'. [ 295.559140][T20016] netlink: 'syz.6.6768': attribute type 29 has an invalid length. [ 295.701454][T20028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6774'. [ 296.080873][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6789'. [ 296.621486][T20089] netlink: 'syz.2.6803': attribute type 3 has an invalid length. [ 296.645158][T20089] netlink: 'syz.2.6803': attribute type 2 has an invalid length. [ 296.664004][T20089] netlink: 'syz.2.6803': attribute type 2 has an invalid length. [ 296.779011][T20097] netlink: 'syz.5.6806': attribute type 4 has an invalid length. [ 296.928247][T20107] netlink: 'syz.5.6811': attribute type 1 has an invalid length. [ 297.172088][T20127] netlink: 'syz.6.6820': attribute type 2 has an invalid length. [ 297.295515][T20133] 0{X: left allmulticast mode [ 297.327801][T20133] sit0: left promiscuous mode [ 297.403905][T20133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.413690][T20133] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.424573][T20133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.576692][T20153] validate_nla: 3 callbacks suppressed [ 297.576719][T20153] netlink: 'syz.0.6832': attribute type 1 has an invalid length. [ 297.978311][T20180] __nla_validate_parse: 7 callbacks suppressed [ 297.978331][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6845'. [ 298.173937][T20193] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6851'. [ 298.206248][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6851'. [ 298.215638][T20197] netlink: 'syz.5.6852': attribute type 1 has an invalid length. [ 298.225127][T20197] netlink: 'syz.5.6852': attribute type 1 has an invalid length. [ 298.326278][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6856'. [ 298.337307][T20206] netlink: 'syz.6.6858': attribute type 1 has an invalid length. [ 298.338545][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6856'. [ 299.585047][T20281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6881'. [ 299.683242][T20282] bond2 (unregistering): Released all slaves [ 299.840294][T20296] pim6reg: entered allmulticast mode [ 299.942773][T20305] netlink: 'syz.6.6893': attribute type 39 has an invalid length. [ 299.979681][T20305] veth0_macvtap: left promiscuous mode [ 300.174533][T20321] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6901'. [ 300.176781][T20323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6902'. [ 300.216707][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6901'. [ 300.239469][T20321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6901'. [ 300.442344][T20332] bond2: entered promiscuous mode [ 300.472545][T20332] bond2: entered allmulticast mode [ 300.499470][T20332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.925249][T20379] SET target dimension over the limit! [ 301.104159][T20392] rdma_rxe: rxe_newlink: failed to add lo [ 301.284566][T20403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.401343][T20410] xt_TCPMSS: Only works on TCP SYN packets [ 301.438990][T20416] netlink: 'syz.5.6948': attribute type 21 has an invalid length. [ 301.455978][T20416] netlink: 'syz.5.6948': attribute type 5 has an invalid length. [ 301.477073][T20416] netlink: 'syz.5.6948': attribute type 6 has an invalid length. [ 301.528832][T20422] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 301.981932][T20458] netlink: 'syz.0.6969': attribute type 11 has an invalid length. [ 302.000753][T20459] netlink: 'syz.3.6970': attribute type 1 has an invalid length. [ 302.025827][T20459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.758342][T20512] netlink: 'syz.2.6992': attribute type 3 has an invalid length. [ 302.841578][T20517] netlink: 'syz.3.6993': attribute type 6 has an invalid length. [ 302.980899][T20525] netlink: 'syz.2.6996': attribute type 4 has an invalid length. [ 303.015007][T20525] __nla_validate_parse: 7 callbacks suppressed [ 303.015024][T20525] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6996'. [ 303.071177][T20525] wlan1: mtu less than device minimum [ 303.408920][T20552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7007'. [ 303.605867][T20564] SET target dimension over the limit! [ 303.747900][T20567] bond5 (unregistering): Released all slaves [ 303.956342][T20591] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 304.110244][T20604] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7029'. [ 304.252859][T20610] netlink: 'syz.6.7032': attribute type 1 has an invalid length. [ 304.658106][T20639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.847396][T20655] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 305.114550][T20673] netlink: 'syz.6.7060': attribute type 21 has an invalid length. [ 305.155155][T20678] netlink: 'syz.5.7062': attribute type 1 has an invalid length. [ 305.392522][T20697] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7072'. [ 305.469861][T20703] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 4, id = 0 [ 305.550721][T20707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7075'. [ 305.578924][T20707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7075'. [ 305.607023][T20715] openvswitch: netlink: Actions may not be safe on all matching packets [ 306.144763][T20755] netlink: 'syz.5.7098': attribute type 32 has an invalid length. [ 306.327515][T20771] ip6t_rpfilter: unknown options [ 306.579209][T20786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7115'. [ 306.608097][T20786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7115'. [ 306.617942][T20786] netlink: 'syz.3.7115': attribute type 5 has an invalid length. [ 306.629087][T20793] netlink: 'syz.2.7117': attribute type 7 has an invalid length. [ 307.150792][T20833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.326194][T20846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7141'. [ 307.377549][T20850] netlink: 'syz.2.7142': attribute type 49 has an invalid length. [ 307.624689][T20866] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.7150'. [ 307.668032][T20866] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 307.816740][T20880] netlink: 'syz.3.7158': attribute type 2 has an invalid length. [ 308.036877][T20899] netlink: 'syz.0.7165': attribute type 6 has an invalid length. [ 308.075869][T20899] __nla_validate_parse: 1 callbacks suppressed [ 308.075888][T20899] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7165'. [ 308.385127][T20919] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7177'. [ 308.415122][T20919] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7177'. [ 308.459315][T20919] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 308.794279][T20939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7189'. [ 308.942131][T20947] netlink: 'syz.3.7191': attribute type 1 has an invalid length. [ 308.965751][T20939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7189'. [ 308.969490][T20947] netlink: 'syz.3.7191': attribute type 2 has an invalid length. [ 309.214506][T20965] openvswitch: netlink: IP tunnel dst address not specified [ 