last executing test programs: 2.131748785s ago: executing program 3 (id=11506): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000005c0)={r1, 0x9, 0x3, 0xfff8, 0xfff, 0x99, 0x9, 0xc99b, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xdb, 0x1, 0x8, 0x5}}, &(0x7f0000000140)=0xb0) 1.902619075s ago: executing program 3 (id=11511): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x4, 0x2, {0x0, 0x0, 0x0, 0x0, 0x20311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01}, 0x810) 1.665157712s ago: executing program 2 (id=11515): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a00010a0000000000000000020000"], 0x1c}}, 0x0) 1.562233156s ago: executing program 3 (id=11518): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x4) 1.525729744s ago: executing program 2 (id=11520): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.473871205s ago: executing program 4 (id=11521): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.349838937s ago: executing program 2 (id=11524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff00}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48050}, 0x20004014) 1.250615234s ago: executing program 4 (id=11525): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000009000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 1.217863497s ago: executing program 2 (id=11527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) 1.114770517s ago: executing program 1 (id=11529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 946.645062ms ago: executing program 2 (id=11531): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff}, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x13, 0x0, 0x14}}}]}, 0x78}}, 0x0) 930.986459ms ago: executing program 1 (id=11532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 839.808498ms ago: executing program 2 (id=11534): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 729.773017ms ago: executing program 1 (id=11535): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 669.306392ms ago: executing program 0 (id=11536): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x8}]}}]}, 0x3c}}, 0x0) 522.898706ms ago: executing program 1 (id=11537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x103200, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) 516.972612ms ago: executing program 0 (id=11538): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) 459.990623ms ago: executing program 4 (id=11539): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34b2, 0x1}, 0x20) connect$l2tp6(r0, &(0x7f0000001100)={0xa, 0x0, 0xe, @dev={0xfe, 0x80, '\x00', 0x41}, 0xfff, 0x3}, 0x20) 380.889927ms ago: executing program 0 (id=11540): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x44) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) 326.675739ms ago: executing program 1 (id=11541): r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x24020400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x4000) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 308.006224ms ago: executing program 3 (id=11542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1, 0x0, 0x6}, 0x18) socket$netlink(0x10, 0x3, 0x400000000000004) 301.865961ms ago: executing program 0 (id=11543): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 284.960775ms ago: executing program 4 (id=11544): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r1, &(0x7f00000005c0)="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", 0xaf6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0xaf5, 0x0) 184.124465ms ago: executing program 3 (id=11545): r0 = socket(0x25, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000280)="1ab84f91e190", 0x6, 0x4000, 0x0, 0x0) 167.984069ms ago: executing program 1 (id=11546): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0xac}}, 0x0) 150.289831ms ago: executing program 0 (id=11547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x1, 0x1000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r0}, 0x20) 149.636332ms ago: executing program 4 (id=11548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0x10) 34.703616ms ago: executing program 0 (id=11549): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:* rwM'], 0xa) 28.651903ms ago: executing program 4 (id=11550): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1}}, 0x18) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000000)="8af83b42e304bd", 0x7}], 0x2}, 0x0) 0s ago: executing program 3 (id=11551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4, 0x2000}]}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): T15209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4356'. [ 309.635150][T15211] netlink: 'syz.4.4357': attribute type 1 has an invalid length. [ 310.108934][T15234] net_ratelimit: 3 callbacks suppressed [ 310.108953][T15234] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 310.485625][T15249] netlink: 'syz.0.4376': attribute type 1 has an invalid length. [ 310.493657][T15249] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4376'. [ 310.770011][T15255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.739615][T15221] syz.4.4362: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 311.760053][T15221] CPU: 0 UID: 0 PID: 15221 Comm: syz.4.4362 Not tainted 6.15.0-syzkaller-12464-ga4a65c6fe08b #0 PREEMPT(full) [ 311.760072][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.760081][T15221] Call Trace: [ 311.760086][T15221] [ 311.760093][T15221] dump_stack_lvl+0x189/0x250 [ 311.760123][T15221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.760144][T15221] ? __pfx__printk+0x10/0x10 [ 311.760160][T15221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 311.760177][T15221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 311.760195][T15221] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 311.760211][T15221] warn_alloc+0x214/0x310 [ 311.760235][T15221] ? __pfx_warn_alloc+0x10/0x10 [ 311.760261][T15221] ? __get_vm_area_node+0x28f/0x300 [ 311.760279][T15221] ? veth_dev_init+0x363/0x570 [ 311.760301][T15221] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 311.760349][T15221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.760365][T15221] ? __kasan_kmalloc_large+0x1c/0xa0 [ 311.760383][T15221] ? rcu_is_watching+0x15/0xb0 [ 311.760399][T15221] ? veth_dev_init+0x363/0x570 [ 311.760417][T15221] ? veth_dev_init+0x363/0x570 [ 311.760434][T15221] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 311.760450][T15221] ? veth_dev_init+0x363/0x570 [ 311.760473][T15221] veth_dev_init+0x363/0x570 [ 311.760498][T15221] register_netdevice+0x6bc/0x1ae0 [ 311.760535][T15221] ? snprintf+0xda/0x120 [ 311.760554][T15221] ? __pfx_register_netdevice+0x10/0x10 [ 311.760571][T15221] ? __pfx_snprintf+0x10/0x10 [ 311.760586][T15221] ? __asan_memset+0x22/0x50 [ 311.760606][T15221] ? dev_addr_mod+0x2ce/0x3d0 [ 311.760627][T15221] veth_newlink+0x5cc/0xa50 [ 311.760650][T15221] ? __pfx_veth_newlink+0x10/0x10 [ 311.760673][T15221] ? __pfx_css_rstat_updated+0x10/0x10 [ 311.760762][T15221] ? validate_linkmsg+0x765/0x950 [ 311.760801][T15221] ? __pfx_veth_newlink+0x10/0x10 [ 311.760828][T15221] rtnl_newlink_create+0x310/0xb00 [ 311.760856][T15221] ? __pfx_aa_get_newest_label+0x10/0x10 [ 311.760886][T15221] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 311.760904][T15221] ? rtnl_newlink+0x8db/0x1c70 [ 311.760936][T15221] ? __pfx___mutex_lock+0x10/0x10 [ 311.760974][T15221] ? ns_capable+0x8a/0xf0 [ 311.761009][T15221] rtnl_newlink+0x16d6/0x1c70 [ 311.761040][T15221] ? netlink_sendmsg+0x805/0xb30 [ 311.761075][T15221] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.761198][T15221] ? __lock_acquire+0xab9/0xd20 [ 311.761256][T15221] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.761284][T15221] rtnetlink_rcv_msg+0x7cf/0xb70 [ 311.761316][T15221] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 311.761342][T15221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.761366][T15221] ? ref_tracker_free+0x63a/0x7d0 [ 311.761389][T15221] ? __copy_skb_header+0xa7/0x550 [ 311.761414][T15221] ? __pfx_ref_tracker_free+0x10/0x10 [ 311.761453][T15221] netlink_rcv_skb+0x208/0x470 [ 311.761474][T15221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.761504][T15221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.761548][T15221] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.761566][T15221] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.761593][T15221] netlink_unicast+0x75b/0x8d0 [ 311.761636][T15221] netlink_sendmsg+0x805/0xb30 [ 311.761667][T15221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.761692][T15221] ? aa_sock_msg_perm+0x94/0x160 [ 311.761719][T15221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.761745][T15221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.761765][T15221] __sock_sendmsg+0x219/0x270 [ 311.761795][T15221] ____sys_sendmsg+0x505/0x830 [ 311.761824][T15221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.761857][T15221] ? import_iovec+0x74/0xa0 [ 311.761884][T15221] ___sys_sendmsg+0x21f/0x2a0 [ 311.761909][T15221] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.761976][T15221] ? __fget_files+0x2a/0x420 [ 311.761999][T15221] ? __fget_files+0x3a0/0x420 [ 311.762034][T15221] __x64_sys_sendmsg+0x19b/0x260 [ 311.762058][T15221] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.762093][T15221] ? rcu_is_watching+0x15/0xb0 [ 311.762118][T15221] ? do_syscall_64+0xbe/0x3b0 [ 311.762148][T15221] do_syscall_64+0xfa/0x3b0 [ 311.762171][T15221] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.762195][T15221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.762214][T15221] ? clear_bhb_loop+0x60/0xb0 [ 311.762239][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.762258][T15221] RIP: 0033:0x7fbf6818e929 [ 311.762277][T15221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.762292][T15221] RSP: 002b:00007fbf690aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.762314][T15221] RAX: ffffffffffffffda RBX: 00007fbf683b5fa0 RCX: 00007fbf6818e929 [ 311.762328][T15221] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 311.762340][T15221] RBP: 00007fbf68210b39 R08: 0000000000000000 R09: 0000000000000000 [ 311.762351][T15221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.762362][T15221] R13: 0000000000000000 R14: 00007fbf683b5fa0 R15: 00007fff34cd4aa8 [ 311.762397][T15221] [ 311.762404][T15221] Mem-Info: [ 312.262227][T15221] active_anon:5830 inactive_anon:0 isolated_anon:0 [ 312.262227][T15221] active_file:1194 inactive_file:39909 isolated_file:0 [ 312.262227][T15221] unevictable:768 dirty:108 writeback:0 [ 312.262227][T15221] slab_reclaimable:10781 slab_unreclaimable:121947 [ 312.262227][T15221] mapped:29255 shmem:1383 pagetables:1265 [ 312.262227][T15221] sec_pagetables:0 bounce:0 [ 312.262227][T15221] kernel_misc_reclaimable:0 [ 312.262227][T15221] free:1305313 free_pcp:11627 free_cma:0 [ 312.311485][T15221] Node 0 active_anon:23320kB inactive_anon:0kB active_file:4776kB inactive_file:159436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117020kB dirty:432kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12724kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 312.347338][T15221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 312.379099][T15221] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.409362][T15221] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 312.415464][T15221] Node 0 DMA32 free:1297244kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23272kB inactive_anon:0kB active_file:4776kB inactive_file:157596kB unevictable:1536kB writepending:432kB present:3129332kB managed:2561076kB mlocked:0kB bounce:0kB free_pcp:32264kB local_pcp:16536kB free_cma:0kB [ 312.448285][T15221] lowmem_reserve[]: 0 0 1 1 1 [ 312.453055][T15221] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 312.483605][T15221] lowmem_reserve[]: 0 0 0 0 0 [ 312.488762][T15221] Node 1 Normal free:3908636kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15360kB local_pcp:7200kB free_cma:0kB [ 312.521616][T15221] lowmem_reserve[]: 0 0 0 0 0 [ 312.526606][T15221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 312.539604][T15221] Node 0 DMA32: 607*4kB (UM) 770*8kB (UME) 295*16kB (UM) 729*32kB (UME) 361*64kB (UM) 70*128kB (UME) 43*256kB (UME) 24*512kB (UM) 7*1024kB (UM) 3*2048kB (M) 291*4096kB (M) = 1297244kB [ 312.558302][T15221] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 312.570292][T15221] Node 1 Normal: 177*4kB (U) 51*8kB (UME) 36*16kB (UME) 98*32kB (UME) 21*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 951*4096kB (M) = 3908636kB [ 312.588279][T15221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.598054][T15221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.609552][T15221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.619281][T15221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.628609][T15221] 42484 total pagecache pages [ 312.633296][T15221] 0 pages in swap cache [ 312.637467][T15221] Free swap = 124996kB [ 312.641626][T15221] Total swap = 124996kB [ 312.645849][T15221] 2097051 pages RAM [ 312.649670][T15221] 0 pages HighMem/MovableOnly [ 312.654342][T15221] 424676 pages reserved [ 312.658500][T15221] 0 pages cma reserved [ 313.903174][T15229] netlink: 'syz.3.4366': attribute type 29 has an invalid length. [ 313.911173][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4366'. [ 313.922025][T15241] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 313.944264][T15241] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 313.976919][T15247] ÿÿÿÿÿÿ: renamed from vlan1 [ 314.185626][T15265] netlink: 'syz.1.4383': attribute type 1 has an invalid length. [ 314.205289][T15265] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4383'. [ 314.222656][T15268] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4385'. [ 314.288210][T15272] veth4: entered allmulticast mode [ 314.752705][T15292] netlink: 'syz.0.4399': attribute type 1 has an invalid length. [ 315.076520][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4405'. [ 315.104466][T15309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4405'. [ 315.150652][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4405'. [ 315.193585][T15309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4405'. [ 315.251108][T15309] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4405'. [ 315.457862][T15324] netlink: 'syz.3.4411': attribute type 10 has an invalid length. [ 315.490703][T15324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4411'. [ 315.512006][T15324] batadv0: entered promiscuous mode [ 315.556514][T15324] batadv0: entered allmulticast mode [ 315.581451][T15324] bond0: (slave batadv0): Releasing backup interface [ 315.621749][T15324] bridge0: port 4(batadv0) entered blocking state [ 315.644259][T15324] bridge0: port 4(batadv0) entered disabled state [ 315.654304][T15334] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4415'. [ 315.722571][T15334] batadv_slave_1: entered promiscuous mode [ 315.767382][T15334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.941586][ T1342] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 315.951200][ T1342] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 316.942642][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.949086][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.306907][T15449] netlink: 