last executing test programs: 2m54.554990428s ago: executing program 2 (id=7608): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 2m54.270925088s ago: executing program 2 (id=7614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0, 0x4}, 0x20) 2m54.084573895s ago: executing program 2 (id=7618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xd}]}]}, 0x40}}, 0x0) 2m53.855848982s ago: executing program 2 (id=7623): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff014}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) 2m53.621865665s ago: executing program 2 (id=7628): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x4, 0x0, 0x8100348}, 0x18) 2m53.393282255s ago: executing program 2 (id=7634): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x77ff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 2m38.302585182s ago: executing program 32 (id=7634): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x77ff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 2m35.838199488s ago: executing program 1 (id=8038): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feffffff"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) 2m35.625643749s ago: executing program 1 (id=8040): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x40000}, 0x10}, 0x1, 0x7}, 0x40030000000000) 2m35.344884336s ago: executing program 1 (id=8046): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000280)={0x118, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m35.036766334s ago: executing program 1 (id=8051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c8e5}, 0x0) 2m34.832084857s ago: executing program 1 (id=8055): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, 0xc) 2m34.684503788s ago: executing program 1 (id=8058): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) 2m19.621519368s ago: executing program 33 (id=8058): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.95848918s ago: executing program 6 (id=11330): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000, 0x0, 0x3}, 0x20) 1.730293449s ago: executing program 6 (id=11335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) 1.526758618s ago: executing program 6 (id=11339): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}], 0x1}, 0x7}], 0x1, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x1800) 1.400281218s ago: executing program 3 (id=11344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 1.228203624s ago: executing program 3 (id=11347): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050001"], 0x30}}, 0x48010) 1.199354873s ago: executing program 3 (id=11348): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=@can={{0x0, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "0000000000000005"}, 0x10}, 0x2, 0x0, 0x0, 0x24000884}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 1.141239205s ago: executing program 3 (id=11350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) 1.019255767s ago: executing program 0 (id=11353): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in6=@remote, 0x4e21, 0xfff, 0x4e23, 0x97, 0xa, 0x20, 0x80, 0x21}, {0x3, 0x5, 0x4, 0x9, 0x2, 0x2, 0x7, 0x40}, {0x0, 0x10, 0x5, 0x5}, 0x8, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc, 0x7fff, 0x4, 0x80000001}}, 0xe8) close(0x3) 974.652102ms ago: executing program 3 (id=11354): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="08000100010001", 0x7) 875.466666ms ago: executing program 5 (id=11357): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="4e11080878", 0x5}], 0x1}}], 0x1, 0x2000c800) 779.771197ms ago: executing program 0 (id=11359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 724.0685ms ago: executing program 3 (id=11360): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) poll(&(0x7f0000002000)=[{r0, 0x93d4}], 0x1, 0x9) 709.57277ms ago: executing program 5 (id=11361): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) 686.733517ms ago: executing program 0 (id=11362): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 561.31419ms ago: executing program 6 (id=11365): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000082c0)={0x0, 0x0, &(0x7f0000008280)={&(0x7f00000080c0)={0x28, r0, 0x527, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x34, 0x1, 0x1c}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000814) 518.915935ms ago: executing program 5 (id=11366): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0xb6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) 464.886975ms ago: executing program 4 (id=11367): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120069b1", @ANYRES32=0x0, @ANYBLOB="000000000000000014"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 390.843566ms ago: executing program 4 (id=11368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000000)='Ke^O', 0x4) 388.163078ms ago: executing program 6 (id=11369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 308.918188ms ago: executing program 0 (id=11370): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r0, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x27]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 308.726465ms ago: executing program 4 (id=11371): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x5ef5c000) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x8a, &(0x7f0000000080)=@req={0x3fc}, 0x10) 308.370697ms ago: executing program 5 (id=11372): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 282.796482ms ago: executing program 4 (id=11373): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) 193.547546ms ago: executing program 0 (id=11374): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x67, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x100, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_MAX_P={0xfffc, 0x4, 0x4cc1}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_PARMS={0x38, 0x1, {0x6b5, 0x4, 0x3ff, 0x2, 0x6, 0xfffffca7, 0x8001, 0x9, 0x4, 0x4, 0xf, 0xe, 0x4, 0x99, 0x4, 0x5e}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 144.179106ms ago: executing program 4 (id=11375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 103.79867ms ago: executing program 6 (id=11376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 94.5924ms ago: executing program 4 (id=11377): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 44.191936ms ago: executing program 0 (id=11378): unshare(0x2a060400) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) 43.982514ms ago: executing program 5 (id=11379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x4, r0}, 0x10) 0s ago: executing program 5 (id=11380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001840)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x2000040) kernel console output (not intermixed with test programs): tlink: 12 bytes leftover after parsing attributes in process `syz.3.4890'. [ 311.326255][T15880] netlink: 'syz.1.4891': attribute type 30 has an invalid length. [ 311.548156][T15880] bond1: option arp_missed_max: invalid value (0) [ 311.554831][T15880] bond1: option arp_missed_max: allowed values 1 - 255 [ 311.568092][T15880] bond1 (unregistering): Released all slaves [ 311.598157][T15895] netlink: 'syz.2.4895': attribute type 1 has an invalid length. [ 311.598199][T15895] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4895'. [ 311.598217][T15895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4895'. [ 311.771891][T15904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4901'. [ 311.958945][T15912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4903'. [ 311.975169][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 312.102709][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4906'. [ 313.351170][T15976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.400572][ T5276] veth0_macvtap: entered promiscuous mode [ 313.689412][T15998] netlink: 'syz.3.4938': attribute type 4 has an invalid length. [ 313.974427][T16006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.231735][T16018] netlink: 'syz.4.4947': attribute type 15 has an invalid length. [ 314.758255][T16044] openvswitch: netlink: IPv4 tun info is not correct [ 314.898067][T16054] xt_nfacct: accounting object `' does not exist [ 315.058580][T16059] __nla_validate_parse: 2 callbacks suppressed [ 315.058639][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4962'. [ 315.168716][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4965'. [ 315.552234][T16077] bond1: option all_slaves_active: invalid value (255) [ 315.569173][T16089] netlink: 'syz.2.4974': attribute type 21 has an invalid length. [ 315.569205][T16089] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4974'. [ 315.589210][T16077] bond1 (unregistering): Released all slaves [ 315.672126][T16095] netlink: 'syz.0.4976': attribute type 1 has an invalid length. [ 315.680215][T16095] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4976'. [ 315.690359][T16095] NCSI netlink: No device for ifindex 0 [ 315.702981][T16089] netlink: 'syz.2.4974': attribute type 5 has an invalid length. [ 315.710436][T16089] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4974'. [ 316.192961][T16106] bond2: option min_links: invalid value (18446744073709551612) [ 316.203788][T16106] bond2: option min_links: allowed values 0 - 2147483647 [ 316.241878][T16106] bond2 (unregistering): Released all slaves [ 316.564812][T16136] netlink: 'syz.4.4991': attribute type 16 has an invalid length. [ 316.564861][T16136] netlink: 'syz.4.4991': attribute type 17 has an invalid length. [ 316.772445][ T5709] wg2 speed is unknown, defaulting to 1000 [ 317.012789][T16151] netlink: 'syz.0.4998': attribute type 6 has an invalid length. [ 317.097876][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.519440][T16171] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 318.056854][T16199] netlink: zone id is out of range [ 318.056896][T16199] netlink: zone id is out of range [ 318.056921][T16199] netlink: zone id is out of range [ 318.056934][T16199] netlink: zone id is out of range [ 318.056945][T16199] netlink: zone id is out of range [ 318.056957][T16199] netlink: zone id is out of range [ 318.056973][T16199] netlink: zone id is out of range [ 318.056984][T16199] netlink: zone id is out of range [ 318.056995][T16199] netlink: zone id is out of range [ 318.753905][T16227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5027'. [ 319.538889][T16259] IPVS: length: 15 != 8 [ 319.842696][T16275] net_ratelimit: 150 callbacks suppressed [ 319.842743][T16275] openvswitch: netlink: IPv4 tun info is not correct [ 321.200864][T16336] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5079'. [ 321.396199][T16347] openvswitch: netlink: Duplicate or invalid key (type 0). [ 321.793106][T16326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.793149][T16326] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 322.169493][T16377] ì: renamed from bond_slave_0 (while UP) [ 322.198045][T16380] netlink: 'syz.2.5099': attribute type 25 has an invalid length. [ 322.244702][T16326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.244744][T16326] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 322.429930][T16386] netlink: 'syz.4.5104': attribute type 2 has an invalid length. [ 322.650196][T16326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.650984][T16326] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 322.706231][T16394] openvswitch: netlink: IP tunnel TTL not specified. [ 322.728619][T16326] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.728665][T16326] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 323.353874][T16430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5124'. [ 323.769043][T16449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5134'. [ 323.843923][T16451] netlink: 'syz.2.5135': attribute type 7 has an invalid length. [ 323.843968][T16451] netlink: 'syz.2.5135': attribute type 8 has an invalid length. [ 323.955037][T16458] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 323.956113][T16458] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 324.032776][T16461] netlink: 'syz.1.5139': attribute type 2 has an invalid length. [ 324.243067][T16469] netlink: 'syz.0.5144': attribute type 1 has an invalid length. [ 324.243112][T16469] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5144'. [ 324.243147][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5144'. [ 324.331770][T16479] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5149'. [ 324.342905][T16479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5149'. [ 324.359358][T16475] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5147'. [ 324.930701][T16503] ipt_ECN: cannot use operation on non-tcp rule [ 325.232047][T16523] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 325.304632][T16527] netlink: 'syz.4.5174': attribute type 6 has an invalid length. [ 325.367135][T16528] xt_l2tp: missing protocol rule (udp|l2tpip) [ 325.762305][T16552] netlink: 'syz.1.5182': attribute type 1 has an invalid length. [ 326.192498][T16572] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.299042][T16576] xt_policy: neither incoming nor outgoing policy selected [ 326.807978][T16596] netlink: 'syz.2.5206': attribute type 1 has an invalid length. [ 326.808019][T16596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5206'. [ 327.871166][T16645] hsr0: left allmulticast mode [ 327.871217][T16645] hsr_slave_0: left allmulticast mode [ 327.871252][T16645] hsr_slave_1: left allmulticast mode [ 328.201001][T16655] openvswitch: netlink: Missing valid actions attribute. [ 328.201069][T16655] openvswitch: netlink: Actions may not be safe on all matching packets [ 328.859658][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5248'. [ 329.267245][T16707] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5257'. [ 329.827655][T16739] netlink: 279 bytes leftover after parsing attributes in process `syz.3.5273'. [ 329.830322][T16738] netlink: 'syz.0.5272': attribute type 10 has an invalid length. [ 329.830372][T16738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5272'. [ 329.857843][T16739] veth0_to_bond: default FDB implementation only supports local addresses [ 329.987980][T16743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.481102][T16767] tc_dump_action: action bad kind [ 330.778030][T16782] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 331.164806][T16802] netlink: 'syz.0.5302': attribute type 15 has an invalid length. [ 331.633990][T16827] netlink: 'syz.2.5312': attribute type 21 has an invalid length. [ 331.634041][T16827] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5312'. [ 331.634113][T16827] netlink: 'syz.2.5312': attribute type 4 has an invalid length. [ 331.634133][T16827] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5312'. [ 331.808302][T16836] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 332.301609][T16862] netlink: 'syz.1.5328': attribute type 5 has an invalid length. [ 332.303300][T16861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5327'. [ 332.303352][T16861] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5327'. [ 332.381190][T16867] netlink: 'syz.2.5331': attribute type 32 has an invalid length. [ 332.910345][T16886] netlink: 'syz.1.5339': attribute type 1 has an invalid length. [ 332.910386][T16886] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5339'. [ 333.100872][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5343'. [ 333.100912][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5343'. [ 333.397697][T16908] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 333.440671][T16911] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 333.502681][T16913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.649660][T16923] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 333.977591][T16939] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 334.647933][T16970] openvswitch: netlink: Message has -2 unknown bytes. [ 334.676074][T16972] netlink: 'syz.1.5376': attribute type 8 has an invalid length. [ 334.906375][T16987] xt_TCPMSS: Only works on TCP SYN packets [ 335.511880][T17018] xt_hashlimit: max too large, truncated to 1048576 [ 335.555754][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5399'. [ 335.581615][T17022] netlink: 'syz.3.5400': attribute type 3 has an invalid length. [ 335.820692][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5405'. [ 335.820731][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5405'. [ 336.480408][T17070] xt_socket: unknown flags 0x8 [ 336.574361][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5425'. [ 336.893318][T17091] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 337.770937][T17118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5448'. [ 337.771191][T17118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5448'. [ 339.405683][T17139] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 340.017788][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5473'. [ 340.059670][T17176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5475'. [ 340.421540][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5484'. [ 340.421580][T17196] netlink: 'syz.1.5484': attribute type 1 has an invalid length. [ 340.505395][T17199] netlink: 'syz.0.5486': attribute type 2 has an invalid length. [ 340.594526][T17207] netlink: 'syz.1.5491': attribute type 21 has an invalid length. [ 340.602640][T17207] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.612911][T17207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.612936][T17207] IPv6: NLM_F_CREATE should be set when creating new route [ 340.612977][T17207] IPv6: NLM_F_CREATE should be set when creating new route [ 340.613020][T17207] IPv6: NLM_F_CREATE should be set when creating new route [ 341.082763][T17234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.082796][T17234] IPv6: NLM_F_CREATE should be set when creating new route [ 341.082850][T17234] IPv6: NLM_F_CREATE should be set when creating new route [ 341.197924][T17229] netlink: Failed to add helper -22 [ 341.198034][T17229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.497478][T17256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.719807][T17266] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5519'. [ 341.720022][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5519'. [ 342.222951][T17291] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 342.389835][T17301] netlink: 'syz.1.5534': attribute type 21 has an invalid length. [ 342.389937][T17301] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5534'. [ 343.259143][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5556'. [ 343.552861][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5563'. [ 343.569815][T17360] openvswitch: netlink: IPv4 tunnel dst address is zero [ 343.767977][T17370] xt_hashlimit: max too large, truncated to 1048576 [ 344.516033][T17403] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.5587'. [ 344.593650][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5589'. [ 344.613667][T17411] netlink: 'syz.3.5590': attribute type 9 has an invalid length. [ 344.613705][T17411] netlink: 'syz.3.5590': attribute type 5 has an invalid length. [ 344.758991][T17417] netlink: 'syz.2.5597': attribute type 1 has an invalid length. [ 344.767065][T17417] netlink: 1368 bytes leftover after parsing attributes in process `syz.2.5597'. [ 345.382706][T17447] netlink: 'syz.1.5609': attribute type 55 has an invalid length. [ 345.428995][T17449] ipip0: entered promiscuous mode [ 345.523467][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5613'. [ 345.688555][T17465] netlink: 'syz.4.5619': attribute type 3 has an invalid length. [ 345.688597][T17465] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5619'. [ 345.862154][T17472] netlink: 'syz.4.5623': attribute type 26 has an invalid length. [ 345.988606][ T5717] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 346.036173][T14000] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 346.156633][ T5717] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 346.262842][T17492] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5632'. [ 346.416864][T17500] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 346.799413][T17517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5643'. [ 347.098376][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.106577][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.125948][T17526] netlink: 'syz.4.5648': attribute type 1 has an invalid length. [ 347.125989][T17526] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5648'. [ 347.252754][T17530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.311776][T17534] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 347.435298][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.446989][T17542] netlink: 'syz.3.5666': attribute type 1 has an invalid length. [ 347.447438][T17542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.284986][T17577] bond2: option resend_igmp: invalid value (2878) [ 348.291658][T17577] bond2: option resend_igmp: allowed values 0 - 255 [ 348.306546][T17577] bond2 (unregistering): Released all slaves [ 349.327412][T17628] ip6t_rpfilter: unknown options [ 350.715270][T17700] netlink: 'syz.3.5731': attribute type 5 has an invalid length. [ 350.765818][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5732'. [ 351.058614][T17713] vxcan3: entered promiscuous mode [ 351.335140][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.699186][T17747] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5754'. [ 351.883452][T17755] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5758'. [ 352.012297][T17754] bond2: option updelay: invalid value (18446744073709518847) [ 352.035434][T17754] bond2: option updelay: allowed values 0 - 2147483647 [ 352.055937][T17754] bond2 (unregistering): Released all slaves [ 352.158453][T17770] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5764'. [ 352.196866][T17772] netlink: 'syz.3.5768': attribute type 10 has an invalid length. [ 352.205814][T17772] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.207535][T17772] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.233434][T17772] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.233565][T17772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.233858][T17772] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.233976][T17772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.300143][T17772] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 352.662660][T17794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5778'. [ 352.662703][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5778'. [ 353.166396][T17821] netlink: 'syz.2.5791': attribute type 34 has an invalid length. [ 353.166429][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5791'. [ 353.906471][T17852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5804'. [ 353.924523][T17852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5804'. [ 353.934421][T17852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5804'. [ 354.328810][T17852] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.330228][T17852] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.769697][T17852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.795812][T17852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.903804][T17854] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 354.908642][ T152] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.908714][ T152] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.908841][ T152] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.909026][ T152] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.268628][T17891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.052074][T17929] pimreg: entered allmulticast mode [ 356.320204][T17942] Cannot find del_set index 4 as target [ 356.590024][T17954] __nla_validate_parse: 135 callbacks suppressed [ 356.590102][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5839'. [ 356.803785][T17965] xt_ecn: cannot match TCP bits for non-tcp packets [ 357.216757][T17985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5852'. [ 357.522756][T18003] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 358.275511][T18029] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5870'. [ 358.582866][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5874'. [ 358.582913][T18041] tc_dump_action: action bad kind [ 359.287936][T18072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5886'. [ 359.614698][T18090] netlink: 'syz.2.5895': attribute type 2 has an invalid length. [ 359.787297][T18099] netlink: 'syz.2.5899': attribute type 5 has an invalid length. [ 359.975091][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.301650][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5912'. [ 360.386044][T18127] netlink: 'syz.3.5914': attribute type 1 has an invalid length. [ 360.739141][T18148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5922'. [ 360.797735][T17871] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.927896][T18152] openvswitch: netlink: Duplicate or invalid key (type 0). [ 361.168770][T18162] netlink: 9160 bytes leftover after parsing attributes in process `syz.3.5927'. [ 361.461249][T18178] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 361.579765][ T5724] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 362.730750][T18241] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5965'. [ 362.763882][T18244] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 362.874757][T18249] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 362.918703][T18255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5972'. [ 362.928788][T18255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.928836][T18255] IPv6: NLM_F_CREATE should be set when creating new route [ 362.928889][T18255] IPv6: NLM_F_CREATE should be set when creating new route [ 363.331947][T18277] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5982'. [ 363.331996][T18277] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5982'. [ 363.427964][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5984'. [ 363.523093][T18287] netlink: 'syz.3.5990': attribute type 11 has an invalid length. [ 363.531299][T18287] netlink: 'syz.3.5990': attribute type 4 has an invalid length. [ 363.542033][T18287] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5990'. [ 363.596207][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5991'. [ 363.672573][T18294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5988'. [ 363.927539][T18307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5997'. [ 363.991232][T18311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5999'. [ 363.991661][T18311] unsupported nlmsg_type 40 [ 364.179974][T18315] sctp: [Deprecated]: syz.0.6002 (pid 18315) Use of int in maxseg socket option. [ 364.179974][T18315] Use struct sctp_assoc_value instead [ 364.453848][T18325] bond4: option packets_per_slave: invalid value (600641588) [ 364.461917][T18325] bond4: option packets_per_slave: allowed values 0 - 65535 [ 364.477963][T18325] bond4 (unregistering): Released all slaves [ 364.623639][T18332] bond3: option resend_igmp: invalid value (2878) [ 364.631939][T18332] bond3: option resend_igmp: allowed values 0 - 255 [ 364.674114][T18332] bond3 (unregistering): Released all slaves [ 365.342410][T18361] gre1: entered allmulticast mode [ 365.364416][T18365] xfrm0 speed is unknown, defaulting to 1000 [ 365.374044][T18365] xfrm0 speed is unknown, defaulting to 1000 [ 365.383349][T18365] xfrm0 speed is unknown, defaulting to 1000 [ 366.091367][T17865] xfrm0 speed is unknown, defaulting to 1000 [ 366.108479][T18365] infiniband syz0: set active [ 366.108524][T18365] infiniband syz0: added xfrm0 [ 366.236072][T18365] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 366.251376][T18365] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 366.251478][T18365] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 366.440008][T18365] RDS/IB: syz0: added [ 366.452325][T18365] smc: adding ib device syz0 with port count 1 [ 366.452688][T18365] smc: ib device syz0 port 1 has no pnetid [ 366.471920][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 366.494188][T18365] xfrm0 speed is unknown, defaulting to 1000 [ 367.359570][T18365] xfrm0 speed is unknown, defaulting to 1000 [ 367.508068][T18418] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 367.520595][T18418] bridge4: entered allmulticast mode [ 368.393688][T18365] xfrm0 speed is unknown, defaulting to 1000 [ 368.462788][T18459] xt_CONNSECMARK: invalid mode: 3 [ 368.579547][T18465] __nla_validate_parse: 5 callbacks suppressed [ 368.579595][T18465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6075'. [ 368.579618][T18465] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6075'. [ 368.579641][T18465] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6075'. [ 368.579661][T18465] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6075'. [ 368.861592][T18476] netlink: 'syz.1.6080': attribute type 17 has an invalid length. [ 368.902782][T18479] ip6gre1: entered allmulticast mode [ 369.046818][T18487] netlink: 'syz.4.6086': attribute type 2 has an invalid length. [ 369.102318][T18484] bond3: entered promiscuous mode [ 369.102356][T18484] bond3: entered allmulticast mode [ 369.102678][T18484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 369.492531][T18365] xfrm0 speed is unknown, defaulting to 1000 [ 370.253752][T18365] xfrm0 speed is unknown, defaulting to 1000 [ 370.818209][T18554] netlink: 'syz.0.6119': attribute type 1 has an invalid length. [ 370.833871][T18555] netlink: 'syz.1.6118': attribute type 3 has an invalid length. [ 370.833909][T18555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6118'. [ 371.038235][ T59] IPVS: starting estimator thread 0... [ 371.136180][T18566] IPVS: using max 28 ests per chain, 67200 per kthread [ 371.152119][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6129'. [ 371.468250][T18583] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 371.664487][T18599] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6140'. [ 371.670853][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.682554][T18598] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 371.731194][T18600] netlink: 'syz.0.6139': attribute type 5 has an invalid length. [ 372.419790][T18636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.668354][T18649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6164'. [ 372.668395][T18649] tc_dump_action: action bad kind [ 373.004834][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6174'. [ 373.405727][T18685] openvswitch: netlink: Tunnel attr 246 out of range max 16 [ 373.832638][T18707] netlink: 'syz.0.6194': attribute type 61 has an invalid length. [ 374.623646][T18739] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 374.993511][T18755] netlink: 'syz.1.6217': attribute type 2 has an invalid length. [ 374.993580][T18755] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6217'. [ 375.587205][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6232'. [ 376.615090][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 376.680841][T18841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6258'. [ 376.786682][T18853] netlink: 'syz.0.6262': attribute type 1 has an invalid length. [ 376.794639][T18853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6262'. [ 377.344603][T18879] netlink: 'syz.0.6276': attribute type 23 has an invalid length. [ 377.452892][T18881] bridge0: port 3(bond0) entered blocking state [ 377.462299][T18881] bridge0: port 3(bond0) entered disabled state [ 377.463080][T18881] bond0: entered allmulticast mode [ 377.463131][T18881] bond_slave_0: entered allmulticast mode [ 377.463221][T18881] bond_slave_1: entered allmulticast mode [ 377.530895][T18881] bond0: entered promiscuous mode [ 377.530952][T18881] bond_slave_0: entered promiscuous mode [ 377.566432][T18881] bond_slave_1: entered promiscuous mode [ 377.775703][T18899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 377.786293][T18900] xt_bpf: check failed: parse error [ 