309.349808][T20974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.473341][T20986] netlink: 'syz.3.7212': attribute type 1 has an invalid length. [ 309.481486][T20986] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7212'. [ 309.874906][T21019] netlink: 'syz.2.7225': attribute type 11 has an invalid length. [ 309.875131][T21018] netlink: 'syz.5.7226': attribute type 10 has an invalid length. [ 309.940215][T21018] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7226'. [ 309.962065][T21023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7227'. [ 309.962867][T21018] team0: entered promiscuous mode [ 309.994704][T21018] team_slave_0: entered promiscuous mode [ 310.007911][T21018] team_slave_1: entered promiscuous mode [ 310.022280][T21018] bridge0: port 3(team0) entered blocking state [ 310.039415][T21018] bridge0: port 3(team0) entered disabled state [ 310.052853][T21018] team0: entered allmulticast mode [ 310.059276][T21018] team_slave_0: entered allmulticast mode [ 310.065023][T21018] team_slave_1: entered allmulticast mode [ 310.108833][T21018] bridge0: port 3(team0) entered blocking state [ 310.115255][T21018] bridge0: port 3(team0) entered forwarding state [ 310.124792][ T1145] bond0: (slave wlan1): interface is now down [ 310.125819][T21027] bond0: option arp_validate: invalid value (55553) [ 310.146560][ T13] bond0: (slave wlan1): interface is now down [ 310.168839][ T13] bond0: now running without any active interface! [ 310.300516][T21041] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 310.415518][T21050] netlink: 'syz.6.7240': attribute type 10 has an invalid length. [ 310.431206][T21054] x_tables: duplicate underflow at hook 2 [ 310.457543][T21050] team0: Cannot enslave team device to itself [ 310.718580][T21076] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7251'. [ 310.851454][T21085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7255'. [ 311.219090][T21113] netlink: 'syz.5.7271': attribute type 7 has an invalid length. [ 311.239755][T21113] netlink: 'syz.5.7271': attribute type 5 has an invalid length. [ 311.797310][T21159] [: entered promiscuous mode [ 312.164508][ T24] IPVS: starting estimator thread 0... [ 312.265802][T21186] IPVS: using max 29 ests per chain, 69600 per kthread [ 312.733410][T21233] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 313.303611][T21271] __nla_validate_parse: 11 callbacks suppressed [ 313.303631][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7348'. [ 313.433630][T21271] bond5: option broadcast_neighbor: invalid value (30) [ 313.465148][T21281] validate_nla: 7 callbacks suppressed [ 313.465169][T21281] netlink: 'syz.3.7352': attribute type 1 has an invalid length. [ 313.500498][T21271] bond5 (unregistering): Released all slaves [ 313.506623][T21281] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7352'. [ 313.534657][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7353'. [ 313.548672][T21283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7354'. [ 313.697350][T21293] netdevsim netdevsim0 : renamed from netdevsim0 [ 313.962346][T21316] x_tables: unsorted underflow at hook 3 [ 314.377397][T21351] @0: renamed from bond_slave_1 [ 314.463180][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7390'. [ 314.482169][T21357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7390'. [ 314.502465][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7390'. [ 314.927516][T21384] netlink: ct family unspecified [ 314.932531][T21384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.236063][T21411] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7415'. [ 315.257073][T21413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7418'. [ 315.266179][T21411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7415'. [ 315.303978][T21406] bond5 (unregistering): Released all slaves [ 315.707588][T21439] netlink: 'syz.2.7429': attribute type 11 has an invalid length. [ 316.356232][T21464] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 316.471408][T21471] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 316.559771][T21476] dvmrp0: entered allmulticast mode [ 317.863041][T21552] openvswitch: netlink: IPv6 tunnel dst address is zero [ 317.967869][T21507] wg1: left promiscuous mode [ 317.978868][T21507] wg1: left allmulticast mode [ 318.454897][T21507] veth1_macvtap: left allmulticast mode [ 318.503722][T21507] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 318.551914][T21507] bridge1: left allmulticast mode [ 318.564446][T21507] ip6gre1: left promiscuous mode [ 318.570697][T21507] ip6gre1: left allmulticast mode [ 318.581241][T21507] batadv1: left promiscuous mode [ 318.602704][T21507] bond4: left promiscuous mode [ 318.615808][T21507] geneve2: left promiscuous mode [ 318.620785][T21507] geneve2: left allmulticast mode [ 318.630286][T21507] gre1: left allmulticast mode [ 318.648125][T21529] geneve2: entered promiscuous mode [ 318.655563][T21535] x9: renamed from bridge_slave_0 [ 318.669149][ T1145] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.703405][ T1145] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.729236][ T1145] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.766607][ T1145] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.795907][T21567] __nla_validate_parse: 3 callbacks suppressed [ 318.795925][T21567] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7485'. [ 319.138541][T21593] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7497'. [ 319.206829][T21600] netlink: 'syz.0.7501': attribute type 21 has an invalid length. [ 319.255765][T21600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7501'. [ 319.466990][T21620] xt_hashlimit: overflow, rate too high: 0 [ 319.568678][T21626] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7514'. [ 319.596026][T21630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7516'. [ 320.002447][T21665] netlink: 'syz.0.7532': attribute type 12 has an invalid length. [ 320.703043][T21722] netlink: 'syz.5.7558': attribute type 1 has an invalid length. [ 320.711043][T21722] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7558'. [ 320.712762][T21712] bond1 (unregistering): Released all slaves [ 321.012614][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 321.192396][T21752] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7574'. [ 321.227744][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7577'. [ 321.254466][T21759] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 321.399959][T21766] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7581'. [ 321.925597][T21761] syz.3.7579 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 321.991673][T21761] CPU: 1 UID: 0 PID: 21761 Comm: syz.3.7579 Not tainted syzkaller #0 PREEMPT(full) [ 321.991701][T21761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 321.991721][T21761] Call Trace: [ 321.991727][T21761] [ 321.991734][T21761] dump_stack_lvl+0xe8/0x150 [ 321.991767][T21761] dump_header+0xd3/0x4c0 [ 321.991786][T21761] oom_kill_process+0x263/0x800 [ 321.991812][T21761] out_of_memory+0xe55/0x11f0 [ 321.991837][T21761] ? __pfx___mutex_lock+0x10/0x10 [ 321.991862][T21761] ? __pfx_out_of_memory+0x10/0x10 [ 321.991885][T21761] ? lock_acquire+0x106/0x330 [ 321.991915][T21761] mem_cgroup_out_of_memory+0x158/0x270 [ 321.991994][T21761] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 321.992024][T21761] ? _raw_spin_unlock+0x28/0x50 [ 321.992044][T21761] ? memcg1_oom_prepare+0x37e/0x450 [ 321.992063][T21761] try_charge_memcg+0xdfb/0x12a0 [ 321.992095][T21761] ? __pfx_try_charge_memcg+0x10/0x10 [ 321.992116][T21761] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 321.992146][T21761] charge_memcg+0x9f/0x180 [ 321.992163][T21761] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 321.992180][T21761] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 321.992199][T21761] __read_swap_cache_async+0x212/0x480 [ 321.992229][T21761] swap_cluster_readahead+0x358/0x680 [ 321.992255][T21761] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 321.992287][T21761] ? get_vma_policy+0x27b/0x3c0 [ 321.992310][T21761] swapin_readahead+0x196/0xc50 [ 321.992334][T21761] ? swap_table_get+0x1e/0x260 [ 321.992357][T21761] ? __pfx_swapin_readahead+0x10/0x10 [ 321.992379][T21761] ? swap_table_get+0x1e/0x260 [ 321.992398][T21761] ? swap_table_get+0x1e/0x260 [ 321.992417][T21761] ? swap_table_get+0x1e/0x260 [ 321.992438][T21761] ? swap_table_get+0x216/0x260 [ 321.992461][T21761] ? swap_cache_get_folio+0x513/0x520 [ 321.992487][T21761] do_swap_page+0x4d4/0x5e20 [ 321.992522][T21761] ? ___pte_offset_map+0x29/0x240 [ 321.992547][T21761] ? do_swap_page+0x192/0x5e20 [ 321.992565][T21761] ? __pfx_do_swap_page+0x10/0x10 [ 321.992585][T21761] ? __lock_acquire+0x6b5/0x2cf0 [ 321.992601][T21761] ? __pfx_default_wake_function+0x10/0x10 [ 321.992618][T21761] ? ___pte_offset_map+0x1ae/0x240 [ 321.992641][T21761] ? pte_offset_map_rw_nolock+0xea/0x160 [ 321.992665][T21761] handle_mm_fault+0x12d2/0x32a0 [ 321.992698][T21761] ? handle_mm_fault+0xee/0x32a0 [ 321.992727][T21761] ? __pfx_handle_mm_fault+0x10/0x10 [ 321.992745][T21761] ? lock_vma_under_rcu+0x45a/0x500 [ 321.992784][T21761] do_user_addr_fault+0xa73/0x1360 [ 321.992808][T21761] ? rcu_is_watching+0x15/0xb0 [ 321.992826][T21761] ? trace_page_fault_user+0x84/0x1c0 [ 321.992846][T21761] exc_page_fault+0x6a/0xc0 [ 321.992869][T21761] asm_exc_page_fault+0x26/0x30 [ 321.992891][T21761] RIP: 0033:0x7fddc9f55eb8 [ 321.992914][T21761] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 321.992928][T21761] RSP: 002b:00007ffeeef0a180 EFLAGS: 00010246 [ 321.992955][T21761] RAX: 0000000000000000 RBX: 0000555593a92500 RCX: 00007fddc9f5b58e [ 321.992965][T21761] RDX: 00007ffeeef0a1d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.992975][T21761] RBP: 00007fddca217da0 R08: 0000000000000000 R09: 0000000000000000 [ 321.992986][T21761] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004ea30 [ 321.992995][T21761] R13: 00007fddca215fac R14: 000000000004e731 R15: 00007ffeeef0a300 [ 321.993023][T21761] [ 321.993031][T21761] memory: usage 307200kB, limit 307200kB, failcnt 1218 [ 322.385238][T21761] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 322.419281][T21761] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 322.490388][T21761] Memory cgroup stats for /syz3: [ 322.490517][T21761] cache 0 [ 322.505958][T21761] rss 0 [ 322.513774][T21761] rss_huge 0 [ 322.530654][T21761] shmem 0 [ 322.533639][T21761] mapped_file 0 [ 322.537826][T21761] dirty 0 [ 322.540775][T21761] writeback 0 [ 322.544057][T21761] workingset_refault_anon 35 [ 322.565769][T21761] workingset_refault_file 360 [ 322.576451][T21761] swap 143360 [ 322.579788][T21761] swapcached 16384 [ 322.605876][T21761] pgpgin 62861 [ 322.612212][T21761] pgpgout 62857 [ 322.621783][T21814] netlink: 'syz.2.7603': attribute type 1 has an invalid length. [ 322.630210][T21761] pgfault 163642 [ 322.633805][T21761] pgmajfault 29 [ 322.648156][T21761] inactive_anon 16384 [ 322.652174][T21761] active_anon 0 [ 322.655632][T21761] inactive_file 0 [ 322.683205][T21761] active_file 0 [ 322.705935][T21817] netlink: 'syz.0.7606': attribute type 1 has an invalid length. [ 322.713780][T21761] unevictable 0 [ 322.730919][T21761] hierarchical_memory_limit 314572800 [ 322.769437][T21761] hierarchical_memsw_limit 9223372036854771712 [ 322.775631][T21761] total_cache 0 [ 322.811685][T21761] total_rss 0 [ 322.815017][T21761] total_rss_huge 0 [ 322.825788][T21761] total_shmem 0 [ 322.829867][T21761] total_mapped_file 0 [ 322.834159][T21761] total_dirty 0 [ 322.850151][T21761] total_writeback 0 [ 322.860278][T21761] total_workingset_refault_anon 35 [ 322.874670][T21761] total_workingset_refault_file 360 [ 322.884777][T21761] total_swap 143360 [ 322.893436][T21761] total_swapcached 16384 [ 322.935869][T21761] total_pgpgin 62861 [ 322.955990][T21761] total_pgpgout 62857 [ 322.960015][T21761] total_pgfault 163642 [ 322.964083][T21761] total_pgmajfault 29 [ 322.983604][T21761] total_inactive_anon 16384 [ 323.019149][T21761] total_active_anon 0 [ 323.023172][T21761] total_inactive_file 0 [ 323.034747][T21761] total_active_file 0 [ 323.041153][T21829] netlink: 'syz.2.7611': attribute type 1 has an invalid length. [ 323.054530][T21761] total_unevictable 0 [ 323.068882][T21761] anon_cost 0 [ 323.078508][T21761] file_cost 0 [ 323.081832][T21761] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7579,pid=21761,uid=0 [ 323.140515][T21761] Memory cgroup out of memory: Killed process 21761 (syz.3.7579) total-vm:104172kB, anon-rss:1336kB, file-rss:21900kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 323.418271][T21846] netlink: 'syz.5.7620': attribute type 8 has an invalid length. [ 323.629517][T21860] netlink: 'syz.3.7627': attribute type 1 has an invalid length. [ 324.544835][T21919] bridge6: entered allmulticast mode [ 324.818394][T21933] Bluetooth: MGMT ver 1.23 [ 325.019189][T21949] __nla_validate_parse: 4 callbacks suppressed [ 325.019210][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7671'. [ 325.068691][T21949] tipc: Enabling of bearer rejected, failed to enable media [ 325.292599][T21965] netlink: 'syz.2.7679': attribute type 5 has an invalid length. [ 325.383663][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 325.429726][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 325.471683][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 325.497482][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 325.523351][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 325.569323][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 325.599027][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 325.614944][T21969] sit0: left promiscuous mode [ 325.627917][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 325.647113][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'. [ 325.678526][T21969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.740122][T21969] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.766977][T21969] dummy0: left promiscuous mode [ 325.825937][T21969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.283436][T22005] sch_fq: defrate 4294967293 ignored. [ 