'syz.4.4472': attribute type 2 has an invalid length. [ 318.314708][T15449] netlink: 'syz.4.4472': attribute type 1 has an invalid length. [ 318.395098][T15449] netlink: 'syz.4.4472': attribute type 1 has an invalid length. [ 318.403253][T15449] netlink: 'syz.4.4472': attribute type 1 has an invalid length. [ 318.445484][T15449] netlink: 'syz.4.4472': attribute type 1 has an invalid length. [ 318.481833][T15449] netlink: 'syz.4.4472': attribute type 1 has an invalid length. [ 318.512100][T15456] gtp1: entered promiscuous mode [ 318.524349][T15456] gtp1: entered allmulticast mode [ 318.847077][T15463] xt_CT: No such helper "pptp" [ 318.868607][T15472] batadv_slave_0: entered promiscuous mode [ 318.901533][T15472] batadv_slave_0: entered allmulticast mode [ 318.962632][T15472] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 319.338922][T15493] __nla_validate_parse: 9 callbacks suppressed [ 319.338943][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4491'. [ 319.834157][T15514] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 319.860523][T15516] xt_hashlimit: size too large, truncated to 1048576 [ 319.874741][T15516] xt_hashlimit: max too large, truncated to 1048576 [ 319.962539][T15522] netlink: 'syz.4.4506': attribute type 2 has an invalid length. [ 320.374511][T15541] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 320.617206][T15552] delete_channel: no stack [ 320.869746][T15565] netlink: 'syz.1.4527': attribute type 10 has an invalid length. [ 320.920299][T15565] team0: Port device syz_tun added [ 321.056510][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'. [ 321.109440][T15575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4532'. [ 321.441377][T15593] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4541'. [ 321.485468][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'. [ 321.516405][T15593] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4541'. [ 321.632836][T15603] netlink: 'syz.3.4545': attribute type 12 has an invalid length. [ 321.693553][T15607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4548'. [ 321.965095][T15621] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.4554'. [ 322.501690][T15647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4568'. [ 323.552003][T15695] openvswitch: netlink: Flow actions attr not present in new flow. [ 323.574149][T15697] netlink: 'syz.2.4592': attribute type 3 has an invalid length. [ 323.603055][T15697] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4592'. [ 324.661189][T15742] veth0_macvtap: left promiscuous mode [ 324.708041][T15742] macvtap0: entered promiscuous mode [ 324.722503][T15742] macvtap0: entered allmulticast mode [ 325.722162][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4640'. [ 325.765029][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4640'. [ 325.860027][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 326.078573][T15812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4648'. [ 326.425191][T15828] netlink: 'syz.1.4657': attribute type 1 has an invalid length. [ 326.437221][T15830] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4658'. [ 326.640775][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4663'. [ 326.652749][T15839] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.042865][T15863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4673'. [ 327.059377][T15862] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4672'. [ 327.838831][T15893] netlink: 'syz.3.4683': attribute type 1 has an invalid length. [ 327.875233][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4683'. [ 329.121500][T15940] ip6t_srh: unknown srh invflags 4449 [ 330.107278][T15974] xt_hashlimit: size too large, truncated to 1048576 [ 330.114030][T15974] xt_hashlimit: max too large, truncated to 1048576 [ 330.583775][T15996] netlink: 'syz.3.4726': attribute type 11 has an invalid length. [ 330.624841][T15996] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4726'. [ 330.870279][T16008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4732'. [ 330.908878][T16008] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4732'. [ 330.991563][T16017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4734'. [ 331.132108][T16022] --map-set only usable from mangle table [ 331.585975][T16043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4745'. [ 331.675264][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4748'. [ 331.936072][T16061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4753'. [ 332.153339][T16068] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4757'. [ 332.218247][T16074] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 332.369430][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4763'. [ 332.405924][T16081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4763'. [ 332.465416][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4766'. [ 332.662332][T16091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.666380][T16095] netlink: 'syz.0.4770': attribute type 1 has an invalid length. [ 332.897488][T16106] openvswitch: netlink: IP tunnel dst address not specified [ 333.152864][T16117] netlink: 'syz.4.4783': attribute type 3 has an invalid length. [ 333.347007][T16128] netlink: 'syz.1.4786': attribute type 21 has an invalid length. [ 333.409903][T16129] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 333.442717][T16128] netlink: 'syz.1.4786': attribute type 4 has an invalid length. [ 333.476798][T16128] netlink: 'syz.1.4786': attribute type 5 has an invalid length. [ 333.838922][T16151] bond4: entered promiscuous mode [ 333.844639][T16151] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.949714][T16160] wg1 speed is unknown, defaulting to 1000 [ 333.956299][T16160] wg1 speed is unknown, defaulting to 1000 [ 333.963144][T16160] wg1 speed is unknown, defaulting to 1000 [ 333.984872][T16160] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 334.060709][T16163] netlink: 'syz.0.4801': attribute type 3 has an invalid length. [ 334.072638][T16160] wg1 speed is unknown, defaulting to 1000 [ 334.093877][T16160] wg1 speed is unknown, defaulting to 1000 [ 334.134651][T16160] wg1 speed is unknown, defaulting to 1000 [ 334.167319][T16160] wg1 speed is unknown, defaulting to 1000 [ 334.207862][T16160] wg1 speed is unknown, defaulting to 1000 [ 334.902007][T16200] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 335.066447][T16207] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 335.295392][T16220] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 335.334470][T16224] netlink: 'syz.1.4831': attribute type 13 has an invalid length. [ 335.503663][T16228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.536199][T16231] netlink: 'syz.4.4836': attribute type 2 has an invalid length. [ 335.577686][T16234] C: renamed from lo (while UP) [ 335.631117][T16234] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 335.925675][T16250] netlink: 'syz.2.4844': attribute type 9 has an invalid length. [ 336.583950][T16284] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 336.630156][T16286] __nla_validate_parse: 10 callbacks suppressed [ 336.630178][T16286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4862'. [ 336.678444][T16290] SET target dimension over the limit! [ 336.685811][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4862'. [ 337.034081][T16308] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.724077][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4889'. [ 338.235180][T16367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4902'. [ 339.209411][T16418] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4924'. [ 339.287427][T16424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4927'. [ 339.393895][T16427] netlink: 'syz.3.4930': attribute type 1 has an invalid length. [ 339.616267][T16438] netlink: zone id is out of range [ 339.621430][T16438] netlink: del zone limit has 4 unknown bytes [ 339.707168][T16441] netlink: 'syz.0.4940': attribute type 9 has an invalid length. [ 339.718894][T16441] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.4940'. [ 340.144201][T16463] netlink: 'syz.4.4946': attribute type 15 has an invalid length. [ 340.164038][T16465] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4947'. [ 340.436745][T16439] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 340.567347][T16482] netlink: 'syz.2.4956': attribute type 1 has an invalid length. [ 340.701065][T16489] xt_TCPMSS: Only works on TCP SYN packets [ 341.967584][T16555] netlink: 'syz.2.4993': attribute type 8 has an invalid length. [ 342.689737][T16592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5011'. [ 342.768644][T16597] netlink: 'syz.4.5012': attribute type 4 has an invalid length. [ 343.523081][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5025'. [ 343.549912][T16630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5026'. [ 343.972025][T16643] netlink: 268 bytes leftover after parsing attributes in process `syz.4.5031'. [ 344.025219][T16643] unsupported nla_type 65024 [ 344.559713][T16673] netlink: 'syz.0.5043': attribute type 29 has an invalid length. [ 344.605058][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5043'. [ 344.687622][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5045'. [ 344.915292][T16685] netlink: 'syz.0.5049': attribute type 1 has an invalid length. [ 344.923080][T16685] netlink: 600 bytes leftover after parsing attributes in process `syz.0.5049'. [ 345.243370][T16706] netlink: 'syz.1.5057': attribute type 10 has an invalid length. [ 345.410349][T16706] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 345.410855][T16712] x_tables: unsorted entry at hook 3 [ 345.883871][T16734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5070'. [ 345.905266][T16736] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 346.265856][T16756] netlink: 'syz.0.5079': attribute type 1 has an invalid length. [ 346.293183][T16756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5079'. [ 346.488527][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5085'. [ 346.597032][T16770] netlink: 'syz.4.5089': attribute type 7 has an invalid length. [ 346.648655][T16770] : entered promiscuous mode [ 346.661656][T16774] netlink: 'syz.2.5091': attribute type 21 has an invalid length. [ 346.688623][T16774] netlink: 'syz.2.5091': attribute type 4 has an invalid length. [ 347.941004][T16838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.314661][T16907] __nla_validate_parse: 3 callbacks suppressed [ 349.314684][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5158'. [ 349.528138][T16917] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 350.324597][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5184'. [ 350.352597][T16955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5184'. [ 350.610418][T16972] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 351.098414][T16994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.525171][T17019] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5212'. [ 351.940346][T17040] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5224'. [ 352.145859][T17051] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 352.304709][T17058] xt_TCPMSS: Only works on TCP SYN packets [ 352.393981][T17063] bridge0: port 3(dummy0) entered disabled state [ 352.473490][T17063] bridge_slave_0: left allmulticast mode [ 352.496042][T17063] bridge_slave_0: left promiscuous mode [ 352.505242][T17066] netlink: 'syz.4.5236': attribute type 27 has an invalid length. [ 352.520511][T17063] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.574706][T17063] bridge_slave_1: left allmulticast mode [ 352.597594][T17063] bridge_slave_1: left promiscuous mode [ 352.616328][T17063] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.698278][T17063] bond0: (slave bond_slave_0): Releasing backup interface [ 352.732523][T17063] bond0: (slave bond_slave_1): Releasing backup interface [ 352.798042][T17063] team0: Port device team_slave_0 removed [ 352.818974][T17063] team0: Port device team_slave_1 removed [ 352.835873][T17063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.869969][T17063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.919110][T17063] batman_adv: batadv0: Removing interface: virt_wifi0 [ 352.952891][T17063] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 352.967902][T17063] bridge0: port 4(netdevsim0) entered disabled state [ 352.981918][T17085] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5246'. [ 353.220276][T17095] netlink: 'syz.0.5251': attribute type 3 has an invalid length. [ 353.361989][T17103] netlink: 'syz.1.5254': attribute type 8 has an invalid length. [ 353.931682][T17121] ipt_REJECT: TCP_RESET invalid for non-tcp [ 353.956199][T17125] netlink: 'syz.3.5266': attribute type 15 has an invalid length. [ 354.066081][T17127] netlink: 'syz.1.5267': attribute type 10 has an invalid length. [ 354.442359][T17141] netlink: 'syz.4.5272': attribute type 5 has an invalid length. [ 354.607855][T17148] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5277'. [ 354.663237][T17153] netlink: 'syz.4.5278': attribute type 7 has an invalid length. [ 354.815546][T17158] No such timeout policy "syz1" [ 355.108877][T17174] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5290'. [ 355.185562][T17177] netlink: 'syz.4.5292': attribute type 6 has an invalid length. [ 355.553517][T17197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5302'. [ 355.638448][T17200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 355.663314][T17200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 355.677724][T17200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 355.692373][T17200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 355.710041][T17200] geneve2: entered allmulticast mode [ 355.773735][T17202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5304'. [ 355.865493][T17210] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 356.208149][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5316'. [ 356.510264][T17242] x_tables: duplicate entry at hook 2 [ 356.650012][T17249] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 356.694626][T17249] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 357.254344][T17276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5341'. [ 357.267145][T17276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5341'. [ 357.535395][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5346'. [ 357.642007][T17292] xt_cgroup: invalid path, errno=-2 [ 357.734163][T17295] sctp: [Deprecated]: syz.2.5350 (pid 17295) Use of int in maxseg socket option. [ 357.734163][T17295] Use struct sctp_assoc_value instead [ 357.867575][T17303] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 357.917438][T17303] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 357.965326][T17309] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5357'. [ 357.975559][T17308] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5356'. [ 357.984657][T17308] 0·: renamed from hsr0 (while UP) [ 358.076151][T17308] 0·: entered allmulticast mode [ 358.082660][T17308] hsr_slave_0: entered allmulticast mode [ 