378.538182][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.644620][T18941] netlink: 'syz.1.6308': attribute type 2 has an invalid length. [ 379.276624][T18977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6326'. [ 380.390890][T19036] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 381.507935][T19092] netlink: 'syz.3.6382': attribute type 2 has an invalid length. [ 381.579371][T19098] netlink: 'syz.1.6385': attribute type 3 has an invalid length. [ 382.136823][T19130] netlink: 'syz.0.6400': attribute type 32 has an invalid length. [ 382.376453][T19142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6405'. [ 382.376493][T19142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6405'. [ 382.608740][T19154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6410'. [ 382.732409][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6416'. [ 382.732466][T19161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.994411][T19173] netlink: 'syz.2.6421': attribute type 1 has an invalid length. [ 383.505827][T19201] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6435'. [ 383.684596][T19211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6444'. [ 383.697983][T19211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6444'. [ 383.707090][T19211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6444'. [ 383.717066][T19211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6444'. [ 383.726181][T19211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6444'. [ 384.175958][T19231] Cannot find del_set index 4 as target [ 384.817447][T19262] bond0: Error: Cannot enslave bond to itself. [ 385.000367][T19275] x_tables: duplicate entry at hook 2 [ 386.145673][T19329] netlink: 'syz.0.6499': attribute type 3 has an invalid length. [ 386.341408][T19343] netlink: 'syz.0.6506': attribute type 2 has an invalid length. [ 386.350553][T19345] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 386.474199][T19343] D†'|o: entered promiscuous mode [ 387.333954][T19396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.554281][T19407] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 387.907128][T19422] netlink: 'syz.1.6546': attribute type 2 has an invalid length. [ 387.907169][T19422] netlink: 'syz.1.6546': attribute type 1 has an invalid length. [ 387.907200][T19422] __nla_validate_parse: 205 callbacks suppressed [ 387.907218][T19422] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6546'. [ 388.302681][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 388.302753][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6557'. [ 388.326373][T19446] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 388.476495][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6561'. [ 388.703220][T19467] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 389.013610][T19479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6574'. [ 389.013660][T19479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6574'. [ 389.155137][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6576'. [ 389.466170][T19491] xt_CT: No such helper "syz0" [ 389.594970][T19496] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 389.612666][T19496] bond4 (unregistering): Released all slaves [ 389.979795][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6591'. [ 390.040082][T19519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.382349][T19537] netlink: 'syz.1.6602': attribute type 1 has an invalid length. [ 391.020582][T19574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6620'. [ 391.394563][T19593] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 391.886599][T19614] xt_LOG: level 125 >= 8 [ 392.551013][T19640] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 392.944729][T19657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6661'. [ 393.271995][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6669'. [ 393.915317][T19709] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6686'. [ 394.459012][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6698'. [ 394.593738][T19739] xt_REDIRECT: bad rangesize 26624. [ 394.902921][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6708'. [ 394.902968][T19753] netlink: 'syz.4.6708': attribute type 1 has an invalid length. [ 394.902983][T19753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6708'. [ 395.245862][T19773] netlink: 'syz.3.6719': attribute type 32 has an invalid length. [ 395.245908][T19773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6719'. [ 395.670204][T19792] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6727'. [ 396.872895][T19852] netlink: 'syz.1.6756': attribute type 11 has an invalid length. [ 396.872934][T19852] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6756'. [ 397.058336][T19858] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 397.283666][T19872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.283698][T19872] IPv6: NLM_F_CREATE should be set when creating new route [ 397.283768][T19872] IPv6: NLM_F_CREATE should be set when creating new route [ 397.551038][T19884] netlink: 'syz.3.6773': attribute type 3 has an invalid length. [ 397.551085][T19884] netlink: 'syz.3.6773': attribute type 1 has an invalid length. [ 397.551099][T19884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6773'. [ 397.551116][T19884] NCSI netlink: No device for ifindex 0 [ 397.973825][T19904] gre0: entered promiscuous mode [ 397.973867][T19904] gre0: entered allmulticast mode [ 398.006074][T19904] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 398.316115][T19927] netlink: 'syz.1.6794': attribute type 3 has an invalid length. [ 398.492187][T19936] __nla_validate_parse: 1 callbacks suppressed [ 398.492237][T19936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6798'. [ 398.492255][T19936] openvswitch: netlink: Invalid VLAN frame [ 398.582231][T19941] netlink: 'syz.4.6801': attribute type 2 has an invalid length. [ 398.582274][T19941] netlink: 'syz.4.6801': attribute type 11 has an invalid length. [ 398.582303][T19941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6801'. [ 398.712569][T19949] Cannot find del_set index 3 as target [ 398.890895][T19955] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6807'. [ 398.890933][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6807'. [ 399.169186][T19973] netlink: 'syz.2.6815': attribute type 1 has an invalid length. [ 399.469284][T19988] netlink: 'syz.4.6822': attribute type 21 has an invalid length. [ 399.484716][T19989] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6824'. [ 399.608393][T19995] bridge0: port 3(erspan0) entered blocking state [ 399.615128][T19995] bridge0: port 3(erspan0) entered disabled state [ 399.615507][T19995] erspan0: entered allmulticast mode [ 399.630648][T19995] erspan0: entered promiscuous mode [ 400.256807][T20023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.351590][T20027] openvswitch: netlink: Duplicate or invalid key (type 0). [ 400.429301][T20029] team0: entered promiscuous mode [ 400.429338][T20029] team_slave_0: entered promiscuous mode [ 400.444710][T20029] team_slave_1: entered promiscuous mode [ 400.445231][T20029] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 401.711025][T20090] netlink: 'syz.1.6874': attribute type 49 has an invalid length. [ 403.134573][T20162] netlink: 380 bytes leftover after parsing attributes in process `syz.0.6907'. [ 403.134623][T20162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6907'. [ 403.134650][T20162] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6907'. [ 403.306501][T20167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6908'. [ 403.360314][T20172] xt_l2tp: v2 sid > 0xffff: 33554432 [ 403.653724][ T5276] veth0_macvtap: left promiscuous mode [ 403.892932][T20192] geneve3: entered promiscuous mode [ 404.334151][T20217] netlink: 20672 bytes leftover after parsing attributes in process `syz.2.6928'. [ 404.870430][T20246] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.6939'. [ 404.870478][T20246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6939'. [ 404.870498][T20246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6939'. [ 404.870558][T20246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6939'. [ 404.896984][T20247] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6940'. [ 405.085675][T20254] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6943'. [ 405.347281][T20264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6947'. [ 405.634741][T20274] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 406.434373][T20307] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 407.037801][T20336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6982'. [ 407.060865][T20336] ip6tnl3: entered allmulticast mode [ 407.383972][T20356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6992'. [ 407.559264][T20362] gre1: entered promiscuous mode [ 407.567805][T20362] gre1: entered allmulticast mode [ 407.923077][T20380] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 408.148563][T20392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.924810][T20441] netlink: 'syz.1.7034': attribute type 30 has an invalid length. [ 409.005950][T20443] SET target dimension over the limit! [ 409.074209][T20445] openvswitch: netlink: IP tunnel dst address not specified [ 409.179899][T20454] netlink: NAT attribute has 5 unknown bytes [ 409.179957][T20454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.577387][T20477] SET target dimension over the limit! [ 410.228865][T20504] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 410.527647][T20522] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 410.543770][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 410.672441][T20530] netlink: 'syz.3.7075': attribute type 3 has an invalid length. [ 410.672495][T20530] __nla_validate_parse: 5 callbacks suppressed [ 410.672507][T20530] netlink: 666 bytes leftover after parsing attributes in process `syz.3.7075'. [ 410.734782][T20523] bond4 (unregistering): Released all slaves [ 410.863307][T20531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7073'. [ 410.875751][T20531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7073'. [ 410.875769][T20531] tc_dump_action: action bad kind [ 410.990059][T20542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7080'. [ 411.065852][T20545] netlink: 'syz.2.7083': attribute type 13 has an invalid length. [ 411.323808][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7088'. [ 411.323875][T20559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7088'. [ 411.582960][T20567] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 411.602189][T20567] bond1 (unregistering): Released all slaves [ 411.947168][T20590] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 411.965932][T20591] SET target dimension over the limit! [ 411.995893][T20593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7104'. [ 412.423076][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7114'. [ 412.765606][T20632] netlink: 'syz.1.7123': attribute type 1 has an invalid length. [ 412.765655][T20632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7123'. [ 412.998088][T20640] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7127'. [ 413.451517][T20660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.072412][T20690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.323791][T20699] lo: entered promiscuous mode [ 414.353979][T20699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.699585][T20721] netlink: zone id is out of range [ 414.699630][T20721] netlink: zone id is out of range [ 414.699653][T20721] netlink: zone id is out of range [ 414.699676][T20721] netlink: zone id is out of range [ 414.699686][T20721] netlink: zone id is out of range [ 414.699697][T20721] netlink: zone id is out of range [ 415.084209][T20739] ip6erspan0: entered allmulticast mode [ 415.170218][T20746] unsupported nla_type 216 [ 415.577961][T20763] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 415.597256][T20763] bond4 (unregistering): Released all slaves [ 415.966646][T20785] netlink: 'syz.0.7196': attribute type 9 has an invalid length. [ 416.007260][T20789] x_tables: unsorted underflow at hook 3 [ 416.271332][T20805] netlink: 'syz.4.7205': attribute type 39 has an invalid length. [ 416.782503][T20827] Cannot find map_set index 65533 as target [ 417.248095][T20853] netlink: 'syz.2.7230': attribute type 5 has an invalid length. [ 418.289530][T20899] netlink: 'syz.3.7250': attribute type 1 has an invalid length. [ 418.289596][T20899] __nla_validate_parse: 6 callbacks suppressed [ 418.289632][T20899] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7250'. [ 418.562173][T20914] netlink: 'syz.2.7256': attribute type 21 has an invalid length. [ 418.628834][T20917] Cannot find add_set index 4 as target [ 418.876535][T20927] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 420.821795][T21029] nftables ruleset with unbound chain [ 421.089663][T21044] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.196693][ T59] IPVS: starting estimator thread 0... [ 421.278985][T21057] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7317'. [ 421.288806][T21052] IPVS: using max 28 ests per chain, 67200 per kthread [ 421.404789][T21061] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7319'. [ 421.562246][T21072] net_ratelimit: 1715 callbacks suppressed [ 421.562387][T21072] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 421.659013][T21076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7324'. [ 421.739542][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.865050][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7330'. [ 421.865095][T21084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7330'. [ 421.960172][T21088] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7334'. [ 422.618560][T21125] syz.4.7350: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 422.619663][T21125] CPU: 0 UID: 0 PID: 21125 Comm: syz.4.7350 Not tainted syzkaller #0 PREEMPT(full) [ 422.619704][T21125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.619732][T21125] Call Trace: [ 422.619815][T21125] [ 422.619854][T21125] dump_stack_lvl+0xe8/0x150 [ 422.619988][T21125] warn_alloc+0x24d/0x270 [ 422.620044][T21125] ? kasan_save_track+0x4f/0x80 [ 422.620095][T21125] ? kasan_save_track+0x3e/0x80 [ 422.620116][T21125] ? __pfx_warn_alloc+0x10/0x10 [ 422.620143][T21125] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 422.620248][T21125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.620303][T21125] __vmalloc_node_range_noprof+0x127/0x1540 [ 422.620352][T21125] ? rcu_is_watching+0x16/0xb0 [ 422.620401][T21125] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 422.620429][T21125] ? __kmalloc_cache_noprof+0x321/0x600 [ 422.620460][T21125] ? __kmalloc_cache_noprof+0x14d/0x600 [ 422.620489][T21125] ? xskq_create+0x56/0x220 [ 422.620566][T21125] xskq_create+0x148/0x220 [ 422.620590][T21125] ? xsk_init_queue+0x8a/0xe0 [ 422.620614][T21125] xsk_init_queue+0x8a/0xe0 [ 422.620648][T21125] xsk_setsockopt+0x52a/0x960 [ 422.620672][T21125] ? __pfx_xsk_setsockopt+0x10/0x10 [ 422.620695][T21125] ? __pfx_aa_sk_perm+0x10/0x10 [ 422.620790][T21125] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 422.620831][T21125] ? __pfx_xsk_setsockopt+0x10/0x10 [ 422.620855][T21125] do_sock_setsockopt+0x17c/0x1b0 [ 422.620888][T21125] __x64_sys_setsockopt+0x13d/0x1b0 [ 422.620923][T21125] do_syscall_64+0x166/0x520 [ 422.621006][T21125] ? trace_irq_disable+0x3b/0x140 [ 422.621038][T21125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.621059][T21125] ? clear_bhb_loop+0x70/0xc0 [ 422.621084][T21125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.621103][T21125] RIP: 0033:0x7fac2759e159 [ 422.621131][T21125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.621149][T21125] RSP: 002b:00007fac284b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 422.621199][T21125] RAX: ffffffffffffffda RBX: 00007fac27825fa0 RCX: 00007fac2759e159 [ 422.621214][T21125] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 