326.541229][T22011] dvmrp12: entered allmulticast mode [ 326.575402][T22008] dvmrp12: left allmulticast mode [ 326.879328][T22030] pim6reg: entered allmulticast mode [ 327.337027][T22061] netlink: 'syz.6.7723': attribute type 4 has an invalid length. [ 327.878984][T22091] Bluetooth: MGMT ver 1.23 [ 329.075197][T22155] tipc: Started in network mode [ 329.085860][T22155] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 329.106071][T22155] tipc: Enabling of bearer rejected, failed to enable media [ 329.491263][T22186] Bluetooth: MGMT ver 1.23 [ 329.793890][ T5972] IPVS: starting estimator thread 0... [ 329.886213][T22207] IPVS: using max 34 ests per chain, 81600 per kthread [ 330.036409][T22215] netdevsim netdevsim0 : left promiscuous mode [ 330.043165][T22215] netdevsim netdevsim0 : left allmulticast mode [ 330.089331][T22215] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 330.108944][T22215] erspan1: left allmulticast mode [ 330.118970][T22215] bridge2: left allmulticast mode [ 330.124199][T22215] geneve3: left promiscuous mode [ 330.130905][T22215] geneve3: left allmulticast mode [ 330.142191][T22215] bond1: left promiscuous mode [ 330.164228][T22215] bond1: left allmulticast mode [ 330.174996][T22215] ip6gretap1: left allmulticast mode [ 330.194387][T22215] ip6gre1: left promiscuous mode [ 330.202976][T22215] ip6erspan0: left allmulticast mode [ 330.248698][T22237] __nla_validate_parse: 13 callbacks suppressed [ 330.248716][T22237] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7807'. [ 330.295822][T22237] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7807'. [ 330.312101][T22237] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 330.480697][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7813'. [ 331.366374][T22293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.944566][T22327] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 332.107526][T22338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7855'. [ 332.289797][T22354] Bluetooth: MGMT ver 1.23 [ 332.360759][T22359] sctp: [Deprecated]: syz.3.7863 (pid 22359) Use of int in max_burst socket option deprecated. [ 332.360759][T22359] Use struct sctp_assoc_value instead [ 332.618071][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7872'. [ 332.771109][T22390] netlink: 'syz.2.7879': attribute type 1 has an invalid length. [ 332.784166][T22392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7875'. [ 332.807216][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7878'. [ 332.823306][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7878'. [ 333.279092][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7891'. [ 333.445998][T22431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7897'. [ 333.994485][T22470] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 334.196617][T22485] netlink: 'syz.6.7923': attribute type 3 has an invalid length. [ 334.896462][ T7051] wlan1: Trigger new scan to find an IBSS to join [ 335.011119][T22535] macsec1: entered promiscuous mode [ 335.036446][T22535] macsec1: entered allmulticast mode [ 335.264250][T22548] ip6gretap0: entered promiscuous mode [ 335.289075][T22548] ip6gretap0: left promiscuous mode [ 335.620601][T22565] __nla_validate_parse: 5 callbacks suppressed [ 335.620619][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7959'. [ 335.651911][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7956'. [ 335.957935][T22591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.259006][T22609] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7975'. [ 336.394370][T22616] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.413040][T22616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.432050][T22621] netlink: 720 bytes leftover after parsing attributes in process `syz.0.7982'. [ 336.734268][T22638] lo speed is unknown, defaulting to 1000 [ 337.050656][T22638] xfrm0 speed is unknown, defaulting to 1000 [ 337.183594][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8000'. [ 337.234657][T22638] virt_wifi0 speed is unknown, defaulting to 1000 [ 337.323170][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8000'. [ 337.359790][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8000'. [ 337.604419][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8000'. [ 337.859577][ T60] wlan1: Trigger new scan to find an IBSS to join [ 338.274204][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8020'. [ 338.440053][T22715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8027'. [ 338.468774][T22715] netlink: 'syz.5.8027': attribute type 13 has an invalid length. [ 338.477157][T22715] netlink: 'syz.5.8027': attribute type 12 has an invalid length. [ 340.135010][T22820] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 340.749451][T22858] netlink: 'syz.6.8095': attribute type 6 has an invalid length. [ 340.766084][T22858] netlink: 'syz.6.8095': attribute type 7 has an invalid length. [ 340.777674][T22858] netlink: 'syz.6.8095': attribute type 8 has an invalid length. [ 340.809119][T22858] netlink: 'syz.6.8095': attribute type 13 has an invalid length. [ 340.856924][T22862] __nla_validate_parse: 8 callbacks suppressed [ 340.856943][T22862] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8098'. [ 340.895958][ T36] wlan1: Trigger new scan to find an IBSS to join [ 340.992888][T22869] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 341.782444][ T3872] wlan1: Creating new IBSS network, BSSID 8e:31:1d:51:81:c3 [ 341.850764][T22918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8123'. [ 342.148942][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8134'. [ 343.128086][T22939] syz.6.8134 (22939) used greatest stack depth: 17592 bytes left [ 343.489208][T22975] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8148'. [ 343.498731][T22975] ksmbd: Unknown IPC event: 1, ignore. [ 343.817956][T22997] : entered promiscuous mode [ 343.971469][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8165'. [ 344.014630][T23012] netlink: 'syz.5.8166': attribute type 15 has an invalid length. [ 344.152427][T23020] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 345.297987][T23075] bridge0: port 1(syz_tun) entered blocking state [ 345.311521][T23075] bridge0: port 1(syz_tun) entered disabled state [ 345.322015][T23075] syz_tun: entered allmulticast mode [ 345.330447][T23075] syz_tun: entered promiscuous mode [ 347.969905][T23225] atomic_op ffff888029efa998 conn xmit_atomic 0000000000000000 [ 348.375349][T23254] smc: net device hsr0 applied user defined pnetid SYZ2 [ 348.720112][T23275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8291'. [ 348.798033][T23284] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 348.845556][T23288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8297'. [ 348.964463][T23298] bridge0: port 1(veth0_to_bridge) entered blocking state [ 348.976224][T23298] bridge0: port 1(veth0_to_bridge) entered disabled state [ 348.983671][T23298] veth0_to_bridge: entered allmulticast mode [ 349.013324][T23298] veth0_to_bridge: entered promiscuous mode [ 