358.099127][T17308] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 358.980754][T17358] netlink: 'syz.1.5381': attribute type 5 has an invalid length. [ 360.177771][T17417] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5408'. [ 361.433700][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5441'. [ 361.884213][T17504] netlink: 'syz.2.5452': attribute type 21 has an invalid length. [ 361.905058][T17504] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5452'. [ 361.914297][T17504] netlink: 'syz.2.5452': attribute type 4 has an invalid length. [ 361.920054][T17506] xt_bpf: check failed: parse error [ 361.930109][T17504] netlink: 'syz.2.5452': attribute type 3 has an invalid length. [ 361.949624][T17504] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5452'. [ 362.293704][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5460'. [ 362.336056][T17525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5460'. [ 363.056128][T17561] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5479'. [ 363.108227][T17563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5481'. [ 363.238740][T17571] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 363.332705][T17575] netlink: 'syz.2.5487': attribute type 6 has an invalid length. [ 363.505505][T17585] openvswitch: netlink: Flow key attribute not present in set flow. [ 363.642441][T17593] netlink: 'syz.3.5493': attribute type 10 has an invalid length. [ 363.671249][T17593] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5493'. [ 363.704328][T17593] veth0_vlan: entered allmulticast mode [ 363.715289][T17595] x_tables: duplicate entry at hook 2 [ 363.728432][T17593] bridge0: port 5(veth0_vlan) entered blocking state [ 363.752003][T17593] bridge0: port 5(veth0_vlan) entered disabled state [ 363.776857][T17593] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 364.237651][T17621] netlink: 'syz.0.5508': attribute type 2 has an invalid length. [ 364.278398][T17624] openvswitch: netlink: IP tunnel dst address not specified [ 364.366244][T17627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5512'. [ 364.798327][T17649] netlink: 'syz.4.5523': attribute type 2 has an invalid length. [ 364.814716][T17649] netlink: 'syz.4.5523': attribute type 1 has an invalid length. [ 365.333573][T17674] veth0_to_bond: entered allmulticast mode [ 365.484838][T17683] __nla_validate_parse: 1 callbacks suppressed [ 365.484859][T17683] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5539'. [ 365.525236][T17685] SET target dimension over the limit! [ 366.143802][T17712] netlink: 'syz.2.5555': attribute type 1 has an invalid length. [ 366.249681][T17714] wg1 speed is unknown, defaulting to 1000 [ 366.368704][T17722] netlink: 'syz.4.5560': attribute type 46 has an invalid length. [ 366.456550][T17729] vlan0: entered promiscuous mode [ 366.478697][T17731] openvswitch: netlink: Actions may not be safe on all matching packets [ 366.645307][T17737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.707649][T17741] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5568'. [ 366.820506][T17743] ip6tnl3: entered promiscuous mode [ 367.597467][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5588'. [ 367.635679][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5588'. [ 368.540731][T17824] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 368.722612][T17835] netlink: 'syz.1.5609': attribute type 23 has an invalid length. [ 369.314015][T17861] netlink: 'syz.0.5623': attribute type 21 has an invalid length. [ 369.351197][T17861] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.720693][T17881] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 369.909331][T17887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5635'. [ 370.492429][T17915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5647'. [ 370.756595][T17928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5653'. [ 371.029215][T17941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5658'. [ 371.721190][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5675'. [ 371.767295][T17980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5677'. [ 372.588436][T18019] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5696'. [ 373.205127][T18051] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.492098][T18062] wg1 speed is unknown, defaulting to 1000 [ 373.653519][T18073] netlink: 'syz.1.5721': attribute type 1 has an invalid length. [ 373.845573][T18080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.097964][T18095] netlink: 'syz.1.5730': attribute type 1 has an invalid length. [ 374.121693][T18095] netlink: 'syz.1.5730': attribute type 3 has an invalid length. [ 374.151669][T18095] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5730'. [ 374.187765][T18100] vlan0: entered promiscuous mode [ 374.311053][T18094] wg1 speed is unknown, defaulting to 1000 [ 374.588551][T18112] tc_dump_action: action bad kind [ 374.666355][T18118] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5743'. [ 374.685350][T18118] netlink: zone id is out of range [ 374.690527][T18118] netlink: zone id is out of range [ 374.743247][T18118] netlink: zone id is out of range [ 374.748643][T18118] netlink: zone id is out of range [ 374.753831][T18118] netlink: zone id is out of range [ 374.759361][T18118] netlink: zone id is out of range [ 374.764979][T18118] netlink: zone id is out of range [ 374.770246][T18118] netlink: zone id is out of range [ 374.779724][T18118] netlink: zone id is out of range [ 374.842252][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5744'. [ 374.870938][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5744'. [ 375.860516][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5770'. [ 376.266691][T18194] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 376.480911][T18205] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5786'. [ 377.152923][T18239] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 377.578701][T18258] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 377.886920][T18273] netlink: 'syz.0.5818': attribute type 21 has an invalid length. [ 377.946561][T18273] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5818'. [ 378.018533][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5818'. [ 378.385394][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.391770][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.368879][T18335] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5843'. [ 379.682747][T18348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5849'. [ 380.161930][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5857'. [ 380.268070][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5858'. [ 381.463449][T18423] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000 [ 381.502983][T18424] netlink: 'syz.3.5880': attribute type 3 has an invalid length. [ 381.521844][T18424] netlink: 'syz.3.5880': attribute type 1 has an invalid length. [ 381.535465][T18424] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5880'. [ 382.434422][T18460] bridge0: port 3(team0) entered disabled state [ 382.441390][T18460] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.675972][T18460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.701556][T18460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.981549][T18460] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.993088][T18460] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.002810][T18460] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.013162][T18460] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.046396][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5899'. [ 383.352064][T18492] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5905'. [ 383.517020][T18499] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5910'. [ 383.557266][T18499] gretap0: entered promiscuous mode [ 383.992997][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5919'. [ 384.155354][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5923'. [ 384.421739][T18548] netlink: 'syz.0.5929': attribute type 1 has an invalid length. [ 384.485068][T18548] netlink: 'syz.0.5929': attribute type 1 has an invalid length. [ 384.527783][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5930'. [ 384.592458][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5930'. [ 385.223547][T18584] netlink: 'syz.3.5945': attribute type 10 has an invalid length. [ 385.306710][T18584] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 385.501397][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5951'. [ 385.571009][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5951'. [ 385.608998][T18597] net_ratelimit: 74 callbacks suppressed [ 385.609019][T18597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.855142][T18613] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 386.747509][T18659] gretap1: entered promiscuous mode [ 386.754266][T18659] gretap1: entered allmulticast mode [ 387.403405][T18687] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 387.450859][T18687] bond5: entered promiscuous mode [ 387.489945][T18692] netlink: 'syz.4.5986': attribute type 4 has an invalid length. [ 387.589750][T18699] xt_addrtype: ipv6 does not support BROADCAST matching [ 388.225119][T18729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6002'. [ 388.575834][T18744] netlink: 'syz.3.6009': attribute type 1 has an invalid length. [ 388.615404][T18744] netlink: 'syz.3.6009': attribute type 11 has an invalid length. [ 388.623472][T18744] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6009'. [ 389.390532][T18777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6022'. [ 389.454214][T18777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6022'. [ 389.495055][T18777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6022'. [ 389.504430][T18777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6022'. [ 389.584987][T18777] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6022'. [ 389.620022][T18788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6026'. [ 389.675611][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6026'. [ 390.394845][T18820] netlink: 'syz.4.6040': attribute type 1 has an invalid length. [ 390.402768][T18820] netlink: 'syz.4.6040': attribute type 2 has an invalid length. [ 390.686384][T18835] netlink: 'syz.2.6048': attribute type 32 has an invalid length. [ 390.765538][T18842] xt_TCPMSS: Only works on TCP SYN packets [ 390.771029][T18840] lo: left promiscuous mode [ 390.804670][T18840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.162125][T18862] netlink: 'syz.1.6061': attribute type 4 has an invalid length. [ 391.212084][T18862] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6061'. [ 391.231296][T18862] wlan1: mtu less than device minimum [ 391.835533][T18897] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 391.857378][T18898] tipc: Trying to set illegal importance in message [ 392.231418][T18918] netlink: 'syz.1.6087': attribute type 8 has an invalid length. [ 392.374611][T18925] xt_cgroup: path and classid specified [ 392.615997][T18938] xt_connbytes: Forcing CT accounting to be enabled [ 392.648525][T18938] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 392.940658][T18954] netlink: 'syz.3.6102': attribute type 2 has an invalid length. [ 393.252033][T18972] __nla_validate_parse: 5 callbacks suppressed [ 393.252056][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6111'. [ 393.288690][T18972] netlink: 'syz.1.6111': attribute type 1 has an invalid length. [ 393.606922][T18988] netlink: 'syz.2.6118': attribute type 2 has an invalid length. [ 393.656705][T18988] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6118'. [ 393.738210][T18995] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 393.762409][T18995] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 393.833597][T18999] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 393.982932][T18964] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 394.117586][T19012] bridge2: entered promiscuous mode [ 394.122924][T19012] bridge2: entered allmulticast mode [ 394.829427][T19048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.444723][T19080] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.459349][T19083] netlink: 'syz.4.6163': attribute type 13 has an invalid length. [ 395.495077][T19083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6163'. [ 395.504374][T19083] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 395.699745][T19095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.746322][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6172'. [ 395.900980][T19103] netlink: 'syz.1.6174': attribute type 10 has an invalid length. [ 395.965066][T19109] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6175'. [ 395.971847][T19110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6177'. [ 396.005816][T19110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6177'. [ 396.286945][T19123] netlink: 134820 bytes leftover after parsing attributes in process `syz.4.6183'. [ 396.378260][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6186'. [ 396.424034][T19131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.486996][T19134] netlink: zone id is out of range [ 396.536809][T19139] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 396.649143][T19141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6192'. [ 396.683169][T19141] netlink: 'syz.0.6192': attribute type 3 has an invalid length. [ 396.706511][T19141] netlink: 'syz.0.6192': attribute type 2 has an invalid length. [ 396.714329][T19141] netlink: 'syz.0.6192': attribute type 2 has an invalid length. [ 397.050276][T19161] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.243912][T19175] netlink: 'syz.0.6209': attribute type 11 has an invalid length. [ 397.790537][T19199] vlan0: entered promiscuous mode [ 398.066234][T19213] lo speed is unknown, defaulting to 1000 [ 398.074176][T19213] lo speed is unknown, defaulting to 1000 [ 398.122029][T19213] lo speed is unknown, defaulting to 1000 [ 398.165425][T19219] netlink: 'syz.1.6226': attribute type 1 has an invalid length. [ 398.205268][T19219] netlink: 'syz.1.6226': attribute type 2 has an invalid length. [ 398.291785][T19223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.622365][T19237] netlink: 'syz.0.6231': attribute type 32 has an invalid length. [ 399.165281][T19258] netlink: 'syz.1.6238': attribute type 11 has an invalid length. [ 399.273363][T19263] __nla_validate_parse: 4 callbacks suppressed [ 399.273383][T19263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6240'. [ 399.524346][T19271] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6244'. [ 399.528397][T19213] infiniband sz1: set down [ 399.540136][ T9840] lo speed is unknown, defaulting to 1000 [ 399.567729][T19213] infiniband sz1: added lo [ 399.579520][T19213] sz1: rxe_create_cq: returned err = -12 [ 399.585275][T19271] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 399.611816][T19213] infiniband sz1: Couldn't create ib_mad CQ [ 399.611905][T19271] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 399.642360][T19213] infiniband sz1: Couldn't open port 1 [ 399.767055][T19213] RDS/IB: sz1: added [ 399.783161][T19213] smc: adding ib device sz1 with