422.621227][T21125] RBP: 00007fac27635024 R08: 0000000000000004 R09: 0000000000000000 [ 422.621240][T21125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.621253][T21125] R13: 00007fac27826038 R14: 00007fac27825fa0 R15: 00007ffeac9d5388 [ 422.621284][T21125] [ 422.624350][T21125] Mem-Info: [ 422.624367][T21125] active_anon:5804 inactive_anon:0 isolated_anon:0 [ 422.624367][T21125] active_file:3 inactive_file:42942 isolated_file:0 [ 422.624367][T21125] unevictable:0 dirty:246 writeback:0 [ 422.624367][T21125] slab_reclaimable:11185 slab_unreclaimable:110557 [ 422.624367][T21125] mapped:29219 shmem:525 pagetables:1485 [ 422.624367][T21125] sec_pagetables:0 bounce:0 [ 422.624367][T21125] kernel_misc_reclaimable:0 [ 422.624367][T21125] free:1300547 free_pcp:7264 free_cma:0 [ 422.624424][T21125] Node 0 active_anon:23216kB inactive_anon:0kB active_file:12kB inactive_file:171564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116876kB dirty:980kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13120kB pagetables:5804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 422.624481][T21125] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 422.624534][T21125] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.624600][T21125] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 422.624663][T21125] Node 0 DMA32 free:1244380kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23216kB inactive_anon:0kB active_file:12kB inactive_file:171564kB unevictable:0kB writepending:980kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:29056kB local_pcp:11768kB free_cma:0kB [ 422.624725][T21125] lowmem_reserve[]: 0 0 0 0 0 [ 422.624779][T21125] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.624839][T21125] lowmem_reserve[]: 0 0 0 0 0 [ 422.626569][T21125] Node 1 Normal free:3942448kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.626640][T21125] lowmem_reserve[]: 0 0 0 0 0 [ 422.626695][T21125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 422.626870][T21125] Node 0 DMA32: 557*4kB (UM) 355*8kB (UM) 427*16kB (UME) 283*32kB (UM) 138*64kB (UM) 111*128kB (UME) 89*256kB (UM) 10*512kB (U) 5*1024kB (UE) 6*2048kB (UME) 282*4096kB (UM) = 1244380kB [ 422.627128][T21125] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 422.627265][T21125] Node 1 Normal: 4*4kB (UM) 8*8kB (UM) 8*16kB (UM) 7*32kB (UM) 6*64kB (UM) 6*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942448kB [ 422.632047][T21125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.632225][T21125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.632256][T21125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.632277][T21125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.632302][T21125] 43466 total pagecache pages [ 422.632318][T21125] 0 pages in swap cache [ 422.632328][T21125] Free swap = 124996kB [ 422.632339][T21125] Total swap = 124996kB [ 422.632351][T21125] 2097051 pages RAM [ 422.632362][T21125] 0 pages HighMem/MovableOnly [ 422.632372][T21125] 428730 pages reserved [ 422.632383][T21125] 0 pages cma reserved [ 424.472215][T21180] IPv6: NLM_F_CREATE should be specified when creating new route [ 425.003712][T21210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7386'. [ 425.738774][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7404'. [ 425.738819][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7404'. [ 426.235086][T21273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7415'. [ 426.408977][T21282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7418'. [ 426.409197][T21282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7418'. [ 426.533631][T21287] netlink: 'syz.1.7425': attribute type 8 has an invalid length. [ 426.828541][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7429'. [ 426.979227][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7434'. [ 426.989529][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7434'. [ 426.998931][T21310] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 427.212941][T21323] x_tables: duplicate underflow at hook 2 [ 427.547142][T21340] netlink: 'syz.2.7448': attribute type 1 has an invalid length. [ 427.547190][T21340] netlink: 'syz.2.7448': attribute type 2 has an invalid length. [ 427.568977][T21344] netlink: 'syz.0.7449': attribute type 1 has an invalid length. [ 428.002071][T21367] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 428.163473][T21376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7467'. [ 429.004361][T21420] openvswitch: netlink: IP tunnel dst address not specified [ 429.667579][T21456] openvswitch: netlink: Flow actions attr not present in new flow. [ 429.694625][T21457] netlink: 'syz.0.7505': attribute type 21 has an invalid length. [ 429.823311][T21465] netlink: 'syz.1.7510': attribute type 1 has an invalid length. [ 431.054040][T21525] ovs-s!: entered promiscuous mode [ 431.289332][T21538] __nla_validate_parse: 1 callbacks suppressed [ 431.289382][T21538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7546'. [ 431.526693][T21546] smbdirect: ib_dev[syz2] removed [ 431.586301][T21551] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7551'. [ 431.804193][T21560] netlink: 'syz.2.7557': attribute type 2 has an invalid length. [ 433.011894][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7585'. [ 433.076115][T21622] No such timeout policy "syz1" [ 433.882289][T21666] sctp: [Deprecated]: syz.2.7608 (pid 21666) Use of int in maxseg socket option. [ 433.882289][T21666] Use struct sctp_assoc_value instead [ 434.168976][T21683] netlink: 'syz.1.7616': attribute type 2 has an invalid length. [ 434.639078][T21702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7626'. [ 435.108097][T21725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7637'. [ 435.176967][T21729] netlink: 'syz.3.7640': attribute type 21 has an invalid length. [ 435.186101][T21729] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7640'. [ 435.198141][T21729] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7640'. [ 435.327545][T21733] netlink: 'syz.0.7639': attribute type 11 has an invalid length. [ 435.327598][T21733] netlink: 'syz.0.7639': attribute type 4 has an invalid length. [ 435.328736][T21733] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7639'. [ 435.618214][T21747] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7648'. [ 435.849981][T21756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7653'. [ 436.099362][T21763] bond4 (unregistering): Released all slaves [ 436.398199][T21785] __nla_validate_parse: 2 callbacks suppressed [ 436.398257][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7667'. [ 436.596431][T21796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7670'. [ 436.596486][T21796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7670'. [ 436.925713][T21808] netlink: 'syz.3.7676': attribute type 1 has an invalid length. [ 436.925766][T21808] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7676'. [ 436.925808][T21808] NCSI netlink: No device for ifindex 0 [ 437.994428][T21860] netlink: 'syz.3.7697': attribute type 16 has an invalid length. [ 438.002394][T21860] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7697'. [ 438.386965][T21878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7706'. [ 438.452271][T21881] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7707'. [ 438.825838][T21901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7717'. [ 439.351549][T21925] netlink: 'syz.1.7729': attribute type 40 has an invalid length. [ 439.630410][T21943] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.978425][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.079565][T21965] netlink: 'syz.4.7750': attribute type 1 has an invalid length. [ 440.292669][T21975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7754'. [ 440.292747][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7754'. [ 440.552534][T21992] ip6t_srh: unknown srh match flags 4000 [ 440.726441][T22000] erspan0: entered promiscuous mode [ 440.726480][T22000] erspan0: entered allmulticast mode [ 440.911991][T22009] x_tables: duplicate underflow at hook 2 [ 441.011018][T22012] SET target dimension over the limit! [ 441.302892][T22028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.391796][T22033] netlink: 'syz.1.7783': attribute type 1 has an invalid length. [ 441.391838][T22033] netlink: 'syz.1.7783': attribute type 12 has an invalid length. [ 441.421694][T22034] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 441.811844][T22054] netlink: 'syz.4.7792': attribute type 2 has an invalid length. [ 441.811899][T22054] __nla_validate_parse: 6 callbacks suppressed [ 441.811928][T22054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7792'. [ 441.890868][T22054] ¿: entered promiscuous mode [ 441.898127][T22060] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7794'. [ 441.908287][T22060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7794'. [ 441.917403][T22060] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7794'. [ 441.917425][T22060] netlink: 'syz.0.7794': attribute type 2 has an invalid length. [ 441.917441][T22060] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7794'. [ 442.154594][T22066] geneve1: entered promiscuous mode [ 442.154637][T22066] geneve1: entered allmulticast mode [ 442.385989][T22074] bond5: Unable to set up delay as MII monitoring is disabled [ 442.398389][T22074] bond5 (unregistering): Released all slaves [ 442.524193][T22081] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7804'. [ 442.828566][T22099] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7814'. [ 442.962579][T22099] bond0 (unregistering): (slave 30ì): Releasing backup interface [ 443.003841][T22099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.032703][T22099] bond0 (unregistering): Released all slaves [ 443.646059][T22142] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7834'. [ 444.402473][T22180] bond0: option arp_validate: invalid value (8192) [ 444.413057][T22180] bond0 (unregistering): Released all slaves [ 444.604369][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7859'. [ 444.881589][T22203] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.7865'. [ 445.026920][T22211] Unsupported ieee802154 address type: 0 [ 445.184752][T22220] netlink: 'syz.1.7873': attribute type 11 has an invalid length. [ 445.879491][T22254] x_tables: unsorted underflow at hook 4 [ 446.050572][T22262] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.546463][T22291] netlink: 'syz.3.7909': attribute type 6 has an invalid length. [ 446.592498][T22292] set match dimension is over the limit! [ 447.075888][T22316] __nla_validate_parse: 5 callbacks suppressed [ 447.075943][T22316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7921'. [ 447.075968][T22316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7921'. [ 447.421187][T22332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7928'. [ 447.782238][T22349] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7937'. [ 447.782380][T22349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7937'. [ 447.997255][T22361] netlink: 'syz.1.7941': attribute type 7 has an invalid length. [ 447.997301][T22361] netlink: 'syz.1.7941': attribute type 8 has an invalid length. [ 448.396350][T22381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7953'. [ 449.270040][T22420] netlink: 'syz.4.7972': attribute type 3 has an invalid length. [ 449.270080][T22420] netlink: 'syz.4.7972': attribute type 16 has an invalid length. [ 449.270112][T22420] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7972'. [ 449.677143][T22431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7976'. [ 449.677196][T22431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7976'. [ 450.215338][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.322080][ T4931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 450.325798][ T4931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 450.343651][ T4931] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 450.353602][ T4931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 450.362135][ T4931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.965084][T22494] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8006'. [ 451.753401][T22459] xfrm0 speed is unknown, defaulting to 1000 [ 452.371818][T22561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8035'. [ 452.381254][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8035'. [ 452.455383][ T5622] Bluetooth: hci5: command tx timeout [ 452.792622][T22578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.093676][T22590] netlink: 'syz.1.8046': attribute type 1 has an invalid length. [ 453.093724][T22590] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8046'. [ 453.277852][T22601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.469032][T22614] netlink: 'syz.0.8056': attribute type 46 has an invalid length. [ 453.476660][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8053'. [ 453.886047][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8061'. [ 454.146039][T22459] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.146308][T22459] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.148767][T22459] bridge_slave_0: entered allmulticast mode [ 454.176057][T22459] bridge_slave_0: entered promiscuous mode [ 454.194045][T22459] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.195379][T22459] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.195735][T22459] bridge_slave_1: entered allmulticast mode [ 454.218104][T22459] bridge_slave_1: entered promiscuous mode [ 454.406054][T22459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.429456][T22459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.538856][ T5622] Bluetooth: hci5: command tx timeout [ 454.604262][T22459] team0: Port device team_slave_0 added [ 454.638170][T22459] team0: Port device team_slave_1 added [ 454.797579][T22459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.797616][T22459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.797643][T22459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.804704][T22459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.804719][T22459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.804745][T22459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.068403][T22459] hsr_slave_0: entered promiscuous mode [ 455.076901][T22459] hsr_slave_1: entered promiscuous mode [ 455.085699][T22459] debugfs: 'hsr0' already exists in 'hsr' [ 455.092489][T22459] Cannot create hsr debugfs directory [ 455.868583][T22708] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8087'. [ 456.012217][T22459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 456.027958][T22459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.039227][T22459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 456.058836][T22459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.067133][T22459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 456.083591][T22459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.093238][T22459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 456.121385][T22459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.273940][T22459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.304089][T22459] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.339694][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.339884][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.363434][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.363744][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.429505][T22730] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8095'. [ 456.617589][ T5622] Bluetooth: hci5: command tx timeout [ 456.643074][T22736] netlink: 'syz.3.8100': attribute type 1 has an invalid length. [ 456.962651][T22750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8103'. [ 457.012302][T22754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8105'. [ 457.487977][T22776] SET target dimension over the limit! [ 457.759432][T22459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.014167][T22798] netlink: 