349.032796][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8303'. [ 349.046375][T23302] syz_tun: refused to change device tx_queue_len [ 349.056558][T23302] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 349.241859][T23311] TCP: TCP_TX_DELAY enabled [ 349.330367][T23320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.597855][T23335] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8316'. [ 349.821151][T23350] netlink: 4308 bytes leftover after parsing attributes in process `syz.6.8321'. [ 349.913771][T23354] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8325'. [ 349.961634][T23354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8325'. [ 350.031927][T23360] netlink: 288 bytes leftover after parsing attributes in process `syz.2.8328'. [ 350.405989][T23384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8339'. [ 350.571097][T23395] nbd: must specify a device to reconfigure [ 350.615075][T23399] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8346'. [ 350.792497][T23411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.945586][T23423] tipc: Started in network mode [ 350.980067][T23423] tipc: Node identity 2001, cluster identity 4711 [ 351.006598][T23423] tipc: Enabling of bearer rejected, failed to enable media [ 351.745237][T23475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.206793][T23500] ip6gretap3: entered allmulticast mode [ 354.008012][T23624] netlink: 'syz.5.8450': attribute type 1 has an invalid length. [ 354.076929][T23629] netlink: 'syz.3.8453': attribute type 5 has an invalid length. [ 354.134681][T23633] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 354.158418][T23635] 9: renamed from lo (while UP) [ 354.227701][T23639] netlink: 'syz.2.8457': attribute type 5 has an invalid length. [ 354.248311][T23639] __nla_validate_parse: 5 callbacks suppressed [ 354.248330][T23639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8457'. [ 354.691690][T23671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8473'. [ 355.753450][T23747] macsec1: entered promiscuous mode [ 355.786181][T23747] macsec1: entered allmulticast mode [ 355.931232][T23763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8515'. [ 355.943184][T23755] "syz.2.8513" (23755) uses obsolete ecb(arc4) skcipher [ 356.717792][T23820] tipc: Enabled bearer , priority 10 [ 356.767234][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8544'. [ 356.940632][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8550'. [ 356.963905][T23836] tipc: Enabling of bearer rejected, failed to enable media [ 357.298246][T23856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8558'. [ 357.829986][T23882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8570'. [ 357.840809][ T24] tipc: Node number set to 4278255617 [ 358.854119][T23951] pimreg3: entered allmulticast mode [ 359.032012][T23965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8611'. [ 359.068059][T23967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8612'. [ 359.106101][T23967] mac80211_hwsim hwsim8 wlan1: Device is already in use. [ 359.127238][T23973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8615'. [ 359.288843][T23985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8621'. [ 359.500183][T24002] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8629'. [ 359.517659][T24002] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 359.662469][T24015] netlink: 332 bytes leftover after parsing attributes in process `syz.0.8637'. [ 359.705839][T24015] netlink: 'syz.0.8637': attribute type 9 has an invalid length. [ 359.723913][T24015] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8637'. [ 359.754267][T24015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8637'. [ 360.586524][T24068] syz_tun: entered allmulticast mode [ 361.070511][T24095] netlink: 'syz.6.8674': attribute type 1 has an invalid length. [ 361.082987][T24095] netlink: 232 bytes leftover after parsing attributes in process `syz.6.8674'. [ 361.894293][ T5891] virt_wifi0 speed is unknown, defaulting to 1000 [ 361.949130][T24145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.959515][T24145] team0: Port device bond2 added [ 362.918845][T24218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8727'. [ 362.940187][T24218] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8727'. [ 363.379644][T24248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8744'. [ 363.747770][T24269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8754'. [ 364.494423][T24307] IPVS: Error connecting to the multicast addr [ 365.166872][T24353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8789'. [ 366.555049][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8837'. [ 366.711501][T24462] openvswitch: netlink: Missing valid actions attribute. [ 366.733348][T24462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.557542][T24506] netlink: 'syz.3.8863': attribute type 6 has an invalid length. [ 367.741251][T24512] macvtap1: entered promiscuous mode [ 367.755912][T24512] bridge0: entered promiscuous mode [ 367.761345][T24512] macvtap1: entered allmulticast mode [ 367.776350][T24512] bridge0: entered allmulticast mode [ 367.797414][T24512] bridge0: port 2(macvtap1) entered blocking state [ 367.813729][T24512] bridge0: port 2(macvtap1) entered disabled state [ 367.898268][T24512] bridge0: left allmulticast mode [ 367.905122][T24512] bridge0: left promiscuous mode [ 368.304055][T24544] netlink: 'syz.6.8883': attribute type 10 has an invalid length. [ 368.317097][T24544] netlink: 2 bytes leftover after parsing attributes in process `syz.6.8883'. [ 368.328687][T24544] bond0: entered promiscuous mode [ 368.333929][T24544] bond_slave_0: entered promiscuous mode [ 368.342027][T24544] bond_slave_1: entered promiscuous mode [ 368.348837][T24544] bridge0: port 4(bond0) entered blocking state [ 368.355453][T24544] bridge0: port 4(bond0) entered disabled state [ 368.362780][T24544] bond0: entered allmulticast mode [ 368.373176][T24544] bond_slave_0: entered allmulticast mode [ 368.380474][T24544] bond_slave_1: entered allmulticast mode [ 368.389328][T24544] bridge0: port 4(bond0) entered blocking state [ 368.395776][T24544] bridge0: port 4(bond0) entered forwarding state [ 368.511864][T24553] netlink: 'syz.6.8886': attribute type 8 has an invalid length. [ 368.990284][T24589] netlink: 'syz.3.8903': attribute type 29 has an invalid length. [ 369.010643][T24589] netlink: 'syz.3.8903': attribute type 29 has an invalid length. [ 369.344303][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8920'. [ 369.354739][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8920'. [ 369.369632][T24618] netlink: 'syz.5.8920': attribute type 18 has an invalid length. [ 369.963488][T24655] gtp1: entered promiscuous mode [ 370.008637][T24655] gtp1: entered allmulticast mode [ 370.688076][T24707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8958'. [ 370.783707][T24713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8961'. [ 371.305154][T24749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8979'. [ 