port count 1 [ 399.825765][T19213] smc: ib device sz1 port 1 has pnetid [ 399.834517][T19213] lo speed is unknown, defaulting to 1000 [ 399.892918][ T9837] lo speed is unknown, defaulting to 1000 [ 399.951365][T19289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6251'. [ 399.975327][T19289] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6251'. [ 400.668544][T19316] $Hÿ: renamed from bond0 [ 400.744015][T19316] $Hÿ: entered promiscuous mode [ 400.770142][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6269'. [ 400.868425][T19213] lo speed is unknown, defaulting to 1000 [ 401.338425][ T9837] IPVS: starting estimator thread 0... [ 401.406322][T19350] SET target dimension over the limit! [ 401.437347][T19348] IPVS: using max 22 ests per chain, 52800 per kthread [ 401.494543][T19353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6281'. [ 401.517097][T19355] netlink: 508 bytes leftover after parsing attributes in process `syz.2.6282'. [ 401.582941][T19213] lo speed is unknown, defaulting to 1000 [ 401.697987][T19360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6286'. [ 402.724728][T19213] lo speed is unknown, defaulting to 1000 [ 402.805455][T19407] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 403.515822][T19437] Cannot find add_set index 2 as target [ 403.584470][ T9840] IPVS: starting estimator thread 0... [ 403.721624][T19440] IPVS: using max 23 ests per chain, 55200 per kthread [ 403.818139][T19213] lo speed is unknown, defaulting to 1000 [ 404.724589][T19488] sctp: [Deprecated]: syz.1.6335 (pid 19488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.724589][T19488] Use struct sctp_sack_info instead [ 405.093559][T19504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6342'. [ 405.103652][T19506] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6343'. [ 405.327845][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6347'. [ 405.925748][T19549] netlink: 'syz.4.6362': attribute type 7 has an invalid length. [ 406.047145][T19556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.101852][T19558] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6367'. [ 406.485450][T19581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6378'. [ 406.622588][T19585] delete_channel: no stack [ 406.785192][T19596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.934128][T19604] netlink: 'syz.2.6390': attribute type 46 has an invalid length. [ 407.765604][T19653] ieee802154 phy0 wpan0: encryption failed: -22 [ 407.814362][T19656] netlink: 'syz.1.6415': attribute type 11 has an invalid length. [ 407.851625][T19656] netlink: 'syz.1.6415': attribute type 4 has an invalid length. [ 407.875387][T19656] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6415'. [ 408.217900][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6424'. [ 408.368912][T19678] lo: left allmulticast mode [ 408.512379][T19687] netlink: 'syz.1.6431': attribute type 1 has an invalid length. [ 408.885677][T19678] veth0_to_bond: left allmulticast mode [ 409.003947][T19708] openvswitch: netlink: IP tunnel dst address not specified [ 409.032900][T19678] vlan0: left promiscuous mode [ 409.133485][T19678] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.144798][T19678] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.155275][T19678] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.164334][T19678] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.189177][T19678] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 409.220020][T19715] netlink: 'syz.3.6444': attribute type 1 has an invalid length. [ 409.297417][T19678] bridge2: left promiscuous mode [ 409.310693][T19678] bridge2: left allmulticast mode [ 409.320595][T19705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6439'. [ 409.421681][T19721] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 409.475758][T19721] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 409.525239][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6449'. [ 409.623548][T19731] (unnamed net_device) (uninitialized): up delay (3) is not a multiple of miimon (6), value rounded to 0 ms [ 409.793159][T19731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.003291][T19752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6462'. [ 410.254511][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6467'. [ 410.308783][T19768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.330983][T19770] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6471'. [ 410.378565][T19770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.488636][T19776] openvswitch: netlink: Message has 1 unknown bytes. [ 411.078087][T19810] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6491'. [ 411.461018][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6501'. [ 411.783254][T19850] xt_socket: unknown flags 0x8 [ 412.502582][T19889] netlink: 'syz.3.6529': attribute type 2 has an invalid length. [ 412.526597][T19889] netlink: 'syz.3.6529': attribute type 1 has an invalid length. [ 412.552443][T19889] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6529'. [ 412.560241][T19894] xt_limit: Overflow, try lower: 0/0 [ 412.917117][T19912] netlink: 'syz.1.6541': attribute type 21 has an invalid length. [ 412.975877][T19917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6543'. [ 413.663698][T19949] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 413.684595][T19949] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 413.985793][T19966] xt_ecn: cannot match TCP bits for non-tcp packets [ 414.095038][T19973] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.202744][T19979] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6574'. [ 414.686858][T20005] netlink: 'syz.4.6587': attribute type 11 has an invalid length. [ 414.716016][T20005] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6587'. [ 414.817610][T20012] x_tables: ip_tables: osf match: only valid for protocol 6 [ 414.841944][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6592'. [ 414.865204][T20014] netlink: 'syz.3.6592': attribute type 1 has an invalid length. [ 415.237302][T20037] lo speed is unknown, defaulting to 1000 [ 415.243176][T20037] lo speed is unknown, defaulting to 1000 [ 415.265678][T20037] lo speed is unknown, defaulting to 1000 [ 415.329840][T20037] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 415.432370][T20037] lo speed is unknown, defaulting to 1000 [ 415.468294][T20037] lo speed is unknown, defaulting to 1000 [ 415.516395][T20037] lo speed is unknown, defaulting to 1000 [ 415.541994][T20037] lo speed is unknown, defaulting to 1000 [ 415.587359][T20037] lo speed is unknown, defaulting to 1000 [ 415.620692][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6612'. [ 415.695773][T20061] C: entered promiscuous mode [ 415.737115][T20061] netlink: 'syz.1.6613': attribute type 1 has an invalid length. [ 415.775020][T20061] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 416.368874][T20098] sock: sock_timestamping_bind_phc: sock not bind to device [ 417.056309][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6648'. [ 417.375845][T20150] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 418.012543][T20176] netlink: 'syz.0.6670': attribute type 3 has an invalid length. [ 418.548210][T20201] netlink: 'syz.4.6681': attribute type 3 has an invalid length. [ 418.565322][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6681'. [ 418.923182][T20218] ip6gre2: entered allmulticast mode [ 419.000924][T20224] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6692'. [ 419.319811][T20240] set match dimension is over the limit! [ 419.334707][T20239] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6700'. [ 419.373620][T20239] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6700'. [ 419.395460][T20244] netlink: 'syz.4.6703': attribute type 7 has an invalid length. [ 419.410640][T20239] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6700'. [ 419.891048][T20268] bridge9: entered promiscuous mode [ 419.902245][T20268] bridge9: entered allmulticast mode [ 420.334692][T20293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.456749][T20300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6730'. [ 420.836734][T20324] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 420.901365][ T12] bond0: (slave wlan1): link status definitely down, disabling slave [ 420.918481][ T12] bond0: now running without any active interface! [ 421.063140][T20334] netlink: 'syz.1.6746': attribute type 3 has an invalid length. [ 421.101701][T20334] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6746'. [ 421.733387][T20373] netlink: 'syz.3.6766': attribute type 16 has an invalid length. [ 421.772047][T20373] netlink: 'syz.3.6766': attribute type 17 has an invalid length. [ 421.839864][T20377] x_tables: duplicate underflow at hook 3 [ 421.923404][T20373] bridge0: port 2(syz_tun) entered blocking state [ 421.930064][T20373] bridge0: port 2(syz_tun) entered forwarding state [ 421.951635][T20373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.969362][T20373] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.990601][T20373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.047447][ T49] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 422.058443][ T49] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 422.655166][T20405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6782'. [ 422.735141][T20409] netlink: 'syz.0.6783': attribute type 5 has an invalid length. [ 422.756078][T20409] netlink: 'syz.0.6783': attribute type 5 has an invalid length. [ 423.010908][T20422] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6791'. [ 423.059682][T20422] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6791'. [ 423.387836][T20438] ip6t_rpfilter: unknown options [ 423.637389][T20449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6804'. [ 424.079649][T20465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6813'. [ 424.261466][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6816'. [ 424.294393][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6817'. [ 424.334161][T20477] IPVS: Error joining to the multicast group [ 425.526534][T20522] dvmrp8: entered allmulticast mode [ 425.540129][T20519] dvmrp8: left allmulticast mode [ 425.567730][ T9837] IPVS: starting estimator thread 0... [ 425.672894][T20525] IPVS: using max 27 ests per chain, 64800 per kthread [ 426.905444][T20580] Bluetooth: MGMT ver 1.23 [ 427.596176][T20606] netlink: 'syz.1.6877': attribute type 32 has an invalid length. [ 427.621118][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6877'. [ 427.675563][T20606] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 427.885462][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6881'. [ 427.961925][T20616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.299009][T20629] geneve0: entered allmulticast mode [ 428.612666][T20645] lo: left promiscuous mode [ 428.635722][T20645] gretap0: left promiscuous mode [ 428.642148][T20645] $Hÿ: left promiscuous mode [ 428.657854][T20645] dummy0: left promiscuous mode [ 428.665021][T20645] dummy0: left allmulticast mode [ 428.671978][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6899'. [ 428.693203][T20645] vlan0: left promiscuous mode [ 428.727422][T20645] geneve0: left allmulticast mode [ 428.744413][T20645] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 428.766930][T20645] ip6tnl1: left promiscuous mode [ 428.779147][T20645] ip6tnl1: left allmulticast mode [ 428.818023][T20645] gretap1: left promiscuous mode [ 428.823107][T20645] gretap1: left allmulticast mode [ 428.998744][T20645] bond2: left promiscuous mode [ 429.004048][T20645] bond2: left allmulticast mode [ 429.019320][T20645] gtp1: left promiscuous mode [ 429.054998][T20645] gtp1: left allmulticast mode [ 429.088387][T20645] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.115044][T20645] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.145174][T20645] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.165045][T20645] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.208527][T20645] geneve2: left allmulticast mode [ 429.575834][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 429.669210][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6909'. [ 429.689590][T20678] netlink: 'syz.3.6913': attribute type 1 has an invalid length. [ 429.705160][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6909'. [ 429.961460][T20687] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 430.012554][T20691] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 430.154591][T20700] siw: device registration error -23 [ 432.125279][T20778] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 432.364297][T20792] C: left promiscuous mode [ 433.381705][T20792] bridge_slave_0: left promiscuous mode [ 433.588114][T20792] batadv_slave_0: left promiscuous mode [ 433.600857][T20792] batadv_slave_0: left allmulticast mode [ 433.656920][T20792] 0·: left allmulticast mode [ 433.662080][T20792] hsr_slave_0: left allmulticast mode [ 433.703553][T20792] 0·: left allmulticast mode [ 433.720092][T20827] netlink: 'syz.2.6979': attribute type 27 has an invalid length. [ 433.973446][T20792] vlan0: left promiscuous mode [ 434.032770][T20792] macvtap0: left promiscuous mode [ 434.045002][T20792] macvtap0: left allmulticast mode [ 434.088076][T20792] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.097637][T20792] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.106928][T20792] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.116142][T20792] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.132897][T20792] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 434.199921][T20792] vti0: left promiscuous mode [ 434.209937][T20792] xfrm1: left promiscuous mode [ 434.223105][T20792] xfrm1: left allmulticast mode [ 434.236550][T20792] xfrm4: left allmulticast mode [ 434.247119][T20792] gretap1: left promiscuous mode [ 434.252095][T20792] gretap1: left allmulticast mode [ 434.381809][ T30] audit: type=1800 audit(1749683265.237:3): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6983" name="memory.events" dev="tmpfs" ino=7028 res=0 errno=0 [ 434.445806][ T30] audit: type=1804 audit(1749683265.277:4): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6983" name="/newroot/1401/memory.events" dev="tmpfs" ino=7028 res=1 errno=0 [ 435.183368][T20877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6999'. [ 435.559551][T20897] netlink: 'syz.0.7011': attribute type 2 has an invalid length. [ 436.353721][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7028'. [ 436.387627][T20933] tipc: Started in network mode [ 436.415173][T20933] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 436.444016][T20933] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 436.462033][T20933] tipc: Enabled bearer , priority 10 [ 436.861594][T20953] netlink: 'syz.2.7035': attribute type 3 has an invalid length. [ 436.900206][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7035'. [ 437.470326][T20986] netlink: 'syz.1.7050': attribute type 16 has an invalid length. [ 437.512161][T20986] netlink: 'syz.1.7050': attribute type 17 has an invalid length. [ 437.576275][ T5912] tipc: Node number set to 1 [ 