'syz.3.8123': attribute type 4 has an invalid length. [ 458.039584][T22800] netlink: 'syz.4.8122': attribute type 61 has an invalid length. [ 458.132079][T22804] netlink: zone id is out of range [ 458.409202][T22459] veth0_vlan: entered promiscuous mode [ 458.441043][T22459] veth1_vlan: entered promiscuous mode [ 458.534263][T22459] veth0_macvtap: entered promiscuous mode [ 458.554504][T22459] veth1_macvtap: entered promiscuous mode [ 458.582257][T22459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.617420][T22459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.645247][ T140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.646297][ T152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.646388][ T152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.646434][ T152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.695792][ T5622] Bluetooth: hci5: command tx timeout [ 458.852514][T22832] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8136'. [ 458.994059][T14000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.994103][T14000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.044544][T22841] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 459.129851][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.129890][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.207979][T22847] rdma_rxe: rxe_newlink: failed to add bond0 [ 459.510477][T22860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8150'. [ 459.510527][T22860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8150'. [ 459.713732][T22868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8154'. [ 460.197426][T22888] netlink: 'syz.3.8164': attribute type 11 has an invalid length. [ 460.197473][T22888] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8164'. [ 460.318741][T22891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8167'. [ 460.644385][T22906] bridge_slave_0: left allmulticast mode [ 460.652055][T22906] bridge_slave_0: left promiscuous mode [ 460.652397][T22906] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.689027][T22906] bridge_slave_1: left allmulticast mode [ 460.696360][T22906] bridge_slave_1: left promiscuous mode [ 460.702485][T22906] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.725626][T22906] bond0: (slave bond_slave_0): Releasing backup interface [ 460.770790][T22906] bond0: (slave bond_slave_1): Releasing backup interface [ 460.833029][T22906] team0: Port device team_slave_0 removed [ 460.872158][T22906] team0: Port device team_slave_1 removed [ 460.889398][T22906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.889446][T22906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.907624][T22906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.907672][T22906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.924592][T22906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.002275][T22917] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 461.035337][T22917] bond1 (unregistering): Released all slaves [ 461.497354][T22940] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 462.015367][T22969] netlink: 'syz.0.8201': attribute type 1 has an invalid length. [ 462.015414][T22969] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8201'. [ 462.707849][T22992] vti0: entered promiscuous mode [ 463.113935][T23010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8223'. [ 463.195620][T23014] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8225'. [ 463.331886][T23020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8226'. [ 463.678113][T23040] netlink: 'syz.4.8238': attribute type 9 has an invalid length. [ 464.472006][T23082] openvswitch: netlink: Multiple metadata blocks provided [ 465.004389][T23106] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 465.025269][T23106] bond3 (unregistering): Released all slaves [ 465.246344][T23123] netlink: 136 bytes leftover after parsing attributes in process `syz.5.8277'. [ 466.056287][T23161] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 466.701977][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8313'. [ 466.941216][T23201] xt_addrtype: ipv6 does not support BROADCAST matching [ 467.009189][T23207] netlink: 'syz.5.8320': attribute type 3 has an invalid length. [ 467.017372][T23207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8320'. [ 467.480773][T23227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8330'. [ 467.480817][T23227] netlink: 'syz.4.8330': attribute type 1 has an invalid length. [ 467.480850][T23227] netlink: 'syz.4.8330': attribute type 2 has an invalid length. [ 467.480914][T23227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8330'. [ 467.701290][T23240] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8336'. [ 467.711874][T23240] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 468.144275][T23262] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 468.244665][T23269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8347'. [ 468.411269][T23277] netlink: 'syz.4.8348': attribute type 1 has an invalid length. [ 468.650965][T23287] netlink: 'syz.0.8355': attribute type 2 has an invalid length. [ 468.927681][ T4931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 468.938202][ T4931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 468.946222][ T4931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 468.954168][ T4931] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 468.962799][ T4931] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 469.373799][T23314] ip6t_hbh: too many supported opts specified [ 469.398986][T23317] netlink: 'syz.3.8366': attribute type 39 has an invalid length. [ 469.412847][T23319] openvswitch: netlink: Multiple metadata blocks provided [ 469.830886][T23338] netlink: 'syz.3.8376': attribute type 2 has an invalid length. [ 469.899898][T23299] xfrm0 speed is unknown, defaulting to 1000 [ 470.457089][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8390'. [ 470.660759][T23375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.719693][T23381] xt_TPROXY: Can be used only with -p tcp or -p udp [ 470.801846][T23376] bond0 (unregistering): Released all slaves [ 471.015126][ T5622] Bluetooth: hci6: command tx timeout [ 471.592061][T23414] bond0: option miimon: invalid value (18446744071562067968) [ 471.613737][T23414] bond0: option miimon: allowed values 0 - 2147483647 [ 471.628594][T23414] bond0 (unregistering): Released all slaves [ 471.962936][T23299] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.985773][T23299] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.985935][T23299] bridge_slave_0: entered allmulticast mode [ 472.005213][T23299] bridge_slave_0: entered promiscuous mode [ 472.018923][T23299] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.029119][T23299] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.041341][T23299] bridge_slave_1: entered allmulticast mode [ 472.050027][T23299] bridge_slave_1: entered promiscuous mode [ 472.200349][T23299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.226688][T23299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.304255][T23452] ksmbd: Unknown IPC event: 1, ignore. [ 472.431101][T23299] team0: Port device team_slave_0 added [ 472.443013][T23299] team0: Port device team_slave_1 added [ 472.471652][T23460] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 472.604068][T23299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.604107][T23299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.604135][T23299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.663645][T23299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.663677][T23299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.663722][T23299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.799651][T23472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8438'. [ 472.811087][T23470] xt_hl: Unknown Hop Limit match mode: 4 [ 472.920414][T23299] hsr_slave_0: entered promiscuous mode [ 472.926515][T23299] hsr_slave_1: entered promiscuous mode [ 472.928530][T23299] debugfs: 'hsr0' already exists in 'hsr' [ 472.928583][T23299] Cannot create hsr debugfs directory [ 472.995786][T23474] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 473.095153][ T5622] Bluetooth: hci6: command tx timeout [ 473.775296][T23299] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 473.809803][T23299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.813999][T23299] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 473.851724][T23299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.862433][T23299] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 473.886285][T23299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.895258][T23299] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 473.941946][T23299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.060416][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8466'. [ 474.360635][T23540] bond0: entered promiscuous mode [ 474.365897][T23540] bond0: entered allmulticast mode [ 474.471719][T23299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.560636][T23299] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.581583][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.581684][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.625968][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.626087][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.743667][T23563] netlink: 'syz.4.8481': attribute type 1 has an invalid length. [ 474.833235][T23566] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8482'. [ 474.843421][T23566] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8482'. [ 474.974824][T23575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8487'. [ 474.976324][T23575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8487'. [ 475.175616][ T5622] Bluetooth: hci6: command tx timeout [ 475.206536][T23586] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 475.237778][T23587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.557620][T23601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8497'. [ 475.695165][T23609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8501'. [ 475.695220][T23609] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8501'. [ 475.825118][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 475.862997][T23616] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 476.068602][T23625] netlink: 'syz.0.8505': attribute type 3 has an invalid length. [ 476.136959][T23299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.790948][T23657] bridge_slave_0: left allmulticast mode [ 476.797515][T23657] bridge_slave_0: left promiscuous mode [ 476.803479][T23657] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.832326][T23657] bridge_slave_1: left allmulticast mode [ 476.839777][T23657] bridge_slave_1: left promiscuous mode [ 476.845833][T23657] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.889353][T23657] bond0: (slave bond_slave_0): Releasing backup interface [ 476.906776][T23662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8522'. [ 476.936150][T23657] bond0: (slave bond_slave_1): Releasing backup interface [ 476.978148][T23657] team0: Port device team_slave_0 removed [ 477.006659][T23657] team0: Port device team_slave_1 removed [ 477.013266][T23657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.013289][T23657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.039804][T23657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.044903][T23657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.063907][T23657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 477.264977][ T4931] Bluetooth: hci6: command tx timeout [ 477.383757][T23299] veth0_vlan: entered promiscuous mode [ 477.441510][T23299] veth1_vlan: entered promiscuous mode [ 477.451293][T23679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.603191][T23299] veth0_macvtap: entered promiscuous mode [ 477.612037][T23299] veth1_macvtap: entered promiscuous mode [ 477.637510][T23299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.669381][T23299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.716897][T14000] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.718018][T14000] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.718209][T14000] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.718302][T14000] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.937915][T23701] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8541'. [ 478.054790][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.054866][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.189588][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.189633][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.211431][T23710] openvswitch: netlink: EtherType 300 is less than min 600 [ 478.424797][T23719] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8549'. [ 478.446927][T23716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 478.546346][T23725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8553'. [ 478.604134][T23727] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 478.615684][T23727] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 478.691788][T23731] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8557'. [ 478.720446][T23729] netlink: 'syz.3.8552': attribute type 23 has an invalid length. [ 478.720495][T23729] netlink: 'syz.3.8552': attribute type 11 has an invalid length. [ 478.739503][T23733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8555'. [ 479.009006][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8562'. [ 479.019724][T23745] veth1_to_hsr: entered allmulticast mode [ 479.474464][T23767] dummy0: left allmulticast mode [ 479.482593][T23767] bridge0: port 3(dummy0) entered disabled state [ 479.547762][T23767] bridge_slave_0: left allmulticast mode [ 479.547840][T23767] bridge_slave_0: left promiscuous mode [ 479.548494][T23767] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.599056][T23767] bridge_slave_1: left allmulticast mode [ 479.599105][T23767] bridge_slave_1: left promiscuous mode [ 479.599613][T23767] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.707907][T23767] team0: Port device team_slave_0 removed [ 479.752303][T23767] team0: Port device team_slave_1 removed [ 479.759218][T23767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.767178][T23767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.780602][T23767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.790117][T23767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.807747][T23767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 479.874441][T23781] x_tables: unsorted entry at hook 2 [ 480.595033][T23818] sctp: [Deprecated]: syz.4.8599 (pid 23818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.595033][T23818] Use struct sctp_sack_info instead [ 480.681595][T23825] openvswitch: netlink: Key type 29 is not supported [ 481.307250][T23857] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 481.427717][T23861] __nla_validate_parse: 2 callbacks suppressed [ 481.437028][T23861] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8620'. [ 481.816866][T23875] openvswitch: netlink: IP tunnel TTL not specified. [ 482.218584][T23893] netlink: 400 bytes leftover after parsing attributes in process `syz.0.8636'. [ 482.506515][T23910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.514534][T23910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8644'. [ 482.524445][T23910] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 482.697321][T23917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8651'. [ 482.706510][T23917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8651'. [ 482.774113][T23920] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 482.805623][T23920] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 482.904003][T23929] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8654'. [ 482.913198][T23929] netlink: 'syz.3.8654': attribute type 2 has an invalid length. [ 482.921191][T23929] netlink: 