371.530340][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8989'. [ 371.606100][T24773] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8992'. [ 371.626533][T24777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8994'. [ 371.631607][T24775] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8991'. [ 371.850000][T11461] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 372.055271][T24809] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 372.104053][T24811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9010'. [ 372.113313][T24811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9010'. [ 372.230762][T24811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9010'. [ 372.442830][T24834] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 373.396312][T24895] tipc: MTU too low for tipc bearer [ 374.619652][T24960] team0: Device 9 is loopback device. Loopback devices can't be added as a team port [ 374.664532][T24960] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check. [ 375.175686][T24999] tipc: Enabling of bearer rejected, failed to enable media [ 375.267960][T25007] netlink: 'syz.0.9098': attribute type 3 has an invalid length. [ 376.095800][ T5843] Bluetooth: hci6: command tx timeout [ 376.163211][T25069] netlink: 'syz.5.9129': attribute type 27 has an invalid length. [ 376.352126][T25083] tipc: Started in network mode [ 376.400279][T25083] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 376.431579][T25083] tipc: Enabling of bearer rejected, failed to enable media [ 376.853075][T25123] netlink: 'syz.5.9154': attribute type 3 has an invalid length. [ 377.389656][T25151] __nla_validate_parse: 6 callbacks suppressed [ 377.389677][T25151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9167'. [ 377.411295][T25151] tipc: Started in network mode [ 377.417066][T25151] tipc: Node identity 4246, cluster identity 4711 [ 377.423504][T25151] tipc: Node number set to 16966 [ 377.566700][T25164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9173'. [ 377.868215][T25183] tipc: Enabling of bearer rejected, failed to enable media [ 377.959977][T25190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9187'. [ 378.094246][T25197] xt_l2tp: v2 tid > 0xffff: 37482740 [ 378.562710][T25225] tc_dump_action: action bad kind [ 378.980582][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9212'. [ 379.016557][T25247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9213'. [ 379.204191][T25256] Cannot find del_set index 49151 as target [ 379.385526][ T6137] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 379.408788][T25273] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.9225'. [ 379.698650][T25290] dummy0: entered promiscuous mode [ 379.722314][T25286] dummy0: left promiscuous mode [ 380.287943][T25321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9247'. [ 380.498508][T25334] netem: change failed [ 381.256233][T25388] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9277'. [ 381.565028][T25411] netlink: 'syz.0.9290': attribute type 6 has an invalid length. [ 381.574806][T25411] netlink: 'syz.0.9290': attribute type 6 has an invalid length. [ 381.719754][T25422] netlink: 'syz.0.9293': attribute type 6 has an invalid length. [ 381.756288][T25425] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9295'. [ 382.007863][T25442] macsec2: entered promiscuous mode [ 382.013113][T25442] macsec2: entered allmulticast mode [ 382.063750][T25447] xt_hashlimit: size too large, truncated to 1048576 [ 382.632256][T25480] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9321'. [ 382.642441][T25480] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9321'. [ 382.665050][T25480] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9321'. [ 382.822445][T25492] netlink: 'syz.6.9327': attribute type 30 has an invalid length. [ 382.974016][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9329'. [ 383.017972][T25498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9329'. [ 383.177913][T25513] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9335'. [ 383.200422][T25513] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9335'. [ 383.215900][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 383.321392][T25520] netlink: 'syz.6.9341': attribute type 1 has an invalid length. [ 383.444563][T25528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9343'. [ 383.786126][T25549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9351'. [ 383.859703][T25537] udevd[25537]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 383.950686][T25341] udevd[25341]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 384.437031][T25595] netlink: 'syz.2.9373': attribute type 11 has an invalid length. [ 384.464774][T25595] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.9373'. [ 384.553544][T25600] dummy0: entered allmulticast mode [ 384.680136][T25611] netlink: 'syz.3.9381': attribute type 1 has an invalid length. [ 385.372757][T25665] tipc: Enabling of bearer rejected, failed to enable media [ 385.400719][T25668] netlink: zone id is out of range [ 385.419625][T25668] netlink: zone id is out of range [ 385.433851][T25668] netlink: zone id is out of range [ 385.453757][T25668] netlink: zone id is out of range [ 385.465310][T25668] netlink: zone id is out of range [ 385.472417][T25668] netlink: zone id is out of range [ 385.480450][T25668] netlink: zone id is out of range [ 385.486337][T25668] netlink: zone id is out of range [ 385.491651][T25668] netlink: zone id is out of range [ 385.498250][T25668] netlink: zone id is out of range [ 386.154257][T25704] netlink: 'syz.5.9426': attribute type 13 has an invalid length. [ 386.170100][T25704] netlink: 'syz.5.9426': attribute type 17 has an invalid length. [ 386.778304][T25748] netlink: 'syz.0.9448': attribute type 13 has an invalid length. [ 388.762025][T25872] __nla_validate_parse: 2 callbacks suppressed [ 388.762044][T25872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9507'. [ 388.875962][T25876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9509'. [ 389.164723][T25887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9515'. [ 389.196645][T25887] netlink: 'syz.2.9515': attribute type 2 has an invalid length. [ 389.204412][T25887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9515'. [ 389.862853][T25934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9536'. [ 390.153643][T25948] sit3: entered promiscuous mode [ 391.313767][T26005] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9566'. [ 392.012810][T26029] netlink: 'syz.3.9577': attribute type 10 has an invalid length. [ 392.064715][T26036] netlink: 'syz.3.9577': attribute type 10 has an invalid length. [ 392.101187][T26029] team0: Port device dummy0 added [ 392.172014][T26036] team0: Port device dummy0 removed [ 392.209263][T26036] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 392.329456][T26052] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 392.403633][T26054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9589'. [ 