437.687149][T20986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.708875][T20986] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.764726][T20986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.292352][T21024] netlink: 165 bytes leftover after parsing attributes in process `syz.4.7065'. [ 438.514485][T21030] 8021q: adding VLAN 0 to HW filter on device bond7 [ 438.552838][T21030] bond7: entered promiscuous mode [ 438.558518][T21030] bond7: entered allmulticast mode [ 438.566262][T21030] team0: Port device bond7 added [ 438.587959][T21041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7070'. [ 438.625945][T21039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7070'. [ 438.909100][T21054] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7078'. [ 438.942670][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7081'. [ 438.969155][T21059] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 439.002879][T21059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.537753][T21091] Bluetooth: MGMT ver 1.23 [ 439.825292][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.832301][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.178622][T21121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7110'. [ 440.781898][T21150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7124'. [ 441.021092][ T30] audit: type=1804 audit(1749683271.877:5): pid=21162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7130" name="/newroot/1454/cgroup.controllers" dev="tmpfs" ino=7294 res=1 errno=0 [ 441.076745][ T30] audit: type=1800 audit(1749683271.917:6): pid=21162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7130" name="cgroup.controllers" dev="tmpfs" ino=7294 res=0 errno=0 [ 441.852809][T21205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.356521][T21230] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 442.531489][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7167'. [ 442.689735][T21245] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7170'. [ 442.823563][T21251] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7173'. [ 443.085547][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7179'. [ 443.565835][T21289] netlink: 'syz.1.7191': attribute type 3 has an invalid length. [ 443.602613][T21289] netlink: 'syz.1.7191': attribute type 1 has an invalid length. [ 443.653952][T21289] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7191'. [ 443.712143][T21296] tipc: Started in network mode [ 443.745044][T21296] tipc: Node identity ce55151c82ed, cluster identity 4711 [ 443.752534][T21296] tipc: Enabled bearer , priority 10 [ 443.837003][T21303] tipc: Enabling of bearer rejected, failed to enable media [ 444.550498][T21342] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7213'. [ 444.865691][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7222'. [ 444.866176][ T5947] tipc: Node number set to 1287132444 [ 444.874764][T21358] netlink: 'syz.4.7222': attribute type 2 has an invalid length. [ 444.929866][T21358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7222'. [ 445.061111][T21366] IPVS: Error connecting to the multicast addr [ 445.100221][T21369] netlink: 'syz.0.7228': attribute type 29 has an invalid length. [ 446.168027][T21430] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 446.220535][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7256'. [ 446.233020][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7256'. [ 446.555214][T21453] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 447.124739][T21477] netlink: 'syz.1.7279': attribute type 2 has an invalid length. [ 448.960162][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7307'. [ 449.004130][T21539] netlink: 'syz.2.7307': attribute type 12 has an invalid length. [ 449.998506][T21575] netlink: 'syz.2.7325': attribute type 2 has an invalid length. [ 450.026257][T21575] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7325'. [ 450.950843][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7342'. [ 450.978756][T21612] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 451.006589][T21612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.075771][T21616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7344'. [ 451.795386][T21648] netlink: 'syz.4.7360': attribute type 1 has an invalid length. [ 452.054267][T21660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7366'. [ 452.934159][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7385'. [ 453.919309][T21749] xt_socket: unknown flags 0xfc [ 453.997968][T21755] netlink: 'syz.3.7410': attribute type 1 has an invalid length. [ 454.424317][T21778] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.641203][T21791] netlink: 304 bytes leftover after parsing attributes in process `syz.3.7428'. [ 454.784651][T21793] netlink: 'syz.2.7429': attribute type 1 has an invalid length. [ 455.358466][T21831] IPVS: stopping backup sync thread 18897 ... [ 455.846674][T21858] netlink: 'syz.2.7460': attribute type 10 has an invalid length. [ 456.294711][T21882] sctp: [Deprecated]: syz.3.7470 (pid 21882) Use of int in max_burst socket option. [ 456.294711][T21882] Use struct sctp_assoc_value instead [ 456.802976][T21905] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7481'. [ 457.325439][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7493'. [ 458.329722][T21984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7516'. [ 458.356744][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7516'. [ 458.372895][T21984] netlink: 'syz.4.7516': attribute type 13 has an invalid length. [ 459.231417][T22023] netlink: 264 bytes leftover after parsing attributes in process `syz.4.7535'. [ 459.278974][T22026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7537'. [ 459.561001][T22038] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7543'. [ 459.781557][T22047] ipvlan2: entered promiscuous mode [ 459.796774][T22047] bridge0: port 1(ipvlan2) entered blocking state [ 459.824543][T22047] bridge0: port 1(ipvlan2) entered disabled state [ 459.856707][T22047] ipvlan2: entered allmulticast mode [ 459.868896][T22047] bridge0: entered allmulticast mode [ 459.882989][T22047] ipvlan2: left allmulticast mode [ 459.888738][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7548'. [ 459.906317][T22047] bridge0: left allmulticast mode [ 459.912327][T22055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7548'. [ 459.929858][T22055] netlink: 'syz.3.7548': attribute type 19 has an invalid length. [ 459.995718][T22059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7552'. [ 460.193477][T22067] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7555'. [ 460.203084][T22067] netlink: 'syz.0.7555': attribute type 5 has an invalid length. [ 460.391000][T22079] IPv6: syztnl1: Disabled Multicast RS [ 460.650898][T22093] Zero length message leads to an empty skb [ 461.380040][T22132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.763928][T22154] bond0: peer notification delay (6) is not a multiple of miimon (2097159), value rounded to 0 ms [ 461.989483][T22164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.115638][T22170] netlink: 'syz.2.7604': attribute type 27 has an invalid length. [ 462.656937][T22197] __nla_validate_parse: 6 callbacks suppressed [ 462.656960][T22197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7616'. [ 463.678474][T22245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7636'. [ 464.746868][ T36] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.045944][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7671'. [ 465.656130][T22344] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7684'. [ 465.766050][T22351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7687'. [ 465.803030][T22356] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 465.811327][T22355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7689'. [ 465.846562][T22355] netlink: 'syz.3.7689': attribute type 3 has an invalid length. [ 466.130029][T22370] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7699'. [ 466.185542][T22373] netlink: 'syz.3.7697': attribute type 62 has an invalid length. [ 466.446117][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7705'. [ 466.480753][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7705'. [ 466.514017][T22388] netlink: 'syz.2.7705': attribute type 15 has an invalid length. [ 466.789187][T22406] sctp: [Deprecated]: syz.4.7714 (pid 22406) Use of int in maxseg socket option. [ 466.789187][T22406] Use struct sctp_assoc_value instead [ 467.367688][T22431] Bluetooth: MGMT ver 1.23 [ 467.410796][T22434] netlink: 'syz.2.7729': attribute type 1 has an invalid length. [ 468.120733][T22458] xt_CT: No such helper "snmp" [ 468.614577][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7751'. [ 468.625114][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 468.664129][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7751'. [ 468.674017][T22485] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7751'. [ 469.335768][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7765'. [ 469.891605][T22546] netlink: 'syz.2.7782': attribute type 3 has an invalid length. [ 469.962962][T22550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7779'. [ 470.235124][T22567] sctp: [Deprecated]: syz.0.7790 (pid 22567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.235124][T22567] Use struct sctp_sack_info instead [ 470.291919][T22567] sctp: [Deprecated]: syz.0.7790 (pid 22567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.291919][T22567] Use struct sctp_sack_info instead [ 471.047813][T22607] macvlan2: entered promiscuous mode [ 471.053179][T22607] bridge0: entered promiscuous mode [ 471.073582][T22607] bridge0: port 2(macvlan2) entered blocking state [ 471.086070][T22607] bridge0: port 2(macvlan2) entered disabled state [ 471.093631][T22607] macvlan2: entered allmulticast mode [ 471.102058][T22607] bridge0: entered allmulticast mode [ 471.102188][T22611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7810'. [ 471.119644][T22607] macvlan2: left allmulticast mode [ 471.131559][T22607] bridge0: left allmulticast mode [ 471.152508][T22607] bridge0: left promiscuous mode [ 471.597400][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7824'. [ 472.157809][T22651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7830'. [ 474.300551][T22742] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7871'. [ 474.553406][T22759] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7881'. [ 474.579690][T22755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7879'. [ 475.013890][T22780] pim6reg: entered allmulticast mode [ 475.048991][T22780] pim6reg: left allmulticast mode [ 475.059833][T22766] udevd[22766]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 475.107612][T22766] udevd[22766]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 475.429321][T22802] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 475.553956][T22808] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7903'. [ 475.580782][T22808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7903'. [ 475.611306][T22808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7903'. [ 475.876837][T22818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7910'. [ 476.058661][T22826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7912'. [ 476.143510][T22830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7914'. [ 476.227854][T22832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7915'. [ 476.295136][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 476.899516][T22871] netlink: 'syz.3.7933': attribute type 20 has an invalid length. [ 477.068785][T22878] netlink: 'syz.4.7936': attribute type 12 has an invalid length. [ 477.105543][T22878] netlink: 'syz.4.7936': attribute type 11 has an invalid length. [ 477.253548][T22888] dvmrp1: entered allmulticast mode [ 477.288163][T22888] dvmrp1: left allmulticast mode [ 477.888983][T22914] netlink: 'syz.3.7956': attribute type 5 has an invalid length. [ 478.087556][T22919] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 478.117069][T22919] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 478.878845][T22948] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 479.661798][T22985] __nla_validate_parse: 10 callbacks suppressed [ 479.661822][T22985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7987'. [ 479.691543][T22985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7987'. [ 479.756272][T22985] gretap0: entered promiscuous mode [ 479.800107][T22985] gretap0: left promiscuous mode [ 480.068681][T23000] vlan2: entered allmulticast mode [ 480.090231][T23000] bridge_slave_1: entered allmulticast mode [ 480.235265][T23008] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 480.431063][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8004'. [ 480.440746][T23020] nbd: illegal input index -381222912 [ 480.894518][T23045] netlink: 'syz.2.8017': attribute type 6 has an invalid length. [ 480.949564][T23050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8018'. [ 481.571898][T23078] tipc: Failed to obtain node identity [ 481.585115][T23078] tipc: Enabling of bearer rejected, failed to enable media [ 481.686971][T23082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8034'. [ 481.953779][T23095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8040'. [ 482.115877][T23095] syz.2.8040 (23095) used greatest stack depth: 17992 bytes left [ 482.332426][T23112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8048'. [ 482.389343][T23112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8048'. [ 482.428196][T23112] netlink: 'syz.3.8048': attribute type 11 has an invalid length. [ 482.561032][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8053'. [ 482.853200][T23135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8060'. [ 483.569601][T23170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.576941][T23170] IPv6: NLM_F_CREATE should be set when creating new route [ 483.584206][T23170] IPv6: NLM_F_CREATE should be set when creating new route [ 483.591511][T23170] IPv6: NLM_F_CREATE should be set when creating new route [ 483.680219][T23174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.898488][T23176] smc: net device bond0 applied user defined pnetid SYZ2 [ 485.153787][T23232] __nla_validate_parse: 3 callbacks suppressed [ 485.153809][T23232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8107'. [ 485.389897][T23244] nbd: must specify a device to reconfigure [ 485.894294][T23272] tipc: Enabling not permitted [ 485.932657][T23272] tipc: Enabling of bearer rejected, failed to enable media [ 485.969406][T23274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8128'. [ 486.201641][T23289] netlink: 'syz.1.8135': attribute type 1 has an invalid length. [ 486.255385][T23289] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8135'. [ 486.281379][T23289] netlink: 'syz.1.8135': attribute type 1 has an invalid length. [ 486.399386][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8141'. [ 486.901588][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8152'. [ 487.420971][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8163'. [ 487.474957][T23349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8163'. [ 