'syz.3.8654': attribute type 1 has an invalid length. [ 482.921211][T23929] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8654'. [ 483.316024][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8665'. [ 483.405445][T23953] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 484.309824][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8688'. [ 484.309876][T23999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8688'. [ 484.680783][T24017] xt_cgroup: invalid path, errno=-2 [ 484.900623][T24026] bridge_slave_0: left allmulticast mode [ 484.910033][T24026] bridge_slave_0: left promiscuous mode [ 484.910275][T24026] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.956175][T24026] bridge_slave_1: left allmulticast mode [ 484.961951][T24026] bridge_slave_1: left promiscuous mode [ 484.967904][T24026] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.007859][T24026] bond0: (slave bond_slave_0): Releasing backup interface [ 485.061455][T24026] bond0: (slave bond_slave_1): Releasing backup interface [ 485.179002][T24026] team0: Port device team_slave_0 removed [ 485.242772][T24026] team0: Port device team_slave_1 removed [ 485.250676][T24026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.250731][T24026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.298733][T24026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.298787][T24026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.329730][T24026] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 485.954452][T24058] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 486.826360][T24092] __nla_validate_parse: 1 callbacks suppressed [ 486.826417][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8732'. [ 486.946627][T24102] netlink: 'syz.4.8738': attribute type 1 has an invalid length. [ 486.954556][T24102] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8738'. [ 487.188726][T24110] netlink: 'syz.6.8742': attribute type 13 has an invalid length. [ 487.223395][T24112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8740'. [ 487.223439][T24112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8740'. [ 487.510639][T24128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.847762][T24142] netlink: Conntrack attr has 1 unknown bytes [ 487.847836][T24142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.113686][T24162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8766'. [ 488.327531][T24170] ip_tables: iptables: counters copy to user failed while replacing table [ 488.572128][T24181] SET target dimension over the limit! [ 488.670958][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8780'. [ 488.825261][T24198] netlink: 'syz.3.8783': attribute type 2 has an invalid length. [ 488.833220][T24198] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8783'. [ 489.286956][ T32] audit: type=1800 audit(1788415168.609:2): pid=24222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8796" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9106 res=0 errno=0 [ 489.533983][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8803'. [ 489.781096][T24244] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 489.983217][T24262] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 490.945990][T24310] netlink: 2108 bytes leftover after parsing attributes in process `syz.6.8839'. [ 491.846711][T24358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8862'. [ 491.963335][T24364] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 492.077272][T24370] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8868'. [ 492.222356][T24377] netlink: 'syz.5.8871': attribute type 11 has an invalid length. [ 492.222396][T24377] netlink: 228 bytes leftover after parsing attributes in process `syz.5.8871'. [ 492.702654][T24402] netlink: 'syz.5.8885': attribute type 7 has an invalid length. [ 492.843798][T24412] netlink: 'syz.0.8892': attribute type 1 has an invalid length. [ 493.270473][T24434] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 493.441260][T24441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8905'. [ 493.803675][T24457] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 493.803836][T24457] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 494.294564][T24480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8922'. [ 494.294592][T24477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8921'. [ 494.412798][T24485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.571363][T24493] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8927'. [ 495.411558][T24534] tipc: Enabling of bearer rejected, failed to enable media [ 495.571445][T24541] macsec1: entered allmulticast mode [ 495.578236][T24541] veth1_macvtap: entered allmulticast mode [ 495.590024][T24541] veth1_macvtap: left allmulticast mode [ 496.679332][T24597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8978'. [ 497.178076][T24621] nbd: socks must be embedded in a SOCK_ITEM attr [ 497.523705][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 498.648502][ T32] audit: type=1800 audit(1788415177.979:3): pid=24686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9020" name="memory.events" dev="tmpfs" ino=9236 res=0 errno=0 [ 498.678141][ T32] audit: type=1804 audit(1788415178.009:4): pid=24686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9020" name="/newroot/1841/memory.events" dev="tmpfs" ino=9236 res=1 errno=0 [ 498.741942][T24689] netlink: 100 bytes leftover after parsing attributes in process `syz.6.9022'. [ 498.742579][T24689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9022'. [ 498.742631][T24689] netlink: 'syz.6.9022': attribute type 1 has an invalid length. [ 498.926745][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9027'. [ 498.936098][T24698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9027'. [ 498.945118][T24698] netlink: 'syz.4.9027': attribute type 12 has an invalid length. [ 498.953556][T24698] netlink: 'syz.4.9027': attribute type 11 has an invalid length. [ 501.417041][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.323118][T24726] netlink: 'syz.5.9040': attribute type 1 has an invalid length. [ 502.323160][T24726] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9040'. [ 502.798484][T24745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9048'. [ 503.227896][T24769] bridge_slave_0: entered promiscuous mode [ 503.483569][T24783] netlink: 'syz.3.9067': attribute type 3 has an invalid length. [ 503.493076][T24783] netlink: 'syz.3.9067': attribute type 1 has an invalid length. [ 503.501089][T24783] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9067'. [ 504.039793][T24810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9080'. [ 504.039836][T24810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9080'. [ 504.039883][T24810] netlink: 'syz.6.9080': attribute type 18 has an invalid length. [ 504.143634][T24814] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9081'. [ 504.642412][T24838] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 505.011506][T24859] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 505.011561][T24859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.073474][T24862] Bluetooth: MGMT ver 1.23 [ 505.079101][T24862] Bluetooth: hci0: unsupported parameter 5135 [ 505.085908][T24862] Bluetooth: hci0: unsupported parameter 8192 [ 505.092562][T24862] Bluetooth: hci0: unsupported parameter 5135 [ 505.099958][T24862] Bluetooth: hci0: unsupported parameter 8192 [ 505.169764][T24864] netlink: 'syz.4.9104': attribute type 5 has an invalid length. [ 505.352147][T24876] tipc: Started in network mode [ 505.358771][T24876] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 505.377253][T24876] tipc: Enabled bearer , priority 5 [ 505.547741][T24882] openvswitch: netlink: Missing key (keys=40, expected=100) [ 505.952138][T24900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.497713][ T10] tipc: Node number set to 4269801488 [ 506.974623][T24945] netlink: 'syz.0.9144': attribute type 1 has an invalid length. [ 506.987603][T24945] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9144'. [ 507.171475][T24950] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9147'. [ 507.962742][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9164'. [ 508.210575][T24997] xt_policy: too many policy elements [ 508.239132][T24998] netlink: 'syz.0.9169': attribute type 1 has an invalid length. [ 508.239190][T24998] netlink: 200 bytes leftover after parsing attributes in process `syz.0.9169'. [ 508.239226][T24998] netlink: 'syz.0.9169': attribute type 1 has an invalid length. [ 508.239287][T24998] netlink: 29 bytes leftover after parsing attributes in process `syz.0.9169'. [ 508.332959][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9173'. [ 508.528399][T25014] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 508.763615][T25025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9181'. [ 509.469205][T25063] tipc: Started in network mode [ 509.469259][T25063] tipc: Node identity 4246, cluster identity 4711 [ 509.469303][T25063] tipc: Node number set to 16966 [ 509.938318][T25077] bond1: (slave bond_slave_1): Device is not bonding slave [ 509.938360][T25077] bond1: option active_slave: invalid value (bond_slave_1) [ 509.974387][T25077] bond1 (unregistering): Released all slaves [ 510.181365][T25095] __nla_validate_parse: 1 callbacks suppressed [ 510.181417][T25095] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9216'. [ 510.912999][T25132] netlink: 400 bytes leftover after parsing attributes in process `syz.0.9233'. [ 511.477827][T25159] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9247'. [ 511.582036][T25163] macsec1: entered promiscuous mode [ 511.587573][T25163] hsr0: entered promiscuous mode [ 511.933177][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9252'. [ 511.933221][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9252'. [ 511.933245][T25171] netlink: 'syz.3.9252': attribute type 11 has an invalid length. [ 512.243081][T25187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.395923][T25194] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9266'. [ 513.003858][T25227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9280'. [ 513.915169][T25272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9302'. [ 513.924505][T25272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9302'. [ 514.172662][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9306'. [ 514.172716][T25285] netlink: 'syz.0.9306': attribute type 14 has an invalid length. [ 514.272917][T25290] Bluetooth: hci0: unsupported parameter 5135 [ 514.272967][T25290] Bluetooth: hci0: unsupported parameter 8192 [ 514.273002][T25290] Bluetooth: hci0: unsupported parameter 5135 [ 514.273052][T25290] Bluetooth: hci0: unsupported parameter 8192 [ 514.795339][T25319] netlink: 'syz.6.9324': attribute type 10 has an invalid length. [ 514.795451][T25319] dummy0: entered promiscuous mode [ 514.795785][T25319] bridge0: port 1(dummy0) entered blocking state [ 514.795906][T25319] bridge0: port 1(dummy0) entered disabled state [ 514.796078][T25319] dummy0: entered allmulticast mode [ 514.831840][T25319] bridge0: port 1(dummy0) entered blocking state [ 514.831968][T25319] bridge0: port 1(dummy0) entered forwarding state [ 515.344279][T25342] veth3: entered promiscuous mode [ 515.344320][T25342] veth3: entered allmulticast mode [ 515.358891][T25342] team0: Device veth3 is up. Set it down before adding it as a team port [ 516.243792][T25385] __nla_validate_parse: 3 callbacks suppressed [ 516.244506][T25385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9356'. [ 516.541702][T25402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9363'. [ 516.574122][T25403] netlink: NAT attribute has 4 unknown bytes [ 516.576718][T25403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.639382][T25402] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 516.821368][T25412] netlink: 'syz.3.9369': attribute type 1 has an invalid length. [ 517.228691][T25428] netlink: 'syz.5.9376': attribute type 13 has an invalid length. [ 517.549251][T25441] Zero length message leads to an empty skb [ 517.630534][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9385'. [ 517.630576][T25446] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9385'. [ 517.753773][T25454] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 517.753837][T25454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.180817][T25475] netlink: 'syz.3.9398': attribute type 11 has an invalid length. [ 518.271228][T25482] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 518.783711][T25506] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 520.074008][T25571] sctp: [Deprecated]: syz.3.9446 (pid 25571) Use of int in maxseg socket option. [ 520.074008][T25571] Use struct sctp_assoc_value instead [ 520.352855][T25585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9454'. [ 521.402533][T25626] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9473'. [ 521.681374][T25640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9480'. [ 521.841069][T25640] veth3: entered allmulticast mode [ 522.283524][T25667] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9492'. [ 522.868868][T25694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9506'. [ 522.868925][T25694] ip: renamed from virt_wifi0 [ 522.907207][T25697] tipc: MTU too low for tipc bearer [ 523.206290][ T13] IPVS: starting estimator thread 0... [ 523.296096][T25710] IPVS: using max 29 ests per chain, 69600 per kthread [ 523.357388][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9517'. [ 523.720908][T25735] netlink: 'syz.0.9525': attribute type 25 has an invalid length. [ 524.008515][T25750] netlink: 'syz.0.9530': attribute type 3 has an invalid length. [ 524.008558][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9530'. [ 524.315396][T25768] netlink: 'syz.0.9538': attribute type 4 has an invalid length. [ 524.512779][T25776] netlink: 112 bytes leftover after parsing attributes in process `syz.5.9540'. [ 524.742680][T25785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9547'. [ 524.778845][T25785] batadv0: entered promiscuous mode [ 524.796624][T25785] macsec1: entered promiscuous mode [ 524.799364][T25785] macsec1: entered allmulticast mode [ 524.799469][T25785] batadv0: entered allmulticast mode [ 524.819384][T25785] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 524.841317][T25785] batadv0: left allmulticast mode [ 524.842475][T25785] batadv0: left promiscuous mode [ 525.261666][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9558'. [ 525.354142][T25813] netlink: 292 bytes leftover after parsing attributes in process `syz.6.9559'. [ 525.699523][T25826] netlink: 'syz.0.9565': attribute type 1 has an invalid length. [ 526.241084][T25855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.559795][T25868] __nla_validate_parse: 2 callbacks suppressed [ 526.559847][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9587'. [ 526.559870][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9587'. [ 526.585331][T25870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9586'. [ 526.585383][T25870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9586'. [ 526.585410][T25870] netlink: 'syz.0.9586': attribute type 12 has an invalid length. [ 526.585425][T25870] netlink: 'syz.0.9586': attribute type 14 has an invalid length. [ 527.093282][T25894] veth0_to_bond: entered allmulticast mode [ 527.288553][T25903] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.880510][T25936] netlink: 'syz.5.9617': attribute type 1 has an invalid length. [ 527.880567][T25936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.085719][ T140] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.104393][ T140] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.104477][ T140] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.104610][ T140] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.346051][T25958] Bluetooth: MGMT ver 1.23 [ 528.578384][T25968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9633'. [ 