392.519495][T26058] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.655271][T26058] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.676348][ T31] INFO: task syz.1.5279:16938 blocked for more than 143 seconds. [ 392.711726][ T31] Not tainted syzkaller #0 [ 392.719608][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.719617][T26074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9601'. [ 392.756268][ T31] task:syz.1.5279 state:D stack:25848 pid:16938 tgid:16937 ppid:5825 task_flags:0x400040 flags:0x00080002 [ 392.768464][T26077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9599'. [ 392.778877][ T31] Call Trace: [ 392.782248][ T31] [ 392.785246][ T31] __schedule+0x14ef/0x4fb0 [ 392.790630][ T31] ? __pfx___schedule+0x10/0x10 [ 392.795591][ T31] ? schedule+0x90/0x360 [ 392.800397][ T31] schedule+0x164/0x360 [ 392.808295][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.813926][ T31] __mutex_lock+0x7fe/0x1300 [ 392.819596][ T31] ? __mutex_lock+0x5ac/0x1300 [ 392.824520][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 392.831090][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.836400][ T31] ? stack_trace_save+0xa9/0x100 [ 392.841541][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 392.847382][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 392.853380][ T31] ? stack_depot_save_flags+0x33/0x810 [ 392.859278][ T31] ? kasan_save_track+0x4f/0x80 [ 392.864144][ T31] ? kasan_save_track+0x3e/0x80 [ 392.869123][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 392.873913][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 392.879403][ T31] ? netlink_dump+0x1ef/0xe80 [ 392.884087][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 392.890028][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 392.896944][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 392.901622][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 392.906883][ T31] ? genl_rcv+0x28/0x40 [ 392.911048][ T31] ? netlink_unicast+0x80f/0x9b0 [ 392.916384][ T31] ? netlink_sendmsg+0x813/0xb40 [ 392.921337][ T31] ? __sock_sendmsg+0x21c/0x270 [ 392.926402][ T31] ? ____sys_sendmsg+0x4d7/0x810 [ 392.931346][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 392.936466][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 392.941579][ T31] ? do_syscall_64+0xe2/0xf80 [ 392.946884][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.952974][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 392.959616][ T31] ? rcu_is_watching+0x15/0xb0 [ 392.964403][ T31] ? trace_kmalloc+0x1f/0xb0 [ 392.969368][ T31] ? __kmalloc_node_track_caller_noprof+0x577/0x7f0 [ 392.980079][ T31] genl_dumpit+0x10b/0x1b0 [ 392.984511][ T31] netlink_dump+0x722/0xe80 [ 392.989245][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 392.994324][ T31] ? genl_start+0x499/0x6c0 [ 392.999322][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 393.004577][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 393.010705][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 393.017026][ T31] ? genl_get_cmd+0x4a8/0x930 [ 393.021743][ T31] ? __pfx_genl_start+0x10/0x10 [ 393.026947][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 393.031911][ T31] ? __pfx_genl_done+0x10/0x10 [ 393.037247][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 393.041786][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.047263][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 393.053873][ T31] netlink_rcv_skb+0x232/0x4b0 [ 393.058970][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.064008][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.069635][ T31] ? genl_rcv+0x19/0x40 [ 393.073836][ T31] ? down_read+0x272/0x2e0 [ 393.078427][ T31] ? genl_rcv+0xd/0x40 [ 393.082519][ T31] genl_rcv+0x28/0x40 [ 393.086931][ T31] netlink_unicast+0x80f/0x9b0 [ 393.091696][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 393.097291][ T31] ? netlink_sendmsg+0x650/0xb40 [ 393.102242][ T31] ? skb_put+0x11b/0x210 [ 393.106641][ T31] netlink_sendmsg+0x813/0xb40 [ 393.111507][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.117130][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.122095][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.127722][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.133024][ T31] __sock_sendmsg+0x21c/0x270 [ 393.137794][ T31] ____sys_sendmsg+0x4d7/0x810 [ 393.142571][ T31] ? __might_fault+0xaf/0x130 [ 393.148023][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.153338][ T31] ? import_iovec+0x73/0xa0 [ 393.158210][ T31] ___sys_sendmsg+0x2a5/0x360 [ 393.162904][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 393.167927][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.173221][ T31] ? futex_wait+0x29a/0x380 [ 393.178042][ T31] ? __fget_files+0x2a/0x420 [ 393.182630][ T31] ? __fget_files+0x3a0/0x420 [ 393.187694][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 393.192676][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.198323][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.203106][ T31] do_syscall_64+0xe2/0xf80 [ 393.207934][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.214012][ T31] ? trace_irq_disable+0x37/0x100 [ 393.219491][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.224541][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.230543][ T31] RIP: 0033:0x7f8f0c79acb9 [ 393.234965][ T31] RSP: 002b:00007f8f0d6d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.243716][ T31] RAX: ffffffffffffffda RBX: 00007f8f0ca15fa0 RCX: 00007f8f0c79acb9 [ 393.252233][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 393.260381][ T31] RBP: 00007f8f0c808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 393.268746][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.277106][ T31] R13: 00007f8f0ca16038 R14: 00007f8f0ca15fa0 R15: 00007ffd596d6aa8 [ 393.285091][ T31] [ 393.288642][ T31] [ 393.288642][ T31] Showing all locks held in the system: [ 393.298298][ T31] 1 lock held by rcu_tasks_trace/29: [ 393.303601][ T31] #0: ffffffff8e35b070 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf4/0xde0 [ 393.315056][ T31] 1 lock held by khungtaskd/31: [ 393.330111][ T31] #0: ffffffff8e35a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 393.340324][ T31] 1 lock held by klogd/5189: [ 393.344953][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 393.355262][ T31] 2 locks held by getty/5581: [ 393.360204][ T31] #0: ffff8880357080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 393.370298][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 393.380611][ T31] 2 locks held by syz.4.2183/10368: [ 393.386101][ T31] #0: ffffffff8f816b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.394326][ T31] #1: ffffffff8e678968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 393.404913][ T31] 4 locks held by kworker/u8:17/11461: [ 393.410424][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 393.420761][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 393.429990][ T31] #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 393.439069][ T31] #3: ffffffff9a00ade0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 