487.483891][T23349] netlink: 'syz.1.8163': attribute type 6 has an invalid length. [ 489.095389][T23433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8204'. [ 489.442377][T23455] netlink: 312 bytes leftover after parsing attributes in process `syz.3.8214'. [ 489.442544][T23454] team0: Refused to change device type [ 489.715870][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8220'. [ 490.069905][T23484] netlink: 'syz.1.8229': attribute type 1 has an invalid length. [ 490.085551][T23487] nbd: must specify an index to disconnect [ 491.655075][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 491.680855][T23545] netlink: 'syz.1.8257': attribute type 58 has an invalid length. [ 491.720511][T23545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8257'. [ 491.765713][T23550] netlink: 'syz.3.8260': attribute type 2 has an invalid length. [ 491.815147][T23550] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8260'. [ 492.170455][T23573] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8271'. [ 492.693846][T23601] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8286'. [ 492.708619][T23601] netlink: 'syz.0.8286': attribute type 1 has an invalid length. [ 493.703655][T23650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8309'. [ 493.962618][T23661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8316'. [ 494.012907][T23665] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8318'. [ 494.992243][T23717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8341'. [ 495.037055][T23719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8344'. [ 495.056022][T23719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8344'. [ 495.225673][T23728] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 495.464742][T23742] netlink: 'syz.0.8354': attribute type 1 has an invalid length. [ 495.978459][T23769] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 495.994739][T23772] netlink: 'syz.0.8369': attribute type 23 has an invalid length. [ 496.772555][T23810] __nla_validate_parse: 6 callbacks suppressed [ 496.772577][T23810] netlink: 248 bytes leftover after parsing attributes in process `syz.0.8386'. [ 496.804111][T23810] NCSI netlink: No device for ifindex 0 [ 496.953183][T23820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 496.960491][T23820] IPv6: NLM_F_CREATE should be set when creating new route [ 496.967838][T23820] IPv6: NLM_F_CREATE should be set when creating new route [ 496.975109][T23820] IPv6: NLM_F_CREATE should be set when creating new route [ 496.994324][T23820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.208441][T23833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8397'. [ 497.928071][T23871] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.937345][T23871] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.946177][T23871] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.955236][T23871] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.978109][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 498.201621][T23887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8423'. [ 498.322842][T23892] netlink: 'syz.3.8425': attribute type 1 has an invalid length. [ 498.527682][ T30] audit: type=1800 audit(1749683329.387:7): pid=23904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8430" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8129 res=0 errno=0 [ 498.601910][ T30] audit: type=1800 audit(1749683329.417:8): pid=23904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8430" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8129 res=0 errno=0 [ 498.753511][T23912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8436'. [ 498.797814][T23919] netlink: 'syz.1.8439': attribute type 1 has an invalid length. [ 499.822739][T23951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.142273][T23963] netlink: 332 bytes leftover after parsing attributes in process `syz.2.8459'. [ 500.160777][T23963] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8459'. [ 500.192875][T23963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8459'. [ 500.552047][T23986] netlink: 'syz.0.8470': attribute type 83 has an invalid length. [ 500.650392][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8471'. [ 500.707323][T23993] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8473'. [ 500.752788][T23993] nbd: illegal input index 65508 [ 500.863068][T24002] vlan2: entered promiscuous mode [ 500.911454][T24002] gretap0: entered promiscuous mode [ 501.265572][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.462519][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8493'. [ 502.342258][T24074] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 502.871339][T24105] gtp1: entered promiscuous mode [ 502.878597][T24105] gtp1: entered allmulticast mode [ 504.367769][T24163] netlink: 'syz.1.8555': attribute type 1 has an invalid length. [ 504.519333][T24167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8557'. [ 504.595413][T24172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.758875][T24183] netlink: 'syz.0.8564': attribute type 5 has an invalid length. [ 504.767377][T24183] netlink: 'syz.0.8564': attribute type 1 has an invalid length. [ 504.775612][T24183] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.8564'. [ 505.107374][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8571'. [ 506.212937][T24255] netlink: 'syz.0.8599': attribute type 1 has an invalid length. [ 506.402295][T24265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8605'. [ 506.454056][T24268] C: entered allmulticast mode [ 506.465976][T24268] C: left allmulticast mode [ 506.624804][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8610'. [ 506.764435][T24284] tipc: Invalid UDP bearer configuration [ 506.764504][T24284] tipc: Enabling of bearer rejected, failed to enable media [ 507.422874][T24321] netlink: 'syz.0.8633': attribute type 1 has an invalid length. [ 508.301844][T24371] netlink: 'syz.0.8657': attribute type 7 has an invalid length. [ 508.318072][T24371] netlink: 'syz.0.8657': attribute type 8 has an invalid length. [ 508.345243][T24371] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8657'. [ 509.651093][T24438] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8690'. [ 509.690173][T24438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8690'. [ 510.446540][T24483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.469771][T24484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8712'. [ 510.486762][T24484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8712'. [ 510.500434][T24484] netlink: 'syz.4.8712': attribute type 7 has an invalid length. [ 512.542064][T24578] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8760'. [ 512.594710][T24578] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 513.520216][T24631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8784'. [ 513.547109][T24631] tipc: Invalid UDP bearer configuration [ 513.547188][T24631] tipc: Enabling of bearer rejected, failed to enable media [ 514.022681][T24659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8797'. [ 514.457332][T24680] netlink: zone id is out of range [ 514.462690][T24680] netlink: zone id is out of range [ 514.468881][T24680] netlink: zone id is out of range [ 514.499542][T24680] netlink: zone id is out of range [ 514.511723][T24680] netlink: zone id is out of range [ 514.525690][T24680] netlink: zone id is out of range [ 514.539923][T24680] netlink: zone id is out of range [ 514.548124][T24680] netlink: zone id is out of range [ 515.275234][T24722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8827'. [ 515.832116][T24758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8839'. [ 515.852952][T24759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8841'. [ 515.853234][T24750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8839'. [ 516.210521][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8851'. [ 516.896120][T24804] netlink: 'syz.4.8864': attribute type 21 has an invalid length. [ 516.912067][T24804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8864'. [ 517.060119][T24812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8869'. [ 517.311730][T24823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8874'. [ 517.577461][T24841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8883'. [ 517.918639][T24863] net_ratelimit: 4 callbacks suppressed [ 517.918661][T24863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.376877][T24886] netlink: 'syz.0.8906': attribute type 2 has an invalid length. [ 518.570309][T24897] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8911'. [ 520.443698][T24995] tipc: Enabling of bearer rejected, failed to enable media [ 521.415294][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8980'. [ 521.471650][T25038] macvlan2: entered promiscuous mode [ 521.492103][T25038] macvlan2: entered allmulticast mode [ 521.501769][T25038] erspan0: entered allmulticast mode [ 521.896255][T25055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8984'. [ 523.015080][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 523.699563][T25130] smc: net device bond0 erased user defined pnetid SYZ2 [ 524.175478][T25155] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9036'. [ 524.196383][T25155] netlink: zone id is out of range [ 524.201786][T25155] netlink: zone id is out of range [ 524.216132][T25155] netlink: get zone limit has 8 unknown bytes [ 525.421804][T25218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9061'. [ 525.455814][T25218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9061'. [ 525.543521][T25224] "syz.4.9064" (25224) uses obsolete ecb(arc4) skcipher [ 526.094317][T25256] netlink: 22 bytes leftover after parsing attributes in process `syz.2.9079'. [ 526.172026][T25259] openvswitch: netlink: IPv6 tunnel dst address is zero [ 526.736428][T25285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9093'. [ 527.029490][T25297] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 527.045519][T25297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 527.383418][T25315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9108'. [ 527.492757][T25321] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 527.674619][T25333] netlink: 'syz.0.9117': attribute type 2 has an invalid length. [ 527.800829][T25339] netlink: 'syz.2.9120': attribute type 23 has an invalid length. [ 528.164981][T25358] netlink: 'syz.0.9128': attribute type 2 has an invalid length. [ 528.479488][T25376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.969950][T25398] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.9148'. [ 528.984201][T25398] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 529.305228][T25411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9155'. [ 529.353222][T25411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9155'. [ 529.847221][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9167'. [ 529.909705][T25440] sctp: [Deprecated]: syz.2.9168 (pid 25440) Use of int in max_burst socket option deprecated. [ 529.909705][T25440] Use struct sctp_assoc_value instead [ 529.976448][T25442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9169'. [ 530.280305][T25454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.600128][T25468] netlink: 'syz.4.9183': attribute type 1 has an invalid length. [ 530.608967][T25470] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 530.629106][T25468] netlink: 184 bytes leftover after parsing attributes in process `syz.4.9183'. [ 530.645147][T25468] netlink: 'syz.4.9183': attribute type 1 has an invalid length. [ 530.807918][T25477] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.9188'. [ 530.878574][T25481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9187'. [ 532.607828][T25558] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 532.928257][T25578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9232'. [ 532.956505][T25578] netlink: 'syz.4.9232': attribute type 30 has an invalid length. [ 532.964390][T25578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9232'. [ 534.002188][T25633] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 534.771534][T25678] rdma_op ffff888029f7b9f0 conn xmit_rdma 0000000000000000 [ 536.085160][T25746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9315'. [ 537.084372][T25800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.447886][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9352'. [ 537.466911][T25821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9352'. [ 538.214111][T25862] tipc: Enabled bearer , priority 10 [ 538.245041][T25863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9370'. [ 538.297252][T25870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.546515][T25880] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9378'. [ 538.555407][T25873] wg1 speed is unknown, defaulting to 1000 [ 538.586634][T25873] lo speed is unknown, defaulting to 1000 [ 538.865641][T25873] lo speed is unknown, defaulting to 1000 [ 539.031032][T25893] tipc: Started in network mode [ 539.041450][T25893] tipc: Node identity , cluster identity 4711 [ 539.050305][T25893] tipc: Failed to set node id, please configure manually [ 539.063256][T25893] tipc: Enabling of bearer rejected, failed to enable media [ 542.105927][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9433'. [ 542.406365][T26044] siw: device registration error -23 [ 542.695680][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 543.145410][T26076] IPVS: Error connecting to the multicast addr [ 543.177765][T26074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9452'. [ 543.488683][T26091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9459'. [ 544.027948][T26122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9474'. [ 544.322657][T26140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9482'. [ 544.402280][T26145] ip6tnl4: entered promiscuous mode [ 544.430011][T26145] ip6tnl4: entered allmulticast mode [ 544.450769][T26145] team0: Device ip6tnl4 is of different type [ 544.626228][T26154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9490'. [ 544.654610][T26156] netlink: 'syz.2.9492': attribute type 1 has an invalid length. [ 544.665679][T26156] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9492'. [ 544.681736][T26156] netlink: 'syz.2.9492': attribute type 1 has an invalid length. [ 544.710568][T26158] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.719451][T26158] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.728621][T26158] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.737464][T26158] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.796214][T26160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9493'. [ 544.845317][T26160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9493'. [ 544.872710][T26160] netlink: 'syz.4.9493': attribute type 5 has an invalid length. [ 545.395428][T26190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9508'. [ 545.752479][T26213] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9518'. [ 545.923751][T26223] netlink: 192 bytes leftover after parsing attributes in process `syz.3.9524'. [ 546.891266][T26277] netlink: 'syz.4.9550': attribute type 9 has an invalid length. [ 