528.741779][T25977] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9636'. [ 529.032477][T25989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9644'. [ 529.071309][T25995] Bluetooth: hci0: unsupported parameter 5134 [ 529.071347][T25995] Bluetooth: hci0: unsupported parameter 8192 [ 529.071377][T25995] Bluetooth: hci0: unsupported parameter 5134 [ 529.071394][T25995] Bluetooth: hci0: unsupported parameter 8192 [ 529.284484][T26003] netlink: 'syz.3.9648': attribute type 1 has an invalid length. [ 529.725927][T26027] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9662'. [ 530.288943][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9678'. [ 530.300412][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9678'. [ 531.694271][T26118] bridge_slave_1: entered promiscuous mode [ 532.054668][T26132] __nla_validate_parse: 1 callbacks suppressed [ 532.061108][T26132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9713'. [ 532.711142][T26161] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 533.393142][T26183] netlink: 'syz.3.9738': attribute type 1 has an invalid length. [ 533.393197][T26183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.953474][T26211] ip6gretap0: entered promiscuous mode [ 534.030921][T26216] netlink: Unknown conntrack attr (type=10, max=9) [ 534.594654][ T59] IPVS: starting estimator thread 0... [ 534.685117][T26243] IPVS: using max 35 ests per chain, 84000 per kthread [ 534.904140][T26259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9776'. [ 535.004418][T26263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9775'. [ 535.301160][T26281] Bluetooth: ISO socket layer initialized [ 535.474362][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9790'. [ 535.831941][T26306] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 536.115052][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9805'. [ 537.742497][T26398] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9843'. [ 537.932544][T26407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9845'. [ 537.932612][T26407] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 538.373873][T26430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9858'. [ 538.555126][T26438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9862'. [ 540.965661][T26559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9913'. [ 542.605287][T26636] netlink: 'syz.5.9946': attribute type 3 has an invalid length. [ 542.625098][T26637] netlink: 'syz.3.9947': attribute type 11 has an invalid length. [ 544.005918][T26681] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9968'. [ 544.005959][T26681] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9968'. [ 544.005993][T26681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9968'. [ 544.006069][T26681] netlink: 116 bytes leftover after parsing attributes in process `syz.4.9968'. [ 545.074037][T26735] gretap0: entered promiscuous mode [ 545.083360][T26735] macsec1: entered allmulticast mode [ 545.083397][T26735] gretap0: entered allmulticast mode [ 545.108339][T26735] gretap0: left allmulticast mode [ 545.108381][T26735] gretap0: left promiscuous mode [ 545.176570][T26737] ip6gretap1: entered allmulticast mode [ 545.183809][T26737] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 545.194593][T26737] batman_adv: batadv0: Adding interface: ip6gretap1 [ 545.201491][T26737] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.202010][T26737] batman_adv: batadv0: Interface activated: ip6gretap1 [ 545.603177][T26757] netlink: 'syz.5.10006': attribute type 27 has an invalid length. [ 545.603219][T26757] netlink: 'syz.5.10006': attribute type 3 has an invalid length. [ 545.649975][T26759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10007'. [ 546.768203][T26816] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10034'. [ 547.127239][T26832] Bluetooth: hci0: unsupported parameter 5135 [ 547.127278][T26832] Bluetooth: hci0: unsupported parameter 8192 [ 547.127317][T26832] Bluetooth: hci0: unsupported parameter 5135 [ 547.127333][T26832] Bluetooth: hci0: unsupported parameter 8192 [ 549.087152][T26919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10085'. [ 549.087204][T26919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10085'. [ 549.289783][T26927] netlink: 'syz.4.10089': attribute type 5 has an invalid length. [ 549.628355][T26937] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 549.828985][T26944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10097'. [ 551.212336][T27003] syz_tun: entered allmulticast mode [ 551.217153][T27003] syz_tun: left allmulticast mode [ 552.819659][T27050] netlink: 100 bytes leftover after parsing attributes in process `syz.6.10150'. [ 553.080441][T27065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10156'. [ 553.167499][T27067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10157'. [ 553.300122][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10160'. [ 553.512205][ T152] IPVS: starting estimator thread 0... [ 553.601346][T27085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10166'. [ 553.615139][T27083] IPVS: using max 27 ests per chain, 64800 per kthread [ 554.425527][T27118] netlink: 'syz.3.10182': attribute type 2 has an invalid length. [ 554.529591][T27121] netlink: 277 bytes leftover after parsing attributes in process `syz.6.10183'. [ 556.264348][T27206] netlink: 'syz.3.10225': attribute type 3 has an invalid length. [ 556.838704][T27232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.271512][T27252] tipc: Enabled bearer , priority 0 [ 557.413591][T27257] pimreg9: entered allmulticast mode [ 557.492717][T27263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10251'. [ 558.008234][T27285] Bluetooth: hci0: unsupported parameter 5135 [ 558.008285][T27285] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 558.178090][T27291] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 558.253518][T27294] atomic_op ffff8880554f29e0 conn xmit_atomic 0000000000000000 [ 558.380161][ T5667] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 558.425243][ T5667] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 558.814610][T27325] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10279'. [ 559.268336][T27347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10288'. [ 559.629874][T27364] netlink: 170676 bytes leftover after parsing attributes in process `syz.6.10298'. [ 559.629925][T27364] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 559.629943][T27364] openvswitch: netlink: Message has 512 unknown bytes. [ 559.652778][T27365] netlink: 'syz.4.10297': attribute type 7 has an invalid length. [ 559.652836][T27365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10297'. [ 559.652927][T27365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10297'. [ 559.879475][T27375] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10304'. [ 560.179225][T27388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10309'. [ 560.210467][T27389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10310'. [ 560.331959][T27397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10313'. [ 561.054517][T27435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10333'. [ 561.678618][T27460] netlink: 92 bytes leftover after parsing attributes in process `syz.5.10354'. [ 562.089107][T27465] netlink: Failed to add %pK helper -22 [ 562.089193][T27465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.488986][T27479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10355'. [ 562.569292][T27487] netlink: 'syz.4.10353': attribute type 4 has an invalid length. [ 562.637919][T27489] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 562.776508][T27498] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 562.859597][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.982885][T27558] tipc: Enabling of bearer rejected, already enabled [ 564.488074][T27574] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 564.501550][T27574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.694452][T27574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.994008][T27574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.153015][T27574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.525649][ T152] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.548362][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.583659][T27634] sctp: [Deprecated]: syz.6.10428 (pid 27634) Use of int in max_burst socket option deprecated. [ 565.583659][T27634] Use struct sctp_assoc_value instead [ 565.604990][ T152] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.617134][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.349194][T27665] ovs-s: entered promiscuous mode [ 566.363004][T27665] openvswitch: ovs-s: Dropping previously announced user features [ 566.510745][T27669] __nla_validate_parse: 4 callbacks suppressed [ 566.518468][T27669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10445'. [ 566.549535][T27672] netlink: 'syz.6.10446': attribute type 7 has an invalid length. [ 566.579878][T27673] netlink: 'syz.5.10447': attribute type 2 has an invalid length. [ 566.626375][ T4931] Bluetooth: hci6: link tx timeout [ 566.626495][ T4931] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 566.897628][T27689] netlink: 'syz.3.10455': attribute type 12 has an invalid length. [ 566.897679][T27689] netlink: 'syz.3.10455': attribute type 29 has an invalid length. [ 566.897715][T27689] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10455'. [ 566.897756][T27689] netlink: 59 bytes leftover after parsing attributes in process `syz.3.10455'. [ 567.084706][T27697] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 567.316927][T27711] lo: entered allmulticast mode [ 567.322265][T27711] lo: left allmulticast mode [ 567.918573][T27733] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10474'. [ 568.148422][T27741] tipc: Enabling of bearer rejected, already enabled [ 568.697503][T27678] Bluetooth: hci6: command 0x0405 tx timeout [ 568.936197][T27766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10491'. [ 569.783765][T27810] netlink: 'syz.4.10512': attribute type 2 has an invalid length. [ 569.992534][T27820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10518'. [ 570.093212][T27824] tipc: Enabling of bearer rejected, failed to enable media [ 570.862231][T27868] tipc: Started in network mode [ 570.862289][T27868] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 570.862442][T27868] tipc: Enabling of bearer rejected, failed to enable media [ 571.216945][T27887] netlink: 'syz.4.10549': attribute type 4 has an invalid length. [ 571.216997][T27887] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10549'. [ 571.268455][T27891] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10551'. [ 571.277896][T27891] netlink: 120 bytes leftover after parsing attributes in process `syz.0.10551'. [ 571.287875][T27891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10551'. [ 571.602905][T27907] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 571.920593][T27922] netlink: 'syz.0.10566': attribute type 1 has an invalid length. [ 571.920633][T27922] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10566'. [ 571.920675][T27922] netlink: 'syz.0.10566': attribute type 1 has an invalid length. [ 571.985774][T27925] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 572.222776][T27939] netlink: 'syz.6.10573': attribute type 2 has an invalid length. [ 572.973608][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10591'. [ 572.988418][T27977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10593'. [ 573.113620][T27982] batadv_slave_1: entered promiscuous mode [ 573.333868][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10598'. [ 573.688765][T28001] netlink: 452 bytes leftover after parsing attributes in process `syz.5.10604'. [ 574.157904][T28025] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10615'. [ 575.175668][ T4931] Bluetooth: hci5: command 0x0406 tx timeout [ 575.352957][T28087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10647'. [ 575.353018][T28087] netlink: 'syz.5.10647': attribute type 10 has an invalid length. [ 575.353053][T28087] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10647'. [ 575.438294][T28087] geneve2: entered promiscuous mode [ 575.438343][T28087] geneve2: entered allmulticast mode [ 575.787441][T28110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10655'. [ 576.361746][T28141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10670'. [ 576.862115][T28159] Bluetooth: hci0: unsupported parameter 5134 [ 576.862163][T28159] Bluetooth: hci0: unsupported parameter 8192 [ 576.862179][T28159] Bluetooth: hci0: unsupported parameter 5134 [ 576.862193][T28159] Bluetooth: hci0: unsupported parameter 8192 [ 577.183616][T28174] tipc: Enabling of bearer rejected, failed to enable media [ 577.818247][T28206] __nla_validate_parse: 1 callbacks suppressed [ 577.818301][T28206] netlink: 17 bytes leftover after parsing attributes in process `syz.6.10701'. [ 578.833749][T28252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10725'. [ 578.833837][T28252] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 579.632893][T28288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10742'. [ 579.927571][T28304] tipc: Enabled bearer , priority 10 [ 580.469491][T28330] Bluetooth: hci0: unsupported parameter 5134 [ 580.476945][T28330] Bluetooth: hci0: unsupported parameter 8192 [ 580.483164][T28330] Bluetooth: hci0: unsupported parameter 5134 [ 580.489437][T28330] Bluetooth: hci0: unsupported parameter 8192 [ 580.957643][T28355] netlink: 'syz.0.10774': attribute type 2 has an invalid length. [ 581.105822][T28363] netlink: 'syz.3.10779': attribute type 30 has an invalid length. [ 582.193017][T28401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10795'. [ 582.212671][T28405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.688446][T28471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10829'. [ 583.719852][T28461] syz.3.10824 (28461) used greatest stack depth: 17312 bytes left [ 583.796136][T28471] vlan0: entered promiscuous mode [ 583.802845][T28471] gretap0: entered promiscuous mode [ 584.072908][T28491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10838'. [ 584.072972][T28491] netlink: 'syz.3.10838': attribute type 4 has an invalid length. [ 584.072989][T28491] netlink: 'syz.3.10838': attribute type 1 has an invalid length. [ 584.354523][ T5790] xfrm0 speed is unknown, defaulting to 1000 [ 584.354549][T28502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10842'. [ 584.371970][T28502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10842'. [ 584.738412][T28519] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10851'. [ 584.891375][T28525] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 584.891428][T28525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.990867][T28531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10858'. [ 585.366800][T28548] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10867'. [ 586.475240][T28600] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 586.595851][T28606] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma? [ 586.916338][T28616] xt_hashlimit: max too large, truncated to 1048576 [ 586.964524][T28620] netlink: 'syz.3.10901': attribute type 16 has an invalid length. [ 586.964578][T28620] netlink: 'syz.3.10901': attribute type 3 has an invalid length. [ 586.964612][T28620] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.10901'. [ 587.390326][T28636] netlink: Invalid conntrack helper [ 587.390377][T28636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.672896][T28650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.986474][T28664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10922'. [ 588.270113][T28673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10927'. [ 588.398083][T28675] netlink: Failed to add ¦â—k\ helper -22 [ 588.398167][T28675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.145046][T28712] __nla_validate_parse: 2 callbacks suppressed [ 