393.449741][ T31] 3 locks held by syz.1.5279/16938: [ 393.455112][ T31] #0: ffffffff8f816b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.463701][ T31] #1: ffff888033fa96f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 393.474213][ T31] #2: ffffffff8e678968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 393.485068][ T31] 4 locks held by syz.6.9591/26058: [ 393.490529][ T31] #0: ffffffff8f816b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.498817][ T31] #1: ffff8880568560e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x246/0x3b0 [ 393.509406][ T31] #2: ffff888059ba3250 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x255/0x3b0 [ 393.520962][ T31] #3: ffffffff8e360b00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 393.530952][ T31] [ 393.533272][ T31] ============================================= [ 393.533272][ T31] [ 393.546929][ T31] NMI backtrace for cpu 0 [ 393.546956][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 393.546972][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 393.546978][ T31] Call Trace: [ 393.546983][ T31] [ 393.546987][ T31] dump_stack_lvl+0xe8/0x150 [ 393.547004][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 393.547017][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 393.547031][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 393.547046][ T31] sys_info+0x135/0x170 [ 393.547056][ T31] watchdog+0xf90/0xfe0 [ 393.547072][ T31] ? watchdog+0x209/0xfe0 [ 393.547089][ T31] kthread+0x726/0x8b0 [ 393.547103][ T31] ? __pfx_watchdog+0x10/0x10 [ 393.547116][ T31] ? __pfx_kthread+0x10/0x10 [ 393.547131][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.547144][ T31] ? __pfx_kthread+0x10/0x10 [ 393.547157][ T31] ret_from_fork+0x51b/0xa40 [ 393.547169][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 393.547178][ T31] ? __switch_to+0xc82/0x1410 [ 393.547194][ T31] ? __pfx_kthread+0x10/0x10 [ 393.547207][ T31] ret_from_fork_asm+0x1a/0x30 [ 393.547227][ T31] [ 393.547234][ T31] Sending NMI from CPU 0 to CPUs 1: [ 393.668253][ C1] NMI backtrace for cpu 1 [ 393.668268][ C1] CPU: 1 UID: 0 PID: 1085 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 393.668287][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 393.668298][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 393.668324][ C1] RIP: 0010:__lock_acquire+0x524/0x2cf0 [ 393.668343][ C1] Code: 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c7 00 00 00 49 83 ff 31 0f 83 83 00 00 00 8b 03 25 ff 1f 00 00 48 0f a3 05 8c 01 38 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 b0 23 78 93 eb 32 83 3d 53 91 [ 393.668357][ C1] RSP: 0018:ffffc90003e5f270 EFLAGS: 00000003 [ 393.668370][ C1] RAX: 0000000000000808 RBX: ffff8880273e8b78 RCX: 0000000000000004 [ 393.668381][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.668390][ C1] RBP: ffff8880273e8bd0 R08: ffffffff8174c0e5 R09: ffffffff8e35a320 [ 393.668402][ C1] R10: ffffc90003e5f588 R11: fffff520007cbebd R12: 00000000ffffff05 [ 393.668414][ C1] R13: ffff8880273e8bd0 R14: ffff8880273e8000 R15: 0000000000000001 [ 393.668425][ C1] FS: 0000000000000000(0000) GS:ffff888125a29000(0000) knlGS:0000000000000000 [ 393.668438][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.668448][ C1] CR2: 00007f38c07de2f8 CR3: 000000007650e000 CR4: 00000000003526f0 [ 393.668462][ C1] Call Trace: [ 393.668468][ C1] [ 393.668479][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 393.668499][ C1] ? lock_acquire+0x106/0x330 [ 393.668517][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 393.668534][ C1] ? lock_acquire+0x106/0x330 [ 393.668550][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 393.668567][ C1] lock_acquire+0x106/0x330 [ 393.668582][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 393.668604][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 393.668621][ C1] ? __unwind_start+0xf7/0x760 [ 393.668639][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 393.668657][ C1] unwind_next_frame+0xc2/0x23c0 [ 393.668675][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 393.668695][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 393.668716][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 393.668737][ C1] __unwind_start+0x5b8/0x760 [ 393.668757][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.668781][ C1] arch_stack_walk+0xe3/0x150 [ 393.668801][ C1] ? __unwind_start+0xf7/0x760 [ 393.668821][ C1] stack_trace_save+0xa9/0x100 [ 393.668843][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 393.668864][ C1] ? kasan_save_free_info+0x46/0x50 [ 393.668885][ C1] ? consume_skb+0x9e/0xf0 [ 393.668907][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 393.668929][ C1] kasan_save_track+0x3e/0x80 [ 393.668964][ C1] kasan_save_free_info+0x46/0x50 [ 393.668984][ C1] __kasan_slab_free+0x5c/0x80 [ 393.669000][ C1] kmem_cache_free+0x195/0x610 [ 393.669015][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 393.669041][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 393.669070][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 393.669087][ C1] process_scheduled_works+0xaec/0x17a0 [ 393.669114][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 393.669129][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 393.669153][ C1] ? assign_work+0x3d3/0x440 [ 393.669169][ C1] worker_thread+0x89f/0xd90 [ 393.669195][ C1] kthread+0x726/0x8b0 [ 393.669215][ C1] ? __pfx_worker_thread+0x10/0x10 [ 393.669231][ C1] ? __pfx_kthread+0x10/0x10 [ 393.669252][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.669272][ C1] ? __pfx_kthread+0x10/0x10 [ 393.669291][ C1] ret_from_fork+0x51b/0xa40 [ 393.669307][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 393.669322][ C1] ? __switch_to+0xc82/0x1410 [ 393.669345][ C1] ? __pfx_kthread+0x10/0x10 [ 393.669365][ C1] ret_from_fork_asm+0x1a/0x30 [ 393.669391][ C1] [ 394.039985][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 394.046863][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 394.055977][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 394.066294][ T31] Call Trace: [ 394.069606][ T31] [ 394.072519][ T31] vpanic+0x1e0/0x670 [ 394.076497][ T31] panic+0xc5/0xd0 [ 394.080256][ T31] ? __pfx_panic+0x10/0x10 [ 394.084769][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 394.090143][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 394.096289][ T31] watchdog+0xfda/0xfe0 [ 394.100439][ T31] ? watchdog+0x209/0xfe0 [ 394.104782][ T31] kthread+0x726/0x8b0 [ 394.108843][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.113503][ T31] ? __pfx_kthread+0x10/0x10 [ 394.118083][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.123264][ T31] ? __pfx_kthread+0x10/0x10 [ 394.127835][ T31] ret_from_fork+0x51b/0xa40 [ 394.132421][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 394.137593][ T31] ? __switch_to+0xc82/0x1410 [ 394.142253][ T31] ? __pfx_kthread+0x10/0x10 [ 394.146826][ T31] ret_from_fork_asm+0x1a/0x30 [ 394.151583][ T31] [ 394.154964][ T31] Kernel Offset: disabled [ 394.159275][ T31] Rebooting in 86400 seconds..