547.151581][T26287] netlink: 'syz.1.9555': attribute type 1 has an invalid length. [ 548.624420][T26367] __nla_validate_parse: 3 callbacks suppressed [ 548.624443][T26367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9592'. [ 548.779522][T26372] netlink: 'syz.1.9596': attribute type 3 has an invalid length. [ 548.969637][T26386] netlink: 'syz.1.9603': attribute type 8 has an invalid length. [ 549.150003][T26395] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 549.745991][T26419] netlink: 'syz.1.9618': attribute type 10 has an invalid length. [ 549.818583][T26419] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 549.924483][T26425] bond0: (slave bridge0): Releasing backup interface [ 550.036259][T26435] netlink: 'syz.2.9627': attribute type 30 has an invalid length. [ 551.329713][T26499] netlink: 'syz.1.9658': attribute type 58 has an invalid length. [ 552.019421][T26541] netlink: 332 bytes leftover after parsing attributes in process `syz.3.9678'. [ 552.050895][T26541] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9678'. [ 552.082138][T26541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9678'. [ 552.317994][T26555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9687'. [ 552.497978][T26565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9692'. [ 553.093308][T26591] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9704'. [ 553.114350][T26591] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9704'. [ 554.749930][T26657] tipc: Bearer : already 2 bearers with priority 10 [ 554.762910][T26657] tipc: Bearer : trying with adjusted priority [ 554.774638][T26657] tipc: Enabling of bearer rejected, failed to enable media [ 555.283829][T26679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9743'. [ 555.403532][T26683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9746'. [ 555.611216][T26694] netlink: 'syz.4.9752': attribute type 11 has an invalid length. [ 555.953321][T26711] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 555.964979][T26713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9762'. [ 556.232989][T26728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9769'. [ 556.517809][T26744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9777'. [ 556.582869][T26747] macsec0: entered promiscuous mode [ 556.590710][T26747] macsec0: left promiscuous mode [ 557.018561][T26770] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.109068][T26770] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.631262][T26801] netlink: 'syz.4.9802': attribute type 1 has an invalid length. [ 557.987799][T26816] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 558.287009][ T1342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.428754][T26841] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 558.583385][T26848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.618209][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 562.295167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.447683][T27055] tipc: MTU too low for tipc bearer [ 562.700817][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.762271][T27066] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9925'. [ 564.029301][T27128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9956'. [ 565.039378][T27176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9978'. [ 565.678277][T27196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9987'. [ 565.698049][T27196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9987'. [ 566.418310][T27232] IPVS: Error connecting to the multicast addr [ 567.153041][T27263] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.10019'. [ 567.173136][T27263] openvswitch: netlink: Message has 5 unknown bytes. [ 567.276551][T27269] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10022'. [ 567.852191][T27301] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 568.225644][T27319] bridge4: entered promiscuous mode [ 568.254355][T27319] bridge4: entered allmulticast mode [ 568.276956][T27319] team0: Port device bridge4 added [ 568.345007][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10049'. [ 568.366746][T27328] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 568.397819][T27328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.675293][T27342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10057'. [ 568.756174][T27344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.657962][T27393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10080'. [ 570.374991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.495068][T27433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10099'. [ 570.776302][T27442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10103'. [ 571.738484][T27490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10128'. [ 571.757595][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10128'. [ 571.768856][T27490] netlink: 'syz.1.10128': attribute type 18 has an invalid length. [ 571.819022][T27491] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 571.997959][T27502] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 572.032493][T27504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10133'. [ 572.059292][T27504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10133'. [ 572.406338][T27522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.701316][T27532] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 573.576338][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10168'. [ 574.089253][T27591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10176'. [ 574.603308][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10187'. [ 574.723816][T27621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10190'. [ 574.746224][T27620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10191'. [ 574.793716][T27620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10191'. [ 574.865045][T27620] netlink: 'syz.4.10191': attribute type 18 has an invalid length. [ 574.953095][T27629] netlink: 'syz.0.10196': attribute type 29 has an invalid length. [ 574.967786][T27631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.412523][T27655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10208'. [ 576.045014][T27681] veth1_to_hsr: entered promiscuous mode [ 576.095694][T27681] veth1_to_hsr: left promiscuous mode [ 576.181158][T27687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10221'. [ 576.520460][T27697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10227'. [ 577.286515][T27726] netlink: zone id is out of range [ 577.297711][T27726] netlink: zone id is out of range [ 577.308772][T27726] netlink: zone id is out of range [ 577.321100][T27726] netlink: zone id is out of range [ 577.330074][T27726] netlink: zone id is out of range [ 577.340008][T27726] netlink: zone id is out of range [ 577.351576][T27726] netlink: zone id is out of range [ 577.362626][T27726] netlink: zone id is out of range [ 578.103577][T27765] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 578.113763][T27765] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 578.557607][T27786] netlink: 'syz.4.10269': attribute type 3 has an invalid length. [ 578.894492][T27801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10275'. [ 579.403141][T27831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10291'. [ 579.413088][T27831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10291'. [ 580.285584][T27880] netlink: 'syz.1.10312': attribute type 1 has an invalid length. [ 580.631195][T27899] net_ratelimit: 5 callbacks suppressed [ 580.631218][T27899] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 580.740050][T27903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10323'. [ 580.749441][T27903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10323'. [ 580.783817][T27906] sctp: [Deprecated]: syz.4.10324 (pid 27906) Use of int in max_burst socket option deprecated. [ 580.783817][T27906] Use struct sctp_assoc_value instead [ 581.104644][T27920] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.034512][T27968] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10354'. [ 582.226125][T27977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10359'. [ 582.248059][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10359'. [ 582.275924][T27981] IPVS: Error connecting to the multicast addr [ 583.075071][T28018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10378'. [ 583.476349][T28040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10388'. [ 583.966527][T28068] __nla_validate_parse: 1 callbacks suppressed [ 583.966547][T28068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10400'. [ 584.005839][T28065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10400'. [ 584.141772][T28073] tipc: Started in network mode [ 584.148329][T28073] tipc: Node identity , cluster identity 4711 [ 584.257070][T28079] pimreg: entered allmulticast mode [ 584.297130][T28079] pimreg: left allmulticast mode [ 584.368902][T28085] tipc: Started in network mode [ 584.381411][T28085] tipc: Node identity 4004000000000000000000130000002e, cluster identity 4711 [ 584.393591][T28085] tipc: Enabling of bearer rejected, failed to enable media [ 585.044139][T28110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10421'. [ 585.496940][T28135] netlink: 'syz.0.10432': attribute type 1 has an invalid length. [ 585.520775][T28135] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10432'. [ 585.735026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.426954][T28179] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10453'. [ 588.042085][T28254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10486'. [ 588.295029][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 589.301860][T28301] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 589.328200][T28301] team0: Device ipvlan0 is already an upper device of the team interface [ 589.429831][T28309] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10511'. [ 590.105574][T28348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10528'. [ 590.122882][T28348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10528'. [ 590.125837][T28347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10527'. [ 590.521906][T28360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10534'. [ 590.899496][T28377] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 591.347968][T28391] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.10549'. [ 592.357400][T28432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10568'. [ 592.381014][T28432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10568'. [ 592.581320][T28444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10572'. [ 592.596242][T28444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10572'. [ 593.681449][T28499] netlink: 'syz.2.10602': attribute type 1 has an invalid length. [ 594.360321][T28534] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 595.016350][T28563] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 595.340254][T28570] __nla_validate_parse: 5 callbacks suppressed [ 595.340279][T28570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10635'. [ 595.473440][T28577] netlink: 'syz.3.10637': attribute type 1 has an invalid length. [ 596.047705][T28601] netlink: 'syz.1.10646': attribute type 1 has an invalid length. [ 596.288719][T28609] netlink: 'syz.2.10650': attribute type 1 has an invalid length. [ 596.313983][T28609] netlink: 'syz.2.10650': attribute type 4 has an invalid length. [ 596.335115][T28609] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10650'. [ 596.344422][T28609] NCSI netlink: No device for ifindex 458760 [ 596.891597][T28627] netlink: 'syz.3.10656': attribute type 1 has an invalid length. [ 596.915077][T28627] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10656'. [ 596.944979][T28627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10656'. [ 597.068649][T28632] sctp: [Deprecated]: syz.2.10658 (pid 28632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.068649][T28632] Use struct sctp_sack_info instead [ 599.773722][T28752] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 600.108057][T28769] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10705'. [ 600.184354][T28774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10707'. [ 601.065388][T28816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10724'. [ 601.856567][T28857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10740'. [ 602.517633][T28879] SET target dimension over the limit! [ 603.150259][T28911] tun0: tun_chr_ioctl cmd 1074812118 [ 603.364045][T28922] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10760'. [ 603.404199][T28922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10760'. [ 603.668050][T28937] ieee802154 phy0 wpan0: encryption failed: -126 [ 603.763913][T28939] netlink: 'syz.0.10767': attribute type 15 has an invalid length. [ 604.424483][T28959] vlan1: entered promiscuous mode [ 604.446451][T28959] gretap0: entered promiscuous mode [ 604.813941][T28975] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.10781'. [ 605.216117][T28994] sock: sock_set_timeout: `syz.0.10790' (pid 28994) tries to set negative timeout [ 605.508778][T29011] netlink: 'syz.0.10797': attribute type 5 has an invalid length. [ 606.208765][T29034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10809'. [ 606.237944][T29032] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10808'. [ 607.256715][T29074] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 607.290515][T29076] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 607.440374][T29079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10829'. [ 608.835334][T29117] xt_CT: No such helper "snmp" [ 609.337687][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 610.180648][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10871'. [ 610.252649][T29185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10873'. [ 610.519222][T29199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10878'. [ 610.555381][T29203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10878'. [ 610.664498][ T1161] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 610.696338][ T9854] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 610.707688][ T1161] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 610.727534][T29210] netlink: 300 bytes leftover after parsing attributes in process `syz.3.10882'. [ 611.165493][ T9854] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.499567][T29246] pim6reg: entered allmulticast mode [ 611.544373][T29247] pim6reg: left allmulticast mode [ 611.582182][ T9854] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.365011][T29282] netlink: 'syz.0.10909': attribute type 1 has an invalid length. [ 612.415414][T29282] nbd: error processing sock list [ 612.426201][T29282] block nbd1: shutting down sockets [ 612.460430][T29291] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 612.515810][T29291] bond0: (slave wlan1): Releasing backup interface [ 612.568977][T29295] netlink: 'syz.3.10914': attribute type 1 has an invalid length. [ 612.610672][T29295] netlink: 180 bytes leftover after parsing attributes in process `syz.3.10914'. [ 612.942870][T29311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10921'. [ 