589.145095][T28712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10943'. [ 589.540783][T28725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10951'. [ 589.873416][T28727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10952'. [ 590.053329][T28744] netlink: 'syz.4.10960': attribute type 13 has an invalid length. [ 590.313181][T28754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10963'. [ 590.746073][T28774] netlink: Setting conntrack mark requires 'commit' flag. [ 590.753396][T28774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.860998][T28778] netlink: 'syz.4.10977': attribute type 1 has an invalid length. [ 590.869499][T28778] netlink: 'syz.4.10977': attribute type 2 has an invalid length. [ 590.880390][T28778] netlink: 'syz.4.10977': attribute type 3 has an invalid length. [ 590.888567][T28778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10977'. [ 593.078569][T28879] tipc: Can't bind to reserved service type 2 [ 594.082766][T28930] ip_tables: iptables: counters copy to user failed while replacing table [ 595.425344][T28997] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11080'. [ 595.689890][T29007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11085'. [ 596.592267][T29041] ip6gretap0: entered promiscuous mode [ 597.049647][T29067] netlink: 'syz.3.11113': attribute type 178 has an invalid length. [ 597.596752][T29099] netlink: 'syz.0.11127': attribute type 23 has an invalid length. [ 597.710895][T29102] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11130'. [ 597.711350][T29102] netlink: 'syz.3.11130': attribute type 2 has an invalid length. [ 597.711410][T29102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11130'. [ 597.711465][T29102] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11130'. [ 598.957604][T29139] netlink: 'syz.6.11148': attribute type 4 has an invalid length. [ 598.957649][T29139] netlink: 17 bytes leftover after parsing attributes in process `syz.6.11148'. [ 599.396796][T29163] netlink: 'syz.5.11159': attribute type 62 has an invalid length. [ 599.421630][T29162] netlink: 'syz.6.11157': attribute type 3 has an invalid length. [ 600.669566][T29222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11187'. [ 601.240265][T29245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11199'. [ 601.276481][T29247] netlink: 79 bytes leftover after parsing attributes in process `syz.6.11200'. [ 601.482990][T29260] netlink: 100 bytes leftover after parsing attributes in process `syz.4.11204'. [ 601.690471][T29269] Bluetooth: MGMT ver 1.23 [ 601.719420][T29272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11212'. [ 601.719467][T29272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11212'. [ 601.719507][T29272] netlink: 'syz.4.11212': attribute type 11 has an invalid length. [ 601.719522][T29272] netlink: 'syz.4.11212': attribute type 14 has an invalid length. [ 602.127700][T29294] team0: Port device xfrm0 added [ 602.479926][T29310] netlink: Conntrack attr has 4 unknown bytes [ 602.488597][T29310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.632553][T29315] rdma_op ffff888025be0a38 conn xmit_rdma 0000000000000000 [ 603.369609][T29355] sctp: [Deprecated]: syz.0.11252 (pid 29355) Use of int in max_burst socket option. [ 603.369609][T29355] Use struct sctp_assoc_value instead [ 603.600060][T29370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11257'. [ 604.599788][T29427] netlink: 'syz.4.11286': attribute type 58 has an invalid length. [ 604.599826][T29427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11286'. [ 604.876118][T29439] netlink: 208 bytes leftover after parsing attributes in process `syz.3.11290'. [ 604.876175][T29439] netlink: 208 bytes leftover after parsing attributes in process `syz.3.11290'. [ 605.661800][T29481] netlink: 'syz.3.11310': attribute type 8 has an invalid length. [ 606.313396][T29515] ip6gretap0: entered promiscuous mode [ 606.835294][T29543] openvswitch: netlink: Unknown key attributes 20 [ 606.932345][T29550] __nla_validate_parse: 1 callbacks suppressed [ 606.939092][T29550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11344'. [ 606.949314][T29550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11344'. [ 607.273095][T29565] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11351'. [ 607.500866][T29579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11358'. [ 607.807039][T29594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11365'. [ 608.121387][T29614] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11374'. [ 608.297238][ T33] INFO: task syz.1.8058:22622 blocked for more than 143 seconds. [ 608.297281][ T33] Not tainted syzkaller #0 [ 608.297314][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 608.297330][ T33] task:syz.1.8058 state:D stack:27528 pid:22622 tgid:22621 ppid:5611 task_flags:0x400040 flags:0x00080002 [ 608.297428][ T33] Call Trace: [ 608.297444][ T33] [ 608.297463][ T33] __schedule+0x17d4/0x5820 [ 608.297591][ T33] ? __pfx_clockevents_program_event+0x10/0x10 [ 608.297648][ T33] ? preempt_schedule_notrace+0x56/0x90 [ 608.297689][ T33] ? __pfx_ ** replaying previous printk message ** [ 608.297689][ T33] ? __pfx___schedule+0x10/0x10 [ 608.297730][ T33] ? schedule+0x90/0x2b0 [ 608.297765][ T33] schedule+0x164/0x2b0 [ 608.297800][ T33] schedule_preempt_disabled+0x13/0x30 [ 608.297832][ T33] __mutex_lock+0x7c1/0x1550 [ 608.297872][ T33] ? __mutex_lock+0x5d4/0x1550 [ 608.297910][ T33] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 608.298001][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 608.298044][ T33] ? __nlmsg_put+0xef/0x1b0 [ 608.298132][ T33] ? genlmsg_put+0x137/0x2e0 [ 608.298170][ T33] nfsd_nl_listener_get_doit+0x104/0x610 [ 608.298203][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 608.298241][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 608.298287][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 608.298331][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 608.298380][ T33] ? __lock_acquire+0x6df/0x2e50 [ 608.298422][ T33] ? __lock_acquire+0x6df/0x2e50 [ 608.298456][ T33] genl_rcv_msg+0x614/0x7a0 [ 608.298499][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 608.298534][ T33] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 608.320544][ T33] netlink_rcv_skb+0x226/0x4a0 [ 608.320648][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 608.320682][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 608.320724][ T33] ? down_read+0x2be/0x330 [ 608.320761][ T33] genl_rcv+0x28/0x40 [ 608.320788][ T33] netlink_unicast+0x7bd/0x940 [ 608.320821][ T33] netlink_sendmsg+0x813/0xb40 [ 608.320856][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.320888][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 608.320993][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.321017][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 608.321080][ T33] ____sys_sendmsg+0x54e/0x850 [ 608.321115][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.321146][ T33] ? import_iovec+0x73/0xa0 [ 608.321299][ T33] ___sys_sendmsg+0x2a5/0x360 [ 608.321320][ T33] ? __lock_acquire+0x6df/0x2e50 [ 608.321347][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.321372][ T33] ? futex_wait+0x2a2/0x390 [ 608.321500][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 608.321609][ T33] ? __x64_sys_sendmsg+0x196/0x290 [ 608.321680][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 608.321748][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.321852][ T33] do_syscall_64+0x166/0x520 [ 608.321941][ T33] ? trace_irq_disable+0x3b/0x140 [ 608.321992][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.322068][ T33] ? clear_bhb_loop+0x70/0xc0 [ 608.325875][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.325945][ T33] RIP: 0033:0x7f627db9e159 [ 608.325989][ T33] RSP: 002b:00007f627ea1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.326042][ T33] RAX: ffffffffffffffda RBX: 00007f627de25fa0 RCX: 00007f627db9e159 [ 608.326079][ T33] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 608.326116][ T33] RBP: 00007f627dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 608.326151][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.326180][ T33] R13: 00007f627de26038 R14: 00007f627de25fa0 R15: 00007ffdd3f53b58 [ 608.326253][ T33] [ 608.326344][ T33] [ 608.326344][ T33] Showing all locks held in the system: [ 608.326463][ T33] locks held by pr/ttyS0/16: 2, last CPU#1: [ 608.326558][ T33] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 608.326717][ T33] #1: ffffffff9ad2aff8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 608.326915][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 608.326948][ T33] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 608.327168][ T33] locks held by getty/5367: 2, on CPU#1: [ 608.327199][ T33] #0: ffff8880362650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 608.327347][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 608.329434][ T33] locks held by kworker/0:5/5790: 4, on CPU#0: [ 608.329483][ T33] #0: ffff88801b696d40 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 608.329700][ T33] #1: ffffc90004fb7c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 608.333281][ T33] #2: ffffffff8ed5d5a8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6c/0x16f0 [ 608.333341][ T33] #3: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 608.333901][ T33] locks held by syz.2.7634/21720: 2, on CPU#1: [ 608.334309][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 608.334478][ T33] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 608.334775][ T33] locks held by syz-executor/22459: 4, last CPU#1: [ 608.339055][ T33] #0: ffffffff8ee35b90 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 608.339321][ T33] #1: ffff8880297e9078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 608.339504][ T33] #2: ffff88801f6ff678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 608.339659][ T33] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 608.339801][ T33] locks held by syz.1.8058/22622: 2, on CPU#1: [ 608.339869][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 608.340043][ T33] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 608.340196][ T33] locks held by kworker/u9:0/27678: 3, on CPU#1: [ 608.340236][ T33] #0: ffff888025ea7940 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 608.340386][ T33] #1: ffffc90004befc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 608.340529][ T33] #2: ffff888054720ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 608.343494][ T33] locks held by syz.6.11376/29619: 2, last CPU#1: [ 608.343549][ T33] #0: ffff888034609078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 608.343971][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 608.344130][ T33] locks held by syz.0.11378/29620: 2, last CPU#1: [ 608.344165][ T33] #0: ffff888074a4e588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 608.347507][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: get_mem_cgroup_from_mm+0x38/0x290 [ 608.347697][ T33] locks held by syz.4.11377/29622: 2, last CPU#0: [ 608.347739][ T33] #0: ffff88807fb85038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 608.347907][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 608.348070][ T33] [ 608.348082][ T33] ============================================= [ 608.348082][ T33] [ 608.348121][ T33] NMI backtrace for cpu 0 [ 608.348162][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 608.348223][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.348264][ T33] Call Trace: [ 608.348293][ T33] [ 608.348314][ T33] dump_stack_lvl+0xe8/0x150 [ 608.348401][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 608.348517][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 608.348627][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 608.348706][ T33] sys_info+0x135/0x170 [ 608.348764][ T33] watchdog+0xfd7/0x1030 [ 608.348838][ T33] ? watchdog+0x1c7/0x1030 [ 608.348912][ T33] kthread+0x38b/0x480 [ 608.348983][ T33] ? __pfx_watchdog+0x10/0x10 [ 608.349068][ T33] ? __pfx_kthread+0x10/0x10 [ 608.349138][ T33] ret_from_fork+0x514/0xb70 [ 608.349251][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 608.349334][ T33] ? __switch_to+0xc89/0x1420 [ 608.349428][ T33] ? __pfx_kthread+0x10/0x10 [ 608.349480][ T33] ret_from_fork_asm+0x1a/0x30 [ 608.349598][ T33] [ 608.349702][ T33] Sending NMI from CPU 0 to CPUs 1: [ 608.349794][ C1] NMI backtrace for cpu 1 [ 608.349807][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 608.349828][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.349838][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 608.349869][ C1] Code: e8 ae 83 56 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 4b c6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 608.349885][ C1] RSP: 0000:ffffc900001578b8 EFLAGS: 00000002 [ 608.349901][ C1] RAX: 1ffffffff35a5600 RBX: 00000000000003fd RCX: 0000000000000000 [ 608.349913][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 608.349925][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 608.349937][ C1] R10: dffffc0000000000 R11: ffffffff85712fa0 R12: dffffc0000000000 [ 608.349950][ C1] R13: 0000000000000000 R14: ffffffff9ad2b020 R15: 0000000000000000 [ 608.349963][ C1] FS: 0000000000000000(0000) GS:ffff888124de0000(0000) knlGS:0000000000000000 [ 608.349978][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.349990][ C1] CR2: 00007f5dbbc18138 CR3: 0000000041726000 CR4: 00000000003526f0 [ 608.350007][ C1] Call Trace: [ 608.350013][ C1] [ 608.350021][ C1] wait_for_lsr+0x184/0x2f0 [ 608.350050][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 608.350073][ C1] serial8250_console_write+0xaa1/0x1200 [ 608.350105][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 608.350130][ C1] ? __schedule+0x17ea/0x5820 [ 608.350160][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 608.350189][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 608.350212][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 608.350239][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 608.350290][ C1] nbcon_kthread_func+0x679/0x880 [ 608.350312][ C1] ? nbcon_kthread_func+0x163/0x880 [ 608.350329][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 608.350351][ C1] ? __kthread_parkme+0x71/0x1f0 [ 608.350377][ C1] ? __kthread_parkme+0x199/0x1f0 [ 608.350405][ C1] kthread+0x38b/0x480 [ 608.350422][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 608.350438][ C1] ? __pfx_kthread+0x10/0x10 [ 608.350456][ C1] ret_from_fork+0x514/0xb70 [ 608.350485][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 608.350513][ C1] ? __switch_to+0xc89/0x1420 [ 608.350539][ C1] ? __pfx_kthread+0x10/0x10 [ 608.350557][ C1] ret_from_fork_asm+0x1a/0x30 [ 608.350593][ C1] [ 608.359526][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 609.359108][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 609.368251][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.378344][ T33] Call Trace: [ 609.381647][ T33] [ 609.384606][ T33] vpanic+0x56d/0xa60 [ 609.388621][ T33] ? __pfx___schedule+0x10/0x10 [ 609.393495][ T33] ? __pfx_vpanic+0x10/0x10 [ 609.398037][ T33] panic+0xc5/0xd0 [ 609.401791][ T33] ? __pfx_panic+0x10/0x10 [ 609.406228][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 609.411714][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 609.417110][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 609.423284][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 609.429456][ T33] watchdog+0x1030/0x1030 [ 609.433811][ T33] ? watchdog+0x1c7/0x1030 [ 609.438258][ T33] kthread+0x38b/0x480 [ 609.442344][ T33] ? __pfx_watchdog+0x10/0x10 [ 609.447031][ T33] ? __pfx_kthread+0x10/0x10 [ 609.451651][ T33] ret_from_fork+0x514/0xb70 [ 609.456311][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 609.461541][ T33] ? __switch_to+0xc89/0x1420 [ 609.466250][ T33] ? __pfx_kthread+0x10/0x10 [ 609.470868][ T33] ret_from_fork_asm+0x1a/0x30 [ 609.475767][ T33] [ 609.479416][ T33] Kernel Offset: disabled [ 609.483755][ T33] Rebooting in 86400 seconds..