613.008470][T29315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10922'. [ 613.055902][T29315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10922'. [ 613.209163][T29320] netlink: 'syz.3.10924': attribute type 83 has an invalid length. [ 613.318984][T29324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10926'. [ 613.749228][T29343] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.10934'. [ 613.779347][T29343] netlink: get zone limit has 8 unknown bytes [ 613.945460][T29351] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10938'. [ 614.702550][T29381] xt_CT: No such helper "snmp" [ 614.935412][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 616.380627][T29446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.431096][T29451] netlink: 'syz.2.10980': attribute type 1 has an invalid length. [ 616.467698][T29451] netlink: 'syz.2.10980': attribute type 10 has an invalid length. [ 616.510653][T29451] netlink: 236 bytes leftover after parsing attributes in process `syz.2.10980'. [ 616.569578][T29456] netlink: 'syz.1.10984': attribute type 4 has an invalid length. [ 617.079648][T29482] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 617.095447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.329594][T29496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11004'. [ 618.732907][T29571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11036'. [ 618.953178][T29579] tap1: tun_chr_ioctl cmd 2147767507 [ 619.408663][T29599] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11047'. [ 619.651048][T29605] tipc: Enabling of bearer rejected, failed to enable media [ 620.042217][T29621] netlink: ct family unspecified [ 620.053340][T29621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.638469][T29650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11071'. [ 620.793853][T29654] macsec2: entered promiscuous mode [ 620.811020][T29654] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 620.835307][T29654] macsec2: entered allmulticast mode [ 620.844531][T29654] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 621.758647][T29701] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11094'. [ 622.740940][T29722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11102'. [ 623.370957][T29744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11114'. [ 623.727360][T29764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11123'. [ 623.748391][T29764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11123'. [ 623.760676][T29765] delete_channel: no stack [ 624.064621][T29776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11128'. [ 624.084730][T29776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11128'. [ 624.135203][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.151400][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.614904][T29826] netlink: 'syz.4.11153': attribute type 1 has an invalid length. [ 625.634227][T29826] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11153'. [ 626.379978][T29850] netlink: 'syz.3.11165': attribute type 4 has an invalid length. [ 626.439050][T29851] netlink: 'syz.2.11163': attribute type 1 has an invalid length. [ 626.469467][T29851] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11163'. [ 626.682435][T29861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11169'. [ 626.909318][T29870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11173'. [ 626.951835][T29870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11173'. [ 626.972899][T29870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11173'. [ 627.575660][T29897] netlink: 'syz.2.11187': attribute type 4 has an invalid length. [ 628.437403][T29930] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11202'. [ 628.974475][T29949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.177903][T29962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11215'. [ 629.441894][T29972] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.11220'. [ 629.466418][T29972] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 629.475514][T29972] openvswitch: netlink: Duplicate key (type 0). [ 629.882299][T29994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11230'. [ 630.482595][T30019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11244'. [ 632.455076][T30127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11292'. [ 632.465417][T30127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11292'. [ 632.774205][T30145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11301'. [ 632.922804][T30152] bond0: entered promiscuous mode [ 632.955165][T30152] bond_slave_0: entered promiscuous mode [ 632.961129][T30152] bond_slave_1: entered promiscuous mode [ 632.990818][T30152] batadv0: entered promiscuous mode [ 633.029099][T30152] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 633.067508][T30152] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 633.099883][T30152] bond0: left promiscuous mode [ 633.117553][T30152] bond_slave_0: left promiscuous mode [ 633.132138][T30152] bond_slave_1: left promiscuous mode [ 633.154406][T30152] batadv0: left promiscuous mode [ 633.360883][T30165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11310'. [ 633.649750][T30180] tap0: tun_chr_ioctl cmd 1074025678 [ 633.659290][T30180] tap0: group set to 0 [ 633.661673][T30184] netlink: 'syz.4.11317': attribute type 1 has an invalid length. [ 633.696990][T30184] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11317'. [ 633.722833][T30184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11317'. [ 634.389188][T30220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11335'. [ 634.640822][T30230] netlink: 'syz.0.11340': attribute type 1 has an invalid length. [ 634.682692][T30233] netlink: 'syz.0.11340': attribute type 1 has an invalid length. [ 634.700765][T30230] netlink: 'syz.0.11340': attribute type 2 has an invalid length. [ 634.710865][T30233] netlink: 'syz.0.11340': attribute type 2 has an invalid length. [ 635.051203][T30241] sctp: [Deprecated]: syz.4.11344 (pid 30241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.051203][T30241] Use struct sctp_sack_info instead [ 635.371029][T30254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11349'. [ 635.395125][T30254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11349'. [ 635.404253][T30254] netlink: 'syz.4.11349': attribute type 18 has an invalid length. [ 635.640963][T30267] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 635.768415][T30272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11357'. [ 635.778003][T30272] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 635.788209][T30272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.963403][T30280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11361'. [ 636.582947][T30299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11370'. [ 636.605574][T30299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11370'. [ 637.145280][T30317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11377'. [ 637.368410][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11384'. [ 637.862247][T30358] openvswitch: netlink: IP tunnel dst address not specified [ 638.638861][T30383] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.11409'. [ 639.556223][T30432] __nla_validate_parse: 3 callbacks suppressed [ 639.556243][T30432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11430'. [ 639.601938][T30439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.321314][T30471] netlink: 356 bytes leftover after parsing attributes in process `syz.2.11449'. [ 640.587005][T30483] netlink: 'syz.1.11455': attribute type 1 has an invalid length. [ 640.658341][T30487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11457'. [ 641.502455][T30518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11471'. [ 642.004160][T30535] sit0: entered promiscuous mode [ 642.047312][T30535] netlink: 'syz.3.11479': attribute type 1 has an invalid length. [ 642.055055][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 642.074943][T30535] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11479'. [ 642.610364][T30564] netlink: 428 bytes leftover after parsing attributes in process `syz.1.11493'. [ 642.637755][T30564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11493'. [ 642.752608][T30569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11495'. [ 642.960194][T30578] netlink: 'syz.4.11502': attribute type 1 has an invalid length. [ 642.983837][T30578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11502'. [ 643.168402][T30587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.481940][T30602] vlan2: entered promiscuous mode [ 643.521314][T30602] hsr0: entered promiscuous mode [ 643.531644][T30602] vlan2: entered allmulticast mode [ 643.557469][T30602] hsr0: entered allmulticast mode [ 643.573924][T30602] hsr_slave_0: entered allmulticast mode [ 643.584812][T30602] hsr_slave_1: entered allmulticast mode [ 643.870402][T30622] netlink: 27 bytes leftover after parsing attributes in process `syz.2.11520'. [ 645.300555][T30682] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 645.306696][T30682] CPU: 0 UID: 0 PID: 30682 Comm: syz.1.11546 Not tainted 6.15.0-syzkaller-12464-ga4a65c6fe08b #0 PREEMPT(full) [ 645.318527][T30682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.328604][T30682] RIP: 0010:taprio_update_queue_max_sdu+0x2b9/0x890 [ 645.335215][T30682] Code: 74 08 48 89 df e8 17 34 9e f8 48 8b 03 89 c1 4c 89 e8 48 c1 e8 20 74 0d 4c 89 e8 31 d2 48 f7 f1 48 89 c5 eb 09 44 89 e8 31 d2 f1 89 c5 48 83 7c 24 50 00 49 bd 00 00 00 00 00 fc ff df 74 48 [ 645.354834][T30682] RSP: 0018:ffffc9000f4fee78 EFLAGS: 00010246 [ 645.360908][T30682] RAX: 0000000000000000 RBX: ffff88805b4432e0 RCX: 0000000000000000 [ 645.368877][T30682] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88805b4432e0 [ 645.376944][T30682] RBP: 0000000000000000 R08: ffff88805b4432e7 R09: 1ffff1100b68865c [ 645.384917][T30682] R10: dffffc0000000000 R11: ffffed100b68865d R12: 00000000ffffffff [ 645.392883][T30682] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880484af800 [ 645.400849][T30682] FS: 00007efc1ea6b6c0(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 645.409822][T30682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.416426][T30682] CR2: 00007fbf68ee56c0 CR3: 0000000028ada000 CR4: 00000000003526f0 [ 645.424422][T30682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 645.432402][T30682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 645.440377][T30682] Call Trace: [ 645.443656][T30682] [ 645.446608][T30682] taprio_change+0x2b19/0x3f60 [ 645.451386][T30682] ? __pfx_taprio_change+0x10/0x10 [ 645.456501][T30682] ? ref_tracker_alloc+0x2ae/0x460 [ 645.462419][T30682] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 645.469747][T30682] taprio_init+0x959/0xbd0 [ 645.474442][T30682] ? __pfx_taprio_init+0x10/0x10 [ 645.479434][T30682] ? qdisc_alloc+0x730/0xaa0 [ 645.484036][T30682] ? __pfx_taprio_init+0x10/0x10 [ 645.488978][T30682] qdisc_create+0x7a9/0xea0 [ 645.493507][T30682] tc_modify_qdisc+0x1426/0x2010 [ 645.498454][T30682] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 645.503753][T30682] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 645.509048][T30682] rtnetlink_rcv_msg+0x77c/0xb70 [ 645.514000][T30682] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 645.519112][T30682] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.524572][T30682] ? ref_tracker_free+0x63a/0x7d0 [ 645.529602][T30682] ? __copy_skb_header+0xa7/0x550 [ 645.534624][T30682] ? __pfx_ref_tracker_free+0x10/0x10 [ 645.540014][T30682] netlink_rcv_skb+0x208/0x470 [ 645.544878][T30682] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.550365][T30682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.555658][T30682] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.560860][T30682] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.566059][T30682] netlink_unicast+0x75b/0x8d0 [ 645.570839][T30682] netlink_sendmsg+0x805/0xb30 [ 645.575695][T30682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.580976][T30682] ? aa_sock_msg_perm+0x94/0x160 [ 645.585912][T30682] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.591198][T30682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.596481][T30682] __sock_sendmsg+0x219/0x270 [ 645.601164][T30682] ____sys_sendmsg+0x505/0x830 [ 645.605927][T30682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.611211][T30682] ? import_iovec+0x74/0xa0 [ 645.615714][T30682] ___sys_sendmsg+0x21f/0x2a0 [ 645.620387][T30682] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.625594][T30682] ? __fget_files+0x2a/0x420 [ 645.630184][T30682] ? __fget_files+0x3a0/0x420 [ 645.634860][T30682] __x64_sys_sendmsg+0x19b/0x260 [ 645.639815][T30682] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.645303][T30682] ? do_syscall_64+0xbe/0x3b0 [ 645.649993][T30682] do_syscall_64+0xfa/0x3b0 [ 645.654507][T30682] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.659712][T30682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.665775][T30682] ? clear_bhb_loop+0x60/0xb0 [ 645.670552][T30682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.676445][T30682] RIP: 0033:0x7efc1db8e929 [ 645.680861][T30682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.700464][T30682] RSP: 002b:00007efc1ea6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.708876][T30682] RAX: ffffffffffffffda RBX: 00007efc1ddb5fa0 RCX: 00007efc1db8e929 [ 645.716846][T30682] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 645.724814][T30682] RBP: 00007efc1dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 645.732798][T30682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.740769][T30682] R13: 0000000000000000 R14: 00007efc1ddb5fa0 R15: 00007ffebe7908c8 [ 645.748761][T30682] [ 645.751790][T30682] Modules linked in: [ 645.757471][T30682] ---[ end trace 0000000000000000 ]--- [ 645.771270][T30682] RIP: 0010:taprio_update_queue_max_sdu+0x2b9/0x890 [ 645.778914][T30682] Code: 74 08 48 89 df e8 17 34 9e f8 48 8b 03 89 c1 4c 89 e8 48 c1 e8 20 74 0d 4c 89 e8 31 d2 48 f7 f1 48 89 c5 eb 09 44 89 e8 31 d2 f1 89 c5 48 83 7c 24 50 00 49 bd 00 00 00 00 00 fc ff df 74 48 [ 645.801432][T30682] RSP: 0018:ffffc9000f4fee78 EFLAGS: 00010246 [ 645.807777][T30682] RAX: 0000000000000000 RBX: ffff88805b4432e0 RCX: 0000000000000000 [ 645.816400][T30682] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88805b4432e0 [ 645.826773][T30682] RBP: 0000000000000000 R08: ffff88805b4432e7 R09: 1ffff1100b68865c [ 645.835099][T30682] R10: dffffc0000000000 R11: ffffed100b68865d R12: 00000000ffffffff [ 645.843463][T30682] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880484af800 [ 645.851648][T30682] FS: 00007efc1ea6b6c0(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 645.861082][T30682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.872858][T30682] CR2: 00007fbf690a9f98 CR3: 0000000028ada000 CR4: 00000000003526f0 [ 645.881651][T30682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 645.889907][T30682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 645.898887][T30682] Kernel panic - not syncing: Fatal exception [ 645.905317][T30682] Kernel Offset: disabled [ 645.909633][T30682] Rebooting in 86400 seconds..